{"report_id":"ac855875-d956-4d7c-b2d0-f33ed7dd48e7","version":6,"status":"done","tags":[],"date":"2025-12-30T13:05:01Z","url":{"schema":"http","addr":"wuytu.com/blog?link=8d93ee96e3045e6fd6a5\u0026SUBID=$","fqdn":"wuytu.com","domain":"wuytu.com","tld":"com"},"ip":{"addr":"5.11.87.209","port":0,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"title":"Share Your Experience in Our Personal Finance Survey","dom":{"size":141649,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (44792)","md5":"65ec86ae5ae6c2bdd44a00ad6669843a","sha1":"ef6ddb5f2ec7150d467b95f43457e8f5d1f3e509","sha256":"666265dee5184a69c5741c01eccbaf625bbe2874d8c9938937b348d715bb4555","sha512":"21a9eb29af08795edf31810bde9fc87e58c30d1f692578a59c82bb8874013bcc9cd4a883ebeac3890b2b3f80d6fb3d3113ed362caecb9a724dbccf7a9c700fc3","ssdeep":"3072:mOoTWhHLuWayPHhBTidki9AUMzDYUJ6BxtAFwZVpJ:DzHyWayPHhBTiKi9AUMzDFJHoJ","tlshash":"f0d3b619a2f3012e597f79f1e0c0fb08a497f34fdaa66bd4946551a147e6f8e3873a00","dom_hash":"domhash007e755954a25becf2a1a33605081fe6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wuytu.com/blog?link=8d93ee96e3045e6fd6a5\u0026SUBID=$","fqdn":"wuytu.com","domain":"wuytu.com","tld":"com"},"ip":{"addr":"5.11.87.209","port":0,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-03T13:05:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdntechone.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.lcwss.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2022-03-03","domain_rank":13247,"first_seen":"2025-05-22T20:41:31.158661Z","last_seen":"2025-12-19T05:03:30.288228Z","alert_count":383,"request_count":193,"received_data":680215,"sent_data":77234,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Astro:5.12.3","description":"Astro is a new JavaScript-based static site builder.","website":"https://astro.build","common_platform_enumeration":"","icon":"Astro.svg","categories":["Static site generator","JavaScript frameworks"]}]},{"fqdn":"cdntechone.com","ip":{"addr":"104.21.36.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-12-24","domain_rank":31929,"first_seen":"2021-12-24T17:09:58Z","last_seen":"2025-12-24T03:37:47.770595Z","alert_count":1,"request_count":1,"received_data":17277,"sent_data":378,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"o24257.ingest.sentry.io","ip":{"addr":"34.120.195.249","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2012-04-07","domain_rank":1423330,"first_seen":"2021-02-08T12:46:07Z","last_seen":"2025-12-28T17:17:19.862131Z","alert_count":0,"request_count":1,"received_data":522,"sent_data":640,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mmzod.com","ip":{"addr":"104.18.41.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-03-12","domain_rank":0,"first_seen":"2025-07-23T09:08:58.29178Z","last_seen":"2025-12-30T09:07:00.534587Z","alert_count":0,"request_count":1,"received_data":129033,"sent_data":568,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-12-29T14:32:54.672001Z","alert_count":0,"request_count":1,"received_data":836,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"wuytu.com","ip":{"addr":"5.11.87.209","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2022-07-04","domain_rank":0,"first_seen":"2025-10-04T07:47:07.379125Z","last_seen":"2025-12-24T05:07:54.727056Z","alert_count":0,"request_count":1,"received_data":127724,"sent_data":516,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"datatechonert.com","ip":{"addr":"185.49.145.45","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2021-12-24","domain_rank":17968,"first_seen":"2021-12-24T16:44:17Z","last_seen":"2025-12-25T05:02:48.226237Z","alert_count":0,"request_count":1,"received_data":482,"sent_data":551,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"browser.sentry-cdn.com","ip":{"addr":"151.101.130.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2018-05-30","domain_rank":23677,"first_seen":"2018-07-13T11:42:06Z","last_seen":"2025-12-29T02:12:13.805954Z","alert_count":0,"request_count":1,"received_data":78438,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fmscc.com","ip":{"addr":"104.18.37.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-03-03","domain_rank":56637,"first_seen":"2025-05-23T16:04:51.866057Z","last_seen":"2025-12-25T07:51:01.806494Z","alert_count":0,"request_count":2,"received_data":2389,"sent_data":935,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/detect.B534WVtb.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"892a12cb9b70ec432aaa5fff67b23885","sha1":"4049c4302d915e77563c4be4741fd581cecabc91","sha256":"cab78e2488a3368d732d2ff71843c521ce14f5de3fe781f853bc755e1f58b38a","sha512":"e635730075e46af3b47f89f87cf6afba928ff14dca8406c69e609fd645ef730f1ec490dc42dc7fa0163bddfcaa53e3f34f53e50239755089727f667829d55a0c","ssdeep":"","tlshash":"0d71e70c426d206880dc8aff69324e8cbfb5605a6a8c6895fcab4ced164eddd811f57d","size":3770,"data":"","first_seen":"2025-12-17T05:47:47.28417Z","last_seen":"2026-01-08T06:11:29.263353Z","times_seen":232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/types.BGMreeeV.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8506d4e19453aedbf3c1fc04342b89c9","sha1":"0e2bb5bdcf7088e8614858622e74e932b0c2fa2c","sha256":"184cd18e2112ed9660cd49257113c5aad97d659890668992cdc1635e21f374a1","sha512":"aea362c50d524712756f68f2889fc20a454c6d90196b625c6970314765b332c69bbca873363ba29779f6bcf904bb42f976a317349f70b3a85158398d0bd1b97e","ssdeep":"","tlshash":"a02100d1b6486b0ea53e3fddf0cb184036301123ce8d5683d2174722634fd49427dba6","size":1135,"data":"","first_seen":"2025-06-24T19:07:51.391409Z","last_seen":"2026-02-23T22:20:45.176058Z","times_seen":2159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/preload-helper.CDVdm_vr.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"bde6731db5b37e240ebb6245f05cfef4","sha1":"32e76cde423fae50bafd263090b454bce92059b6","sha256":"d8d70ffacf7707dafabf1ab58bc04e52c202f3577257a43b90dd7cdb7febd309","sha512":"8ab9639575e5c260af75a73693c421497738a79c42abab9595bb1f11dce2f829379b675b12e09e5ae77c6212080d0e6afad486bd94aa699cb0656cad4d7f4a50","ssdeep":"","tlshash":"8e31b7c926e0a032920c1eddd07ba313f5e0246364481891b12e4dbbab2decfd5e4f51","size":1508,"data":"","first_seen":"2025-12-17T05:47:47.282137Z","last_seen":"2026-05-14T15:03:20.559454Z","times_seen":1605,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/preact.module.CI_52rU1.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6326a03ddf0bb2a503bb54255b5936fe","sha1":"599af5a8b87947ec8888784024b125636c511b39","sha256":"9986ede409435ec69de786348b0a336e6f0eff377a2f879b4ff36782f9757746","sha512":"b85c7d09893931505c4782cfb81e2d9c16d82097a68cc9b645d767907c1a5474704216d13ef9babf6dc5d857b455d419f3f50a7ea25ab08185822e446d3c41a6","ssdeep":"192:wg+DMdFKBpA5a4jLj1Sw2u+9GBS/Ak5VpkH+Zd/AiXdo2HxuSrmM2Yg8lQdAlMVn:MDi+ejvEfGM/AL+Zhui2782Sao6vNt","tlshash":"fe32ecb83c60f0609aff116171bf1c1bb37d092fe48844a066489dee26b45ad654bfda","size":11829,"data":"","first_seen":"2025-12-17T05:47:47.239319Z","last_seen":"2026-01-08T06:11:29.242901Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_30.CHKURtvF.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2b21e0204af263a2e65298f28e27d52","sha1":"8f86fb59e399d472c053a19f2c8ee070d8f0104b","sha256":"3122e85a75001976b3f8b998811c90b1226a15f781e2f277e0abbd6ac7215995","sha512":"3444acbeaf2b19905adca62067dd36d097ce8e9578d8942bf750c54c6c3142be274ee2dd87ffc53dc812b47fcb5b780f207456abe48697d115188f5b6860ae05","ssdeep":"","tlshash":"8bf05cf4a6f45a594169126dd78161413699013293dc0f11e17c4b3f636ffc98810343","size":447,"data":"","first_seen":"2025-12-17T17:11:29.06022Z","last_seen":"2026-05-10T03:30:41.574162Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0fbb7dbae3c20bc81da1b8bf41c13e8e","sha1":"f333d36b1dbecd026483e78eac843bdeb2dde04c","sha256":"eeeffffc79c48f4fbe510fc3fcdae29885a18a48ae121968e03fe502fb48fecc","sha512":"1e82716fa5da363b595ffc7b569caaa347df281bc89fb9d62dd89d2dec789280d9574694f6f78d250922e8d0d3bdc8a637f5748d7c4f4e5cb4e5465106542e0c","ssdeep":"","tlshash":"9ff0998af3c8b623410666e5321b801be67e1851b407a864a0a088e2ac7a449c189f3a","size":636,"data":"","first_seen":"2025-03-04T04:04:04.143618Z","last_seen":"2026-05-14T15:03:20.563772Z","times_seen":3729,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.GaAO3M0r.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3b30c18ab2870d9ad448dfcb23554336","sha1":"f06c603aebe54e6272ddfc711e753ef021693fb3","sha256":"c7dcf098a319e49691e6aced157fd8733df5da43871d0f4e9ed4f6082955c98f","sha512":"4154f40b791dd2290f7762fc9067063fdf093824cb7bde1aeb28023a8667e8904845ad93d5a0d63e3a295df09bacdb9b65c6b2ca3ac05d5af755ed08f55ab3a2","ssdeep":"96:jXa6qPWMDYdk+Ui4N+hmJ3uMOZBWKEWA00UfI2lDDJfuZtPDo6uowBzC56M:La7PWMDYS3N+hifOFpAoAA5l61AdM","tlshash":"aac1946cf17515b9b01b8ddcd17a122766353263ed8ed7b0a4be2e240389b8463877e3","size":6103,"data":"","first_seen":"2025-12-17T05:47:47.242073Z","last_seen":"2026-01-08T06:11:29.278991Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/OnLoad.Cvo0tegR.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"85ab446e210f3a2ce7c7fc2f5f4895ff","sha1":"7f9dd78e517cd596fd287282097d3abc3323d9a5","sha256":"08ce412501e1c75b6f08b13cb67ed211e36073904afbc63ef4dea2608836719a","sha512":"c60c3d797df539de3ed130dd4ea44044b7b0fe5b5621891c62a1adf84811107a712dccb9ab8053e57657956057dbbde1d1bfb68dddb346d16439173f5ca9fbbd","ssdeep":"384:GFMXs+qaCg86fVwxaZ4vXV5/Hqc78SbLJSvcmN42WctjzhZFeors+xjO9TnYSLuy:IGJFZzhZcors+xjOVA9CC9I8yaf6oL2X","tlshash":"59825cccf183a43882979cfce06b5022fa3a2904b44d8985e28dddf414e9549d17bfaf","size":18065,"data":"","first_seen":"2025-12-23T13:03:48.008614Z","last_seen":"2026-01-08T06:11:29.251882Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_23.DW8sTnwt.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3e22b5354c05976ad8502f5dab81d0d8","sha1":"5f8703cee40fd15f9e48cf9b94cd10944bb4f690","sha256":"4f30ea94cef6c0f234a137401fe3fba44153fa79ad85468a7a85834e1d51cad9","sha512":"656683b7f8e844fec357067aa1fc972fef769474436ac557742f80a3d38a2658ceb5adbb5cc53911f5197b861a007128410b0089b46d17ddcc16c99c804bfa02","ssdeep":"","tlshash":"bbf0dc4976b04d58411a025cc3d510063289013393cc4f21f23c073653aaa8ea840347","size":447,"data":"","first_seen":"2025-12-17T17:11:29.064655Z","last_seen":"2026-05-04T13:08:44.423665Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_16.B4Ubqub2.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"9030e413d22c84843de395d5513a0aa9","sha1":"94955f7832d9c393203bfaa39fb8c6b898cfeead","sha256":"c0a1bf72881f0c53aeedaa1e55751da43f068d9ec3a95d0913708bfdcfcd1e65","sha512":"45df5a0b665653c88948856575b1d6eb140b615896b5711fb2849f1483774a015f873016e74f7c25ee7d1e0821b6fa642694880e76a7c7fc08f7cfa8e617bf5f","ssdeep":"","tlshash":"28f05c88a7f05aa6402e129dc259641535d90133028d5f62e2bd063a53adacf9c002c3","size":447,"data":"","first_seen":"2025-12-17T17:11:28.964314Z","last_seen":"2026-05-06T13:02:57.335277Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_43.B8fDnrqB.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a7d6859267b15c1ce2d3bf25efd5ae09","sha1":"f50523431c3298d904bc467e1bb2fb26a724c8a4","sha256":"ecb5831ea9743f7418ad3527a12d1b69d3c3d8b605ce3b7af53c327cb1dc80ba","sha512":"8423f6815c57205f7cac22d17d54d2aad269579deceb624ff19d226124bc80a4898647229f965dfcd4d03e7e4c67bb30ed08ac3e6b5de370ea22b5aafcd0c957","ssdeep":"","tlshash":"fbf05c449ef4ea5b403d135cd6555401795c517356cc8f51d17c4776636decf9904383","size":447,"data":"","first_seen":"2025-12-17T17:11:29.014262Z","last_seen":"2026-05-04T21:01:28.745498Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb11cd57856f42938463004272d3d4ea","sha1":"b5c8e9f7c2b8a845f267563becc0ca5563e71577","sha256":"607b308e71e8447dfcd4acf0423911ad720454175d222fe6b86b29910e56c988","sha512":"1af1dffea17940f00e6a560e9519abfb32fcb8ee078175f834a2c54d585fcd4db355331489ff771bd3481f208a1b24dfa8a0cc4803e968e73bc514f785580d03","ssdeep":"","tlshash":"f431757712a30709bc71bc691eadad6e850a4f9b44e6b85b978e3c06502384d24bcd58","size":1553,"data":"","first_seen":"2025-12-25T13:07:41.044686Z","last_seen":"2026-01-03T21:05:26.239279Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_13.DAVfKFVT.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"2eadcbf4ff5e620332f8faa68699becc","sha1":"f74f0746bec068a6aabd7e33cb69481c3003a66f","sha256":"fac5f5bee11b9f10d5017af11fbb98e8a590b76eaf80dc2d1514390a99a611b6","sha512":"0afb16005038df4cbd1bcdcb8a95ebddccef05a4d9b75888864369e8b0af3d043abef09765445be3c7959ebf3789ded84b1fbc0c909ce61376f790840a4af678","ssdeep":"","tlshash":"18f055c89ff0bf54806a12dcd2651056b9dc063303cc5f26e2bc473ad3aa98da800783","size":447,"data":"","first_seen":"2025-12-17T17:11:29.084742Z","last_seen":"2026-05-08T21:02:09.322349Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_40.BkCewPji.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a3fa6f6be1911afd54f777d8748f81d2","sha1":"831378e96a34f56495fd98c58bfcae38b670337e","sha256":"b8becde6ce3b0568fd1257d660249dbf2733fc7ed00ad5b2d0b81f8db2558b89","sha512":"e4fef753cf2ab835c09a9dd1c2f9e477d84b07a7e06e4d8ebea7f95eed968f28782de66c8b62bedfcb3c74da9929c153369381334791a24b5e57b02bd6d3cca2","ssdeep":"","tlshash":"41f02788f7f46e544429139cd3963002355a006b97ec0f51d3b8063e63add898810783","size":447,"data":"","first_seen":"2025-12-17T17:11:28.974444Z","last_seen":"2026-05-10T03:30:41.608072Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/CrossDomainNonUniqueCheck.B3JhEnNW.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cc653a35a6be06ace8fcb51ee76790b","sha1":"de0d10f53978e10e9c3e0c9613fd4c5d7b97f550","sha256":"3d14532a3890d88a6c7581a1e6f1607de30d61ce69208b59fa899442a1846b44","sha512":"99f5c0d83c296961aa381730cfaf74462893aabb3eaf708c662009c7db7fd1014d38ba6eaad41fe78199c4d62582dafe5a087bb0f9e2983ad095f6a15d1cc5ad","ssdeep":"","tlshash":"ef11614f20e0419480065aded11663a0a831017723cecfa2f1dc9b7807bc69cce25393","size":989,"data":"","first_seen":"2025-12-17T05:47:47.225123Z","last_seen":"2026-01-08T03:12:00.613079Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/Reverse.BPeWg_KW.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81e52e1daa5d1002571cd44590d68d7f","sha1":"758301dbc2cb5d01374ab749bf97d4263167ad86","sha256":"fa19934721bf82717ef79b160eff5bfc66a3340b54cced7970e5bc577d4e1d00","sha512":"0c78815a9bfae9b42e4ab556e26c8ca80eced4ea56aa0df97a425032768227539e82d76422f95c79923c28aaa59f2590a5a47e1482d123ee6ca0c73680c06746","ssdeep":"","tlshash":"5941229fc1604bf9404a84f9e218f5316b32016ba3cc9711d4df59b4033adcac219a87","size":2019,"data":"","first_seen":"2025-12-17T05:47:47.271892Z","last_seen":"2026-01-08T06:11:29.268972Z","times_seen":272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_3.Y_dGtqDu.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"5448fcfd71f2f05bb262a8c398261b81","sha1":"67cebd4560c504cb08e115d2bec10f72d2c521dc","sha256":"c3145a3ae1ced1288b010a5194e781f8833ef1b2d65805f3d70a698e3a669d9f","sha512":"3db16d47799e8d71eb4abe4ecab620babd543df8a2bf783fddda777e27d66c7b152ba0c9fd22bbdd6364908206188ff1cde04f8ff0571ac78b02068021258604","ssdeep":"","tlshash":"faf05c4277f59d55402512efd5a6920175954276439c0f11f23c0e36d35ea9d5920b83","size":446,"data":"","first_seen":"2025-12-17T17:11:29.002135Z","last_seen":"2026-05-08T21:02:09.364635Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_6.la_-JXIq.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"be194880c481f49313123d8557bf8657","sha1":"00a8c5b113ac5ed1e0532854e7f120593425e6b1","sha256":"52f75fb681e0406356e21b906b3942ea432396559a3f01e831151793f4de6ac6","sha512":"533451b1f290523f7e01948cabace368f73e02d10d326a61ee4e0c72e415f633f68a7533735be0a4c2544f2f54f3c594dd4ad861b1b9955fde1dd331238e1f7b","ssdeep":"","tlshash":"05f05cc597f08f48c129169ee152504279a5107353dd5f52e279c737539dbce8510783","size":446,"data":"","first_seen":"2025-12-17T17:11:29.119731Z","last_seen":"2026-05-10T13:02:40.385974Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_18.QzoSteOS.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"474adaeb2408ff55cabfdadce0966d6a","sha1":"5a81eab1f8348a9a3746ee1b1d34075066252998","sha256":"235742a4d4ed1e3687f23d2e06b742a9909b2a440e3cf6d9a097c8be930b9fe1","sha512":"42c21981733039489cbb6656919c4388ec9245d6dc28e0477ff6e2da4f8716d782757637f5b655db1ee80d0e7860ae5d5cecf2df29ca66a6b69f893ca66d1353","ssdeep":"","tlshash":"bff05c86a7f4ae04862e179ec296150a355a213343ddcf51e23d0776537ce8d4d24743","size":447,"data":"","first_seen":"2025-12-17T17:11:29.099282Z","last_seen":"2026-05-08T21:02:09.331474Z","times_seen":104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/zones.DGzf7q0e.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"45be6cc6470ea2fa88ed5d2ff614a5cc","sha1":"284c9aa4858f70b98bbe80d71e9e4b2dc787d747","sha256":"cd6baf094f574806b0ae8c95b6318677f210a9c79e06867af6718f4c88aa1915","sha512":"c90fca9ce0ebbffbec482d46f266ce9bdba85427750e9e85a000292ec5ebbd092718cec02082fbd06eec959686a8ccb8d1e6fffafb1b1b324a58bfd6b1438344","ssdeep":"","tlshash":"380119c96af2a2a1c21e0acdd38d21177098483baf8c6b41f12f0b3833648ebd129301","size":811,"data":"","first_seen":"2025-12-17T05:47:47.269095Z","last_seen":"2026-01-08T06:11:29.22574Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/NonUnique.BXon4Wl-.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9883e8ba6b3d658f4303e03746703806","sha1":"7ae2faf6e5555020e0e57dfe1e31d2b28462f3bd","sha256":"199dfbeba6c374acc37c030fd3c57081ed343489d59451b5bc90f001d1aaaf64","sha512":"be04ea3fbac50d7cdf52e8140f4b4b79eb135194992fe84018afd787e65109a86821781f8a604a44e6c5c107966a3e6cdcd6e90fef0d5214b1857aa80feb7ae6","ssdeep":"","tlshash":"f4512f4fd460c5fc401a9dfed015e5726b3a166b27c8c731d4afae350365a8aa21fb43","size":2590,"data":"","first_seen":"2025-12-17T07:42:20.216805Z","last_seen":"2026-01-08T06:11:29.319779Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/subDomain.D9gMU5d8.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"1f6da0132e546750916b4e04b5d928a2","sha1":"c16d0708134a6a40e6180581ed53877c62890fc5","sha256":"7c2f67cccf7a415f5aed31660709693473537530274c5bed278b6ac8e28eeccf","sha512":"b86616a545d99b810295235a3e4247c05a7980803a42c2c3d1f6bef8a80302f908cb83e089e3e0f6d81543f1fd84110bf7c4d6b4e8b9ed89a9eed0d1d48e9d45","ssdeep":"","tlshash":"1b11c6dc76f1ab20435d32def23b0a9274d8017786dd0f51e1bc4a176719c8b8595f45","size":874,"data":"","first_seen":"2025-12-17T05:47:47.237404Z","last_seen":"2026-01-18T23:38:57.380921Z","times_seen":288,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/Image.ChGwjLBm.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b65f521d260efc6cf88e9f6c7532e3a6","sha1":"5cda83493ee23fe5c3232923f75e220fd08b0c80","sha256":"c0e729747a15d47e8cc525fc5fbfabd217b7a56d74b9ec2b0b82e5f3fe09da89","sha512":"f99f5b9c51ad8262117ebb43262bc648eb37090b030661f776226f211496bd46b7049476d5cb7f2cae85fd11f8c17f3e51be5e80fd1d26b39e423c65b397db75","ssdeep":"","tlshash":"1931a4acc820cb7e443d69fce2592122af14276b13d68b02d1bd757a13a86c9a922743","size":1828,"data":"","first_seen":"2025-12-17T05:47:47.277642Z","last_seen":"2026-01-08T06:11:29.324768Z","times_seen":291,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.DUnKCy-f.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"712a990d9979efe2db0083f75e1249dd","sha1":"1ddde916d5a95f0cfaead0047bba6daedc6bead3","sha256":"e26dc9a02e24f4fefee88654fc042794f0141fc8ea8579fe6c17ec98da09ee83","sha512":"f2e164a04e2614c71c3ec6e800c902ea00f4e2aac0ca681f57621623de7728afd181b12dc7fd8d25c2bf2a513ffbdb2b68cad8d7e272edbd17b3505ef123158a","ssdeep":"384:MICImIJ8X2KrkUE950iUToPmLN+VNvOwP:GIBKjrp25mToDVBO+","tlshash":"3e92fbf0932851d5d51e07bde93d60e1a2392effa7cd828072ac7ea5546c2d52e08fd1","size":19746,"data":"","first_seen":"2025-12-17T09:40:52.784088Z","last_seen":"2026-01-08T03:12:00.629574Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/client.CELBrmqM.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"51664e15be7ba7d96d53618a66b65e5e","sha1":"ffa87cf361c9d527328b3bcd3e10cff29af4c7b1","sha256":"de014dab274e101fb6597c78fc2a54d2fd4f0d6ba5e8b23b3bff1408409973b5","sha512":"77e7158c32b2dad4d41a84403aa994e406f51b7c7616606283fea849f0753f9559fe76b77854bf5f375dc806efd9eb15c7cb06018a038bdc5a702e1281784179","ssdeep":"","tlshash":"a631b6e8b1b045b000af2fad8a5512325df811a625cdd990e7accebc0b2ee4e5995f07","size":1677,"data":"","first_seen":"2025-12-17T05:47:47.249398Z","last_seen":"2026-01-08T06:11:29.246028Z","times_seen":287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/buildNonProdAttributes.BXOIAHer.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"288673570a996ffb82c7a73876dad4dd","sha1":"e1f9a20f7e7740e8058cacdbcf3a6e89ebc4a87a","sha256":"89c46392411bed9ac1dc2ac634543c192e666600bfb09f56fb648e53543c73cd","sha512":"5823a12dafd38b0bc29ed845ce945493ef057dad001da461be8dafe0fefe905166bd9c4497ec0b482118628524ee9d93905567401a83a8cfe52ce27fd606e202","ssdeep":"","tlshash":"3ce092c5dee1ca1a820a236fd21a6a5174c4042782ed5fa5b27cc62933899ea9414246","size":380,"data":"","first_seen":"2025-12-17T05:47:47.254741Z","last_seen":"2026-05-14T15:03:20.526406Z","times_seen":1605,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/searchParams.BSOEvk58.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"083bce88821221238db85b096cdfd978","sha1":"3acc8f43432c6a5fd3d99e4b39fd5d8898ff013f","sha256":"9bf3629cd975e4de7bcb3d4b8a598af44c42981a594f910fbdc851c6b1dbadb5","sha512":"e3cf36072d01334b0b727da7714d61b1398ee68b934d9cd85b6b335b614ab28328d720eb6999974c25a288052421f8655db4fd44662b32747357661bb3a7dd2d","ssdeep":"","tlshash":"f331b74a43f5c1eb50be0aec80162760713d01277a5deaf5f2380f72625dd4e8816b55","size":1853,"data":"","first_seen":"2025-12-17T05:47:47.258569Z","last_seen":"2026-01-12T12:33:46.069371Z","times_seen":393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.BCm5wNfD.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"7b59ecd7bef83a57074000acf793c0b6","sha1":"29ae2a629459124528171501b450d8da37fcc0f6","sha256":"5243a21fc1915d41b77d90a1f03c1a58c8c9d6a84f3b2b2d044e14489220da9d","sha512":"c5541548c234647deaed6059929ace028fde48a726050f4e38464c660946d7dc028b883bba42eccb4c0b11643a1b885b3559ae1d9c77d15284c6534fe047539b","ssdeep":"","tlshash":"6e6144b7bdbbee96891a8304a724260f13c8556301dcd3e4d934c52823c968657eeb3e","size":3306,"data":"","first_seen":"2025-12-17T05:47:47.26089Z","last_seen":"2026-01-19T10:31:19.227686Z","times_seen":466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/getImage.DJwaz1MS.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"aa6131d1a0a98e07ff203cd4db88ec5c","sha1":"caab0706a8146b4f4f2572db1ac482973eefabbc","sha256":"0abb973e3ac3c02aabe1dfb7595469e869eed5c09e68c68abfa0c0fab801f4fd","sha512":"cf90b3bb2b18666bb036724f5e226573974cfaad5bd3068aaea62051934b5c096d1351c4d8eacb722f2ea8b5cd9c2870eb806d00e6d8f678c00acae73c9f9378","ssdeep":"","tlshash":"a6f08bcaf7f41755d1a606dce08b1422789d012353dc8f61e27a933e53ea94e562878b","size":566,"data":"","first_seen":"2025-12-17T05:47:47.245157Z","last_seen":"2026-05-14T15:03:20.557768Z","times_seen":940,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_50.BPGELZtB.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a987cff217c7217a4cb9c965b1dc43","sha1":"a75fe719ea5e3fd900afdda15166de227bcbf662","sha256":"2e61a3539a5df15c8d7db49ca70b8eceadbf537940e22e485bafb30d24348333","sha512":"715727e5d659c8e46ad9ba4217f3cea63ce5222bdfcff126acd4895b21ae3f5b92e0cf7688bf90b7db41580adcffafeec385dd150f29e418dcbfead88cb6845b","ssdeep":"","tlshash":"1af0278566f06954412512edc24651813ab8126362cc1e61f378062b83997ddd850783","size":447,"data":"","first_seen":"2025-12-17T17:11:29.058276Z","last_seen":"2026-05-10T13:02:40.389898Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_31.Cchg5hCj.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ef08d78deef0167b95b915c4e8cfd46","sha1":"daa0b9443616e475ba52058c6dd1eaec5ee04c25","sha256":"e40b91db8f1b33ee5a533428b1457256024cf8e719cc614bb10af5521e7aa9c2","sha512":"240c806aada0070f78c32a9041679d1eb16a00643713e995ddc5595f122d1084e21e18d8c0342bd7f6ad75a3a1c677f067047a6b506ce85b79c303f23fa1a950","ssdeep":"","tlshash":"52f05586a6f0ae09c02913fcd352215a7a9c147286cc4f52e2bc073e8379a9a5808743","size":447,"data":"","first_seen":"2025-12-17T17:11:29.048519Z","last_seen":"2026-05-04T13:08:44.343218Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_17.BIB9WIer.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"5229691719684ed1543bbdb565417163","sha1":"234809c9d69a8a33051254700df55177ac3e1669","sha256":"7f9184624ff87c4c99df9a2fd14cf400583f3d5910c5b572e8d2381824ca6a9c","sha512":"1ae6b837ca81db7d24335507d4375eb77930b5f049dcc93d7b242eecc931b66e9c13df46596c1da46f381b398f0ff29d2083ae14c21259c1e2ee57a86771d285","ssdeep":"","tlshash":"85f05c5557f04e68c03632ace34315a13564017347dc1f93e27c463773a999eea002c3","size":447,"data":"","first_seen":"2025-12-17T17:11:29.100101Z","last_seen":"2026-05-06T13:02:57.306093Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_42.DLI-TDqZ.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6455f077f6f5150be5cec391b471d106","sha1":"61a3a59584b5e9694bb34da3071834abd4fe46c1","sha256":"cb8300f824f57cdfeb74eff7b2d3560de03110855d1908c7222273b4da912340","sha512":"3b359acf127d78ad5860dbed54fe3ac1b222dbc1ff53ee66a644c0ab535967232772629fd675ca2f6fb906427bc825c920676182a4cde4a114e334c61f607d46","ssdeep":"","tlshash":"aef05586e7f03d55806e23dcc392280a7198212342cc0f52e2b8063ae3ad98f9814383","size":447,"data":"","first_seen":"2025-12-17T17:11:29.096808Z","last_seen":"2026-05-04T13:08:44.438136Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_44.C9L9K8B2.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"195c9b789e597ac94abc9eba89d3f8cd","sha1":"7023b61a92191150097c25080cae30474b0b1677","sha256":"d6c6ed84e5f288ec83673a84027b5b21d039765cb9dc276254229c5234866e9c","sha512":"40c095cd9d8c6e506ab2d7da0ac282ec3502d2eaa11cf7a8fe72e848bea8a247756753d026aad7c0994685d150c504ed898858723a0f99a8365ef4539a703c2b","ssdeep":"","tlshash":"d7f05c8157f06ead42aa26ddc3856982b5b8003312de4f11e178477a537978ed900783","size":447,"data":"","first_seen":"2025-12-17T17:11:28.96517Z","last_seen":"2026-05-04T13:08:44.326852Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_49.B3tM7IGr.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"efe051a562f859103331f2abf8ce4cea","sha1":"63b70c0faaad9e4244a4731ce02f47058d79d494","sha256":"0bbc11e528738e5bf0af3b13cfcb58c2872ed4455bab9b6231185a425168cc59","sha512":"3bec89eddeee9fa65cbb33f9d6cb20c9932683e5df6130d1df3f01a7404a3880d6d8d21e3e4209ca1e9277641949445f64894854866a06260f959d13fd93e61a","ssdeep":"","tlshash":"caf05c8457f4be4941be125dc25556423a9c1232528e5f52d33c4637a39dd9a5d00383","size":447,"data":"","first_seen":"2025-12-17T17:11:28.993755Z","last_seen":"2026-05-08T21:02:09.326695Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_22.V8JS9w7W.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"bfa735f4da8cd2d4cebd013d8a1767c6","sha1":"a0d1016cea7bba95edaf11c3c6be00d99d851333","sha256":"baccdbe163dec20126db3dc9bdb1576e00321f67e55ec0af6e3b41b1483a2684","sha512":"52254594f3865dffc045728cc43072a0796211e763e1fcd71fff1bc7f6274517d2f85f3a56be5178b46df0d78a461fd1bf557e801497d41c0be693f6b4a432b8","ssdeep":"","tlshash":"79f05c5467f17a57802a32ddc2415501355821239bccdf11e1b8067a63aeece5900243","size":447,"data":"","first_seen":"2025-12-17T17:11:28.998631Z","last_seen":"2026-05-10T13:02:40.395508Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdntechone.com/stattag.js","fqdn":"cdntechone.com","domain":"cdntechone.com","tld":"com"},"ip":{"addr":"104.21.36.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"80d7433dbc2b7708f2fa4e6a9943a116","sha1":"350c6e2bb1cbd07de260856f918f4ececcd96894","sha256":"54862ebdcfa23c67d6de25543e0b22014de8fd8d3d3aed09d615981bbdd76251","sha512":"6c065d9d4d04b7c4a11ae28751a711a064410055e1db34daed1c74d98f0257a304481bbf2af96b0845075f43d43bafeab34a49241a2a63f967fc0867748f6052","ssdeep":"384:WDC77FbFjbRN8h+eYFCatOJ39BEisNWP7gDhlPQ5EKQIkT8:d771Ff8h+eYFC/JNYa71","tlshash":"ac72e8c631a474afc6c292f04a7f092ef768509060be2986c1d5b4ec5ab51cee7c3f95","size":16490,"data":"","first_seen":"2024-07-11T14:08:01Z","last_seen":"2026-05-14T15:03:20.553341Z","times_seen":9446,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/url.0PWJgNjc.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"45fea909e3c40cdcd32c2816f141c315","sha1":"035c98f17e68f2f9857c09d42e83f2d70ad3b6bf","sha256":"e186dede420b741e4dc21ff97236ff0e866bf5d999e9ff5180be3ec55123359d","sha512":"7b434f902d985efb23553e0f23f7b886e8bf5fd6601bff9d0e82023aeeb7ce480ca7d8fde2e6c0fc58deb33e43c8351cecd4795a5ed87abb450851edcbd31ac6","ssdeep":"","tlshash":"152183c46bb6a2a151bd528e9a623711b33b0dab5d8f9180a1782d3033165cfd93908f","size":1350,"data":"","first_seen":"2025-12-17T05:47:47.257708Z","last_seen":"2026-01-19T10:31:19.240606Z","times_seen":466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.D21VqnSW.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"647f0c4b1557485439c363e202db0ee7","sha1":"31be3c4c1821577b91f3af02df71f1ec3f915a7c","sha256":"dff4cbf186ee31d573211364039871277ee8ce71623c6631a112e6c85cb5b62d","sha512":"354895beebdf67bbd9ea9d6f51c559c84511602a73791f9fd0ae87b483ee06f10e11c187508717b2a067e35d41abe161805663d2aa45362453f2a09fe6ffb870","ssdeep":"","tlshash":"8a31f27ae140c7bd881ba3f497e2b2a6136401669f9c4fa2517a483536cec4c5c0f74a","size":1553,"data":"","first_seen":"2025-12-17T17:11:29.081878Z","last_seen":"2026-04-07T04:41:42.144846Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useStorageService.Bh3L-ch2.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"57db98167c3243b1f4fe66a1aae9e367","sha1":"cfe60432d15b4253a7303e5435231dfdc8dec46f","sha256":"c3f2cf3e00802b7684c1ff356883cab6db28b05fd4da4deace945d98b77fcee6","sha512":"25ff2ec6bd2a664903215439eb1a0439899c2ffb7298bb45bf8bb15c2731e03b0a5c7185ff8869322a8856755ef296d42f704e066f1f35bc5f8abd8f1ee0a74a","ssdeep":"","tlshash":"8b312e8d2ae22575815e04ddfa373190f4ba0162714e8ac0d02d4e763ead8cbc2b168b","size":1785,"data":"","first_seen":"2025-12-17T05:47:47.241216Z","last_seen":"2026-01-08T06:11:29.217503Z","times_seen":323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_41.DfHdKdYC.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd37ecb5135abe7fc9c09bb71ca64d33","sha1":"c8c2b8d60af115f43c79df0109468b91a0c6788c","sha256":"b1745e59d497d863949c3dfdc2d09185df091d1244f71181ea94f230702ee105","sha512":"639b5e12a27f0bdbe45d4178c3f2dc88cafd43836ca259deafb736ed7e2b5c000f2a1654545df7ac41541b1f00d998bbc02ef49d8db299ad76ef33ac247568d7","ssdeep":"","tlshash":"b4f055c8abf06954812913ddd7526006b6aa123306dc9f22e2bc077b937c9ce8810797","size":447,"data":"","first_seen":"2025-12-17T17:11:29.057437Z","last_seen":"2026-05-04T13:08:44.29088Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_12.BUkTtLNb.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"af31424f169f30d89cffe6edaf196eb9","sha1":"aca1510f49d2e1d85e4810863b9daa0d6358133b","sha256":"7be0d9a026c1bba93576bb9f4d8ee5738f54d2521251a91587b5c2bf3f9728be","sha512":"3af51e5bc083b15d56b4cf0b01c1188fdc24e3f26d3d1e876367fd6a3f81a434d38e240aa3f637e2f51ce734a44865f76d2140bdf8b3829d5e4f39a38d54a36c","ssdeep":"","tlshash":"33f05c946bf01a59c12912ede2855406716c556352dc5f19e17c0a3b53addce9a0438b","size":447,"data":"","first_seen":"2025-12-17T17:11:29.046768Z","last_seen":"2026-05-10T03:30:41.563753Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_28.DZ0uVARj.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"4f83a4e6d5918c28adea6b872b25cf91","sha1":"e53316efeb822fb201602b2282e5b3f7e7186d87","sha256":"bb47449e071818af29ffe75c30f487fd747f7929cddb7936c8f8f0092e8863ea","sha512":"ae7aba68176b2ba342ce367378b924fe08d957052e3d8793136d62b31c838a223e6aae8d412dd213793720de7178a64b1e5a45dda740ad47227240ec8b79f41a","ssdeep":"","tlshash":"57f0a38577f43a59822b12acc265144136dd012306cc4f51d27c463753fd5cf8440383","size":447,"data":"","first_seen":"2025-12-17T17:11:29.043052Z","last_seen":"2026-05-04T13:08:44.409031Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_35.DflWETwo.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"5420e565a5ccb6753fd5fa6871fd0079","sha1":"801f43d5e89d67438f1c2fca24af14f205d43857","sha256":"ce47464b6bd38dc35ae465b521d6fb10a2a977cc2251fb1242d597f5537f7224","sha512":"d6fbc65c01f905d09e56e78c030b92cc7895d32ab8ba761e30fe5057e40236db9057ba131f266d8d27a029252a23700eef9248435c92f51ea44d8204b3fed53d","ssdeep":"","tlshash":"66f0a3c457f14d96423e135dd6671a51b9c55033c2ed1f61e27c0f7b535ea8e9a30243","size":447,"data":"","first_seen":"2025-12-17T17:11:29.087249Z","last_seen":"2026-05-04T13:08:44.398858Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_36.CDANlqMZ.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"74f73413f11b4e0221f394e113dfeccc","sha1":"53f04fb4be5657934ac7af99548d3becf0a5e9a7","sha256":"0e075be0c8090b3633a1805b3229876968cc914093afe718949b411ee1e94c33","sha512":"fb7d4961bcc39ca6ab39f209527b568669f5f1cb050ecaebc3848a48a1a897b9af69bb8df710f41c1d8a0ebc38fc0a4b68d6c6a7b0432cda4a9cea5a7025d313","ssdeep":"","tlshash":"8df05cc667f09e59413923ecd6961402b79c113782dc4f51f23c073b93aeadf8911243","size":447,"data":"","first_seen":"2025-12-17T17:11:29.088109Z","last_seen":"2026-05-04T21:01:28.684735Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b7d8ea0be8b1de121f25bc9ef0ce3ba4","sha1":"f36198355a7603c3e4b1b005e5bed1a2420606e2","sha256":"22fc92e89c6e480120b213af39cd5f08e2d105e35657d7cdf55deade1169f300","sha512":"478b92dfd623cc2cd1792c2fd8b0148647255fd21f83bed181796f84f31fbd86c9ee1003a8ea50d17880622a904819217022c7b16080b9a97538f6aece86e8c2","ssdeep":"192:PThBqw3TCWlxSvZqG/+o4ZrQgcVUkACMi:PThBKWlxSvoGmTdFCh","tlshash":"88d194e1b2d24a2147fc72aef18a3300e37e0a4574bc8419f01a9c60396e80bd371fb5","size":6382,"data":"","first_seen":"2025-12-17T15:33:09.067392Z","last_seen":"2026-01-08T06:11:29.329069Z","times_seen":350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/checkCrossDomainCookie.B0eFeZfA.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8004d6c62c2a22173599c178d561a81a","sha1":"80fb67d051faed21647b9457c2ff91c2c7f56241","sha256":"c93f628613ad06a1b35002f1acd74d851fd8437c64fb7f9e76fbcf15875bb30b","sha512":"43179b2faee451bc20efe7574a77f2aba516371dede310ce5a1724f72b641b0c179a221b6bec861d2cbcd861eb484fdbd1005ae46e0934f3f3a5b1b5f07b3b67","ssdeep":"","tlshash":"9b210281b6f2e0bc06b653dce0267742b5114a3663cdc7d0a2aa02352ed5e9f9c3161b","size":1392,"data":"","first_seen":"2025-12-17T05:47:47.233709Z","last_seen":"2026-01-12T12:33:46.062749Z","times_seen":393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_30.vcboUjRT.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5283c7976778d7769e8147364527ea","sha1":"21722d472f882ceeed9edd59a8f318fa10ccd497","sha256":"8c4890c250f937044fb644989961351d8c5ea06364c469af2c72e96396785046","sha512":"10b838ac07601023b8dfe5bf7a658e4d52b61f054f1750bdadc68c194c5f587f834429227d44e1dd29b2e1b08774e5baa392b2ab2b5c1ec4e643570cf9cf823e","ssdeep":"","tlshash":"99f0a3899bf06f484039139cd26334073694002b83cf0f11e13d8a3693dd7ee8900b93","size":447,"data":"","first_seen":"2025-12-17T17:11:29.111579Z","last_seen":"2026-05-04T21:01:28.675125Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/getImageS3Key.ryICMbpZ.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"123e90cd3608d46cbdbb0abbf23c53fb","sha1":"7ee04e2e7d06c8dff502e709f756ceb7a5e8b091","sha256":"eab74bf8b4b520532d26878cfdc7092457874e0f5511ea5f47dbca4e35684898","sha512":"51e883d40a9610c177926ad2968832af3bb1a70d0f3bf62de70a68d1c8be0b9c8a2465477b05f90d6862544ad7b9174a54893732017fc8226b30e0a7ed3b7219","ssdeep":"","tlshash":"671156d7e2f47866c28f145dec2291027e5c167bf28c4f13d17e91a723558cec135a26","size":876,"data":"","first_seen":"2025-12-17T05:47:47.290601Z","last_seen":"2026-01-08T06:11:29.220752Z","times_seen":168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser.sentry-cdn.com/7.108.0/bundle.min.js","fqdn":"browser.sentry-cdn.com","domain":"sentry-cdn.com","tld":"com"},"ip":{"addr":"151.101.130.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8b9b14c26da487b1f60b6d83de21679","sha1":"baf0e15e8a66d5f9a3941c795c879966d46b7394","sha256":"ea656e60afb1837bad760edf51698f5f3d763875dad7342fba8b079acc0a980e","sha512":"1bae29b8b77765b0c57096832568fe4b7a413c327c54dbc2ba0c9f2ec9e4a35bf58a4ca1be5273e8a7fe3e519c891f2c9b90436a588881252fb311c85ee8a916","ssdeep":"1536:bin7bo2Wr6YogMAj3U0WMkOdc3LE4q7XdJkWFm:mn/o2Wr6KPS3LE4q7Xzlm","tlshash":"5c73b5c9b1d2b02147d329a5917b0106f73a5d90344bc1a4fa6cddea3da604ea2b7f3d","size":77924,"data":"","first_seen":"2024-03-30T19:33:02Z","last_seen":"2026-05-14T11:54:37.800815Z","times_seen":845,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd54a921465ffe91ded7227caf6a515f","sha1":"3d81b16965738c081fef45e62d2be10e73680e03","sha256":"830e8d077789dcc81b2983687fe730aa4919bd4a3ef0de2d08623b55722107f3","sha512":"2e82c9de780d6e3c24e1af9c299f937ad5935767f08a25b621ddafc1371d7d2a45e44b69dfca81acf4ccc7c62fc2755e90655834ff676c58ffe375a017743474","ssdeep":"192:o8RB0H+HNViIsmvovZg6bRV2wvBzqEBXh/MIeU1WWAqMceWlo45Bb:o8RB7HN8F+Yu6bRzvB2EBR0g1WxceWl/","tlshash":"ed32f9a9a189839c43fd60ebb405b320b13c0d497458e4d8fa754616e17fd0f5bb2ba8","size":11614,"data":"","first_seen":"2025-12-15T15:05:16.043434Z","last_seen":"2026-01-08T06:11:29.329799Z","times_seen":366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useSyncMetrics.Br4mvgla.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"793e691740486addbaad283edfb48851","sha1":"c759ebdcfe2a143d1189b9425b3bbae789db8f14","sha256":"243d3f9809e1ae7d8a41bc9c7af137ef4895f99658af027bfcfda9893a5e8dd3","sha512":"ab64dde3f936888bcef3fcf38c41e2c8b8a5ee16c1ad032ea7f578f926da956696a2a1b1008b7bd756fd41423c14a095b576bac6b8de681d32a9e214889300ac","ssdeep":"","tlshash":"9b61576f6262136d166112edbc7f23032996422c6dc7c948b296902e21f9dd111ffbfb","size":3290,"data":"","first_seen":"2025-12-17T05:47:47.235608Z","last_seen":"2026-01-08T06:11:29.283959Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.RjXfrkDn.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"57ea00fa53317344f16b88dbc6b3213f","sha1":"c1c98bbadec949ab8dd3122f362ea8d3d753c0c9","sha256":"aaf49bacf9b122d3efa0f5fd73d062e57d6eb3e388afd0c80d4aa78966325fcb","sha512":"78ace10dd5c0a5d8595808fcbf919d682e64c14008f20b4b0e6ff12a44e9cb0bdb14b49ad704b985f17dbac112d2a1279258fd009351e6d6dbb47c3af8693b4f","ssdeep":"","tlshash":"ea017b9047f33b4ed28d16aec1594f223a8e907bc49c8ee0f22a86781259fec4444377","size":695,"data":"","first_seen":"2025-12-17T05:47:47.221393Z","last_seen":"2026-05-14T15:03:20.55257Z","times_seen":1605,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.BxM4jVp-.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"d822060ba1d3ae3aa43792d37006a663","sha1":"f034f9b1ec46f006b108005822e3d8ea6275c56e","sha256":"7c43394841be7a55e63617419d7e52dc697ad6decc07a42fc9a8ea1338e2f24c","sha512":"1f6a9209ed8d345bedbe6449f535d3824284281349adbb530bee7c865fda64f3c2e42e3731d2f6bcbe12dab5e0d8766f8284ba88bacd010ea13dfe395be18110","ssdeep":"","tlshash":"17f04e829ee82f2a6126039dc55707b62a66103987cd5b01e27dcf7db7e99cf5018393","size":650,"data":"","first_seen":"2025-12-17T05:47:47.28952Z","last_seen":"2026-05-14T15:03:20.512312Z","times_seen":1605,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/setIdLocator.CA8I0KwB.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e4da40dd4e2f442fe5d0399907c2bf53","sha1":"9df179bf27dd84e9af3df61f1d90ae59ce9938e8","sha256":"698bba5f3d1ea1e093ed226ad92958df5a8a73d8ca55a259bdb9b59443109357","sha512":"953ebdd2d981a41cf5372abeb2d3a24e887064d2f66286bd1895a2c5eba5f281aea3d8388624f091cffc9b236204f90ea78ad3bb9a95e900525ad914a38e0a1d","ssdeep":"","tlshash":"c2e0688a9af01e14800e2b9dd206248131880663538c8fa1b2780a3ab39decf9c05383","size":377,"data":"","first_seen":"2025-12-17T09:40:52.758568Z","last_seen":"2026-05-14T15:03:20.520017Z","times_seen":1058,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_11.DH2vePbb.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"94f041c9affde2443c4e2276b752bce1","sha1":"1f720c1cca8ef2f21ea2344afac5ef4d22203a35","sha256":"838c9cd59b2bf9c540c377ecffc7a60ad6a8cb6a1d473a86f60695032c9fc2a1","sha512":"73f82e20d7bc9ceef6520154be44225bcb6087137e15b89c3826f7e0184cae0f431b8289aacb67e8e96b7c3ec7ce3afa9c5480982eb62802f81e94147d6416db","ssdeep":"","tlshash":"31f05c8967f06dd84029125dc351644136da2127828c4f55d1ff0e3aa3bd9ca8c00283","size":447,"data":"","first_seen":"2025-12-17T17:11:28.970991Z","last_seen":"2026-05-10T03:30:41.57495Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.CJc_DGo0.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"1ab5eb2b4e39fe18616ae6b2bd2b46e2","sha1":"59671ba63e2aa56fd4a3233bdeeee89279473600","sha256":"c52738000c0b33593359fe4bcd051495bc5d42eb1eff32ffdd63232ebe751749","sha512":"d43e82a47bb9b23dcfaa98ee07a190fd93ef68bd5850ee6ba3916cff71743c300fdb9fd9e984b68164201bc6838187077dfcc3911177d546cbcb4aff99f46fef","ssdeep":"192:a79zibQzpFGGYwqzEqlw/G9Y6sXhLACFmNJTWewgSaaiSh86ZhpMNN+8CykQnw7d:iGQzpIzl1liGS6smJTWFh86ZzM+DyUMK","tlshash":"3042c79870e579760697197a813f060bb33a282ab88dc170b4abd9e47df840c5177fbd","size":12630,"data":"","first_seen":"2025-12-17T05:47:47.240355Z","last_seen":"2026-01-08T06:11:29.296416Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/Button.CfdqZ-ZD.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"d30fc72864c06744d2d10bc613f56fb2","sha1":"a4155ed45e626b593bd64a5d7a90a59f2d7138f6","sha256":"b919ac76d9bea61f7442a640a87ebc216acb2c57b24b050a730941df96ccc00f","sha512":"c08fd5194fa0ed36cf0da4c7faa2867af4a58837006db44e356fb215d55db90021ec6c87acba375e03e0260065c53bb2a3f3bd2b106dc2bd183a6b21e66853f9","ssdeep":"","tlshash":"bf2165ace07043fd490b61bde1be50197c5403238f8d4b92d1bc53391bab5899815b81","size":1236,"data":"","first_seen":"2025-12-17T05:47:47.28025Z","last_seen":"2026-01-08T06:11:29.285462Z","times_seen":204,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useTeenExit.CLVq4LfT.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"813a3f3fe6cca026760de5205bf68bc6","sha1":"8d8e0ed16acc8224ed7089717dcbddf3f3224765","sha256":"70847d751d10506f21788ede343aa04d81311e745322ab8cb3138590bbc847c6","sha512":"53d06f28fde9f3b107853f980a268fdce22c9a2bc5f0b5b617ed05761f60fdd91601a416abf79ffb7f67f69d55080b8782cf000b81a880941abddea81fb52f6f","ssdeep":"","tlshash":"8c31108eddb086fc402e8dfee066f0325724226b6344c670955e9d7623286cfb827b53","size":1454,"data":"","first_seen":"2025-12-17T09:40:52.828928Z","last_seen":"2026-01-08T03:12:00.617368Z","times_seen":168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/cn.m0Ne9LjF.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"4c6966b8a17a0c862329f3da287c1f3d","sha1":"743d8b04dcc2fc14d83b3c3eb099096c32d4eaa9","sha256":"29fbefb110ad9232727a245dd54f4ac07eb427b09b82bd14602c66678096bf27","sha512":"c8a692054c716f20c1ff22c57e9769c34fe730e807d33b3ef1522a599c7c241f64991274403ae5dfa5055a99dfbaf01918586752440aed673591c37539e6a1c6","ssdeep":"384:S6OvzhflxqBp9okK5k/RWfJcFiL21EYFf8IiUxXGkU6ik6jH5ditiCbPXdjzv/M7:S6Ovzfx49kk/RW/CxXfik6jH5IfM7","tlshash":"f4c2c726750706be2aef93d7f45caea5d8352602e0498b4ce3974f32cb45be9114ab0d","size":25863,"data":"","first_seen":"2025-12-17T05:47:47.288537Z","last_seen":"2026-05-14T15:03:20.499292Z","times_seen":1605,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_37.BW3Ax322.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b20c918e9522915b5f42e08baeaf8281","sha1":"f26705a80e30651d5de68442494003c7729cfe1e","sha256":"a396965c64b5eceef4a9cbffa42bdd14f675c2755beb65d1270025290abec575","sha512":"6134bc371c2c61db4a6ee42e0f680e132c7afc8eb7e026411d0dc8a457228f571bc8fa967e0092b3c2b3026f8305656b9b0854560fbcf3d48a4c94358e3407b9","ssdeep":"","tlshash":"5ff05c809bf07e18c12a22add65525823998027357dc4f51f37d473a43adbce9a04383","size":447,"data":"","first_seen":"2025-12-17T17:11:28.991969Z","last_seen":"2026-05-04T13:08:44.289455Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_46.BYAeF7RP.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"220af7b16cf73b4c82fb8efee121ab5e","sha1":"528388e0c9ab6e1ac0417be71babf231d190c7e5","sha256":"e56b5b06fbd9382e353cc52a2d021a51d7ebe9a040897a1bd62715db73f4c3e8","sha512":"e408d54bfa1b6665f91dafd70c95c1697fadfc8a5636087f11945c9fb717b62deae526aadbf99b712b9a1637e6419d9723d1d57cd26f9f52c59c29eabfa53051","ssdeep":"","tlshash":"11f0dcc777f05ea85069229ec162408475d4013606cc1f66d3bd063ac3ddaceba04387","size":447,"data":"","first_seen":"2025-12-17T17:11:29.056574Z","last_seen":"2026-05-04T13:08:44.378523Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/getExitDomainsFromLandData.CmAaG5m4.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"41ebe9afa6fc99b8dd6994de17cd4613","sha1":"c8cc1221c0a8d88e3edd3ee85fb5db386608c6cd","sha256":"70cb5d23b7c1762b7414844a5ec8207e099f9f51f3f9af2bb5610adb590d1ac5","sha512":"25cdedef33a4aaeafc35923e26723fcd1fda154088a30b647e1f9d71cafe91553c4f73ae905c54fbd505a2bef5762223bfbef858d21b769181f416878f0c233b","ssdeep":"","tlshash":"f401441a4ef00776458d17ece403b4002d6491bb91cd8741ec3f1636a74c6ced619309","size":719,"data":"","first_seen":"2025-12-17T05:47:47.252954Z","last_seen":"2026-01-08T06:11:29.243849Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_9.BSounB6E.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"2234d1ff76788a9114ab1657847d937b","sha1":"10d17c5082a7355a453e1260d53cf6b466595b0b","sha256":"9127246d8899b285e15eaa66d5becd39214c309ee93036e9ab193e7cd838fc59","sha512":"45f36a29021717c3bbc3333242e5297bcfc588893c305c0fd283346dc74c9b016e54c42a9818688b29f85f76d1f73cf7d5d1d26e41dc73b6d7192e00ec22b662","ssdeep":"","tlshash":"e5f05580baf96e088079229dd2a56485b59801339adc1f52e2784b3a93addcf9814283","size":446,"data":"","first_seen":"2025-12-17T17:11:29.107364Z","last_seen":"2026-05-04T13:08:44.39475Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/ShouldDetectProxy.CKHfvKx5.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"015d66abcbcb2e64c49b71a64ba3035f","sha1":"f7da72adb7370f7e2bf60012945f5cbcb452bddf","sha256":"27dcf50e74088d33a50172c0c14ad73e7f411277ac1d882566395c43dff68d17","sha512":"1ba2113d48d357c89663484ab2c62e9cf115c657e79127ce30ee7c634acdd66df6e5cb59cb354616f96ebbaada33168da48b7ed2d071a71d3f6e5d5f78183004","ssdeep":"","tlshash":"ad01448e55f95258c04b21aed2167120b41400a7128c8b62d6bc0b7c03a9ee98025b93","size":697,"data":"","first_seen":"2025-12-17T05:47:47.281158Z","last_seen":"2026-01-08T06:11:29.283001Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.Cd5VM3Qz.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ded9fdd6275cb600551d7c923fff0bae","sha1":"5812d5f8c5f2cd8f70e7ecb1036bb71dc83f0d15","sha256":"9fbb42c6f6e517f8b0b0e15d28a33b2ef5ecfd5cfa5b860311075e54d06d78e6","sha512":"722a8544286ee7e656327ae2b1c10dc87cee5971167770138f716f1e174bfdf57c74b5502c76b97df36c37e76b810897054b1f2a074e198ced9dd0285bfc792a","ssdeep":"96:V7NWrJeSeVvY5n42z+o3gtVtHCN3cfTSJA0q4bm7qfqLue6D2h6usyPb0RU:fjdY942BgDTKacBZD2hCyPYRU","tlshash":"53c195843669e09e02f73495692f2c47f1f08161509dc4a5ea11f2f23cb498bca37b7b","size":6051,"data":"","first_seen":"2025-12-17T05:47:47.269952Z","last_seen":"2026-01-12T12:33:46.047203Z","times_seen":393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.jx7YVY8r.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c1299ef3de7958ba64ee4f968e2d615f","sha1":"5d089589b9144f37bc2181cf3a2033644ee065f2","sha256":"bcc04b06e0014427e0594c54d147202615df95b0e8b22f68a9d1611a62209a2c","sha512":"9b2bf80948694abd5916a3b96c5e125701e4d895edff5878556c60bf85c0d984c96c6f769d90b8e46c7a5e8a1cb6fa9ce216a07a209188fde3099e12ced0e1ff","ssdeep":"","tlshash":"73017b661dbc7f54d41659acd40a2c6031e502534eed9e91eb2d4f79134ccce9a10143","size":679,"data":"","first_seen":"2025-12-17T17:11:29.071963Z","last_seen":"2026-01-11T07:14:06.873678Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useTabUnder.Dyq4rOq2.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ab751c62549410a1fb719c19b9a698e8","sha1":"0a3306988c867e154a8a6e91133fbdcb66d0518d","sha256":"594fca508a9aa98e4b9f4551291844c197c1bdb6f24711d3537e9ee8e09552bd","sha512":"a0cd4ce541131398c9aca8780607e61c0a44ad0119952d2fd7b25f2a015b26db37867af49940a3b5f12793ca7215f13dd95d00df0a77af5b6e08c9f6aa48dfad","ssdeep":"","tlshash":"a231ff4e957052f9419d49edc169ea3263250137aa48abe0607d4e35137ddcb912ab43","size":1723,"data":"","first_seen":"2025-12-17T05:47:47.251325Z","last_seen":"2026-01-08T06:11:29.244685Z","times_seen":274,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useAndroidWebView.9_5waoHF.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"5afb629b1e524da75b0127b543d3e852","sha1":"06e4a6f00e94afbe1a3e9ffdc0557f1bba450a01","sha256":"d94cb73432d871f5f98c874b7c8229dec26fa6ba048991df6fdd5af83e2e9935","sha512":"26d6babd7ada3c38ee2409b5a9906758532baa494653286c7135f3e425fe03f9c8f78ecbde563f70d355a20662f34aeea007a79d143f1075bfb97f855de33757","ssdeep":"","tlshash":"40f0598a9af55a6ec08f23ded62269017a94007293cc4fc1b13d4739739e68fc504b83","size":516,"data":"","first_seen":"2025-12-17T05:47:47.252148Z","last_seen":"2026-01-08T06:11:29.273146Z","times_seen":274,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/InAppOverlay.zBVtcbJJ.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb1d8cbcfc2bd72e62ffae9942cebbc6","sha1":"4739feda2540c74c02aec996a38244ac9eebc378","sha256":"9a37909bb3a1b01adf0c5c3d5d7f5703d9faed4ca392a44b33b4000125a04c54","sha512":"c76a281491bdfd92cad16c022dcbb153536d6bae701d6d0225949d84490db224457a449a0862d4f192a5fd6b4021251e873626a36fca65d457526908fe084e68","ssdeep":"96:f1l58A+epOTJn/IyfcKs/7801DNMnB+LA6rQgJsiMdDUSl2on:f1l58A+8OT6x780tNMB+8KJsiMNUSl2M","tlshash":"83a1759ee02081bca5998decd132f631263111a673d8d3e0e09f5f364769d97919af07","size":4858,"data":"","first_seen":"2025-12-17T05:47:47.283115Z","last_seen":"2026-01-08T06:11:29.289604Z","times_seen":202,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_15.C52pB-kL.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"586bcab55912f8e2b0d3739ca888823e","sha1":"14e66898545fa46800b8b211897f22430b8584a7","sha256":"fcb9644442402551f3ebe66d7f007fb06791f8cc0a003b46143c44a07d39ae5c","sha512":"a784111f62cbb5a046a252e052d79ae23553cfec530d6758da0b6eee5c0cb9086652d0cf72eb04df404b731d864da74846ebacba469c70b3a89af3788d4f4113","ssdeep":"","tlshash":"80f05c45aba05e59c13923ecc6926405715a0137d5dd0f91d13c8b3f67f86d95b20243","size":447,"data":"","first_seen":"2025-12-17T17:11:29.027494Z","last_seen":"2026-05-04T13:08:44.347318Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.Z8Z-8Yyt.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6b4a3a6ea68f1ffd21cf78232bd7eb7b","sha1":"153732d3d5a035adcb9e17e79a5a02186131406a","sha256":"ee653bc7a8bdfcef21e38ddc480ce005b3fc7812afe92d57ceb52bef6410cbdb","sha512":"53def17055be6e5d23dea4844ddbbb0b75b65caedd198a3e99c143aec9959750496794b4c0030f06455796663ad4d16b24d059582456bc779d3173c03a2cd77d","ssdeep":"","tlshash":"e611236991f086a4c22e13ece15273053255647361cecfa0a07a0b3c676fecea40c60b","size":881,"data":"","first_seen":"2025-12-17T05:47:47.214764Z","last_seen":"2026-01-08T06:11:29.272615Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useZoneProps.CxUgpgnk.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"39126da42751cbe8e85e3af060e2c223","sha1":"81f2d827907b212fa737eaf09091e40e6317065d","sha256":"7be8a8c2d4bc2463e9dcf935f9f5b6729182d53124b2289711170a285c29edb8","sha512":"641b51f6fead6eb3f52740e11106cff258c308b4786bb935bab6bebd7db61a0adc73db70f089d4a2c4e0bc286216e0f6ac1bd96819488f4f36d7f29843d0abf4","ssdeep":"","tlshash":"ec51c08fd12620590e95cfbdf87925173ed6c22a79868d4823c4a83c41e8ad522bf7a5","size":2960,"data":"","first_seen":"2025-12-17T05:47:47.270956Z","last_seen":"2026-01-08T06:11:29.266624Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/hooks.module.DdtoAe2N.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"464d5bb8d04356fde23f6c4e206ec333","sha1":"847faad28d33824a32b9135670546f2103b66784","sha256":"28ddb714c8129ad927aada69db90835571be92ab2242a790502bf9ac36bb9a75","sha512":"c78621bf8d5d6ad613403e4aa448e1afe715acfa4c61ec968a1c7721668b3245245d91d1f48b94db37ea10f01daac4d80ed167a549d212d6d80a77fa428fa33a","ssdeep":"","tlshash":"55712cec75b9b42143db763b927f061fb3366916988fc890712ae1e82e3441d2253f5d","size":3789,"data":"","first_seen":"2025-12-17T05:47:47.220407Z","last_seen":"2026-01-08T06:11:29.253Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/syncMetric.4vzhBu_4.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"73eb619915786fa74f63dfcce2526d18","sha1":"cfd7016170151f5660bf908e9afee9442bd14fc1","sha256":"5e37929a1ac2ace87f3fb94865993d2d4650abbcf7a7fb73f87012f308c0b333","sha512":"8b106eaf8d29ea27c5a1f6019b740a559e84f4269d600299f0a0df8c12dd1656872aa63702a26af7e7f0aab4879c9910b3435254936c8280a6f83a704925dcb8","ssdeep":"192:otDESwsPK91FGe/RxAMctkvxseqR/7j/6vz5O24j6YyyB:oJESfKBz/RaMctkvxsRR/3/mtB4j6Yyy","tlshash":"adf1d69670d1872451b993ddb2122612e33c460638dc4b64f02b9e25368dd4fe3b77b6","size":7567,"data":"","first_seen":"2025-12-17T05:47:47.212427Z","last_seen":"2026-01-08T06:11:29.297509Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_48.5AicsE3v.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f768cbd44b593c473f8100a926499ad6","sha1":"235b20a0963c4d27254def4c2d771093b8572b0a","sha256":"d76b959013a1ea364bb9bef5eaedc4935d768831ecb3b6a27d2c105a12854da0","sha512":"b9c111b183402ffff7f4b39b621c35d26ab7123e028792130a7e120f8f1905bcd0646d807d6c77b37569f748e1d3a0efec47ed76707c2e5e570ffa6545e04e3f","ssdeep":"","tlshash":"87f05c869af25a465039239df6821503b59e006383dc1f53e2784a7a576dece9584783","size":447,"data":"","first_seen":"2025-12-17T17:11:29.116391Z","last_seen":"2026-05-10T13:02:40.377235Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.DAr48a7e.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d8f1074495bd5a338d1b10d0597393c","sha1":"47515833f243b4e87bc46727cbeec674379efe99","sha256":"bcad4ad79c05777f3c59a61aca0f87cc6ae305c911fb2a788c81976fd1d1746c","sha512":"0af4a5f5263d73c39b1ad21ba32b038aad14e1d05855bb12b912622fbb51b2bb90d8c14804028e4262b4e897737a9f0ab484aeb5ff6c7f543125ab8b1243c420","ssdeep":"","tlshash":"8e51a78fd93841e2586e88efe0956872bb3623775284ef60d0ff5b361718c9df614602","size":2722,"data":"","first_seen":"2025-12-17T17:11:29.10647Z","last_seen":"2026-01-03T21:05:26.10583Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_33.gvhYFfMV.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"cc3031bacb7aa4c4ad0658b2caa9fa3b","sha1":"1d3c7a54ed84445f476d6213174f60f4c0e3db0d","sha256":"098d38a83059d79ea7ba023a94860643db80f6dd2eb10cd118171fb3f784b346","sha512":"b0626b4e3ec133a6395a106ae5be547c9e23037f62949ce95ba630d1e89670e21ac6eb70fe4fbb1985bb6031b785dcf5a0d6e39207e1f215ee72a7857867bdcb","ssdeep":"","tlshash":"f7f05c856bb4ed66413e139cd36151013764022752dd4f12e3bc0e7ba3bdd8d9c50383","size":447,"data":"","first_seen":"2025-12-17T17:11:29.030165Z","last_seen":"2026-05-06T13:02:57.335814Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_25.DWHnDEY7.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c08f03c1d70c5281262f1b01896949a4","sha1":"496640409ee2770b9ae49faba3ef83c508aa3656","sha256":"d883defe911997619e8c20663a6f47ebd169f400eec9f80bca4a64b01747c10b","sha512":"86f9784f53484b2bc4336ecc016617220d9dcb2e8caeab16b18647b90c37b1c79a783d556193f926923eca11d737fca256f4982b66546a75e46e416a9ff702a2","ssdeep":"","tlshash":"84f05c8577f06e45c02d13edc2a6210179d94262428d5fd1f1bd4a3e73aaaca9910353","size":447,"data":"","first_seen":"2025-12-17T17:11:28.978275Z","last_seen":"2026-05-10T03:30:41.617901Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"091fcea2ce8db1aa7fe44a4051e96b41","sha1":"4d1b368bcbddf456742d0abacd23ee510e609158","sha256":"433585662f852c8c76ded9e6f52054e1a120c78c7c0ecb8048fd3b99faa897f7","sha512":"765886ace161a524d53d770197f9f99de2c574df18129c8f32c3d4805f4680e2bd3c538527c6ed7e053b462fd1482e2eae75fcdf545bbeb795feff24d9c77d7f","ssdeep":"","tlshash":"14c02b9512f3e130f2a741c5c3cf32430000725602f841d351055c70401cc8a55a4f30","size":130,"data":"","first_seen":"2023-07-22T04:09:49Z","last_seen":"2026-05-14T15:03:20.568098Z","times_seen":11010,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/urlParams.BvC2X5TV.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"4b846ead436b8d9c059046376022877e","sha1":"e4aac924176600cf257d8104e68b36978abec3cb","sha256":"f29611f2afbfe4e7912a784962e6d2341e7d352d126926fd610d407a48b6e9e4","sha512":"d1c742c195ae46ad2dff61db1cedbbc4e6fbf97eea22366a777df8d6f33c5f245773e1cedb0dd166eeb29c6d01eeccf41e826368d68374040cc691c917906ce4","ssdeep":"192:YhZdoLRmRIvVvwEwhIWV8VapX+sXq4UvTvbkKKSkGL2j2rm:Y5f4Vahp+2q4E7fxKiK","tlshash":"6b0257accd69e28d1ab501d42248ef31632e4b1f6045e3a4fb715f5fd72ed3aac82254","size":8907,"data":"","first_seen":"2025-12-17T05:47:47.287181Z","last_seen":"2026-01-19T10:31:19.234824Z","times_seen":466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/Adex.Bk7bA9Ec.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"62dc585c4f8061d16a6248b9a3c6a880","sha1":"8d51c9977da92e30845b750dc4b1847d31e86de1","sha256":"82ec4a8be85e82ddd2d07d306e3687107a4f7a5281712e714baafbc5fc7a53d2","sha512":"00d7781cbe882af3a60aca89cc2a121dd5ef389064bd7992151eea05fb4dcc96850b11c4ae32442c5d36be9cfaa94a4394f19e175fddb1246edd3af75a754930","ssdeep":"","tlshash":"7e51c7bb85958879080d61ded235d3272c3414267d45c9e2a4bd8c2d53e68c5e13db2b","size":3089,"data":"","first_seen":"2025-12-17T05:47:47.268059Z","last_seen":"2026-01-08T06:11:29.277304Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.DLaR-eDJ.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ac5e244cd416cd51e0783240b14bcbaa","sha1":"6cbf6b3bf7f67c7133305aea4d39e2df61239c25","sha256":"a0cb77f9eb8d10f3b078e83ab40f5ae15bb9e3b42f4a54996d2ce7fef9989da4","sha512":"3d48d7f733476978dcd18a16d523f03b06d9429da421d8e029d00e04e7bd4b09fea36931bd5c6efe9b25f82e10d031ed7b5c962c91a0e390e4c5a7ae332192c4","ssdeep":"","tlshash":"0de0e5c69ef00bb58216279fd91a550131a5003b87dc4fa1e139433a1399e8d9908387","size":434,"data":"","first_seen":"2025-12-17T05:47:47.275747Z","last_seen":"2026-05-14T15:03:20.536708Z","times_seen":1465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/push.CJYB3Ae1.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"7cf16d101b71373348c42bd765d772a9","sha1":"d44981487275a237d3ce272c0008038f5e6db516","sha256":"037793a3af8b5bc7a92dcfea4148b0fc44e37063eaf95b2a1795fb2b1e9fca2b","sha512":"498846c248bb04d499abb2cfcd451abb3929415b51486e4cfb5ade041f71ad4f615fe77a7b97a79f7b717ae63c6faa152ed2b85768ce3635e9f6bbd89b92ebe4","ssdeep":"","tlshash":"d9017367bfe80b70a146836ff736564111e2103f5ddc27d9d1b68a790344fcd5409b45","size":669,"data":"","first_seen":"2025-12-17T05:47:47.247183Z","last_seen":"2026-05-14T15:03:20.504393Z","times_seen":1602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/runtime.CVWB_fgf.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"369f98b7646224d3c3efdd3d7a8b2be9","sha1":"314c47e64282f1e798b4f71d56ec4bb779c52c9d","sha256":"d3d8c0043cd1e3542cc06a8ea68c533bae2d3af8953d9e3b7c11c0246869a23c","sha512":"26455acafa7c7bdca96c29d604b27b9e8169c49d879463596d2a14d86ca5939fa3a3227b002effb1f457d5c75694f48edb7f7f5d8b3820d95e6d70449a14ca08","ssdeep":"1536:FdTPXzGOUC9IpWrx1cJsOUEQXy6GW6AygklBy6TPjOCqmzsG:jT9zcJsOUEQXy6GW6AyxlBy6TrOCMG","tlshash":"8e53f8893692b0184ba954d614ba0043e36d7e6c714d98e8f4fe94de7b9cc86f273b34","size":66016,"data":"","first_seen":"2025-12-17T05:47:47.246134Z","last_seen":"2026-01-19T10:31:19.189618Z","times_seen":243,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_2.7JktJqxv.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ef1259c355e38cc866a57131f7875d25","sha1":"703eb92eecd560efdb7e5d8a199fc0693275cb1c","sha256":"600bc766fe4e0778d9720343a4ad69029061bb999f0fb6518c0c2d926d8f09b6","sha512":"61287e6065b8326b4d07ba1bccd9184b5224f34dc57895f7d1952659b8b46d5cb5833d749cb4fa938c126fdb9e444b2543d4726dbcbaa03b2da1e41483637f30","ssdeep":"","tlshash":"5af0dcc2a6f41a05402f129cc60270417a6d013362cc8f04e37906bb43abede5904383","size":446,"data":"","first_seen":"2025-12-17T17:11:29.013313Z","last_seen":"2026-05-10T13:02:40.360636Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/getRandomIndex.CEP3EF32.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"2d7b3f71c11dbe119ec76b5442ef5e2f","sha1":"628510b7dc4f31c0c37406a296dd1991f75da434","sha256":"a59e870cf8f0084faa7e8674fe8e1a0af3e717e29949dbb940d3fed8fe649c82","sha512":"6b557507dae5cdc28b640f8b2d0a3c23e16e4df7e311aaafb36035f680efdcca7911df16ac3b9bd95c059ccc3abe67302d944f0354d99f5cfa1e048d635c63b6","ssdeep":"","tlshash":"46f00e84bbf02a540017226cc1ca2102344c81b34aed0f61e13849687378bfed128a83","size":488,"data":"","first_seen":"2025-12-17T05:47:47.255695Z","last_seen":"2026-05-14T15:03:20.489156Z","times_seen":1227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.CrtMtsQS.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"86ef96c86a596a8a2ce71984b2038926","sha1":"770868d538ec117cfbf192c443366381781b012b","sha256":"2226b9dd214039e623fbd422de669ca5291611a7a78a5ee363fb2bc04c63d8c2","sha512":"2407f6eacc8660879d6b2c60cb6cccabbadb1fb210af30aef05deee786af1422b760dd710b4a6b23f9594c161597c300d08c9aaec695e45fb25e69adee1a8674","ssdeep":"","tlshash":"f541cc64b5aaee36667d00ed93b9330637ae495110cd5e01b37a4236c2b9facc1fd285","size":1877,"data":"","first_seen":"2025-12-17T17:11:28.972051Z","last_seen":"2026-01-07T11:36:20.269304Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_27.DfN84U4G.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf055eb99ca8180b64493223ea24730e","sha1":"6fbb3f7c68f152c4aceffbbe2ea856e447388f36","sha256":"fe74b15e8618a85b8fa1fdec1a394bd9723e1dc2b70af6b361ac4e16b7772027","sha512":"30551ca3dfd2b8dd37ad663852aaa1c92e5b1632e6fdae18abc1920cba31c0d8774d1393e5905b67ef72e793c8328ba9a514a1e85cc522d7d724acaf8c62241f","ssdeep":"","tlshash":"6bf0a3815bf48d58802e17acd25761513edc90735acc1f26d278cbbe535de8ea814643","size":447,"data":"","first_seen":"2025-12-17T17:11:29.090997Z","last_seen":"2026-05-04T13:08:44.420067Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_20.D5f37klN.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8edb8d7d4092e7b020cbc3b61d9a7f52","sha1":"300b65381fdcac51e6c13c130b2019804de5bb11","sha256":"29c360f39c6422df80798cf8452fec709dec1d8c5f3cc92c1546aec7acb1ccb1","sha512":"8d88f1e63f6712c73a0cddf91defdb15d3ccfa869da87960a311a5b2293589b5b822344c93d3e4a99ff2a1c663dcd8c0371d548bd66d62adb63bd65248824e53","ssdeep":"","tlshash":"baf05c8177fa6e458079235dc24578067694813252cdaf51f13d077663ae9de4500347","size":447,"data":"","first_seen":"2025-12-17T17:11:29.073466Z","last_seen":"2026-05-04T13:08:44.368797Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_21.BPb0DZfa.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ba58af4d7d206a8edd5a38a7c162f07c","sha1":"b3d5345cd7ef548c6442fbd207d6f8a3cde804a4","sha256":"5143f9d75109cf4ea6f10199a619cc1dc47fc24c317e6480962e35289f4eaca1","sha512":"17f2937c4d85e7d2d97b3fe147ed1d44e8204a44d8555d9228134767abe1eefbf8a9f67230b31f5eac4e508416fdea47303539103cb87d84976fdc36d07e231b","ssdeep":"","tlshash":"29f05c81a7f02b298129139dd191d242b258203343cd4f12e3fd063e53aedddcb14247","size":447,"data":"","first_seen":"2025-12-17T17:11:28.977409Z","last_seen":"2026-05-04T13:08:44.39815Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_39.C6YIrucu.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e7631ce74113ca18ed407735e30007c1","sha1":"8f0eb7a8fb8b342cae4a4c7dfc64c4b8cb6cc2cb","sha256":"0f5df2bb03d2743249d82359c9eee597a829371202c3c670ada855ffd39bf0dc","sha512":"df3e2aa41434e2cf5fa7b372cf67ac57e73684131800a8e5fa5124977794002e85ac1b8283539d294ad72a47f58d3a3915bade8d576a0dd00995f7ff8c12c7f4","ssdeep":"","tlshash":"93f0a38597f479658036139cd1571a0275d8023747cc0f12d2bc0b77439da9dec18243","size":447,"data":"","first_seen":"2025-12-17T17:11:29.089068Z","last_seen":"2026-05-08T21:02:09.34261Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_45.CvoQjYns.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"665155c18d2f9889461492f837cbd181","sha1":"025e91fb1c423cf1ca6567d46c5374fd11d83fe6","sha256":"860ab75dae2d57da9d73b848ab4ed92947a7e4d5a5f35e6aaa7344c1b7c9abc4","sha512":"fce0d6ce173be8f6aec86953304e5461ff762cca08e88b93cf6edfec86b858660dfdeb892b0337855cf30a0a9c026aaddf2034af8bf08c4da72bfd5900a56533","ssdeep":"","tlshash":"c0f0a3507bf4ed04c069327eda556046b5dc147707cd8fd1d279067e539e9cb5850383","size":447,"data":"","first_seen":"2025-12-17T17:11:29.100982Z","last_seen":"2026-05-04T13:08:44.456499Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/jsxRuntime.module.CVXpFPwO.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"282f34b217dc7992ffcab98460caf282","sha1":"c60107bd41a65d5a20567c1e218bd20ced574b59","sha256":"191ac8506be4789d57e8fd0cba68c31ca5d3c724ad220250d0c460a644f0a1c8","sha512":"edf7345d714e195f9bef4b20e1286156b9e7f495acaf56ce164dfd75c066490c04105b59244babe5d5e9a027df00eb25ae459b94f79ce9e762c22bb9d3139bf1","ssdeep":"","tlshash":"5d0120ee7270ba93805739eec2171a0232bd306791cc0f61927c46f93b907ce88c4742","size":767,"data":"","first_seen":"2025-12-17T05:47:47.229971Z","last_seen":"2026-01-08T06:11:29.284726Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.CvBVRHBa.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"cf38eaeed45ae95dcffdf0531f718d72","sha1":"9f88f7626b2c3f29c67b207f4db1c70fb3f81a4f","sha256":"23581cafe738c2b9e7c3d87c3ab52bb2a59c6d000ad15a1dacf2a3df0bb617d9","sha512":"ebec7826fc50d0defe0f8bb1e5c42d4f9c8ad7b59b8adaeadd11d1ccb2e1a35bd1afee65e9b7ff1ea565d189540e375049f1ef47b191f3f7c4cd4321e8232161","ssdeep":"","tlshash":"fe61c654b25123fd913784dae9cf858d3906b761de0e8f9571fc616a03cc089b709346","size":3453,"data":"","first_seen":"2025-12-17T17:11:29.124847Z","last_seen":"2026-01-07T21:45:09.717231Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_8.lfERJB-d.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"597f9403b967b4f0015073f945ebb0f6","sha1":"0a59889bc3021a52e0dda3f49a6cb9c5c8ee7d4c","sha256":"0ae744c1621cd7b9d9ff2c023ad4c91468facba855df4002994d697ac136353e","sha512":"14835f37038e77cc778bc0b42801115400bdd00cbbd15a379033cf1ce64564dfd4eedaa0c20d75959f638c830ee1ec69891ae542ce19077e691a2161bbd1ef45","ssdeep":"","tlshash":"38f05cc3f7f03e54443912aed6912445b6e5007313cd0f51f278167b5779ac98512343","size":446,"data":"","first_seen":"2025-12-17T17:11:29.08366Z","last_seen":"2026-05-04T13:08:44.314937Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"15505b2350e129b787d479f7507edee9","sha1":"09ccb3a84e7f25a30bf97594c9c98b6878fd4483","sha256":"53b6bbda82ae145cfc0fb1941cb035359d1c8b298798339cf53f5a543836ad65","sha512":"970991ac74c61bd2a25fe8a331be62b328d99d1f04b87a83cf50deda9d4d6b68a04403ba120796b1e2f9de04af78d640626fb95d2370907f4b626385f0562178","ssdeep":"","tlshash":"3a61947813111bb33ddda0a9dd286ec3dda51834859a887e784e5cf30658e4381bebb9","size":3462,"data":"","first_seen":"2025-06-11T22:43:11.360804Z","last_seen":"2026-05-14T15:03:20.568817Z","times_seen":9612,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/getImageFromConfig.BNkkjDtZ.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8e2ac9a56c41b6f0b07654245ddd1a5f","sha1":"a0d3ef8f1abf8cf9141210bb18de7473051e1dc6","sha256":"9b852c4960d4e3e9c51e2acdc79d572b00e24dec967887d2087a36b18f23c3b1","sha512":"f9e97d1bd7398854e4b95ec401f069828b5fe261bb0c14b154657294a83f74d6319172e5198be988807233a1e681607eeacba974a9bbf47c39efa90e5466f7e4","ssdeep":"","tlshash":"b1f0eb84dff009508a0613ccd117460eb2ac4dab86cc8f10a1b8473d3b626bea826703","size":560,"data":"","first_seen":"2025-12-17T05:47:47.272854Z","last_seen":"2026-01-08T06:11:29.260835Z","times_seen":168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useTimer.pX3KZMvA.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"2617f5b86bd982c7fdf4bf7a5442e208","sha1":"292a01c2ee43a56a7e7dc40ac6dd4e5f9d60f85b","sha256":"9154feadb415b464cfd2ef4f79547d5025a74cf37c105950e226f6f800b40050","sha512":"bd96463f66965a7129e9490ba49bf6051fceccd27c607fcac2f09302d14ffd367a745db35c164e176bc1ee424b8e2b5405ab8d53cbbdba3cfbf01212fb3fe23b","ssdeep":"","tlshash":"c111e38a11f80b45556803ecc05121003e59937374ae4fd5f1be1566239eeded12c787","size":887,"data":"","first_seen":"2025-12-17T17:11:29.092581Z","last_seen":"2026-01-08T01:34:51.00189Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_14.Y4431cte.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"be6d60955bc2abf911c7a8bccc3416d8","sha1":"5bcc09866d4b910a6db217fca2cd6c664c865eea","sha256":"3efac3a5371d643ea8c4406f0d9a594a5ec75098ce84ef30347925915285e59d","sha512":"026fa0e409d8ec24c15f6c519e412e9223243c6785fe59e1077382dfa731d4cfc5f7ab73453a613da9b5df6276157ae9129eae83dfa61cffb40a1dd74eedcfef","ssdeep":"","tlshash":"57f0dc8953f02916412a125cc35911413d981633469c8f52e3bc0237436c9dea5183c3","size":447,"data":"","first_seen":"2025-12-17T17:11:29.007061Z","last_seen":"2026-05-04T13:08:44.375283Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_29.B_aT5iYk.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"82d06abe1aa825e875dcd17ba0de79ba","sha1":"2d66f3b506d2b0f58dce5756202a34ed930d50ad","sha256":"51aef67eedb683eab7b981eed9c5bff835a6981aa24ef8eaf14311dc80b4477b","sha512":"30e884ec9c62317cc9da40af0467e3e47c9d5e4721a35795fa7eb7203de0f28833d8e41d6f555298f90c32da3e356dfaaedebabb5a58343b612937e106eacc27","ssdeep":"","tlshash":"9cf027c16ae46f65843a237ec2a514457698102712dd2e92e2be0f3a936e9cd5c14387","size":447,"data":"","first_seen":"2025-12-17T17:11:29.095459Z","last_seen":"2026-05-04T13:08:44.450985Z","times_seen":104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/adex.CjaJHaT5.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"4cdb1bf059283f3124909b6fea7d54d7","sha1":"2d4664fa6d9a3c0e482ab011c3d2b561b4e7cc53","sha256":"a1042626d686bf3d1081e38841cb2ad334a0150068af5ef7bff54074d95b1d51","sha512":"2451cec9bbb3f83c0721078bd61f39f01814d6aa4b602cbaaa24503c636cc0ebc9f15c1aa5d8e5990b5ba6ee44108657f9f30e58fb9f48ffde9f74ecf2622c36","ssdeep":"","tlshash":"5f11e38e53f347b8421163ddc12eb1415008203799ce47e0d03547b82be4aee9355b1b","size":855,"data":"","first_seen":"2025-12-17T05:47:47.25032Z","last_seen":"2026-01-12T12:33:46.087451Z","times_seen":393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useMainExit.l2G2lTTP.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"96d26badadb8460d5fcb1a3f2408f1bc","sha1":"a2ad48b72a3f1668f600ee3a5ab0a1e5d3243e05","sha256":"fa129ff6760ac1653ab04ac5677f1f139ef1dd037d01624ed6b4da4a312689ad","sha512":"9bec7e668b15a4e57b15577cab08b3acbf9b470f6035b7faee9541d2ae3dde4b6dedbd868b669dbfd0e97aa061e48868dcb7fd11adcb61985bc6b72c903160f5","ssdeep":"96:fQyfH830UKHhchg3I9BIiyYRfKMk/2IHYIIIlpwwD/VyhwwBssSAZAlb:f5y0UKyhg3I96iyOyMw4M7wAiwgX6","tlshash":"35b1778ff47910fc7b96c9dde03391e3193325062a899174a4df4f28177428a627bb57","size":5166,"data":"","first_seen":"2025-12-17T05:47:47.227033Z","last_seen":"2026-01-08T06:11:29.32387Z","times_seen":354,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/getCookieValue.DM-GRtrb.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"67c6c0e089e732a5f6cae3fe3fe625ab","sha1":"29dc307f5a7dcdbf9b22c846014d83399ea7b459","sha256":"ea4fd17dadd9627a0593c3621938f7bd53c9f81c30ce78b4644cda5c46cc1814","sha512":"dc2dc5485a3b618f5f2ba4e2980dbbe340e79fbf0124fa61074b33a562e294417d7cc120c1612d9f95cfb9db515ff769a1f56e368b191c5bb3e0ec87e2e2040a","ssdeep":"","tlshash":"fb019e8b16a05b98c0261eccd615745635760137038c8ea2e06d6a3db7aeae9a834313","size":660,"data":"","first_seen":"2025-12-17T05:47:47.274787Z","last_seen":"2026-01-12T12:33:46.092571Z","times_seen":393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.DS6wA2VX.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c286166fb6f44c0a7aef4ce2a9b9338c","sha1":"91599b7cbabdcfc14535dd3d022bcf1296942072","sha256":"5c30ec81142e7070f0b19d2d89a41efa7c98e6da111b0ebafcc3ecb60880f9d5","sha512":"307704a1dd37a8773ea4481691a31760abb3f0060b775058b99d749f71759882703c701488b671a2c7d52de8199634f58d39fec8f137794ee8989faaea874362","ssdeep":"","tlshash":"d3e02bcd5ae01bc4801f22add51a1109b944043366de5f51e13c07b4539fdcae808343","size":398,"data":"","first_seen":"2025-12-17T05:47:47.226096Z","last_seen":"2026-02-09T18:12:22.058301Z","times_seen":697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/footer.CLXArp8_.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"4b3eafe60e0de2be3cffb6141fb95153","sha1":"86c7f897ef5670590f50482564d2a06168ca895b","sha256":"d3cfbfaaa44ef59ee37f651e5de0ed0ec0c9e6b0465cca0e9a7d791718cbfc6c","sha512":"c0e07282e5f0c6b3d0ad00b8e8c468f9022f16804bc3a3dc7bcceb1780815b858966ac6243a74d4eaf2099b281f43d723c213a75936b88336bd1ac9870339611","ssdeep":"","tlshash":"ba2137d7cbf553540108177ccb1795e5e206202bb7cc8f52f86c02e41359bd49b39b55","size":1235,"data":"","first_seen":"2025-12-17T05:47:47.236515Z","last_seen":"2026-05-14T15:03:20.524605Z","times_seen":1605,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.Bj6-y9HX.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"25d02c4766541802dffc6ed1b02a263a","sha1":"12bb857fc8d2914d7943600c288141837edb4d49","sha256":"a14acad15a15f796166bc0a771aa079e4e74fe80fb4a454edae97a21cd5bd71b","sha512":"7dc75aecafae4c30f5e53ba3433e4a9b399252199eac4d98c63157c256dac42d3cc0ea93c270f12fb9a05bcb42cb36f22eb22de56a8156c8e0dfb6d8b8355e95","ssdeep":"768:suxPW0Bl84mbLrIq1VNuT1cG37lbxMH5+:su+Yo+","tlshash":"1cc24317f8473cecf2354edcfe9e1445eca8561c4bc7a829a01e71b1b1c538463b96aa","size":26482,"data":"","first_seen":"2025-12-18T17:35:57.742915Z","last_seen":"2026-01-08T01:34:51.027777Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_4.BNtp2gZt.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"f794ec74a8bb05ddcaf48fd5c609c6d8","sha1":"2d4d03820c2b237a7877fbdd528c764104bede85","sha256":"4cc2c09367e414757bfba7a44c87da4de445c8bcdbe0c29cdc0ef700a8eb75a5","sha512":"e6ac11f5d1ceffcdd6a8cc8d6f90903f22422da6ece5ed1ef7e142c1983d5f9a73763c1c358694620558f8acb029a17dd707485516013c34c9d018e77b4d9b0d","ssdeep":"","tlshash":"32f0dc4713b04f194266139cc69510063574022282dc0f10d2790ab663b97cd9a10283","size":446,"data":"","first_seen":"2025-12-17T17:11:28.99774Z","last_seen":"2026-05-10T03:30:41.562704Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_31.CpXU0WvX.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"eac1c7f0c1e629748fc3aedab6b9e369","sha1":"57e266dcf08bcf8e490874cfff981d4628ea253b","sha256":"1077d1211cc73e74f6c97b8d4442efbdbba66ec0bed6c465eb955263f195fa01","sha512":"fa8365f9e79045bc7aea0a512c223dc273b7c7a941e57c813b77bc0f0c98bafbf62588eff538e1120bf34170d96afc45a481ca1a3a540ef2e5047b7f960f8bf1","ssdeep":"","tlshash":"c6f05c856bf25d1e4235539fe3915202ba590023538c1f1ad279063753acdcfc900743","size":447,"data":"","first_seen":"2025-12-17T17:11:28.967947Z","last_seen":"2026-05-04T13:08:44.287193Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba0f4e77cb3d1968e8bb09e81cc6345e","sha1":"c3dabda4cfc7ed18627ba989f8ae8766b1ce4933","sha256":"7885d6bc09b192bdb9d4b2599239e210ae4b70f1773646a96c97a9a21c184487","sha512":"57baf1a1c836348e36fb6c38e649c142601110dd231faea9bc2a5c9c653c4b014dc4d02b3bbd7dad06a67eb2418bde568ca6f698086f9ce179718b5b1c56261a","ssdeep":"","tlshash":"f3c02bd612f36130f3ab40c7838f31c300207016027840d351014c70101c4494594e30","size":130,"data":"","first_seen":"2023-07-23T05:20:44Z","last_seen":"2026-05-14T15:03:20.569787Z","times_seen":8115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.DE442wj0.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"df3e914580428a8af3efcf3767af0d1b","sha1":"5e77a95cd5d2f1b9c00c9ff336ca19fbbade7cfb","sha256":"37aa84ef20534863400780bec6d2c28f77a48cabc27fb41feb48eaf3caec8233","sha512":"ec22b4036b90a044e75892854d354354d7528a9e81f009ed589017e284f5506e86efeff7ded69ef4ac9cbce6262fccad1b1b528bfc633147a5ef7fb80455baae","ssdeep":"","tlshash":"481116cf5bd1a247462b57bef2261b01b936123b57cc8f10e1a5172932ce9aed910683","size":882,"data":"","first_seen":"2025-12-17T05:47:47.213615Z","last_seen":"2026-01-08T06:11:29.264071Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/customEvents.v14Jg-B0.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"18dd3e2310cb2955a2151cadbc33e54e","sha1":"74971b2de3328b6c1efd65c85fb826999fff1843","sha256":"c6c042261e0672a12367ebeda37d071974920245abb0f995a1c5927c01987647","sha512":"68ee00f13e06f918d2594ada705c478c72cc31cf53f9c3ebe020d77582581444fe4dc1f9839501b3fa133fe82ed950e5fdec8767491832a1e55550a3a4a9f83d","ssdeep":"","tlshash":"ebf0024f3ab41bf0506d236ee6ae590228c94067538c9fa5a13c4b39339dfc8a419643","size":640,"data":"","first_seen":"2025-12-17T05:47:47.217414Z","last_seen":"2026-05-14T15:03:20.561008Z","times_seen":1605,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.enCFs2ex.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2013c66864cd56bc89f74e5e4e1f55e9","sha1":"f76c33b2936bed4aeb69be4a3834b6f213e2d54b","sha256":"e28d3035316a3caaca744488a275bc73b51331ae2a0378e4f6c79f6289fda442","sha512":"bd2f7c67d07b23fc080c067f7d8bd1cf32d25e231ac228fe419eda050f2b17566c848cfa153dcb68e69dccb76305b190625330105b50c2ce9bc18290d74078d2","ssdeep":"","tlshash":"542133dfd4f4967202663bade26a961235b9027702d89b41a03d0f78137689fe0186c2","size":1182,"data":"","first_seen":"2025-12-24T06:12:29.563891Z","last_seen":"2026-01-08T01:34:50.933583Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useTabVisibility.DepQGhQN.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"1124f7899cd5d0cedf517027f1b12af8","sha1":"62e9903fecd8541f3019978da48b754ce9bb2950","sha256":"df3ee6402453d6564defc20703c2e9d9418ac86ea5d6bb803df30026b7af418b","sha512":"42a4fa35346ea19fb9af72a2fc102e8184942a296aa96dd8a8b98835b999e49d11d9f0361d4e6b3860f4231e0f92108c247ac480ea9f5fcfb1432c2041fe80ed","ssdeep":"","tlshash":"20f07de5a7f01974404b139de279b782397400b7a28d1f61b17c5f78234de8a9610a87","size":637,"data":"","first_seen":"2025-12-17T05:47:47.223218Z","last_seen":"2026-01-08T06:11:29.29586Z","times_seen":251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_7.BlvFzB66.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"fea7f2d04fcbd3cb0a8a23fecfe224ad","sha1":"f73871b870e1f2de9a0b9adff2addc68926c0048","sha256":"8e901d36d60491f9dce5a811d2feaaec7f6e56092c947f532da450b41785c090","sha512":"41dac12ba72ff333d97b7f593f8a74867bf8bdf9fc37f53894f5d3cbeffd09359aedcd0a0c5b8cebd405e98e66a730608653226f58edbfd6f0a5e3bf29dc0221","ssdeep":"","tlshash":"19f0abc4bbf4190542ae139cc26a6632b799007302cd8f51f2bd4a3b43ae9de8c4438b","size":446,"data":"","first_seen":"2025-12-17T17:11:29.041319Z","last_seen":"2026-05-04T13:08:44.367665Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_32.BeXMbV9r.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e208cbc9f387a1adeaecc5f050ed4103","sha1":"b4d35d206f68b68e328a7efa2e321e4ade6318c6","sha256":"87d10d29361a2a1196209a21209844b05a34ca7b87bcbcabf5ee37648065a8c5","sha512":"82717966260f2899458743e4698850479797ab7ce98e93c487d027478d6ba4899ca48d349ba9bb8cd9a40b69a017c4a5a8010f1e5d40413d8ab0ec7ed76fee32","ssdeep":"","tlshash":"f7f05c9197f06f59801d33dec256114675981127c2ce0f61e37c063793e9f8d9904747","size":447,"data":"","first_seen":"2025-12-17T17:11:28.968986Z","last_seen":"2026-05-04T13:08:44.369726Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useTooltipAnimation.c1mAZbq5.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c99a3d106e5b70004072ec6994b24672","sha1":"cfe82ab0a7c16e0c5aed5432eeeecedc959afa9e","sha256":"f23915297d72f335f2be5cbfbe4590720128b9f9a5ef6b376c2903650e17a88f","sha512":"878418028dc79efe82e86f33588eba334c103de5be47dad17372a047e7173fbfb49df8666109deae602828dca310415ebea0ecca13ab2c6c644462b0c23478e3","ssdeep":"","tlshash":"cf319ba8b591637ca04b439c916c7ac0280d12f1d44f4ff1f23a0675174cd58bd0e745","size":1676,"data":"","first_seen":"2025-12-17T17:11:29.079487Z","last_seen":"2026-01-03T21:05:26.195962Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_5.Br0wmheL.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"9ecb23f7c0561e284d22c3fec0f8e7df","sha1":"d71b3aa7cf6ac6c0d809ff394019954e79a1c7b6","sha256":"173b08ed1ce9db1105f56e6079b770fc6e2839a748794972c7a6107dbbcaa0aa","sha512":"47432b9c889580214de1968431b4245062dadafbe7fa2ea539812707c4043d45bccdb2a906f1ddb7816ed175cc523f3681977943a6be0122555653643b291947","ssdeep":"","tlshash":"a6f05c945ff06f6650aa32aec39b21067555416252cc2f61e27c8b365359acd4940343","size":446,"data":"","first_seen":"2025-12-17T17:11:29.020654Z","last_seen":"2026-05-10T13:02:40.373561Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/CookieSync.CWPvbhq9.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"38d7eec256d21a38558768ed483adbdb","sha1":"3aeef2b9537afd62ea7ebff361fe1d8163ffd023","sha256":"8f8a87d26e42fbc1161101f34ffb66801275816d373bc4b8177a2235c75b982a","sha512":"34617076f695544b4bb4f3dcdb6e86904abdafce87a48a80dbfdf011d424b74643a8b9bbd533bc0ae0fe6661c7d3eab376cc4fa6b67fc1fefa80c82a2ebafeab","ssdeep":"","tlshash":"d421530ab2f060b581651afdc0551130667345b3378c8f51b6ad1e310beda6ae92ab13","size":1333,"data":"","first_seen":"2025-12-17T05:47:47.261878Z","last_seen":"2026-01-08T03:12:00.598187Z","times_seen":137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_12.puRHueXD.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e99b0773528aad793c37a0867d8d43b","sha1":"ec71c626c8d04c5ee019e24ef9ad5f4b84108116","sha256":"04ec762998bf9df02b21cb10b4597389ea4b7fbdccb676a3c7ea21b0043b1dbb","sha512":"83da824163c8094717f844beb4ac23fdd7654df33c52c6054a5ad82f7c2c773deb94aaf15da9b363c57d60c6421532679c096766c6c7fabb29fabac94850046c","ssdeep":"","tlshash":"58f05c8567f00e55412d236cd6469426329c0662a2ec1f21d27c4abe83daecda804647","size":447,"data":"","first_seen":"2025-12-17T17:11:29.06658Z","last_seen":"2026-05-04T21:01:28.685613Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_8.BAnuNPHy.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b7a6ccc9c35ee03d2d9aba18f997b0a","sha1":"fe4c7a5c50fb2720d6c7b4ea54c0e5c1b58404af","sha256":"7b6328372c8e1a2e3e3e4e2dd581f1f1853138cb0d491f9c4e6c5b6db8de26ab","sha512":"b5151f19dafce9cc80bb7b639b1de23a26ebdc7e93da6cd3ee6cdd1f32958d21065ae1584a121815f0f1bcdfe7e8628ff4ce4af82c6233041352fd5f555b4e97","ssdeep":"","tlshash":"b8f0ab9497f00a14902d23ecf25b140236a6153352eddf91e3bc463e134dfada918383","size":446,"data":"","first_seen":"2025-12-17T17:11:29.11263Z","last_seen":"2026-05-06T13:02:57.288439Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/replacePlaceholders.CZI-Rb_A.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"5240aa57010f91f99c3dffdb749d0a17","sha1":"5730e0baf929b9eaa313e220cfe01821023b9d37","sha256":"3ccd5d01c4f3986a4ffcc28a8e18ba78e19c9c9733299db0e4276497a396129f","sha512":"9245fb7d742f8e96794a9b686b885aeba23e6cdd98cf48714f8bbc80e3c48d974a6a4b16714f01b5b0a4b4c1a419d31ba8f6b24dc8a9a202530197d08d16ed54","ssdeep":"","tlshash":"eef0e18512f16bc5911d234cd2663200b6a8511b2aec8f50f17d0776632ecdfc840647","size":565,"data":"","first_seen":"2025-12-17T08:15:43.350692Z","last_seen":"2026-05-06T13:02:57.297079Z","times_seen":407,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_1.DYC6Hkj9.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a7b4760f41a4592ed811fcede3851821","sha1":"ae46285114dfceb86aaea9255f438362bd21f8b5","sha256":"21ec233935e893b83ac4618d7fbd5e995e2c9e2c432ccdab83b7bb010af1b9db","sha512":"9f174cc77436dc720d5fd989cdc8de0c688656a4928d420735a1d14a71b0e9c6e61002a20a0051750f20b3c77d36c1c40f033d72286baf64fee433817ac9640e","ssdeep":"","tlshash":"a3f05c8d56f00d0a832612add286208334940137c19d9f42e13c47b7e35d59a5d103c6","size":446,"data":"","first_seen":"2025-12-17T17:11:28.991164Z","last_seen":"2026-05-10T13:02:40.412906Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_10.CmDuwn9p.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"0446cb61b1da5e18ee188caa2a990c78","sha1":"4c5561b66c2df67b3e938ded2a2226ff30918989","sha256":"8797a9d8aef1f0f6a9a568b9ade04c7b4f86378548a1971b715b62ed0cfeda35","sha512":"6fda86701d781a8c4646ab084af2e2bd43d553038463521a71bd6089bfb04ecc7d5f6e8a8aa612abf212ef2b5966f844b20a1d8bd374ae162d2292c9cca72c52","ssdeep":"","tlshash":"f9f05c5557f45d494129339dd291546933586463938c9f61e1fc0b3ee36da8ee940343","size":447,"data":"","first_seen":"2025-12-17T17:11:29.09339Z","last_seen":"2026-05-10T03:30:41.630988Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_19.3AcZYBxK.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"813ca2222ba9b9a5ccd87e2840fe7bf2","sha1":"e24d2ce450890bef022d958f234e017df70797f7","sha256":"655e9803758a30ce9e797e8ee62dbb18306b73804c79e19ff63471105ff50ab0","sha512":"ad92f66c1a0bfa07b88b37626d40cc1077f46846ec5a5b156c866741765bc7988fe770b91e8e87253eac488506e6f26638f8bb20f6758b342361ff1911ac2507","ssdeep":"","tlshash":"d7f05c855bf43e9c406e225cc556205abe58512342ad0f51f17a073b436dfcd8e00783","size":447,"data":"","first_seen":"2025-12-17T17:11:29.094216Z","last_seen":"2026-05-04T13:08:44.364261Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/iframe.XARsmtYo.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e7a7b3109e11840e7464a8e5d790c53","sha1":"6b53fd02bb2c75aa4c30d287bd8229576e21fbc6","sha256":"f990d00b19833eba9668f0c6a1a6b0954a2e412b686f0379b94d9d02c0a41e53","sha512":"ea8619e54dab6a3b0f81e03eec39cf6b736724b74eb4667c167024933acf5cdd175269f144d542c5a9ca7232d79b72ee894f2f9ea5e7338ff17d0b5514bfb751","ssdeep":"","tlshash":"e8110e8e84f0066c419512efd66bb32174240657778d9b91a16d8fbc6729dcb8504bcb","size":1000,"data":"","first_seen":"2025-12-17T09:40:52.755818Z","last_seen":"2026-01-08T03:12:00.646906Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useCustomAutoexitFunction.DT1a9Lq8.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"27a49fe3c74a5c87d1870ce73a10e8da","sha1":"1e1317374b2b6dbe60fabdf36587244c86f1d7c1","sha256":"9a0aee2a7675733c5d2df24debf7099f5af55a7e0ddc144cefdd2a649f022836","sha512":"ca8bf03c5cdb89c1cfaeb09c3072effac842e25772cf0d51648a86071e951999aacb41200e57d34d566dec4247a7f10d8da9a13d849114906c8c43a250744c04","ssdeep":"","tlshash":"ddf0599be9f0a379408e1bddd52790126a52413722cd4f90b02d873e17faece6d19b93","size":554,"data":"","first_seen":"2025-12-17T05:47:47.276736Z","last_seen":"2026-01-08T06:11:29.231702Z","times_seen":211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/helpers.fiiY6F8d.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"f3444bc7f609f38927f4fd7fee6087fc","sha1":"5f833301d4d2df0dc4028099c43458143927c173","sha256":"1ad2af884e821a5d7bb51e8c9a99e0140f9a293d98d44d16c7029e07fc1d5e92","sha512":"967f47de07f0ebffe7c82be2094bbc00830c1446066ad816e6474aded1fdd6dcaf0dde8dac266ffca944b26d90fc12a23d53d1228de00139c748bb5dab224363","ssdeep":"","tlshash":"7b41775d48a1cc70a38c65dcf6395e2215b6521738948b86f26f4b680a5cccf831377a","size":2211,"data":"","first_seen":"2025-12-17T05:47:47.216372Z","last_seen":"2026-01-08T06:11:29.280581Z","times_seen":354,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_38.CE9tAGuY.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"82f8c24493d59c40645c7144af466721","sha1":"b2f434f340ba4a795664508d4f61135f77cb9713","sha256":"c98e0b5b47a306375fb0c77e34129d46c27cba57192501fed822fccf8af5d46f","sha512":"af406fcc784e3a633b9b267482aa2001f3b98134d678e15b9a36457e63b7b010fc9b69077c718d185cbfb9384d96f77830d071c44aabb51034890cec4f2faadc","ssdeep":"","tlshash":"acf0559657f43d1c827912acc3a6200272d8907382de4fe1e3bc063a83a8fdb5d18783","size":447,"data":"","first_seen":"2025-12-17T17:11:29.018194Z","last_seen":"2026-05-04T13:08:44.348927Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_47.CwpzDnD6.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"1d385c1b8bf4dffcc98154b3e7e68651","sha1":"8bbaa905e2105f6f111897312f2df892d1420dbf","sha256":"d7f9334a09918647099799e701707172d4b4a7ab40636bb84fa80fe6d8a2e077","sha512":"ff4b40299ae4a98d38ec74c26176ffc26502e3e17ee3a610e942201e6fe58600b8f166357f5bcbab0f1c623c27a2df92fb8cd2628ce5ae9e718552538bec63db","ssdeep":"","tlshash":"38f0a34666f49a8b806d225fd759550175d7013396ed5f11f1bc0b37935cd8e98003c3","size":447,"data":"","first_seen":"2025-12-17T17:11:28.992872Z","last_seen":"2026-05-04T13:08:44.317077Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useGetExitDetails.DayDbfl0.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"edc2593b136efe29e8ee97a23d5759f2","sha1":"86702cb096396f9aebfdc1778988ba1d0417894c","sha256":"1be35b48b8735daeb56e6d339a2038b7ceb2b5a861c9b3b38a3fa09988b44c11","sha512":"243e7436cc8a5d31681fe55f4e6eb41cab89998a67494ff42ba88d4f314cb4c39418ce8c42992a56e404d0c0117d85fdd0baae48020ebb89d4d717914bff762f","ssdeep":"192:iWQIlB2Vh90F+TGCILqhayShmzxr2TA3TN9T4Iuh2DYM7awyPoLD/6c5TkV:i1hVh90F+TkLqomzxr2M3R90Iuh+YSaP","tlshash":"4dd185d0e0c5d5fd0ade59da65a0d131b3244e07388eda24f06a8c2967fec47a1b770b","size":6653,"data":"","first_seen":"2025-12-17T05:47:47.278553Z","last_seen":"2026-01-08T06:11:29.214104Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useImportImage.-cjdXFow.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a1e212cd6eb98f0bbd15afedcd555cee","sha1":"8ef34134bec2fc2b35f17a4bbec2a1c343b407e6","sha256":"cfe53f0bc801d9354db27864e5edbecf34c0596bf24f88a8fc25dd1acf46a9eb","sha512":"a5ed50a1dce5696b8a1fab224555f84827a227c4843998c32ab9c8978bdec792125f4f7789d48112481a13f8ac5b0752b200b586e41fe95a384eee67c591ac1a","ssdeep":"","tlshash":"e80115945ef1d71e802823ddd13c300267884467a7ccdbe5a37c4f3a57ca58b6550b13","size":723,"data":"","first_seen":"2025-12-17T09:40:52.802651Z","last_seen":"2026-01-08T03:12:00.599365Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/finance-survey.6DZhsCs4.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1bb0f860b5d0acd64386f1a934312157","sha1":"fbc49bdac12ab4923b60ad4c75fc88d3deae5a45","sha256":"98447258ee545fb2367d8f741b329a3c5a0aec8b23d590b87502cdbb1318020a","sha512":"a9eba6fed1aa3d3b8c62e26393d3d39f6db0fc2fd8b31f4adae51f0ad63fa07a9548e382ec7c07f1a9c33e6db62a6f856cdfe473e62d8f9a31d7067740110bf0","ssdeep":"384:Ua7TVFMjSC+W1RfE686f/6IvtpjXPRS4rXLLOm40vIITiby0knDhdfF515b5ILZw:P2iW0kjf+lIAELIlf4F","tlshash":"bd822c9fe36006fc44c7cdf8d5651422e63e4ab9a148caf0a17ed5b906e2a85533fb07","size":18709,"data":"","first_seen":"2025-12-18T17:35:57.713238Z","last_seen":"2026-01-03T21:05:26.071703Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_26.VIV8BA0n.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"4392d767d41cd763a75e66ac9df27b5b","sha1":"9886438be45716d2bb1ee536f69fe224e77c4638","sha256":"aa09cab2ca8c7c0930d4cb7126e9998840482849d0738f0be224954060aff107","sha512":"34bbe06442a1173e31b47cd24f7f7e7f538ccc0b2002280d7aba2defe3253e79ed4ca8549c13e74e3b6931aa971c129ece6a3959abb657e67a7aa97cb615b8a0","ssdeep":"","tlshash":"5ef0dcc452b06ea981b9534de24b128135644123029c8f01f17e0f7b035ca8e84043c3","size":447,"data":"","first_seen":"2025-12-17T17:11:29.086029Z","last_seen":"2026-05-04T21:01:28.717835Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_34.CjV2BMS4.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3a2f46bde5af18ff4f0da7454ac7e480","sha1":"b18cacc9e413b0b23990fefeb69556939a1c7560","sha256":"6cdd3bb7dfad6dd2c946329b879a32fffa4dcb1f83cf638623ff831610967d50","sha512":"99a831336bf6bb8c7714485955e2a976063624d9206092419a6bada70e0916938182f3137d5d9ce8714582f2999aeef7a65e648e2b272c8327743dbd88d2a67f","ssdeep":"","tlshash":"a5f055c057f16d15403d139dd2da280532ec407346ec0f22f2bd4a3a43baa9ec908383","size":447,"data":"","first_seen":"2025-12-17T17:11:29.065641Z","last_seen":"2026-05-04T13:08:44.308866Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useBack.CyoqrVco.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"813f61471342a4d91e8a6e8f5ae193b4","sha1":"759d4bf097985c6dd62705986004dbd5697ac168","sha256":"959ef87868f4535b6e300c29f4d1e4dc6fea65dd597880f9d9c017c3654c9f8b","sha512":"515dee70b625098560979f845e3a9fd07d04cf97a0d120f200df503695dd18413ebc11adfd0fcfd4ea2bc4c8cdda7f4baec818b64da39e4aba43bc36d6ef0034","ssdeep":"","tlshash":"4051a4dd81f145b0c1d95becd265f2323669117b399daea0e26e5e34033dc8780e1b76","size":2539,"data":"","first_seen":"2025-12-17T05:47:47.222263Z","last_seen":"2026-01-08T06:11:29.259444Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/cookiesLogic.DqpEH5La.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e371e914226fa7d9ff2a2e01b6458caf","sha1":"f2702c58112961e30edf112aaa13a5c2fbed0072","sha256":"8b6e3e2dbbddb24be43ccc0e3dc73794b2017f95de34f43ab3257f717259527c","sha512":"841734c4d07949b525c1942f83fb223aff270f3b97fb96484de3c2894ee931da0332f0d2774e6466ca1225ddea1521871969698634b1d2772388903b9bddaba2","ssdeep":"","tlshash":"07514287b530a1f8418aa8d9db20713a6371479636d4c5f8e0a94c2017e9d8b6f3f32b","size":3136,"data":"","first_seen":"2025-12-17T05:47:47.228547Z","last_seen":"2026-01-08T06:11:29.271965Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.DTghoocc.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b11a3f048fba015d1a61f02f263ab826","sha1":"548538742d8ae55456b716cbd721ced0c07036dc","sha256":"9c576eb5069aa32ff7b1ecfe00a28f5d5587988a5c555989d7ad95275780093d","sha512":"1ffeb74b5ec6a1444f84d2794f79bc7d48d2981037c13016eed38774a07522a66b079dab52a848d3ae48c179f6030ecc4532ffd65a805bd1390fb89470ddcb9d","ssdeep":"","tlshash":"4e31644862a057bcc41e149af1ac500abf13736ed74d8ae1f0bc8635138ecc5a606b82","size":1855,"data":"","first_seen":"2025-12-17T05:47:47.230842Z","last_seen":"2026-01-08T06:11:29.307428Z","times_seen":176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_17.DerJGWkV.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e942e7fc67e903b537554a86c97e53d4","sha1":"81922a049a738bda60fc5b8c29c4991379e6c347","sha256":"367c271af72084962640bfca9958c33c029cc0fbb7ffdcc3657b2e760836c54f","sha512":"5a2b188d84f8086306381d80d7151900aa3e55ec552c1e49c940e0752f1801fb6a34fd5653d7ff8a0c25347b75293e52e4440612925237cd5409e36b6ea5c513","ssdeep":"","tlshash":"d8f0dc8463f45e09416913dec351304275b9012a02cd4f42e17c873e43fedce6800343","size":447,"data":"","first_seen":"2025-12-17T17:11:29.011603Z","last_seen":"2026-05-04T13:08:44.351798Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_24.DpaSnjK0.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"db6adf6a2dfd6975d1204debc62c5062","sha1":"88bb33905a9b3fb9fc49e8f151ff0290901ddafb","sha256":"8c77a289cef6fd3550bd22be011d5b4a0ace061b544845cc17ba7cd7ea36c47f","sha512":"f6274ead1a2a1d744e0bee3a6756fe242de371a23080fad2384eca09261fb628f7d784d474c3a8067915a867365e5ca96a126f224a79cadca0984ad6471dd8df","ssdeep":"","tlshash":"f4f02b852bf44f06402e22cec71e211175882073a3cc1f8ad2380bba43aadcebc08343","size":447,"data":"","first_seen":"2025-12-17T17:11:29.047634Z","last_seen":"2026-05-04T13:08:44.41491Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/OnLoad.Cvo0tegR.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/OnLoad.Cvo0tegR.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-4691\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18065,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18064), with no line terminators","md5":"85ab446e210f3a2ce7c7fc2f5f4895ff","sha1":"7f9dd78e517cd596fd287282097d3abc3323d9a5","sha256":"08ce412501e1c75b6f08b13cb67ed211e36073904afbc63ef4dea2608836719a","sha512":"c60c3d797df539de3ed130dd4ea44044b7b0fe5b5621891c62a1adf84811107a712dccb9ab8053e57657956057dbbde1d1bfb68dddb346d16439173f5ca9fbbd","ssdeep":"384:GFMXs+qaCg86fVwxaZ4vXV5/Hqc78SbLJSvcmN42WctjzhZFeors+xjO9TnYSLuy:IGJFZzhZcors+xjOVA9CC9I8yaf6oL2X","tlshash":"59825cccf183a43882979cfce06b5022fa3a2904b44d8985e28dddf414e9549d17bfaf","first_seen":"2025-12-23T13:03:48.008614Z","last_seen":"2026-01-08T06:11:29.251882Z","times_seen":267,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.CJc_DGo0.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/index.CJc_DGo0.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-3156\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12630,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12629)","md5":"1ab5eb2b4e39fe18616ae6b2bd2b46e2","sha1":"59671ba63e2aa56fd4a3233bdeeee89279473600","sha256":"c52738000c0b33593359fe4bcd051495bc5d42eb1eff32ffdd63232ebe751749","sha512":"d43e82a47bb9b23dcfaa98ee07a190fd93ef68bd5850ee6ba3916cff71743c300fdb9fd9e984b68164201bc6838187077dfcc3911177d546cbcb4aff99f46fef","ssdeep":"192:a79zibQzpFGGYwqzEqlw/G9Y6sXhLACFmNJTWewgSaaiSh86ZhpMNN+8CykQnw7d:iGQzpIzl1liGS6smJTWFh86ZzM+DyUMK","tlshash":"3042c79870e579760697197a813f060bb33a282ab88dc170b4abd9e47df840c5177fbd","first_seen":"2025-12-17T05:47:47.240355Z","last_seen":"2026-01-08T06:11:29.296416Z","times_seen":355,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.BxM4jVp-.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/index.BxM4jVp-.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-28a\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":650,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (650), with no line terminators","md5":"d822060ba1d3ae3aa43792d37006a663","sha1":"f034f9b1ec46f006b108005822e3d8ea6275c56e","sha256":"7c43394841be7a55e63617419d7e52dc697ad6decc07a42fc9a8ea1338e2f24c","sha512":"1f6a9209ed8d345bedbe6449f535d3824284281349adbb530bee7c865fda64f3c2e42e3731d2f6bcbe12dab5e0d8766f8284ba88bacd010ea13dfe395be18110","ssdeep":"","tlshash":"17f04e829ee82f2a6126039dc55707b62a66103987cd5b01e27dcf7db7e99cf5018393","first_seen":"2025-12-17T05:47:47.28952Z","last_seen":"2026-05-14T15:03:20.512312Z","times_seen":1605,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useImportImage.-cjdXFow.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/useImportImage.-cjdXFow.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-2d3\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":723,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (722)","md5":"a1e212cd6eb98f0bbd15afedcd555cee","sha1":"8ef34134bec2fc2b35f17a4bbec2a1c343b407e6","sha256":"cfe53f0bc801d9354db27864e5edbecf34c0596bf24f88a8fc25dd1acf46a9eb","sha512":"a5ed50a1dce5696b8a1fab224555f84827a227c4843998c32ab9c8978bdec792125f4f7789d48112481a13f8ac5b0752b200b586e41fe95a384eee67c591ac1a","ssdeep":"","tlshash":"e80115945ef1d71e802823ddd13c300267884467a7ccdbe5a37c4f3a57ca58b6550b13","first_seen":"2025-12-17T09:40:52.802651Z","last_seen":"2026-01-08T03:12:00.599365Z","times_seen":135,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_8.BAnuNPHy.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_8.BAnuNPHy.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1be\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":446,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (446), with no line terminators","md5":"3b7a6ccc9c35ee03d2d9aba18f997b0a","sha1":"fe4c7a5c50fb2720d6c7b4ea54c0e5c1b58404af","sha256":"7b6328372c8e1a2e3e3e4e2dd581f1f1853138cb0d491f9c4e6c5b6db8de26ab","sha512":"b5151f19dafce9cc80bb7b639b1de23a26ebdc7e93da6cd3ee6cdd1f32958d21065ae1584a121815f0f1bcdfe7e8628ff4ce4af82c6233041352fd5f555b4e97","ssdeep":"","tlshash":"b8f0ab9497f00a14902d23ecf25b140236a6153352eddf91e3bc463e134dfada918383","first_seen":"2025-12-17T17:11:29.11263Z","last_seen":"2026-05-06T13:02:57.288439Z","times_seen":113,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/client.CELBrmqM.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/client.CELBrmqM.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-68d\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1677,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1677), with no line terminators","md5":"51664e15be7ba7d96d53618a66b65e5e","sha1":"ffa87cf361c9d527328b3bcd3e10cff29af4c7b1","sha256":"de014dab274e101fb6597c78fc2a54d2fd4f0d6ba5e8b23b3bff1408409973b5","sha512":"77e7158c32b2dad4d41a84403aa994e406f51b7c7616606283fea849f0753f9559fe76b77854bf5f375dc806efd9eb15c7cb06018a038bdc5a702e1281784179","ssdeep":"","tlshash":"a631b6e8b1b045b000af2fad8a5512325df811a625cdd990e7accebc0b2ee4e5995f07","first_seen":"2025-12-17T05:47:47.249398Z","last_seen":"2026-01-08T06:11:29.246028Z","times_seen":287,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdntechone.com/stattag.js","fqdn":"cdntechone.com","domain":"cdntechone.com","tld":"com"},"ip":{"addr":"104.21.36.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdntechone.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 12:09:26 GMT","end":"Tue, 03 Mar 2026 13:06:54 GMT"},"fingerprint":{"sha1":"20:CF:7E:0A:3E:60:76:64:CB:13:89:D1:7A:4D:C6:25:CD:DC:95:B7","sha256":"86:F2:8E:50:0F:AF:F9:1A:C3:2C:76:6A:A5:AB:D9:74:D8:CB:8A:FE:B7:B6:76:80:83:09:2F:8E:9A:2A:BC:74"}}},"request":{"raw":"GET /stattag.js HTTP/1.1\r\nHost: cdntechone.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Jul 2024 10:23:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nlink: \u003chttps://datatechone.com/\u003e; rel=preconnect; crossorigin, \u003chttps://datatechonert.com/\u003e; rel=preconnect; crossorigin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rx49iShiBigt3Ak4w3jMjQ%2Bag7bT4z1cRvliBOLb3P5JXLqRRSMxILfZuQKo12QT92uGLQH3DNGc1HYBzGPCJcPnNwFH%2F7pOBA47HQ%3D%3D\"}]}\r\nage: 744\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"668fb2b6-406a\"\r\ncontent-encoding: br\r\ncf-ray: 9b61be80af4db4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16490,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15840)","md5":"80d7433dbc2b7708f2fa4e6a9943a116","sha1":"350c6e2bb1cbd07de260856f918f4ececcd96894","sha256":"54862ebdcfa23c67d6de25543e0b22014de8fd8d3d3aed09d615981bbdd76251","sha512":"6c065d9d4d04b7c4a11ae28751a711a064410055e1db34daed1c74d98f0257a304481bbf2af96b0845075f43d43bafeab34a49241a2a63f967fc0867748f6052","ssdeep":"384:WDC77FbFjbRN8h+eYFCatOJ39BEisNWP7gDhlPQ5EKQIkT8:d771Ff8h+eYFC/JNYa71","tlshash":"ac72e8c631a474afc6c292f04a7f092ef768509060be2986c1d5b4ec5ab51cee7c3f95","first_seen":"2024-07-11T14:08:01Z","last_seen":"2026-05-14T15:03:20.553341Z","times_seen":9446,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":38,"dns":45,"connect":1,"send":0,"wait":8,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdntechone.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.CvBVRHBa.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/index.CvBVRHBa.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-d7d\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3453,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3447)","md5":"cf38eaeed45ae95dcffdf0531f718d72","sha1":"9f88f7626b2c3f29c67b207f4db1c70fb3f81a4f","sha256":"23581cafe738c2b9e7c3d87c3ab52bb2a59c6d000ad15a1dacf2a3df0bb617d9","sha512":"ebec7826fc50d0defe0f8bb1e5c42d4f9c8ad7b59b8adaeadd11d1ccb2e1a35bd1afee65e9b7ff1ea565d189540e375049f1ef47b191f3f7c4cd4321e8232161","ssdeep":"","tlshash":"fe61c654b25123fd913784dae9cf858d3906b761de0e8f9571fc616a03cc089b709346","first_seen":"2025-12-17T17:11:29.124847Z","last_seen":"2026-01-07T21:45:09.717231Z","times_seen":109,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_10.CmDuwn9p.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_10.CmDuwn9p.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"0446cb61b1da5e18ee188caa2a990c78","sha1":"4c5561b66c2df67b3e938ded2a2226ff30918989","sha256":"8797a9d8aef1f0f6a9a568b9ade04c7b4f86378548a1971b715b62ed0cfeda35","sha512":"6fda86701d781a8c4646ab084af2e2bd43d553038463521a71bd6089bfb04ecc7d5f6e8a8aa612abf212ef2b5966f844b20a1d8bd374ae162d2292c9cca72c52","ssdeep":"","tlshash":"f9f05c5557f45d494129339dd291546933586463938c9f61e1fc0b3ee36da8ee940343","first_seen":"2025-12-17T17:11:29.09339Z","last_seen":"2026-05-10T03:30:41.630988Z","times_seen":97,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_17.BIB9WIer.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_17.BIB9WIer.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"5229691719684ed1543bbdb565417163","sha1":"234809c9d69a8a33051254700df55177ac3e1669","sha256":"7f9184624ff87c4c99df9a2fd14cf400583f3d5910c5b572e8d2381824ca6a9c","sha512":"1ae6b837ca81db7d24335507d4375eb77930b5f049dcc93d7b242eecc931b66e9c13df46596c1da46f381b398f0ff29d2083ae14c21259c1e2ee57a86771d285","ssdeep":"","tlshash":"85f05c5557f04e68c03632ace34315a13564017347dc1f93e27c463773a999eea002c3","first_seen":"2025-12-17T17:11:29.100101Z","last_seen":"2026-05-06T13:02:57.306093Z","times_seen":105,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_18.QzoSteOS.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_18.QzoSteOS.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"474adaeb2408ff55cabfdadce0966d6a","sha1":"5a81eab1f8348a9a3746ee1b1d34075066252998","sha256":"235742a4d4ed1e3687f23d2e06b742a9909b2a440e3cf6d9a097c8be930b9fe1","sha512":"42c21981733039489cbb6656919c4388ec9245d6dc28e0477ff6e2da4f8716d782757637f5b655db1ee80d0e7860ae5d5cecf2df29ca66a6b69f893ca66d1353","ssdeep":"","tlshash":"bff05c86a7f4ae04862e179ec296150a355a213343ddcf51e23d0776537ce8d4d24743","first_seen":"2025-12-17T17:11:29.099282Z","last_seen":"2026-05-08T21:02:09.331474Z","times_seen":104,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_23.BTcjs5Uk.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_23.BTcjs5Uk.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"b95f04927387e64b269fc7308a8d5b6f","sha1":"235e8769c76a465b12dfefe9a3a3232221837040","sha256":"67adbb7ba2edbc27ba98be69454920521dc4c68abcee23a43bcb08fc86751800","sha512":"d9807c127ab0aaa7b34d066f4d28058dd0735b5d9f6eb52925f76698505782dd162491c5c05796a05454fa210554527b41b3a0c8c718b7d9f26edcf7bff1d4bf","ssdeep":"","tlshash":"edf05c8b57f09e0a806f539dc3561a8a3ad4102352dc5fb1e17c073a13b9a8d8604343","first_seen":"2025-12-17T17:11:29.102578Z","last_seen":"2026-05-06T13:02:57.309189Z","times_seen":92,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_41.Dr8wtJbU.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_41.Dr8wtJbU.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"5991aef7cc0ba86add579d5fda5f059d","sha1":"4b13c7a9b061fb9c7975e07fcc5faf4ef20454d4","sha256":"09b4b33e9e34ca79c3128e9f8e77222f251be1e43f2facd7bfce3a7d728e3b59","sha512":"0a590ab95fc6e071691e129402f000bd17b54d142d6cc5882e2c5cdaf598488a2489803618b6a608372adc0524c9822bbce0f336cd96d8b654b9c06e890bbd61","ssdeep":"","tlshash":"f1f0a3d85bf81e19812513ece351200172bc117397dd7f51d2380b3b936e98e9d00783","first_seen":"2025-12-17T17:11:29.04587Z","last_seen":"2026-05-06T13:02:57.264334Z","times_seen":97,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/finance-survey.6DZhsCs4.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/finance-survey.6DZhsCs4.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-4915\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18709,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17457)","md5":"1bb0f860b5d0acd64386f1a934312157","sha1":"fbc49bdac12ab4923b60ad4c75fc88d3deae5a45","sha256":"98447258ee545fb2367d8f741b329a3c5a0aec8b23d590b87502cdbb1318020a","sha512":"a9eba6fed1aa3d3b8c62e26393d3d39f6db0fc2fd8b31f4adae51f0ad63fa07a9548e382ec7c07f1a9c33e6db62a6f856cdfe473e62d8f9a31d7067740110bf0","ssdeep":"384:Ua7TVFMjSC+W1RfE686f/6IvtpjXPRS4rXLLOm40vIITiby0knDhdfF515b5ILZw:P2iW0kjf+lIAELIlf4F","tlshash":"bd822c9fe36006fc44c7cdf8d5651422e63e4ab9a148caf0a17ed5b906e2a85533fb07","first_seen":"2025-12-18T17:35:57.713238Z","last_seen":"2026-01-03T21:05:26.071703Z","times_seen":16,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.BCm5wNfD.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/index.BCm5wNfD.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-cea\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3306,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3306), with no line terminators","md5":"7b59ecd7bef83a57074000acf793c0b6","sha1":"29ae2a629459124528171501b450d8da37fcc0f6","sha256":"5243a21fc1915d41b77d90a1f03c1a58c8c9d6a84f3b2b2d044e14489220da9d","sha512":"c5541548c234647deaed6059929ace028fde48a726050f4e38464c660946d7dc028b883bba42eccb4c0b11643a1b885b3559ae1d9c77d15284c6534fe047539b","ssdeep":"","tlshash":"6e6144b7bdbbee96891a8304a724260f13c8556301dcd3e4d934c52823c968657eeb3e","first_seen":"2025-12-17T05:47:47.26089Z","last_seen":"2026-01-19T10:31:19.227686Z","times_seen":466,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/cn.m0Ne9LjF.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/cn.m0Ne9LjF.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-6507\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25863,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (25862)","md5":"4c6966b8a17a0c862329f3da287c1f3d","sha1":"743d8b04dcc2fc14d83b3c3eb099096c32d4eaa9","sha256":"29fbefb110ad9232727a245dd54f4ac07eb427b09b82bd14602c66678096bf27","sha512":"c8a692054c716f20c1ff22c57e9769c34fe730e807d33b3ef1522a599c7c241f64991274403ae5dfa5055a99dfbaf01918586752440aed673591c37539e6a1c6","ssdeep":"384:S6OvzhflxqBp9okK5k/RWfJcFiL21EYFf8IiUxXGkU6ik6jH5ditiCbPXdjzv/M7:S6Ovzfx49kk/RW/CxXfik6jH5IfM7","tlshash":"f4c2c726750706be2aef93d7f45caea5d8352602e0498b4ce3974f32cb45be9114ab0d","first_seen":"2025-12-17T05:47:47.288537Z","last_seen":"2026-05-14T15:03:20.499292Z","times_seen":1605,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.DLaR-eDJ.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/index.DLaR-eDJ.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1b2\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":434,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (434), with no line terminators","md5":"ac5e244cd416cd51e0783240b14bcbaa","sha1":"6cbf6b3bf7f67c7133305aea4d39e2df61239c25","sha256":"a0cb77f9eb8d10f3b078e83ab40f5ae15bb9e3b42f4a54996d2ce7fef9989da4","sha512":"3d48d7f733476978dcd18a16d523f03b06d9429da421d8e029d00e04e7bd4b09fea36931bd5c6efe9b25f82e10d031ed7b5c962c91a0e390e4c5a7ae332192c4","ssdeep":"","tlshash":"0de0e5c69ef00bb58216279fd91a550131a5003b87dc4fa1e139433a1399e8d9908387","first_seen":"2025-12-17T05:47:47.275747Z","last_seen":"2026-05-14T15:03:20.536708Z","times_seen":1465,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.DAr48a7e.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/index.DAr48a7e.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-aa2\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2722,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2722), with no line terminators","md5":"9d8f1074495bd5a338d1b10d0597393c","sha1":"47515833f243b4e87bc46727cbeec674379efe99","sha256":"bcad4ad79c05777f3c59a61aca0f87cc6ae305c911fb2a788c81976fd1d1746c","sha512":"0af4a5f5263d73c39b1ad21ba32b038aad14e1d05855bb12b912622fbb51b2bb90d8c14804028e4262b4e897737a9f0ab484aeb5ff6c7f543125ab8b1243c420","ssdeep":"","tlshash":"8e51a78fd93841e2586e88efe0956872bb3623775284ef60d0ff5b361718c9df614602","first_seen":"2025-12-17T17:11:29.10647Z","last_seen":"2026-01-03T21:05:26.10583Z","times_seen":11,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/detect.B534WVtb.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/detect.B534WVtb.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-eba\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3770,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3630)","md5":"892a12cb9b70ec432aaa5fff67b23885","sha1":"4049c4302d915e77563c4be4741fd581cecabc91","sha256":"cab78e2488a3368d732d2ff71843c521ce14f5de3fe781f853bc755e1f58b38a","sha512":"e635730075e46af3b47f89f87cf6afba928ff14dca8406c69e609fd645ef730f1ec490dc42dc7fa0163bddfcaa53e3f34f53e50239755089727f667829d55a0c","ssdeep":"","tlshash":"0d71e70c426d206880dc8aff69324e8cbfb5605a6a8c6895fcab4ced164eddd811f57d","first_seen":"2025-12-17T05:47:47.28417Z","last_seen":"2026-01-08T06:11:29.263353Z","times_seen":232,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_22.V8JS9w7W.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_22.V8JS9w7W.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"bfa735f4da8cd2d4cebd013d8a1767c6","sha1":"a0d1016cea7bba95edaf11c3c6be00d99d851333","sha256":"baccdbe163dec20126db3dc9bdb1576e00321f67e55ec0af6e3b41b1483a2684","sha512":"52254594f3865dffc045728cc43072a0796211e763e1fcd71fff1bc7f6274517d2f85f3a56be5178b46df0d78a461fd1bf557e801497d41c0be693f6b4a432b8","ssdeep":"","tlshash":"79f05c5467f17a57802a32ddc2415501355821239bccdf11e1b8067a63aeece5900243","first_seen":"2025-12-17T17:11:28.998631Z","last_seen":"2026-05-10T13:02:40.395508Z","times_seen":106,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_5.DxH7B5uN.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_5.DxH7B5uN.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1be\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":446,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (446), with no line terminators","md5":"4276fb570cbfb2b8786efe552701b897","sha1":"33e60b5bdc466d906106d3f94542271a88112528","sha256":"f8688786073c43fbbc4c1676e1df2e056ce1bce722ca4c0a146347811d07372a","sha512":"d4f5e77fe2b4d6350c9435171cff307623b42adea0aa2e8bb0dc5431e42eb1a77f77208d96587a82e275999df63ee433d9c1533ccd54752740062b2d790e87fd","ssdeep":"","tlshash":"95f05c546bb49a56403523dde54299017199003212de5f11f3388b3e53e9a8e9800387","first_seen":"2025-12-17T17:11:29.043918Z","last_seen":"2026-05-04T13:08:44.446651Z","times_seen":109,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/zones.DGzf7q0e.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/zones.DGzf7q0e.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-32b\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":811,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (811), with no line terminators","md5":"45be6cc6470ea2fa88ed5d2ff614a5cc","sha1":"284c9aa4858f70b98bbe80d71e9e4b2dc787d747","sha256":"cd6baf094f574806b0ae8c95b6318677f210a9c79e06867af6718f4c88aa1915","sha512":"c90fca9ce0ebbffbec482d46f266ce9bdba85427750e9e85a000292ec5ebbd092718cec02082fbd06eec959686a8ccb8d1e6fffafb1b1b324a58bfd6b1438344","ssdeep":"","tlshash":"380119c96af2a2a1c21e0acdd38d21177098483baf8c6b41f12f0b3833648ebd129301","first_seen":"2025-12-17T05:47:47.269095Z","last_seen":"2026-01-08T06:11:29.22574Z","times_seen":355,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/checkCrossDomainCookie.B0eFeZfA.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/checkCrossDomainCookie.B0eFeZfA.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-570\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1392,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1392), with no line terminators","md5":"8004d6c62c2a22173599c178d561a81a","sha1":"80fb67d051faed21647b9457c2ff91c2c7f56241","sha256":"c93f628613ad06a1b35002f1acd74d851fd8437c64fb7f9e76fbcf15875bb30b","sha512":"43179b2faee451bc20efe7574a77f2aba516371dede310ce5a1724f72b641b0c179a221b6bec861d2cbcd861eb484fdbd1005ae46e0934f3f3a5b1b5f07b3b67","ssdeep":"","tlshash":"9b210281b6f2e0bc06b653dce0267742b5114a3663cdc7d0a2aa02352ed5e9f9c3161b","first_seen":"2025-12-17T05:47:47.233709Z","last_seen":"2026-01-12T12:33:46.062749Z","times_seen":393,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useStorageService.Bh3L-ch2.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/useStorageService.Bh3L-ch2.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-6f9\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1785,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1784)","md5":"57db98167c3243b1f4fe66a1aae9e367","sha1":"cfe60432d15b4253a7303e5435231dfdc8dec46f","sha256":"c3f2cf3e00802b7684c1ff356883cab6db28b05fd4da4deace945d98b77fcee6","sha512":"25ff2ec6bd2a664903215439eb1a0439899c2ffb7298bb45bf8bb15c2731e03b0a5c7185ff8869322a8856755ef296d42f704e066f1f35bc5f8abd8f1ee0a74a","ssdeep":"","tlshash":"8b312e8d2ae22575815e04ddfa373190f4ba0162714e8ac0d02d4e763ead8cbc2b168b","first_seen":"2025-12-17T05:47:47.241216Z","last_seen":"2026-01-08T06:11:29.217503Z","times_seen":323,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/runtime.CVWB_fgf.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/runtime.CVWB_fgf.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-101e0\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66016,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"369f98b7646224d3c3efdd3d7a8b2be9","sha1":"314c47e64282f1e798b4f71d56ec4bb779c52c9d","sha256":"d3d8c0043cd1e3542cc06a8ea68c533bae2d3af8953d9e3b7c11c0246869a23c","sha512":"26455acafa7c7bdca96c29d604b27b9e8169c49d879463596d2a14d86ca5939fa3a3227b002effb1f457d5c75694f48edb7f7f5d8b3820d95e6d70449a14ca08","ssdeep":"1536:FdTPXzGOUC9IpWrx1cJsOUEQXy6GW6AygklBy6TPjOCqmzsG:jT9zcJsOUEQXy6GW6AyxlBy6TrOCMG","tlshash":"8e53f8893692b0184ba954d614ba0043e36d7e6c714d98e8f4fe94de7b9cc86f273b34","first_seen":"2025-12-17T05:47:47.246134Z","last_seen":"2026-01-19T10:31:19.189618Z","times_seen":243,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.HzLkspT7.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/index.HzLkspT7.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-2987\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10631,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (10631), with no line terminators","md5":"9f44bb1ed04ebe1420a33f8da328b10e","sha1":"99c9bc1054d4cdc5e285ea05c04d021fdc2b660d","sha256":"c64a8f97dac537bb3023b679a1bb32187533225534c4567bda3877388e0af59f","sha512":"2baac0f243e6d2bfd26313105b5773244bb2e5ad04c848c799422dcde771206b8361e296f763f0bde9d67e3ca273ac51cf6f4ecd188bdd5e0efbec31a2a1ef2c","ssdeep":"192:kSmNUtsXMMWL0PbaOFpAV2wczia/WaZZg/:kx+aXMM/j52Wnvzg/","tlshash":"7422262bf72a3889f0681afff51c3c1c976cdca417b784a0a6ad712291e005d7b3586d","first_seen":"2025-12-17T17:11:29.001219Z","last_seen":"2026-05-04T13:08:44.402566Z","times_seen":34,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_31.CpXU0WvX.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_31.CpXU0WvX.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"eac1c7f0c1e629748fc3aedab6b9e369","sha1":"57e266dcf08bcf8e490874cfff981d4628ea253b","sha256":"1077d1211cc73e74f6c97b8d4442efbdbba66ec0bed6c465eb955263f195fa01","sha512":"fa8365f9e79045bc7aea0a512c223dc273b7c7a941e57c813b77bc0f0c98bafbf62588eff538e1120bf34170d96afc45a481ca1a3a540ef2e5047b7f960f8bf1","ssdeep":"","tlshash":"c6f05c856bf25d1e4235539fe3915202ba590023538c1f1ad279063753acdcfc900743","first_seen":"2025-12-17T17:11:28.967947Z","last_seen":"2026-05-04T13:08:44.287193Z","times_seen":99,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_6.Dy159If-.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_6.Dy159If-.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1be\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":446,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (446), with no line terminators","md5":"2a31db50aee7a1c725c17c5ab5ef0446","sha1":"65a9276821ce705867863ffc4d4a4db72230ee5a","sha256":"37900a23dba49c6a7bb69e7ed3ce7a1a9be1d307799a686269b8dc3d8b4cf0be","sha512":"f5cb28abe140c5538477c3f7a016da2056a65720641a79eadb032806250e5d0252264dcf405db0b1b901a6b4873e8e037257ceedfadb0f551488f4610d10bc6e","ssdeep":"","tlshash":"37f0a348a7f06d0a802d12ddd66661017758007392dc0f93f23c0f7a136fb8d9c11383","first_seen":"2025-12-17T17:11:28.980018Z","last_seen":"2026-05-08T21:02:09.365212Z","times_seen":87,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_16.C0dC2tYV.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_16.C0dC2tYV.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"c19c58c5059d5834a593d8618d9c26ef","sha1":"4472d1cf8414cdf0edcb42eaf59076c3c35c28c0","sha256":"ab946f3f4f1cefbff1eb7c122200bd7f7c17f7b132b2e356fe7aef3d91b1642f","sha512":"028947e83b87e55681991b98a5544fd654fa036a74bf0d6e04a9c257d5722cfe32e2a4bd9555ccbcf3934ba2f26f987abc95114b28a30e919668979498c307c4","ssdeep":"","tlshash":"0df05cce97f45f468125529ed68675813154426b028c2f11f23c073653adf9e5945743","first_seen":"2025-12-17T17:11:29.003002Z","last_seen":"2026-05-04T13:08:44.301168Z","times_seen":92,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/searchParams.BSOEvk58.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/searchParams.BSOEvk58.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-73d\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1853,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1852)","md5":"083bce88821221238db85b096cdfd978","sha1":"3acc8f43432c6a5fd3d99e4b39fd5d8898ff013f","sha256":"9bf3629cd975e4de7bcb3d4b8a598af44c42981a594f910fbdc851c6b1dbadb5","sha512":"e3cf36072d01334b0b727da7714d61b1398ee68b934d9cd85b6b335b614ab28328d720eb6999974c25a288052421f8655db4fd44662b32747357661bb3a7dd2d","ssdeep":"","tlshash":"f331b74a43f5c1eb50be0aec80162760713d01277a5deaf5f2380f72625dd4e8816b55","first_seen":"2025-12-17T05:47:47.258569Z","last_seen":"2026-01-12T12:33:46.069371Z","times_seen":393,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.DTghoocc.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/index.DTghoocc.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-73f\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1855,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1853)","md5":"b11a3f048fba015d1a61f02f263ab826","sha1":"548538742d8ae55456b716cbd721ced0c07036dc","sha256":"9c576eb5069aa32ff7b1ecfe00a28f5d5587988a5c555989d7ad95275780093d","sha512":"1ffeb74b5ec6a1444f84d2794f79bc7d48d2981037c13016eed38774a07522a66b079dab52a848d3ae48c179f6030ecc4532ffd65a805bd1390fb89470ddcb9d","ssdeep":"","tlshash":"4e31644862a057bcc41e149af1ac500abf13736ed74d8ae1f0bc8635138ecc5a606b82","first_seen":"2025-12-17T05:47:47.230842Z","last_seen":"2026-01-08T06:11:29.307428Z","times_seen":176,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_38.CE9tAGuY.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_38.CE9tAGuY.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"82f8c24493d59c40645c7144af466721","sha1":"b2f434f340ba4a795664508d4f61135f77cb9713","sha256":"c98e0b5b47a306375fb0c77e34129d46c27cba57192501fed822fccf8af5d46f","sha512":"af406fcc784e3a633b9b267482aa2001f3b98134d678e15b9a36457e63b7b010fc9b69077c718d185cbfb9384d96f77830d071c44aabb51034890cec4f2faadc","ssdeep":"","tlshash":"acf0559657f43d1c827912acc3a6200272d8907382de4fe1e3bc063a83a8fdb5d18783","first_seen":"2025-12-17T17:11:29.018194Z","last_seen":"2026-05-04T13:08:44.348927Z","times_seen":96,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_3.Y_dGtqDu.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_3.Y_dGtqDu.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1be\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":446,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (446), with no line terminators","md5":"5448fcfd71f2f05bb262a8c398261b81","sha1":"67cebd4560c504cb08e115d2bec10f72d2c521dc","sha256":"c3145a3ae1ced1288b010a5194e781f8833ef1b2d65805f3d70a698e3a669d9f","sha512":"3db16d47799e8d71eb4abe4ecab620babd543df8a2bf783fddda777e27d66c7b152ba0c9fd22bbdd6364908206188ff1cde04f8ff0571ac78b02068021258604","ssdeep":"","tlshash":"faf05c4277f59d55402512efd5a6920175954276439c0f11f23c0e36d35ea9d5920b83","first_seen":"2025-12-17T17:11:29.002135Z","last_seen":"2026-05-08T21:02:09.364635Z","times_seen":87,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_13.BwQIzDLc.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_13.BwQIzDLc.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"24d92beb29e1dd5997f174f1e7331b2f","sha1":"c768478c8c36ca59e7b215ec5711d6a09659f8ec","sha256":"913277a4c7db50935b196163f0ae26abd4c34324b84ac36ec4b19ca28e0fcd97","sha512":"6d7f992f35ebf65836a4b0474773e2bf1d18ea8aa1d4f758da83676b36979613093234f37d5928541f9e7e52f0be53de5b9cbf37bb0b0a200b05236e954d8f82","ssdeep":"","tlshash":"72f0558aa6f04e24512e12acd312380176992133d7ecaf21e3380b3e935dacdcd19343","first_seen":"2025-12-17T17:11:29.007954Z","last_seen":"2026-05-04T13:08:44.442587Z","times_seen":100,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_19.BLbBWqGG.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_19.BLbBWqGG.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"19d805d8ee70417b71607a4370969ffc","sha1":"ffd4e1e043b0ce2349dfa851681adc51213af767","sha256":"cde31a1950e0d82834f729a67421d14cd96808fbe1dec602aaa065c2ae5130ab","sha512":"85936f40b8dede097ea8d988c9437fcfe19934a22e72459b2f4f8c9b80f0c93e69678d018c3137416cfbb022195ce41e00d29164db75e6862321dacb9fda58e4","ssdeep":"","tlshash":"4bf0a3c8bbf00d05809a126dc351610776d9553b53df4f11e27c067e536edca9e04343","first_seen":"2025-12-17T17:11:29.12315Z","last_seen":"2026-05-08T21:02:09.365745Z","times_seen":93,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_35.DNM7F5vm.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_35.DNM7F5vm.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"55bbd579da825e269b651342237c0721","sha1":"97763f922a21c2fff2320b22781cd2e5258bc2b2","sha256":"255614564f4b31c601d463f48b1083401d2820f9327b660dfddcc8b4741ecba2","sha512":"170767691c52d28c587678354719c33b4be3de28f1a93f2bf53ac848732be8a8465452a2dc3c01296b909a2ecf99cd661626c25e4e1ebcf997dd6b7678f935ee","ssdeep":"","tlshash":"ebf055ca96f15b64402a12edd397544a39e9112342ee4f76d23e173e935ef8dc904643","first_seen":"2025-12-17T17:11:28.996852Z","last_seen":"2026-05-10T13:02:40.419122Z","times_seen":83,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_50.Cs5Z-Lp1.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_50.Cs5Z-Lp1.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"b2d96148ae7efa30ac48319e265fca03","sha1":"ef0b7a40785fc97d2f02093df7a3ef683aef3ad8","sha256":"ac2f78b1164f9af75bdeb56bc2fa16e32c2a3f530e5e925652db4fe40d49094d","sha512":"92097214b1dbdf30946306364829ccd4dcf4c351a18bb143f06e5ed39133205dd2c93f43259914d08591b6adf834ba2a5d95dcdabd034b30db7eca3dd9111af0","ssdeep":"","tlshash":"b3f055c85bf02ed9812a22acc7926a4576aa10b386dc0f61d33c077a539d99dec04283","first_seen":"2025-12-17T17:11:28.984983Z","last_seen":"2026-05-04T13:08:44.390359Z","times_seen":100,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/footer.CLXArp8_.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/footer.CLXArp8_.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-4d3\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1235,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1235), with no line terminators","md5":"4b3eafe60e0de2be3cffb6141fb95153","sha1":"86c7f897ef5670590f50482564d2a06168ca895b","sha256":"d3cfbfaaa44ef59ee37f651e5de0ed0ec0c9e6b0465cca0e9a7d791718cbfc6c","sha512":"c0e07282e5f0c6b3d0ad00b8e8c468f9022f16804bc3a3dc7bcceb1780815b858966ac6243a74d4eaf2099b281f43d723c213a75936b88336bd1ac9870339611","ssdeep":"","tlshash":"ba2137d7cbf553540108177ccb1795e5e206202bb7cc8f52f86c02e41359bd49b39b55","first_seen":"2025-12-17T05:47:47.236515Z","last_seen":"2026-05-14T15:03:20.524605Z","times_seen":1605,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_12.puRHueXD.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_12.puRHueXD.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"4e99b0773528aad793c37a0867d8d43b","sha1":"ec71c626c8d04c5ee019e24ef9ad5f4b84108116","sha256":"04ec762998bf9df02b21cb10b4597389ea4b7fbdccb676a3c7ea21b0043b1dbb","sha512":"83da824163c8094717f844beb4ac23fdd7654df33c52c6054a5ad82f7c2c773deb94aaf15da9b363c57d60c6421532679c096766c6c7fabb29fabac94850046c","ssdeep":"","tlshash":"58f05c8567f00e55412d236cd6469426329c0662a2ec1f21d27c4abe83daecda804647","first_seen":"2025-12-17T17:11:29.06658Z","last_seen":"2026-05-04T21:01:28.685613Z","times_seen":84,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_43.BDLw7eSW.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_43.BDLw7eSW.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"26606dbaf22c05006e866fac903b7fba","sha1":"b3ea05d583da53810beb6770c61e9813bbecbe52","sha256":"219d127515b94ff6101a5172b369747328382c250404529bfe404f072df7e778","sha512":"b5edd72afc5e5528ac9d32132d0c7779141522c32337f58312b25f2de14c87f6a1916e4e9883bbe9f0ade0517ca88c84f8e914d081c6fc0a4b691c46ff8c9634","ssdeep":"","tlshash":"31f05c42abf06f5d406912dcc28a180275985163568d4f61d37c873653ae9ed9d44253","first_seen":"2025-12-17T17:11:28.988694Z","last_seen":"2026-05-10T13:02:40.368019Z","times_seen":91,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_47.D9niGv4g.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_47.D9niGv4g.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"e6853ffe9eb081bf5d793ef469275d06","sha1":"e34651b8b1988c23c087528d9ffefab3c9fecdf0","sha256":"4094c265b28fbaf12b8e0449b2f39cfa81eca62b4b0ecea544fb0bff51f2c247","sha512":"0cb3568d762c1ee32231fdbe1e968eae2aba636f872b85299b6359bb6ea4f7fdba7e072d005c1249b765267e9267a088b352592f50a55280b2a117737af242ae","ssdeep":"","tlshash":"04f0dc8457f06d84882e228cc191190579bc037382cc0f69e23c033a439d9caa904243","first_seen":"2025-12-17T17:11:29.000295Z","last_seen":"2026-05-08T21:02:09.353237Z","times_seen":101,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"o24257.ingest.sentry.io/api/4506297820381184/envelope/?sentry_key=846ab6d1b9297a0036310793eb8dd024\u0026sentry_version=7\u0026sentry_client=sentry.javascript.browser%2F7.108.0","fqdn":"o24257.ingest.sentry.io","domain":"sentry.io","tld":"io"},"ip":{"addr":"34.120.195.249","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ingest.sentry.io","organization":"Sentry"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Mon, 24 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:C7:A0:3C:30:51:F2:AE:98:2C:88:9F:C7:8D:24:55:ED:C3:34:BD","sha256":"78:73:F7:3D:EE:58:1B:F8:9A:1E:17:AB:A3:70:00:86:76:EA:4E:AF:AB:F4:7B:34:5F:FA:39:D8:3B:5D:F4:B5"}}},"request":{"raw":"POST /api/4506297820381184/envelope/?sentry_key=846ab6d1b9297a0036310793eb8dd024\u0026sentry_version=7\u0026sentry_client=sentry.javascript.browser%2F7.108.0 HTTP/1.1\r\nHost: o24257.ingest.sentry.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cdn.lcwss.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 440\r\nOrigin: https://cdn.lcwss.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":440,"data":"{\"sent_at\":\"2025-12-30T13:04:38.890Z\",\"sdk\":{\"name\":\"sentry.javascript.browser\",\"version\":\"7.108.0\"}}\n{\"type\":\"session\"}\n{\"sid\":\"252a1c0703a3490599d5fb2783b1debf\",\"init\":true,\"started\":\"2025-12-30T13:04:38.890Z\",\"timestamp\":\"2025-12-30T13:04:38.890Z\",\"status\":\"ok\",\"errors\":0,\"attrs\":{\"release\":\"v0.0.655-verticals\",\"environment\":\"production\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-05-14T15:58:43.719235Z","times_seen":648347,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":104,"dns":20,"connect":13,"send":0,"wait":42,"receive":0,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/sync-metrics","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1232\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=gotucam24sjm8up46xmx8raty6kjsm5u; syncedCookie=true; oaidts=1767099879\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1232,"data":"[{\"app\":\"landings\",\"event\":\"modal_open\",\"usid\":\"19b6f5c4a9a9585847b85c1\",\"sub_id\":\"1029854111395223121\",\"teenage\":0,\"project_id\":1,\"landing_name\":\"finance-survey\",\"event_source\":1,\"ymid\":\"7\",\"request_var\":\"7\",\"landing_domain\":\"cdn.lcwss.com\",\"landing_url\":\"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3\",\"source_zone_id\":10295867,\"config_id\":1167,\"build_version\":\"v0.0.655-verticals\",\"landing_load_date_time\":\"2025-12-30 13:04:38.000274 +00:00\",\"vertical\":\"finance\",\"events_history\":[{\"timeStamp\":1767099878042,\"event\":\"start\",\"timeOrigin\":0},{\"timeStamp\":1767099878274,\"event\":\"adex_init\",\"timeOrigin\":232},{\"timeStamp\":1767099878531,\"event\":\"load\",\"timeOrigin\":257},{\"timeStamp\":1767099878628,\"event\":\"adex_script_load\",\"timeOrigin\":97},{\"timeStamp\":1767099879389,\"event\":\"modal_open\",\"timeOrigin\":761}]}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: e51ece7bb911f9fae35a4f8c15169bb0\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-05-14T15:56:42.639741Z","times_seen":134466,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/sync-metrics","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1455\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=gotucam24sjm8up46xmx8raty6kjsm5u; syncedCookie=true; oaidts=1767099879\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1455,"data":"[{\"app\":\"landings\",\"event\":\"adex_status_bad\",\"usid\":\"19b6f5c4a9a9585847b85c1\",\"sub_id\":\"1029854111395223121\",\"teenage\":0,\"project_id\":1,\"landing_name\":\"finance-survey\",\"event_source\":1,\"ymid\":\"7\",\"request_var\":\"7\",\"landing_domain\":\"cdn.lcwss.com\",\"landing_url\":\"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3\",\"source_zone_id\":10295867,\"config_id\":1167,\"build_version\":\"v0.0.655-verticals\",\"landing_load_date_time\":\"2025-12-30 13:04:38.000274 +00:00\",\"vertical\":\"finance\",\"events_history\":[{\"timeStamp\":1767099878042,\"event\":\"start\",\"timeOrigin\":0},{\"timeStamp\":1767099878274,\"event\":\"adex_init\",\"timeOrigin\":232},{\"timeStamp\":1767099878531,\"event\":\"load\",\"timeOrigin\":257},{\"timeStamp\":1767099878628,\"event\":\"adex_script_load\",\"timeOrigin\":97},{\"timeStamp\":1767099879389,\"event\":\"modal_open\",\"timeOrigin\":761},{\"timeStamp\":1767099879392,\"event\":\"cookies_sync_success\",\"timeOrigin\":3},{\"timeStamp\":1767099879732,\"event\":\"adex_status_success\",\"timeOrigin\":340},{\"timeStamp\":1767099879734,\"event\":\"adex_status_bad\",\"timeOrigin\":2}]}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: 602bd435aada88bd02614ea9253bf24e\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-05-14T15:56:42.639741Z","times_seen":134466,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.DS6wA2VX.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/index.DS6wA2VX.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-18e\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":398,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (398), with no line terminators","md5":"c286166fb6f44c0a7aef4ce2a9b9338c","sha1":"91599b7cbabdcfc14535dd3d022bcf1296942072","sha256":"5c30ec81142e7070f0b19d2d89a41efa7c98e6da111b0ebafcc3ecb60880f9d5","sha512":"307704a1dd37a8773ea4481691a31760abb3f0060b775058b99d749f71759882703c701488b671a2c7d52de8199634f58d39fec8f137794ee8989faaea874362","ssdeep":"","tlshash":"d3e02bcd5ae01bc4801f22add51a1109b944043366de5f51e13c07b4539fdcae808343","first_seen":"2025-12-17T05:47:47.226096Z","last_seen":"2026-02-09T18:12:22.058301Z","times_seen":697,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/getImageS3Key.ryICMbpZ.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/getImageS3Key.ryICMbpZ.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-36c\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":876,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (876), with no line terminators","md5":"123e90cd3608d46cbdbb0abbf23c53fb","sha1":"7ee04e2e7d06c8dff502e709f756ceb7a5e8b091","sha256":"eab74bf8b4b520532d26878cfdc7092457874e0f5511ea5f47dbca4e35684898","sha512":"51e883d40a9610c177926ad2968832af3bb1a70d0f3bf62de70a68d1c8be0b9c8a2465477b05f90d6862544ad7b9174a54893732017fc8226b30e0a7ed3b7219","ssdeep":"","tlshash":"671156d7e2f47866c28f145dec2291027e5c167bf28c4f13d17e91a723558cec135a26","first_seen":"2025-12-17T05:47:47.290601Z","last_seen":"2026-01-08T06:11:29.220752Z","times_seen":168,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_34.CjV2BMS4.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_34.CjV2BMS4.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"3a2f46bde5af18ff4f0da7454ac7e480","sha1":"b18cacc9e413b0b23990fefeb69556939a1c7560","sha256":"6cdd3bb7dfad6dd2c946329b879a32fffa4dcb1f83cf638623ff831610967d50","sha512":"99a831336bf6bb8c7714485955e2a976063624d9206092419a6bada70e0916938182f3137d5d9ce8714582f2999aeef7a65e648e2b272c8327743dbd88d2a67f","ssdeep":"","tlshash":"a5f055c057f16d15403d139dd2da280532ec407346ec0f22f2bd4a3a43baa9ec908383","first_seen":"2025-12-17T17:11:29.065641Z","last_seen":"2026-05-04T13:08:44.308866Z","times_seen":108,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_1.s9WhvuoO.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_1.s9WhvuoO.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1be\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":446,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (446), with no line terminators","md5":"c569f72f1b7a16ade9c4d2a1115b1364","sha1":"3c2a5b2a940c0118e001908a7afa19ce6beeb6b0","sha256":"4c97a1f5ab5fec45492ff95252dafc8b3ac5f7a0cb6859ebdf1dea6f85fff0bb","sha512":"61083e03e8376a82f65ebacf9b7ee254d746b63040ee69c99798d8d966da0515a0fee618929842b8d709d0c41c1677083dffe1e8cd28a0e017eb9eac36130727","ssdeep":"","tlshash":"80f05c8d56f87a0a512d13edd222164577580036a28c0f11f27c0b3b23aced95410343","first_seen":"2025-12-17T17:11:28.979173Z","last_seen":"2026-05-10T13:02:40.365178Z","times_seen":92,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/sync-metrics","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1316\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=gotucam24sjm8up46xmx8raty6kjsm5u; syncedCookie=true; oaidts=1767099879\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1316,"data":"[{\"app\":\"landings\",\"event\":\"cookies_sync_success\",\"usid\":\"19b6f5c4a9a9585847b85c1\",\"sub_id\":\"1029854111395223121\",\"teenage\":0,\"project_id\":1,\"landing_name\":\"finance-survey\",\"event_source\":1,\"ymid\":\"7\",\"request_var\":\"7\",\"landing_domain\":\"cdn.lcwss.com\",\"landing_url\":\"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3\",\"source_zone_id\":10295867,\"config_id\":1167,\"build_version\":\"v0.0.655-verticals\",\"landing_load_date_time\":\"2025-12-30 13:04:38.000274 +00:00\",\"vertical\":\"finance\",\"events_history\":[{\"timeStamp\":1767099878042,\"event\":\"start\",\"timeOrigin\":0},{\"timeStamp\":1767099878274,\"event\":\"adex_init\",\"timeOrigin\":232},{\"timeStamp\":1767099878531,\"event\":\"load\",\"timeOrigin\":257},{\"timeStamp\":1767099878628,\"event\":\"adex_script_load\",\"timeOrigin\":97},{\"timeStamp\":1767099879389,\"event\":\"modal_open\",\"timeOrigin\":761},{\"timeStamp\":1767099879392,\"event\":\"cookies_sync_success\",\"timeOrigin\":3}]}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: f16ae33a9c4bdadec69c3bc13748ea78\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-05-14T15:56:42.639741Z","times_seen":134466,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/Reverse.BPeWg_KW.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/Reverse.BPeWg_KW.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-7e3\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2019,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2018)","md5":"81e52e1daa5d1002571cd44590d68d7f","sha1":"758301dbc2cb5d01374ab749bf97d4263167ad86","sha256":"fa19934721bf82717ef79b160eff5bfc66a3340b54cced7970e5bc577d4e1d00","sha512":"0c78815a9bfae9b42e4ab556e26c8ca80eced4ea56aa0df97a425032768227539e82d76422f95c79923c28aaa59f2590a5a47e1482d123ee6ca0c73680c06746","ssdeep":"","tlshash":"5941229fc1604bf9404a84f9e218f5316b32016ba3cc9711d4df59b4033adcac219a87","first_seen":"2025-12-17T05:47:47.271892Z","last_seen":"2026-01-08T06:11:29.268972Z","times_seen":272,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/todo-list.BhypGm6h.svg","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/todo-list.BhypGm6h.svg HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2638\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: \"694a8a3d-a4e\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2638,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef090f1f3d7852b826250efe8a95579f","sha1":"bf1acb5875b322e2b8dba0617d1eef19abcadc2a","sha256":"3108fb818fdb67f381ece467ec270ea848e76c8d1d67c8a7fdcf3d9582201716","sha512":"d81d3339e8a2c21322919185c9ef2a3609aeb36639fb63a407ef55cbd5ba353a59b014b09020241e1fc721e9c72325a794b32634e78d6917d781dc85f7e2f915","ssdeep":"","tlshash":"3f5158f6d3919e71bcebcfb093161521f3cd1ebca45892c5b27de8960dd3a858a0d904","first_seen":"2025-02-22T07:54:30.645197Z","last_seen":"2026-05-04T13:08:44.328199Z","times_seen":169,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/replacePlaceholders.CZI-Rb_A.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/replacePlaceholders.CZI-Rb_A.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-235\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":565,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (565), with no line terminators","md5":"5240aa57010f91f99c3dffdb749d0a17","sha1":"5730e0baf929b9eaa313e220cfe01821023b9d37","sha256":"3ccd5d01c4f3986a4ffcc28a8e18ba78e19c9c9733299db0e4276497a396129f","sha512":"9245fb7d742f8e96794a9b686b885aeba23e6cdd98cf48714f8bbc80e3c48d974a6a4b16714f01b5b0a4b4c1a419d31ba8f6b24dc8a9a202530197d08d16ed54","ssdeep":"","tlshash":"eef0e18512f16bc5911d234cd2663200b6a8511b2aec8f50f17d0776632ecdfc840647","first_seen":"2025-12-17T08:15:43.350692Z","last_seen":"2026-05-06T13:02:57.297079Z","times_seen":407,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_6.la_-JXIq.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_6.la_-JXIq.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1be\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":446,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (446), with no line terminators","md5":"be194880c481f49313123d8557bf8657","sha1":"00a8c5b113ac5ed1e0532854e7f120593425e6b1","sha256":"52f75fb681e0406356e21b906b3942ea432396559a3f01e831151793f4de6ac6","sha512":"533451b1f290523f7e01948cabace368f73e02d10d326a61ee4e0c72e415f633f68a7533735be0a4c2544f2f54f3c594dd4ad861b1b9955fde1dd331238e1f7b","ssdeep":"","tlshash":"05f05cc597f08f48c129169ee152504279a5107353dd5f52e279c737539dbce8510783","first_seen":"2025-12-17T17:11:29.119731Z","last_seen":"2026-05-10T13:02:40.385974Z","times_seen":99,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_11.DH2vePbb.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_11.DH2vePbb.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"94f041c9affde2443c4e2276b752bce1","sha1":"1f720c1cca8ef2f21ea2344afac5ef4d22203a35","sha256":"838c9cd59b2bf9c540c377ecffc7a60ad6a8cb6a1d473a86f60695032c9fc2a1","sha512":"73f82e20d7bc9ceef6520154be44225bcb6087137e15b89c3826f7e0184cae0f431b8289aacb67e8e96b7c3ec7ce3afa9c5480982eb62802f81e94147d6416db","ssdeep":"","tlshash":"31f05c8967f06dd84029125dc351644136da2127828c4f55d1ff0e3aa3bd9ca8c00283","first_seen":"2025-12-17T17:11:28.970991Z","last_seen":"2026-05-10T03:30:41.57495Z","times_seen":92,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_44.BD4XWzrk.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_44.BD4XWzrk.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"1e25df637e0effdc0fb21766296fbe0f","sha1":"f1ce2069bb004ffca0dd456cd938a18baf570902","sha256":"41a60751a4ab1d2039c52bf3d1822881c3e816aafb926d1d8c6abc570f4b11ed","sha512":"f8ace94a720d79eeda327acf1cfffa80d2fe01d563b7a6cf37fb4d9dcf533a48c0db67aec92dfb711c03c6835213929b31cf10935721471cae94df26729dfa6b","ssdeep":"","tlshash":"53f0558966f42d09402e229ce293a59971a8016302cc1f52e27d0a3b636da8fae54787","first_seen":"2025-12-17T17:11:28.989474Z","last_seen":"2026-05-04T13:08:44.349627Z","times_seen":92,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/subDomain.D9gMU5d8.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/subDomain.D9gMU5d8.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-36a\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":874,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (874), with no line terminators","md5":"1f6da0132e546750916b4e04b5d928a2","sha1":"c16d0708134a6a40e6180581ed53877c62890fc5","sha256":"7c2f67cccf7a415f5aed31660709693473537530274c5bed278b6ac8e28eeccf","sha512":"b86616a545d99b810295235a3e4247c05a7980803a42c2c3d1f6bef8a80302f908cb83e089e3e0f6d81543f1fd84110bf7c4d6b4e8b9ed89a9eed0d1d48e9d45","ssdeep":"","tlshash":"1b11c6dc76f1ab20435d32def23b0a9274d8017786dd0f51e1bc4a176719c8b8595f45","first_seen":"2025-12-17T05:47:47.237404Z","last_seen":"2026-01-18T23:38:57.380921Z","times_seen":288,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/getImageFromConfig.BNkkjDtZ.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/getImageFromConfig.BNkkjDtZ.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-230\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":560,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (560), with no line terminators","md5":"8e2ac9a56c41b6f0b07654245ddd1a5f","sha1":"a0d3ef8f1abf8cf9141210bb18de7473051e1dc6","sha256":"9b852c4960d4e3e9c51e2acdc79d572b00e24dec967887d2087a36b18f23c3b1","sha512":"f9e97d1bd7398854e4b95ec401f069828b5fe261bb0c14b154657294a83f74d6319172e5198be988807233a1e681607eeacba974a9bbf47c39efa90e5466f7e4","ssdeep":"","tlshash":"b1f0eb84dff009508a0613ccd117460eb2ac4dab86cc8f10a1b8473d3b626bea826703","first_seen":"2025-12-17T05:47:47.272854Z","last_seen":"2026-01-08T06:11:29.260835Z","times_seen":168,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/setIdLocator.CA8I0KwB.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/setIdLocator.CA8I0KwB.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-179\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":377,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (377), with no line terminators","md5":"e4da40dd4e2f442fe5d0399907c2bf53","sha1":"9df179bf27dd84e9af3df61f1d90ae59ce9938e8","sha256":"698bba5f3d1ea1e093ed226ad92958df5a8a73d8ca55a259bdb9b59443109357","sha512":"953ebdd2d981a41cf5372abeb2d3a24e887064d2f66286bd1895a2c5eba5f281aea3d8388624f091cffc9b236204f90ea78ad3bb9a95e900525ad914a38e0a1d","ssdeep":"","tlshash":"c2e0688a9af01e14800e2b9dd206248131880663538c8fa1b2780a3ab39decf9c05383","first_seen":"2025-12-17T09:40:52.758568Z","last_seen":"2026-05-14T15:03:20.520017Z","times_seen":1058,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_7.BlvFzB66.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_7.BlvFzB66.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1be\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":446,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (446), with no line terminators","md5":"fea7f2d04fcbd3cb0a8a23fecfe224ad","sha1":"f73871b870e1f2de9a0b9adff2addc68926c0048","sha256":"8e901d36d60491f9dce5a811d2feaaec7f6e56092c947f532da450b41785c090","sha512":"41dac12ba72ff333d97b7f593f8a74867bf8bdf9fc37f53894f5d3cbeffd09359aedcd0a0c5b8cebd405e98e66a730608653226f58edbfd6f0a5e3bf29dc0221","ssdeep":"","tlshash":"19f0abc4bbf4190542ae139cc26a6632b799007302cd8f51f2bd4a3b43ae9de8c4438b","first_seen":"2025-12-17T17:11:29.041319Z","last_seen":"2026-05-04T13:08:44.367665Z","times_seen":89,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_47.CwpzDnD6.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_47.CwpzDnD6.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"1d385c1b8bf4dffcc98154b3e7e68651","sha1":"8bbaa905e2105f6f111897312f2df892d1420dbf","sha256":"d7f9334a09918647099799e701707172d4b4a7ab40636bb84fa80fe6d8a2e077","sha512":"ff4b40299ae4a98d38ec74c26176ffc26502e3e17ee3a610e942201e6fe58600b8f166357f5bcbab0f1c623c27a2df92fb8cd2628ce5ae9e718552538bec63db","ssdeep":"","tlshash":"38f0a34666f49a8b806d225fd759550175d7013396ed5f11f1bc0b37935cd8e98003c3","first_seen":"2025-12-17T17:11:28.992872Z","last_seen":"2026-05-04T13:08:44.317077Z","times_seen":122,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/Image.ChGwjLBm.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/Image.ChGwjLBm.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-724\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1828,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1828), with no line terminators","md5":"b65f521d260efc6cf88e9f6c7532e3a6","sha1":"5cda83493ee23fe5c3232923f75e220fd08b0c80","sha256":"c0e729747a15d47e8cc525fc5fbfabd217b7a56d74b9ec2b0b82e5f3fe09da89","sha512":"f99f5b9c51ad8262117ebb43262bc648eb37090b030661f776226f211496bd46b7049476d5cb7f2cae85fd11f8c17f3e51be5e80fd1d26b39e423c65b397db75","ssdeep":"","tlshash":"1931a4acc820cb7e443d69fce2592122af14276b13d68b02d1bd757a13a86c9a922743","first_seen":"2025-12-17T05:47:47.277642Z","last_seen":"2026-01-08T06:11:29.324768Z","times_seen":291,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/sync-metrics","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 965\r\nOrigin: https://cdn.lcwss.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":965,"data":"[{\"app\":\"landings\",\"event\":\"start\",\"usid\":\"19b6f5c4a9a9585847b85c1\",\"sub_id\":\"1029854111395223121\",\"teenage\":0,\"project_id\":1,\"landing_name\":\"finance-survey\",\"event_source\":1,\"ymid\":\"7\",\"request_var\":\"7\",\"landing_domain\":\"cdn.lcwss.com\",\"landing_url\":\"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3\",\"source_zone_id\":10295867,\"config_id\":1167,\"build_version\":\"v0.0.655-verticals\",\"landing_load_date_time\":\"2025-12-30 13:04:38.000043 +00:00\",\"vertical\":\"finance\",\"events_history\":[{\"timeStamp\":1767099878042,\"event\":\"start\",\"timeOrigin\":0}]}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: 0449c9b7e23153c713c18a62b12eac74\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-05-14T15:56:42.639741Z","times_seen":134466,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useBack.CyoqrVco.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/useBack.CyoqrVco.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-9eb\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2539,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2538)","md5":"813f61471342a4d91e8a6e8f5ae193b4","sha1":"759d4bf097985c6dd62705986004dbd5697ac168","sha256":"959ef87868f4535b6e300c29f4d1e4dc6fea65dd597880f9d9c017c3654c9f8b","sha512":"515dee70b625098560979f845e3a9fd07d04cf97a0d120f200df503695dd18413ebc11adfd0fcfd4ea2bc4c8cdda7f4baec818b64da39e4aba43bc36d6ef0034","ssdeep":"","tlshash":"4051a4dd81f145b0c1d95becd265f2323669117b399daea0e26e5e34033dc8780e1b76","first_seen":"2025-12-17T05:47:47.222263Z","last_seen":"2026-01-08T06:11:29.259444Z","times_seen":355,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/getImage.DJwaz1MS.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/getImage.DJwaz1MS.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-236\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":566,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (566), with no line terminators","md5":"aa6131d1a0a98e07ff203cd4db88ec5c","sha1":"caab0706a8146b4f4f2572db1ac482973eefabbc","sha256":"0abb973e3ac3c02aabe1dfb7595469e869eed5c09e68c68abfa0c0fab801f4fd","sha512":"cf90b3bb2b18666bb036724f5e226573974cfaad5bd3068aaea62051934b5c096d1351c4d8eacb722f2ea8b5cd9c2870eb806d00e6d8f678c00acae73c9f9378","ssdeep":"","tlshash":"a6f08bcaf7f41755d1a606dce08b1422789d012353dc8f61e27a933e53ea94e562878b","first_seen":"2025-12-17T05:47:47.245157Z","last_seen":"2026-05-14T15:03:20.557768Z","times_seen":940,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.D21VqnSW.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/index.D21VqnSW.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-611\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1553,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1553), with no line terminators","md5":"647f0c4b1557485439c363e202db0ee7","sha1":"31be3c4c1821577b91f3af02df71f1ec3f915a7c","sha256":"dff4cbf186ee31d573211364039871277ee8ce71623c6631a112e6c85cb5b62d","sha512":"354895beebdf67bbd9ea9d6f51c559c84511602a73791f9fd0ae87b483ee06f10e11c187508717b2a067e35d41abe161805663d2aa45362453f2a09fe6ffb870","ssdeep":"","tlshash":"8a31f27ae140c7bd881ba3f497e2b2a6136401669f9c4fa2517a483536cec4c5c0f74a","first_seen":"2025-12-17T17:11:29.081878Z","last_seen":"2026-04-07T04:41:42.144846Z","times_seen":271,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_11.i80MkRAD.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_11.i80MkRAD.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"5cfa3fd8ee124cacfc32f02fc4e466bf","sha1":"b6ae3e78adbb57df0c50118a56bc15a4eed2bc19","sha256":"3868e7f8962dc51a51b1f96242a6cbc579757760f26f167a049acc56710c353d","sha512":"a2cbf937d8b3b2a958614bb9f4fe50f3781238bacfd5cbb6e461a9d43a5abb533f15a94ceac9f549b7b737abff748ab37232b8773704185d5dec24a2cc88d7a4","ssdeep":"","tlshash":"07f05c4557b02d54543d13ddd34625427548067b95cc0f41e1788b36d7ad6e9c90424a","first_seen":"2025-12-17T17:11:29.120548Z","last_seen":"2026-05-10T13:02:40.398698Z","times_seen":94,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_49.ByQYKWBX.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_49.ByQYKWBX.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"22ac901dc59694ec31d0cfd3490a5329","sha1":"dcafa0d5c841de67a73f05691516f0ab7c726e44","sha256":"54bb568a23a794d15451d6c361161404d22400b91770a796c89aeb2887ecaecb","sha512":"b6a3541c2588414ace25ecd7b603369e220b0c8899836adf621b14e13159fac7be30751ff3bbb182d86bd52734f48a9f2d5e26f78d9fbe7392bc33e13a58e5ef","ssdeep":"","tlshash":"23f05c4567f05a59a42a335ed3c1560176b8056343cd4fa2e13c063653edace99412c3","first_seen":"2025-12-17T17:11:29.110713Z","last_seen":"2026-05-04T13:08:44.461762Z","times_seen":105,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/sync-metrics","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1390\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=gotucam24sjm8up46xmx8raty6kjsm5u; syncedCookie=true; oaidts=1767099879\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1390,"data":"[{\"app\":\"landings\",\"event\":\"adex_status_success\",\"usid\":\"19b6f5c4a9a9585847b85c1\",\"sub_id\":\"1029854111395223121\",\"teenage\":0,\"project_id\":1,\"landing_name\":\"finance-survey\",\"event_source\":1,\"ymid\":\"7\",\"request_var\":\"7\",\"landing_domain\":\"cdn.lcwss.com\",\"landing_url\":\"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3\",\"source_zone_id\":10295867,\"config_id\":1167,\"build_version\":\"v0.0.655-verticals\",\"landing_load_date_time\":\"2025-12-30 13:04:38.000274 +00:00\",\"vertical\":\"finance\",\"events_history\":[{\"timeStamp\":1767099878042,\"event\":\"start\",\"timeOrigin\":0},{\"timeStamp\":1767099878274,\"event\":\"adex_init\",\"timeOrigin\":232},{\"timeStamp\":1767099878531,\"event\":\"load\",\"timeOrigin\":257},{\"timeStamp\":1767099878628,\"event\":\"adex_script_load\",\"timeOrigin\":97},{\"timeStamp\":1767099879389,\"event\":\"modal_open\",\"timeOrigin\":761},{\"timeStamp\":1767099879392,\"event\":\"cookies_sync_success\",\"timeOrigin\":3},{\"timeStamp\":1767099879732,\"event\":\"adex_status_success\",\"timeOrigin\":340}]}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: 3727bfd876d1b3713afb91f99470a1a6\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-05-14T15:56:42.639741Z","times_seen":134466,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-30T13:04:37.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3 HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:37 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:37 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Astro:5.12.3","description":"Astro is a new JavaScript-based static site builder.","website":"https://astro.build","common_platform_enumeration":"","icon":"Astro.svg","categories":["Static site generator","JavaScript frameworks"]}],"data":{"size":127195,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (44807)","md5":"6f4e827d1d95ac0615895a8e9db80427","sha1":"2334f3ddb2badb0fd70f0d5d2ae4f3f37eb5f887","sha256":"add99f90f0f103c6718b3eb7fac205b3abe071a56fb6a81b39a1e794faf89072","sha512":"03f1e9da8b1ca536f010efc68ae2c673648e6539bf63d185772b0562aa448ddb70db93167585c2d16ad453fdb1021a9edbd60bf24295247c26ccd6c9e0f58a88","ssdeep":"3072:xOoTWhHLuWayPHhBTidki9AUMzDYUH6BxttvbZUpF:IzHyWayPHhBTiKi9AUMzDFHGeF","tlshash":"3dc3a51ac1f3023e586e78f5e094f708645bf34feaba6bc4a960516147eae8e3473740","first_seen":"2025-12-25T13:07:41.004719Z","last_seen":"2026-01-03T21:05:26.214601Z","times_seen":5,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":110,"dns":60,"connect":19,"send":0,"wait":43,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/ShouldDetectProxy.CKHfvKx5.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/ShouldDetectProxy.CKHfvKx5.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-2b9\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":697,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (696)","md5":"015d66abcbcb2e64c49b71a64ba3035f","sha1":"f7da72adb7370f7e2bf60012945f5cbcb452bddf","sha256":"27dcf50e74088d33a50172c0c14ad73e7f411277ac1d882566395c43dff68d17","sha512":"1ba2113d48d357c89663484ab2c62e9cf115c657e79127ce30ee7c634acdd66df6e5cb59cb354616f96ebbaada33168da48b7ed2d071a71d3f6e5d5f78183004","ssdeep":"","tlshash":"ad01448e55f95258c04b21aed2167120b41400a7128c8b62d6bc0b7c03a9ee98025b93","first_seen":"2025-12-17T05:47:47.281158Z","last_seen":"2026-01-08T06:11:29.283001Z","times_seen":355,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useSyncMetrics.Br4mvgla.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/useSyncMetrics.Br4mvgla.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-cda\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3290,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3289)","md5":"793e691740486addbaad283edfb48851","sha1":"c759ebdcfe2a143d1189b9425b3bbae789db8f14","sha256":"243d3f9809e1ae7d8a41bc9c7af137ef4895f99658af027bfcfda9893a5e8dd3","sha512":"ab64dde3f936888bcef3fcf38c41e2c8b8a5ee16c1ad032ea7f578f926da956696a2a1b1008b7bd756fd41423c14a095b576bac6b8de681d32a9e214889300ac","ssdeep":"","tlshash":"9b61576f6262136d166112edbc7f23032996422c6dc7c948b296902e21f9dd111ffbfb","first_seen":"2025-12-17T05:47:47.235608Z","last_seen":"2026-01-08T06:11:29.283959Z","times_seen":355,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_48.5AicsE3v.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_48.5AicsE3v.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"f768cbd44b593c473f8100a926499ad6","sha1":"235b20a0963c4d27254def4c2d771093b8572b0a","sha256":"d76b959013a1ea364bb9bef5eaedc4935d768831ecb3b6a27d2c105a12854da0","sha512":"b9c111b183402ffff7f4b39b621c35d26ab7123e028792130a7e120f8f1905bcd0646d807d6c77b37569f748e1d3a0efec47ed76707c2e5e570ffa6545e04e3f","ssdeep":"","tlshash":"87f05c869af25a465039239df6821503b59e006383dc1f53e2784a7a576dece9584783","first_seen":"2025-12-17T17:11:29.116391Z","last_seen":"2026-05-10T13:02:40.377235Z","times_seen":97,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useTabVisibility.DepQGhQN.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/useTabVisibility.DepQGhQN.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-27d\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":637,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (636)","md5":"1124f7899cd5d0cedf517027f1b12af8","sha1":"62e9903fecd8541f3019978da48b754ce9bb2950","sha256":"df3ee6402453d6564defc20703c2e9d9418ac86ea5d6bb803df30026b7af418b","sha512":"42a4fa35346ea19fb9af72a2fc102e8184942a296aa96dd8a8b98835b999e49d11d9f0361d4e6b3860f4231e0f92108c247ac480ea9f5fcfb1432c2041fe80ed","ssdeep":"","tlshash":"20f07de5a7f01974404b139de279b782397400b7a28d1f61b17c5f78234de8a9610a87","first_seen":"2025-12-17T05:47:47.223218Z","last_seen":"2026-01-08T06:11:29.29586Z","times_seen":251,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_9.gzyePI-K.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_9.gzyePI-K.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1be\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":446,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (446), with no line terminators","md5":"f6cd7f20758142e420f7de1a721bf8bc","sha1":"4b43f2333b475050d74bcb721d9f4c832c56b808","sha256":"e8d0c8c16d5f940c8b83cb1a253bfc02d951ca1bc2e6894a8a7702bc4057c3ae","sha512":"75e574e2df449160a42aa7c7417fe2283382b4e9772da66e969e3208fd0fef42c7ed71c8d55c6b3f956cc20dbb1a02be404f74cb7aa32ae99414f0d0462d6da8","ssdeep":"","tlshash":"2df055caebf46e64902a17ecc262158671dc417392cd9f93e27c863a03aed9d5c14387","first_seen":"2025-12-17T17:11:29.108133Z","last_seen":"2026-05-10T03:30:41.600645Z","times_seen":88,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_20.B1U7zgzc.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_20.B1U7zgzc.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"3cf16bb24d5a2ebc7772c45775394163","sha1":"b1c618e6ca769cc472f60062d15b89679a7691fa","sha256":"e9319dedab407e837f52faa46296eb5a1eaf81571268d9c9a777ff655677c9a7","sha512":"5e36f10ceb18febc4494ea449a293f6f696498c9f70e8653166ad6acae815c67047bd581afc8e5dd4b505d210f63ccce15605b72bb781c65e5737885db7cf48e","ssdeep":"","tlshash":"c8f05c865ab54d17c02e13dcda55548135d82136a3cd4f62d2bd07ba136fece9d40293","first_seen":"2025-12-17T17:11:29.108958Z","last_seen":"2026-05-04T13:08:44.42211Z","times_seen":95,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_37.r8LO9CcG.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_37.r8LO9CcG.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"f2a7f2bbade5b3d2a51e0b945a89ccc6","sha1":"c3d898922a0acd53c575d783aed036cba935ed2b","sha256":"90473ec571d30c77382cf9809030bc795a23fd70b5a95264e560dcc4a658508b","sha512":"c8129bf42dee0f3786fceb150e7060219bfdb6b82e89cd90da8c3c5f1a4aff4d7add9c7256b7357f5fbf6782b942a2207cd60540f483d01998fd454a8a2e3e5c","ssdeep":"","tlshash":"19f05cd997f0ad58812912ddd14962453959017792cddfa9f33d073a839aa8d4800243","first_seen":"2025-12-17T17:11:29.061695Z","last_seen":"2026-05-06T13:02:57.301041Z","times_seen":108,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/jsxRuntime.module.CVXpFPwO.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/jsxRuntime.module.CVXpFPwO.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-2ff\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":767,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (767), with no line terminators","md5":"282f34b217dc7992ffcab98460caf282","sha1":"c60107bd41a65d5a20567c1e218bd20ced574b59","sha256":"191ac8506be4789d57e8fd0cba68c31ca5d3c724ad220250d0c460a644f0a1c8","sha512":"edf7345d714e195f9bef4b20e1286156b9e7f495acaf56ce164dfd75c066490c04105b59244babe5d5e9a027df00eb25ae459b94f79ce9e762c22bb9d3139bf1","ssdeep":"","tlshash":"5d0120ee7270ba93805739eec2171a0232bd306791cc0f61927c46f93b907ce88c4742","first_seen":"2025-12-17T05:47:47.229971Z","last_seen":"2026-01-08T06:11:29.284726Z","times_seen":355,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_30.CHKURtvF.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_30.CHKURtvF.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"a2b21e0204af263a2e65298f28e27d52","sha1":"8f86fb59e399d472c053a19f2c8ee070d8f0104b","sha256":"3122e85a75001976b3f8b998811c90b1226a15f781e2f277e0abbd6ac7215995","sha512":"3444acbeaf2b19905adca62067dd36d097ce8e9578d8942bf750c54c6c3142be274ee2dd87ffc53dc812b47fcb5b780f207456abe48697d115188f5b6860ae05","ssdeep":"","tlshash":"8bf05cf4a6f45a594169126dd78161413699013293dc0f11e17c4b3f636ffc98810343","first_seen":"2025-12-17T17:11:29.06022Z","last_seen":"2026-05-10T03:30:41.574162Z","times_seen":89,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_32.kqqXpxAP.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_32.kqqXpxAP.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"1ab58c8de8dcb35c1e3de17a8d22fd63","sha1":"bfbdaad06121245c5bced34435237771ce815c85","sha256":"444cb33bf4e7415f1a8e842350dae7b872672490f4be8e683540c6b91a9844ae","sha512":"3a1b83a1844f304d10c9f98ae4feccb272b303976b0f39b3e647ef12ca11e1d250699026696d395f72e5d02ec0d194676d519c3ac6277b6f90350329da2c16a1","ssdeep":"","tlshash":"0df05c849ff07d1e403d16edd5925902769c05b7628c4fa1e3b90e7b236decd9941347","first_seen":"2025-12-17T17:11:29.121432Z","last_seen":"2026-05-06T13:02:57.309721Z","times_seen":106,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.Bj6-y9HX.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/index.Bj6-y9HX.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-6772\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26482,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (23794)","md5":"25d02c4766541802dffc6ed1b02a263a","sha1":"12bb857fc8d2914d7943600c288141837edb4d49","sha256":"a14acad15a15f796166bc0a771aa079e4e74fe80fb4a454edae97a21cd5bd71b","sha512":"7dc75aecafae4c30f5e53ba3433e4a9b399252199eac4d98c63157c256dac42d3cc0ea93c270f12fb9a05bcb42cb36f22eb22de56a8156c8e0dfb6d8b8355e95","ssdeep":"768:suxPW0Bl84mbLrIq1VNuT1cG37lbxMH5+:su+Yo+","tlshash":"1cc24317f8473cecf2354edcfe9e1445eca8561c4bc7a829a01e71b1b1c538463b96aa","first_seen":"2025-12-18T17:35:57.742915Z","last_seen":"2026-01-08T01:34:51.027777Z","times_seen":77,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_50.BTwmchqz.webp","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_50.BTwmchqz.webp HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9442\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: \"694a8a3d-24e2\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9442,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3b535a046d614072efb733ad199f2500","sha1":"c004d8d3042c7865d401ec87d4a0969ca4a895ab","sha256":"26680354191589f55f4f16c097907fdea0fcce9488840c80cf91281080265c4c","sha512":"2046ac13ae02994588050daa73a92dc40c9be367832cada89d71ede0c073c7b8a484a912e1e5d8cdb0830d5c191804f4ebbed976172a1a6ace89ec8df2445434","ssdeep":"192:Iezj/ciEr0PHT/aeUZ65OnmWbZF0pAUL5MM3hppKK0gcCQZte:IezjEiFPzO65OnjbUxLWMYKyje","tlshash":"ec12afa6cf1e530ae612877459702b6f139b7f234252c3786025923e4eb1281f737dc8","first_seen":"2025-02-27T01:12:26.956932Z","last_seen":"2026-05-10T03:30:41.61315Z","times_seen":73,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_33.gvhYFfMV.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_33.gvhYFfMV.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"cc3031bacb7aa4c4ad0658b2caa9fa3b","sha1":"1d3c7a54ed84445f476d6213174f60f4c0e3db0d","sha256":"098d38a83059d79ea7ba023a94860643db80f6dd2eb10cd118171fb3f784b346","sha512":"b0626b4e3ec133a6395a106ae5be547c9e23037f62949ce95ba630d1e89670e21ac6eb70fe4fbb1985bb6031b785dcf5a0d6e39207e1f215ee72a7857867bdcb","ssdeep":"","tlshash":"f7f05c856bb4ed66413e139cd36151013764022752dd4f12e3bc0e7ba3bdd8d9c50383","first_seen":"2025-12-17T17:11:29.030165Z","last_seen":"2026-05-06T13:02:57.335814Z","times_seen":97,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mmzod.com/nwtrck?browser=Firefox\u0026geo=NO\u0026os=Windows\u0026osversion=Windows\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867","fqdn":"mmzod.com","domain":"mmzod.com","tld":"com"},"ip":{"addr":"104.18.41.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-30T13:04:37.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mmzod.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 17:29:24 GMT","end":"Thu, 12 Mar 2026 18:29:19 GMT"},"fingerprint":{"sha1":"31:C1:B8:A6:A2:ED:86:44:41:F7:94:A9:E4:11:22:9B:31:00:04:B3","sha256":"B3:2A:C2:02:7C:6B:AE:63:60:1A:1A:6E:2A:25:A1:98:8C:E2:E1:EF:4C:C9:0D:BA:F7:9B:BE:3D:55:96:92:3A"}}},"request":{"raw":"GET /nwtrck?browser=Firefox\u0026geo=NO\u0026os=Windows\u0026osversion=Windows\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867 HTTP/1.1\r\nHost: mmzod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 30 Dec 2025 13:04:37 GMT\r\ncontent-length: 0\r\nlocation: https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3\r\ncf-ray: 9b61be7b1b4eb4fa-OSL\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\nlink: \u003chttps://propeller-tracking.com\u003e; rel=\"preconnect dns-prefetch\",\u003chttps://my.rtmark.net\u003e; rel=\"preconnect dns-prefetch\", \u003chttps://cdn.lcwss.com\u003e; rel=\"preconnect dns-prefetch\",\u003chttps://propeller-tracking.com\u003e; rel=\"preconnect dns-prefetch\"\r\nreferrer-policy: no-referrer\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ntiming-allow-origin: *, *\r\nset-cookie: OAID=dc02f933b4c14b7b8329f6675d6a6af9; expires=Wed, 30 Dec 2026 13:04:37 GMT; path=/; secure; SameSite=None\noaidts=1767099877; expires=Wed, 30 Dec 2026 13:04:37 GMT; path=/; secure; SameSite=None\nsyncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":127195,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-14T15:59:10.713383Z","times_seen":15173623,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":37,"dns":14,"connect":1,"send":0,"wait":40,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/customEvents.v14Jg-B0.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/customEvents.v14Jg-B0.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-280\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":640,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (639)","md5":"18dd3e2310cb2955a2151cadbc33e54e","sha1":"74971b2de3328b6c1efd65c85fb826999fff1843","sha256":"c6c042261e0672a12367ebeda37d071974920245abb0f995a1c5927c01987647","sha512":"68ee00f13e06f918d2594ada705c478c72cc31cf53f9c3ebe020d77582581444fe4dc1f9839501b3fa133fe82ed950e5fdec8767491832a1e55550a3a4a9f83d","ssdeep":"","tlshash":"ebf0024f3ab41bf0506d236ee6ae590228c94067538c9fa5a13c4b39339dfc8a419643","first_seen":"2025-12-17T05:47:47.217414Z","last_seen":"2026-05-14T15:03:20.561008Z","times_seen":1605,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_25.DWHnDEY7.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_25.DWHnDEY7.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"c08f03c1d70c5281262f1b01896949a4","sha1":"496640409ee2770b9ae49faba3ef83c508aa3656","sha256":"d883defe911997619e8c20663a6f47ebd169f400eec9f80bca4a64b01747c10b","sha512":"86f9784f53484b2bc4336ecc016617220d9dcb2e8caeab16b18647b90c37b1c79a783d556193f926923eca11d737fca256f4982b66546a75e46e416a9ff702a2","ssdeep":"","tlshash":"84f05c8577f06e45c02d13edc2a6210179d94262428d5fd1f1bd4a3e73aaaca9910353","first_seen":"2025-12-17T17:11:28.978275Z","last_seen":"2026-05-10T03:30:41.617901Z","times_seen":90,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/preact.module.CI_52rU1.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/preact.module.CI_52rU1.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-2e35\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11829,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11829), with no line terminators","md5":"6326a03ddf0bb2a503bb54255b5936fe","sha1":"599af5a8b87947ec8888784024b125636c511b39","sha256":"9986ede409435ec69de786348b0a336e6f0eff377a2f879b4ff36782f9757746","sha512":"b85c7d09893931505c4782cfb81e2d9c16d82097a68cc9b645d767907c1a5474704216d13ef9babf6dc5d857b455d419f3f50a7ea25ab08185822e446d3c41a6","ssdeep":"192:wg+DMdFKBpA5a4jLj1Sw2u+9GBS/Ak5VpkH+Zd/AiXdo2HxuSrmM2Yg8lQdAlMVn:MDi+ejvEfGM/AL+Zhui2782Sao6vNt","tlshash":"fe32ecb83c60f0609aff116171bf1c1bb37d092fe48844a066489dee26b45ad654bfda","first_seen":"2025-12-17T05:47:47.239319Z","last_seen":"2026-01-08T06:11:29.242901Z","times_seen":355,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/getCookieValue.DM-GRtrb.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/getCookieValue.DM-GRtrb.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-294\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":660,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (660), with no line terminators","md5":"67c6c0e089e732a5f6cae3fe3fe625ab","sha1":"29dc307f5a7dcdbf9b22c846014d83399ea7b459","sha256":"ea4fd17dadd9627a0593c3621938f7bd53c9f81c30ce78b4644cda5c46cc1814","sha512":"dc2dc5485a3b618f5f2ba4e2980dbbe340e79fbf0124fa61074b33a562e294417d7cc120c1612d9f95cfb9db515ff769a1f56e368b191c5bb3e0ec87e2e2040a","ssdeep":"","tlshash":"fb019e8b16a05b98c0261eccd615745635760137038c8ea2e06d6a3db7aeae9a834313","first_seen":"2025-12-17T05:47:47.274787Z","last_seen":"2026-01-12T12:33:46.092571Z","times_seen":393,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_37.BW3Ax322.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_37.BW3Ax322.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"b20c918e9522915b5f42e08baeaf8281","sha1":"f26705a80e30651d5de68442494003c7729cfe1e","sha256":"a396965c64b5eceef4a9cbffa42bdd14f675c2755beb65d1270025290abec575","sha512":"6134bc371c2c61db4a6ee42e0f680e132c7afc8eb7e026411d0dc8a457228f571bc8fa967e0092b3c2b3026f8305656b9b0854560fbcf3d48a4c94358e3407b9","ssdeep":"","tlshash":"5ff05c809bf07e18c12a22add65525823998027357dc4f51f37d473a43adbce9a04383","first_seen":"2025-12-17T17:11:28.991969Z","last_seen":"2026-05-04T13:08:44.289455Z","times_seen":93,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_7.t4OlHPVZ.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_7.t4OlHPVZ.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1be\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":446,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (446), with no line terminators","md5":"7a48186d47dc3df9ebb3857212d34198","sha1":"1a9cd321223d8248d06a134675417c3e8f34ac34","sha256":"5fc2092afcfabbd571a9c45ab22458c22124ba583e2dbab41e92669093abe901","sha512":"c3445710e96c9164d5b292a0b33449a2bec319f0c26cac9cfca331d481470749a1493cef102408371d33471dba4c7a213a15055ce584d659472a451908c6637d","ssdeep":"","tlshash":"e2f0dc812bf08a0a611c035dd30224413198013702cd0f22d2b8433b53ace8a9964343","first_seen":"2025-12-17T17:11:29.059171Z","last_seen":"2026-05-04T13:08:44.38864Z","times_seen":86,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_18.DsozSM5A.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_18.DsozSM5A.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"9e47fe5131761cdfdea17bc38ba8b76d","sha1":"446adbeabe57bdcc46308bafd6f127dcef42622f","sha256":"febeb1dc54c7c3e6720609d026fa917904716c59031299a6fd6aa3f080bb8007","sha512":"b3675ddff11e2853374a9a93a966efd8cdd9ffd6cb3944cd957dae8af094ec777c771f496bb679ba0b6dbf178b3a77577b7e28dc459ac1f09763ccf6d217e8a5","ssdeep":"","tlshash":"c1f0dc8153b08e488069129cc382e1c2728920365acc4f41f3790a3b137dad99a1438b","first_seen":"2025-12-17T17:11:28.965937Z","last_seen":"2026-05-04T13:08:44.379877Z","times_seen":105,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/favicon-96x96.png","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /favicon-96x96.png HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=gotucam24sjm8up46xmx8raty6kjsm5u; syncedCookie=true; oaidts=1767099879\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 6015\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: \"694a8a3d-177f\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6015,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, interlaced","md5":"cacd53100e7d31ae7b404a98e84ffe07","sha1":"f847c273bcf0e46bf55210e2ad9c98f108a16f6a","sha256":"9a13272a282dbcb3640a3e39a2bb1ba96c6ba5c7ff730d84d7d9ddd8a291724c","sha512":"d1717a6c9a90c6cc084d0f976d1cfed82d73fe08cdc280c97b680d60628090975de5da35c0dd32cb9f1205b4522dba9977c3ba7cb9d8a97770fc1a5b38b17b25","ssdeep":"96:pq0fSwKYPmvGmB6J3vW2/EPL1albpwAxLmkEfeU37ICI2FidSryKfOZCepkOpZNr:pq+SwKYPmvV69lcPL1a3wKmk2evCdQd9","tlshash":"75c18d96cd231027da329832247307cecd4af43bd9922395629205a61fd9c8caf8e793","first_seen":"2025-10-06T18:06:11.210074Z","last_seen":"2026-03-26T17:02:07.818752Z","times_seen":1027,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.RjXfrkDn.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/index.RjXfrkDn.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-2b7\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":695,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (695), with no line terminators","md5":"57ea00fa53317344f16b88dbc6b3213f","sha1":"c1c98bbadec949ab8dd3122f362ea8d3d753c0c9","sha256":"aaf49bacf9b122d3efa0f5fd73d062e57d6eb3e388afd0c80d4aa78966325fcb","sha512":"78ace10dd5c0a5d8595808fcbf919d682e64c14008f20b4b0e6ff12a44e9cb0bdb14b49ad704b985f17dbac112d2a1279258fd009351e6d6dbb47c3af8693b4f","ssdeep":"","tlshash":"ea017b9047f33b4ed28d16aec1594f223a8e907bc49c8ee0f22a86781259fec4444377","first_seen":"2025-12-17T05:47:47.221393Z","last_seen":"2026-05-14T15:03:20.55257Z","times_seen":1605,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useMainExit.l2G2lTTP.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/useMainExit.l2G2lTTP.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-142e\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5166,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5165)","md5":"96d26badadb8460d5fcb1a3f2408f1bc","sha1":"a2ad48b72a3f1668f600ee3a5ab0a1e5d3243e05","sha256":"fa129ff6760ac1653ab04ac5677f1f139ef1dd037d01624ed6b4da4a312689ad","sha512":"9bec7e668b15a4e57b15577cab08b3acbf9b470f6035b7faee9541d2ae3dde4b6dedbd868b669dbfd0e97aa061e48868dcb7fd11adcb61985bc6b72c903160f5","ssdeep":"96:fQyfH830UKHhchg3I9BIiyYRfKMk/2IHYIIIlpwwD/VyhwwBssSAZAlb:f5y0UKyhg3I96iyOyMw4M7wAiwgX6","tlshash":"35b1778ff47910fc7b96c9dde03391e3193325062a899174a4df4f28177428a627bb57","first_seen":"2025-12-17T05:47:47.227033Z","last_seen":"2026-01-08T06:11:29.32387Z","times_seen":354,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/getRandomIndex.CEP3EF32.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/getRandomIndex.CEP3EF32.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1e8\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":488,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (488), with no line terminators","md5":"2d7b3f71c11dbe119ec76b5442ef5e2f","sha1":"628510b7dc4f31c0c37406a296dd1991f75da434","sha256":"a59e870cf8f0084faa7e8674fe8e1a0af3e717e29949dbb940d3fed8fe649c82","sha512":"6b557507dae5cdc28b640f8b2d0a3c23e16e4df7e311aaafb36035f680efdcca7911df16ac3b9bd95c059ccc3abe67302d944f0354d99f5cfa1e048d635c63b6","ssdeep":"","tlshash":"46f00e84bbf02a540017226cc1ca2102344c81b34aed0f61e13849687378bfed128a83","first_seen":"2025-12-17T05:47:47.255695Z","last_seen":"2026-05-14T15:03:20.489156Z","times_seen":1227,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a\u0026ruid=9455f47c-6a9d-44f5-912f-93344a68d7f6","fqdn":"datatechonert.com","domain":"datatechonert.com","tld":"com"},"ip":{"addr":"185.49.145.45","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datatechonert.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 17 Dec 2025 00:00:00 GMT","end":"Wed, 23 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:2E:6B:01:85:64:63:90:B2:E0:2C:F2:15:38:95:06:80:0C:8E:D9","sha256":"84:19:B4:33:6F:7A:90:05:99:85:ED:15:72:80:F8:B5:BA:BF:35:38:A1:8C:D1:14:B6:0E:46:2C:A0:DF:78:95"}}},"request":{"raw":"POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a\u0026ruid=9455f47c-6a9d-44f5-912f-93344a68d7f6 HTTP/1.1\r\nHost: datatechonert.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1798\r\nOrigin: https://cdn.lcwss.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1798,"data":"L\u001bRR\u001f\u001c\u0026\u001c\u0014\u0005g\u001f\u001cK\u0012\u0003\u0001\u0005P\u000eL_\u0003\u000e\u0011\u001aX\u0016\u0010JO@T\u0005\u000fT\u0011\u0003\u001e\u000eP\u0018L\u001fA\u001b\t\u00147\u0001\n\tWN\u001a\u001b\tICPZGP@\u0014\u0002\u0015\u0003\u0003\u001aX\u0013\u000eJOS\t\\K\u0015C\u001d\u0006IH\r\\\\\u001b\u001bD_\rFCYDW\nE[N\b\u0002LQK\u0006_A\u0015NK\u0014@TUJ\u0002\u001b\u001aSI\u0015C\u0003\u0016IH\u0004BO@_P\u0014@TUJ\u0006\u0003PKC\bQXZGPG\u0006O\r\b\u0003\u0004NH[\u001b\u0002@\u0002XK\u0001QFL\u0018\u0013CLW\u0006\u000b\u000b\u0006VF\r\u001b*\u0006]\u001d\u001cZ\u0015\u000f\nIH\u0004BO]JFWX^[%\u001a\u0018Q\u0005\u0015XN_@[R\u001c9\u0004Y]\\A\tD7\u003cUS\bGI\u0002A=\u0007\u0005D\u0000UMO\u000f\u0007\rZ\u0016\u000fRDQ\fGI\u0010A-\u000b\b\u0019[A_\u0007\b\u0003\u0006KTHH3\u000bJ\f\u001fV\u0019E_XF\u001a^O\u001b\u001b]FX^HDW\u0012\\KC\u001b\b\u0004\u001a\u000e\u0000Z\u000f\u0001\u001aIWPW\u0012\u0010\r\u0002\u0007JS\u0010J1#U\u0002\u001c@\u000b\u001fYX_\u001b\n\u0000\u001fE\u0003\u000b]\u001e\u001cK[\u0003\u001d;;\u000f\u0007\u0003C\\AX\u001b\bT\u0018\u0011\u0004\u0015\u001f\u0010\\\u0016\u000f\u001cQ\u001bG\u003e$\fP]B\u001f\u0016\u0017\t\u0019OH\r\u001f\u0014\u0017\u0003\u000b\u001c\u0017FT\u0004Diz\r\u0013\n\r\r\u0007\fY\u0005TI\u0005\fC\u001d\u001bQ\u0019\bE\u0003ZE*-BJY@M\u0000\u001d\u001b[\u0004\u001b\u0007\u001e\u0018L\tE_\u0011\fXFUJ\u0005\u000e\u001aS[Q\u0015\u001e\u001e\u0018H\u001bA\u000eSW\u001dZ\u0019\u0013\n\u001b[\u0001W\u0004V_\b\u0004\u000f\u0005\u0011QC\u001eBKES\u0003KHYCU\u0017\f\u0017\u0017\t\u001e\u0003\u0007MQ\u0016\u001d^KVEGUN^BS\bYM\u000eVL\u0007\u001bO\r_C\u000e\t\u001d\u0002HJH]ADU\rL\u0004\"]\t2\u0017v%'\u0004aC{*.!\u00196Sm-JxG\u0007\n^;DS=\u0005ld\u0004\r\u0006K!\u0000 I\u00055V\t\u0010?\u003c \u0000?KD\u0004\u0002\u0006H]A]AS\tXJ\u0000TX\\XC\u0006_KD^\u000eiIQ\u0001\u0000C\u0000O\u0003I\f.\u0013\b?\u0019m!\u0006alD\u0010\t\u0003\u0010U\u0010;\u000b\\\u0010]\u0011\r[*\u0026r\u001e,\u0001Z\u001b5R\u001e\u001fS\u0011_\u0019DM\u00182X9*X\u001d9Fqi\u0000=)H\n\u0017PR'\u001e\u001f\u0012\r\u001cV\bq=%d\u000eDb5]!\u0001\u00026g*\u0018n ]\u0026\u001cTG\t\u0019\n\b\u0004\u0000MT@QMU\u000fO\n^\u0014W\u001c/\u001cP\u0026\\Uf\\\u000e\u00136\f\u001a\u001c\u0010\u0000\n8s%;H\u0018\u0001_S_\u0000ZR\u0000\u001f]\u001cZ\u0014WZ\r\u001f\u0000T_\u000b^\u0013\u0007\u000b\f\u000e\u000e\u0000\u0000LQNP\u0014DK\u001a\u0012\u000b\\L\u001d\u001d\u0013FS\\\u0000\u000f\u0004\u0006C]A_BDN\b\u000b\u0004VL\u0018\n\u0000k]P\u0000\u001fJ[\u0013\u0000D_S\u0018\u0005XI\u000bX_V]E\u0012\u0014\tRRA\u000b\u0002=\u003e\"1\nv\b\b\u000b, \u0007\u001c\u0007y$\u000bGXKA\\\u001e\u001d\r\u001e\u0010q\u0019Du\"$\u000fF?P\u0017\u001c\u0002nTU0\u0006\u00188#.lY(\u001f\u0013\u000e\u0005V\u0000_]O\u001b\u001b]QX^IDW\u0016BKC\u001b4\u003e-I^\u0016\u0000\u000f\u0015\u0003\u0002\u001aX\n\u0018\u0018WX\u001a\u003e\u0010WRXLGPD\u001aO\r\t\u001f\u0014\u001f\u0012\u0018\u0004WX\u000b^U\u001b\t\tLQF\fBOST\u0011\fWUUJ\u0007\u0016LKC\u0014PFL\b\u001ak\u0001\u000f]\u001b\t\u0006VF\u0017\u001fWX\tE[N\u0005HT\r\u0013X\u001d\b\u001b\u001b\\E\u0019\u0014\fJO@t\u0000\u0017L\u0019J\u0016SDkXY\u0015\u0015\u0011^\u0013\u0000\u001d\r\u001b@\u0002\u000f\u0018U\u0012\u000fBI\u0011\\1\u0002USl_\u0014\u0000\u001c\u0010WX\u0015XU\u001b\u0016\u0003\u00004\u0019Q\u0017\u001ehUVX\u001d\u0010\u0011JOP\n_U\u001b\u0002\u0005\u0002\u0004\u0000k\n\bGM[\u0014@VMDW\u0014]\u0007\u001dV\u0013HTIP\u0018L\nVTVF\u001b\u0000\nJOR\u0014K\u0017UCPL\u000e\u001c\u0019;\u003e\u0015\u0015\u0011X\u0016\u0017[RW\u0007VD,jM\u000f\u0000I^\u0016\r\u0002[VAi\u001d\u0005\u0014\u001d\u0001@\u0002K\nK\u0006\bLGPD\b\u0001\u0015\u0003\u0011\u0014VF\u001a\u0004\u0001@\u0002\u0012\u0004\u0015C\u001a\u0002\n\u0006R\u0001\u001fZfWS\u000e\u0001\u001a\u001c\u001a\u0010\u001aS\u0002\u001b\b\u00191\n\u001cP\u001c\u0002^]\u0011\f\u001c\u0005\u0015\u001b\u0010N\u001a\u0000\nf\u0015\u0018\u0007\u000f\u0017Z\u001aO\r_RZ\t\u0001UJ\u001c\u0011g\n\u0011K\u000e\u0007\u0007\u001e\u001fkV[hVAi\u0014\u0001\u000e\r\u0007@\u0002\u000f\u0018U\u0012\u000fBI\u001bG1\u000e_K\\[\u0013\u0011\u0014JO\u0004Y\u0005\n\\MH\u0007\u0018-Q\n\nR\u001b\tP\u001b\b\n\rY@Q\u001a\u0026^\u0004\t\u0005\u0004P\u000e\u001a\u001fB\\\u001f\u0014\u0013\u0017\u0026\u001f\u0010\u0000g\u0002\u0010MCP\b\n\u001eG\u000bA\u0015P@i\r\u0001\u001b7\u001e\u000bL6O\tW5\u0001\u0019-Z\u000b\u001aRK\u0011\f\u001c\u0005\u0015\u001b\u0010N\u001a\u0000\nf\u0005\u000f\u001d\u0000\u0006[\u001e2DXUW\b\r[R\u0013\u0003T\u001a\u001c\u0015C\u0003\u001d4\u0011\\\u001c\u0002ZPF[%\u000b\t\r\u0007\u0003\u001aS\u001fX\r\u0019\u000b\u0016^\u0016\u0000\bD\u001b\t\u0014N\\O]BQ\u000bZO\u001bMH\r\u0007\u001bQ\u0000\u0019hPW\u0014@F\u001c\t\u0016\u0004\u000b_\u001dXL\t^]\u0016\u0019Z\t\u0000\b\u001e\u000fJ\u0007\u001aEMZ]ZIZ\u0005^\\_BULA\u0015XUP\u0013\b\u0010\t\u0001\u0007g\u0000\u001d\u001b[HLGP@\u001c\fQ_ZU%\u0017\u0016\u001d\u0007\u0001]6\u0010]CPLZB\u0006WX\u000f\u000f\u0004\u0014VF\u0018\f\u0003\u0007J\u001d\u0010J\u0004\u00181\u0002\u0016\u0016TO\u0015\u0015\u0011U\u001b\t\t\t\u001c\u0005V6\u0010]CPLI^\u0016\r\u0018DM\\[%\r\u001d7D@\u0002KN\u001bMH\r\u001e\u0001@\u0001\u0000hPWiHFCJWN\u001a\n\u0015P\u0002\u00011\u0002\u0016\u0016TO\u0006\t\u0001\u000fBQMYDS\u000bPL\u000bSY_YC\u0016BOTV@BX^[JY@U\f\rQ\u000e\u000eLQP^\u001d\u0019V^\u0011\u001aX\u0016\u0026\u001d\u001c\u0006\u001aS[\u0000U_[\rF\u0003\r@\u0001X\nRWPM\u000e@O\u0001XK_LS]XF\u0000\u000f[\u000f]\u0004PLFUJ\u001a\u0003g\u0000\u001d\u001b[HLGPU\n\t^MZY\u0014\u0005\u00157\u001c\u0006KKCb\u003c\u0017"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Tue, 30 Dec 2025 13:04:39 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 12\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://cdn.lcwss.com\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"adb4650bfc9d2a73d4dd69583b0ceb14","sha1":"1ce399d6e936232aaf2192cd7903a279c5015f22","sha256":"21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed","sha512":"3fbce22572bbed1aada0f7c6706f16a97e7c0ea132dfee1a7eb80f5e68da1cc63c891a5bc3ea8e87f0c97be3002212a0efbb2af9553acb45e0d447a685cd805b","ssdeep":"","tlshash":"436000000c3000000cc00c0000c00030ff300f00000f00c0000c00f003030c0c00c000","first_seen":"2023-04-05T07:30:31Z","last_seen":"2026-05-14T14:04:33.12489Z","times_seen":56829,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":183,"dns":10,"connect":17,"send":0,"wait":18,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_27.DfN84U4G.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_27.DfN84U4G.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"bf055eb99ca8180b64493223ea24730e","sha1":"6fbb3f7c68f152c4aceffbbe2ea856e447388f36","sha256":"fe74b15e8618a85b8fa1fdec1a394bd9723e1dc2b70af6b361ac4e16b7772027","sha512":"30551ca3dfd2b8dd37ad663852aaa1c92e5b1632e6fdae18abc1920cba31c0d8774d1393e5905b67ef72e793c8328ba9a514a1e85cc522d7d724acaf8c62241f","ssdeep":"","tlshash":"6bf0a3815bf48d58802e17acd25761513edc90735acc1f26d278cbbe535de8ea814643","first_seen":"2025-12-17T17:11:29.090997Z","last_seen":"2026-05-04T13:08:44.420067Z","times_seen":94,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_36.CDANlqMZ.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_36.CDANlqMZ.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"74f73413f11b4e0221f394e113dfeccc","sha1":"53f04fb4be5657934ac7af99548d3becf0a5e9a7","sha256":"0e075be0c8090b3633a1805b3229876968cc914093afe718949b411ee1e94c33","sha512":"fb7d4961bcc39ca6ab39f209527b568669f5f1cb050ecaebc3848a48a1a897b9af69bb8df710f41c1d8a0ebc38fc0a4b68d6c6a7b0432cda4a9cea5a7025d313","ssdeep":"","tlshash":"8df05cc667f09e59413923ecd6961402b79c113782dc4f51f23c073b93aeadf8911243","first_seen":"2025-12-17T17:11:29.088109Z","last_seen":"2026-05-04T21:01:28.684735Z","times_seen":96,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.Cd5VM3Qz.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/index.Cd5VM3Qz.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-17a3\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6051,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6051), with no line terminators","md5":"ded9fdd6275cb600551d7c923fff0bae","sha1":"5812d5f8c5f2cd8f70e7ecb1036bb71dc83f0d15","sha256":"9fbb42c6f6e517f8b0b0e15d28a33b2ef5ecfd5cfa5b860311075e54d06d78e6","sha512":"722a8544286ee7e656327ae2b1c10dc87cee5971167770138f716f1e174bfdf57c74b5502c76b97df36c37e76b810897054b1f2a074e198ced9dd0285bfc792a","ssdeep":"96:V7NWrJeSeVvY5n42z+o3gtVtHCN3cfTSJA0q4bm7qfqLue6D2h6usyPb0RU:fjdY942BgDTKacBZD2hCyPYRU","tlshash":"53c195843669e09e02f73495692f2c47f1f08161509dc4a5ea11f2f23cb498bca37b7b","first_seen":"2025-12-17T05:47:47.269952Z","last_seen":"2026-01-12T12:33:46.047203Z","times_seen":393,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/url.0PWJgNjc.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/url.0PWJgNjc.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-546\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1350,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1349)","md5":"45fea909e3c40cdcd32c2816f141c315","sha1":"035c98f17e68f2f9857c09d42e83f2d70ad3b6bf","sha256":"e186dede420b741e4dc21ff97236ff0e866bf5d999e9ff5180be3ec55123359d","sha512":"7b434f902d985efb23553e0f23f7b886e8bf5fd6601bff9d0e82023aeeb7ce480ca7d8fde2e6c0fc58deb33e43c8351cecd4795a5ed87abb450851edcbd31ac6","ssdeep":"","tlshash":"152183c46bb6a2a151bd528e9a623711b33b0dab5d8f9180a1782d3033165cfd93908f","first_seen":"2025-12-17T05:47:47.257708Z","last_seen":"2026-01-19T10:31:19.240606Z","times_seen":466,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/cookiesLogic.DqpEH5La.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/cookiesLogic.DqpEH5La.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-c40\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3136,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3136), with no line terminators","md5":"e371e914226fa7d9ff2a2e01b6458caf","sha1":"f2702c58112961e30edf112aaa13a5c2fbed0072","sha256":"8b6e3e2dbbddb24be43ccc0e3dc73794b2017f95de34f43ab3257f717259527c","sha512":"841734c4d07949b525c1942f83fb223aff270f3b97fb96484de3c2894ee931da0332f0d2774e6466ca1225ddea1521871969698634b1d2772388903b9bddaba2","ssdeep":"","tlshash":"07514287b530a1f8418aa8d9db20713a6371479636d4c5f8e0a94c2017e9d8b6f3f32b","first_seen":"2025-12-17T05:47:47.228547Z","last_seen":"2026-01-08T06:11:29.271965Z","times_seen":355,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useZoneProps.CxUgpgnk.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/useZoneProps.CxUgpgnk.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-b90\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2960,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2959)","md5":"39126da42751cbe8e85e3af060e2c223","sha1":"81f2d827907b212fa737eaf09091e40e6317065d","sha256":"7be8a8c2d4bc2463e9dcf935f9f5b6729182d53124b2289711170a285c29edb8","sha512":"641b51f6fead6eb3f52740e11106cff258c308b4786bb935bab6bebd7db61a0adc73db70f089d4a2c4e0bc286216e0f6ac1bd96819488f4f36d7f29843d0abf4","ssdeep":"","tlshash":"ec51c08fd12620590e95cfbdf87925173ed6c22a79868d4823c4a83c41e8ad522bf7a5","first_seen":"2025-12-17T05:47:47.270956Z","last_seen":"2026-01-08T06:11:29.266624Z","times_seen":355,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.CrtMtsQS.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/index.CrtMtsQS.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-755\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1877,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1877), with no line terminators","md5":"86ef96c86a596a8a2ce71984b2038926","sha1":"770868d538ec117cfbf192c443366381781b012b","sha256":"2226b9dd214039e623fbd422de669ca5291611a7a78a5ee363fb2bc04c63d8c2","sha512":"2407f6eacc8660879d6b2c60cb6cccabbadb1fb210af30aef05deee786af1422b760dd710b4a6b23f9594c161597c300d08c9aaec695e45fb25e69adee1a8674","ssdeep":"","tlshash":"f541cc64b5aaee36667d00ed93b9330637ae495110cd5e01b37a4236c2b9facc1fd285","first_seen":"2025-12-17T17:11:28.972051Z","last_seen":"2026-01-07T11:36:20.269304Z","times_seen":33,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"browser.sentry-cdn.com/7.108.0/bundle.min.js","fqdn":"browser.sentry-cdn.com","domain":"sentry-cdn.com","tld":"com"},"ip":{"addr":"151.101.130.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sentry-cdn.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q1","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 07 Apr 2025 18:50:27 GMT","end":"Sat, 09 May 2026 18:50:26 GMT"},"fingerprint":{"sha1":"00:4D:2B:16:F6:29:29:D8:2F:20:48:BD:32:13:96:5D:37:EB:F8:25","sha256":"07:FA:B8:3E:6D:AC:BB:16:5C:22:49:01:30:87:B9:66:E1:FB:75:FD:50:1B:81:91:9A:06:CF:FF:A4:67:5D:F2"}}},"request":{"raw":"GET /7.108.0/bundle.min.js HTTP/1.1\r\nHost: browser.sentry-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cdn.lcwss.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 11 Feb 2026 14:26:25 GMT\r\nlast-modified: Fri, 22 Mar 2024 08:50:10 GMT\r\netag: \"31b0198dce84c8fb94a01597ce4fd852\"\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\nage: 1213959\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: Fastly\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-length: 26058\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77924,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65446)","md5":"e8b9b14c26da487b1f60b6d83de21679","sha1":"baf0e15e8a66d5f9a3941c795c879966d46b7394","sha256":"ea656e60afb1837bad760edf51698f5f3d763875dad7342fba8b079acc0a980e","sha512":"1bae29b8b77765b0c57096832568fe4b7a413c327c54dbc2ba0c9f2ec9e4a35bf58a4ca1be5273e8a7fe3e519c891f2c9b90436a588881252fb311c85ee8a916","ssdeep":"1536:bin7bo2Wr6YogMAj3U0WMkOdc3LE4q7XdJkWFm:mn/o2Wr6KPS3LE4q7Xzlm","tlshash":"5c73b5c9b1d2b02147d329a5917b0106f73a5d90344bc1a4fa6cddea3da604ea2b7f3d","first_seen":"2024-03-30T19:33:02Z","last_seen":"2026-05-14T11:54:37.800815Z","times_seen":845,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":94,"dns":2,"connect":26,"send":0,"wait":27,"receive":8,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_12.BUkTtLNb.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_12.BUkTtLNb.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"af31424f169f30d89cffe6edaf196eb9","sha1":"aca1510f49d2e1d85e4810863b9daa0d6358133b","sha256":"7be0d9a026c1bba93576bb9f4d8ee5738f54d2521251a91587b5c2bf3f9728be","sha512":"3af51e5bc083b15d56b4cf0b01c1188fdc24e3f26d3d1e876367fd6a3f81a434d38e240aa3f637e2f51ce734a44865f76d2140bdf8b3829d5e4f39a38d54a36c","ssdeep":"","tlshash":"33f05c946bf01a59c12912ede2855406716c556352dc5f19e17c0a3b53addce9a0438b","first_seen":"2025-12-17T17:11:29.046768Z","last_seen":"2026-05-10T03:30:41.563753Z","times_seen":105,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_49.B3tM7IGr.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_49.B3tM7IGr.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"efe051a562f859103331f2abf8ce4cea","sha1":"63b70c0faaad9e4244a4731ce02f47058d79d494","sha256":"0bbc11e528738e5bf0af3b13cfcb58c2872ed4455bab9b6231185a425168cc59","sha512":"3bec89eddeee9fa65cbb33f9d6cb20c9932683e5df6130d1df3f01a7404a3880d6d8d21e3e4209ca1e9277641949445f64894854866a06260f959d13fd93e61a","ssdeep":"","tlshash":"caf05c8457f4be4941be125dc25556423a9c1232528e5f52d33c4637a39dd9a5d00383","first_seen":"2025-12-17T17:11:28.993755Z","last_seen":"2026-05-08T21:02:09.326695Z","times_seen":92,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_48.DKGTIiJd.webp","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_48.DKGTIiJd.webp HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9576\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: \"694a8a3d-2568\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9576,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"335f506128e45e128ef20d61e0aa7901","sha1":"75102c92d7302ba5aa37ea51161b70b3832e6e7f","sha256":"e76bbbf6f84cddb5a8ab8f3e7f7e5ad413dbdbc802dab0a41301e64d63ab9009","sha512":"624149ac7282d154a2035da6c8b42b9b174901e2671a447e8d8d66302a1854e4ed9cde5602b989f0a72fca9203f44f1ef872f50b6f52619942728c4c53b395a7","ssdeep":"192:Mz8fhpZ0cp7OTIpNL8Ck8+viwuVZ2mmmZk1NoA0z287+Pzqvce:MzEHZzpkIpp68+6wumBmZkx0zhSzqke","tlshash":"7712ae661bb4118ec4611e7d13199b4ba9df3f243283e5ceb042feba0746ecd857d681","first_seen":"2025-01-11T07:04:20.935058Z","last_seen":"2026-05-10T13:02:40.368562Z","times_seen":56,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_4.BNtp2gZt.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_4.BNtp2gZt.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1be\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":446,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (446), with no line terminators","md5":"f794ec74a8bb05ddcaf48fd5c609c6d8","sha1":"2d4d03820c2b237a7877fbdd528c764104bede85","sha256":"4cc2c09367e414757bfba7a44c87da4de445c8bcdbe0c29cdc0ef700a8eb75a5","sha512":"e6ac11f5d1ceffcdd6a8cc8d6f90903f22422da6ece5ed1ef7e142c1983d5f9a73763c1c358694620558f8acb029a17dd707485516013c34c9d018e77b4d9b0d","ssdeep":"","tlshash":"32f0dc4713b04f194266139cc69510063574022282dc0f10d2790ab663b97cd9a10283","first_seen":"2025-12-17T17:11:28.99774Z","last_seen":"2026-05-10T03:30:41.562704Z","times_seen":119,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_15.C52pB-kL.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_15.C52pB-kL.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"586bcab55912f8e2b0d3739ca888823e","sha1":"14e66898545fa46800b8b211897f22430b8584a7","sha256":"fcb9644442402551f3ebe66d7f007fb06791f8cc0a003b46143c44a07d39ae5c","sha512":"a784111f62cbb5a046a252e052d79ae23553cfec530d6758da0b6eee5c0cb9086652d0cf72eb04df404b731d864da74846ebacba469c70b3a89af3788d4f4113","ssdeep":"","tlshash":"80f05c45aba05e59c13923ecc6926405715a0137d5dd0f91d13c8b3f67f86d95b20243","first_seen":"2025-12-17T17:11:29.027494Z","last_seen":"2026-05-04T13:08:44.347318Z","times_seen":100,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_26.VIV8BA0n.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_26.VIV8BA0n.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"4392d767d41cd763a75e66ac9df27b5b","sha1":"9886438be45716d2bb1ee536f69fe224e77c4638","sha256":"aa09cab2ca8c7c0930d4cb7126e9998840482849d0738f0be224954060aff107","sha512":"34bbe06442a1173e31b47cd24f7f7e7f538ccc0b2002280d7aba2defe3253e79ed4ca8549c13e74e3b6931aa971c129ece6a3959abb657e67a7aa97cb615b8a0","ssdeep":"","tlshash":"5ef0dcc452b06ea981b9534de24b128135644123029c8f01f17e0f7b035ca8e84043c3","first_seen":"2025-12-17T17:11:29.086029Z","last_seen":"2026-05-04T21:01:28.717835Z","times_seen":102,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_2.WbUh4uYm.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_2.WbUh4uYm.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1be\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":446,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (446), with no line terminators","md5":"cb546b619ab5a0c19604fbbb5a506343","sha1":"f12e0d98715b3222b6385cb40e4eda0b1fcc75b7","sha256":"ba7df17001994474592b5ff54a75e94898323bfd933564364fec6799ea253aa7","sha512":"22604dbbc7f3c71d28a8e35ac5166f0c43ee08df32b57efc47f0bf81753dc3399f1f6d5f4d073671d03bd098d4a592b6af7485486ccc38db3e6582e6c3fc55e5","ssdeep":"","tlshash":"f0f055966bf02b49806912dcd295540a77e8117612cd0f65f37c0a3aa379daa9910783","first_seen":"2025-12-17T17:11:28.999475Z","last_seen":"2026-05-04T13:08:44.454355Z","times_seen":93,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_14.DT0hNIxq.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_14.DT0hNIxq.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"1e4356d2d57dab51105f98843d004a74","sha1":"a742376c1ff7c4da6bf03967c0239e322ae2b19e","sha256":"851aadb4fcaa095e1061cae9ecdc6ce911444b1d95cd5cca3a0d24acc81fd438","sha512":"7f30026903f55df8f228d34dad2173441193e6732245594a101e918d317591db44fb34a12a7b865dd52934870fbf7c8c2f5fd2c81ae741d3cb1b76baf164f7d7","ssdeep":"","tlshash":"10f05c466ef05e25403913dcc3926c4176e91462078c2f92e17c063f57adec9a904343","first_seen":"2025-12-17T17:11:29.113427Z","last_seen":"2026-05-08T21:02:09.311553Z","times_seen":100,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_28.BVDXIPjz.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_28.BVDXIPjz.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"30b981f4f46ccbeaf776be2127883a7f","sha1":"c706f36c3f6b94c555c79a6597d19229c1eb1c6e","sha256":"d3cdedb02ba34eb20d8d59e2bc94984c579634dd4a414a607f1bf7e8c58e74db","sha512":"db9483777a74f3effed2bc96db93f7b403ae58fa735eeac65efa51a0bb8c91ca586a40f14e9a58a00901fb7893af515f4e64c05104e656125675d93f8e78853b","ssdeep":"","tlshash":"2bf05c85bab05e55403d53ded286650335850533b1ec4f05e1b94b3653aa5d98624342","first_seen":"2025-12-17T17:11:29.074537Z","last_seen":"2026-05-04T13:08:44.381076Z","times_seen":92,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_29.cB3ieDkU.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_29.cB3ieDkU.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"183e529ae68a0f68f4ed29cbafd55607","sha1":"c7e6c75ccd97a51286b2b85eda2bede23bb8fff6","sha256":"4e2bcf45a7cc2858c5dcae64609667506632ee2676bcc7967e7ab88e03be5ae0","sha512":"582e3434969f4129cc937915af6782580ce9f80c077d15bcae0e69ed2c1f5a0d2d8c3ce6c24bef67539774bb4d5c3b46d713cc7413e425cbf424187d2171b977","ssdeep":"","tlshash":"ebf05c9056f05f148136139ce25a110139940133d7cd5f52e37c073b63ae989ee40287","first_seen":"2025-12-17T17:11:29.033392Z","last_seen":"2026-05-10T03:30:41.564276Z","times_seen":88,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useTeenExit.CLVq4LfT.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/useTeenExit.CLVq4LfT.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-5ae\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1454,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1454), with no line terminators","md5":"813a3f3fe6cca026760de5205bf68bc6","sha1":"8d8e0ed16acc8224ed7089717dcbddf3f3224765","sha256":"70847d751d10506f21788ede343aa04d81311e745322ab8cb3138590bbc847c6","sha512":"53d06f28fde9f3b107853f980a268fdce22c9a2bc5f0b5b617ed05761f60fdd91601a416abf79ffb7f67f69d55080b8782cf000b81a880941abddea81fb52f6f","ssdeep":"","tlshash":"8c31108eddb086fc402e8dfee066f0325724226b6344c670955e9d7623286cfb827b53","first_seen":"2025-12-17T09:40:52.828928Z","last_seen":"2026-01-08T03:12:00.617368Z","times_seen":168,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/sync-metrics","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1089\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1089,"data":"[{\"app\":\"landings\",\"event\":\"load\",\"usid\":\"19b6f5c4a9a9585847b85c1\",\"sub_id\":\"1029854111395223121\",\"teenage\":0,\"project_id\":1,\"landing_name\":\"finance-survey\",\"event_source\":1,\"ymid\":\"7\",\"request_var\":\"7\",\"landing_domain\":\"cdn.lcwss.com\",\"landing_url\":\"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3\",\"source_zone_id\":10295867,\"config_id\":1167,\"build_version\":\"v0.0.655-verticals\",\"landing_load_date_time\":\"2025-12-30 13:04:38.000274 +00:00\",\"vertical\":\"finance\",\"events_history\":[{\"timeStamp\":1767099878042,\"event\":\"start\",\"timeOrigin\":0},{\"timeStamp\":1767099878274,\"event\":\"adex_init\",\"timeOrigin\":232},{\"timeStamp\":1767099878531,\"event\":\"load\",\"timeOrigin\":257}]}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: 153795eb5f5f8d3476eb603bed264df4\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-05-14T15:56:42.639741Z","times_seen":134466,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_15.r8OdX0es.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_15.r8OdX0es.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"40f722c151c8871468262d4e4d72ff16","sha1":"aef266a797e0c85b9b2483ac72c72c0a960c689e","sha256":"6f611dc71139765e6f2ab21a21a3be5afe7e93b58b447338e2c6fdca2b287f53","sha512":"4f94483f8b9c9febe9b7e47c851eb46e420ca37b07a7dcdb0dc2e695f542ca39694ca72dfe0c68131facf930db7d4d16a77330f41d679dc79fe18126e75a43fb","ssdeep":"","tlshash":"62f05cc57ef06e8ac035136ed246504132e8423a969c0f91d1784a3797a998e9c44343","first_seen":"2025-12-17T17:11:29.101692Z","last_seen":"2026-05-04T13:08:44.355098Z","times_seen":94,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_36.C8zTTy4V.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_36.C8zTTy4V.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"006f9b9e9743b8ec443c950286a63597","sha1":"16b29901f89840813da1ebc1e654ba994acebbfd","sha256":"a1804eaad350430e77b791af2b8578a215b7348c410d9d2394e28f380926f9d4","sha512":"3cdbc4cb5b55398fb034bd7ee2022df00a675f2f7780bd5388d1a98b79c1f8c65f6e4b905f1c5b9abf302d8f909935c09d464fea9f72755d0579d23db7785703","ssdeep":"","tlshash":"f9f0ec8557f05f49412522ecc2831901759842b692dd4f59e27d4eb757a9ed99d00283","first_seen":"2025-12-17T17:11:29.017274Z","last_seen":"2026-05-04T13:08:44.395904Z","times_seen":113,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_45.9CnpUjWK.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_45.9CnpUjWK.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"7437f472810214077f45198c3deb1531","sha1":"1f3330f47bcef7ecafa144957807c19d769d20ce","sha256":"d597a98c5c4af66288a3994977e41fddee012d64041c946155341dbab5244d69","sha512":"2be5a748fd0c1c921afc4e446b752591861bf9004349da0c2d8c87e6724d4c1ece1632b529fab87e16f8de89535746897cbeafae13b1e00551752cb43e5ade11","ssdeep":"","tlshash":"ddf05c8966f88e25456913acc245608375b8116763cc5f11e2780b3b93ede8e9d14743","first_seen":"2025-12-17T17:11:29.115266Z","last_seen":"2026-05-04T13:08:44.409691Z","times_seen":88,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/hooks.module.DdtoAe2N.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/hooks.module.DdtoAe2N.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-ecd\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3789,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3788)","md5":"464d5bb8d04356fde23f6c4e206ec333","sha1":"847faad28d33824a32b9135670546f2103b66784","sha256":"28ddb714c8129ad927aada69db90835571be92ab2242a790502bf9ac36bb9a75","sha512":"c78621bf8d5d6ad613403e4aa448e1afe715acfa4c61ec968a1c7721668b3245245d91d1f48b94db37ea10f01daac4d80ed167a549d212d6d80a77fa428fa33a","ssdeep":"","tlshash":"55712cec75b9b42143db763b927f061fb3366916988fc890712ae1e82e3441d2253f5d","first_seen":"2025-12-17T05:47:47.220407Z","last_seen":"2026-01-08T06:11:29.253Z","times_seen":355,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.jx7YVY8r.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/index.jx7YVY8r.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-2a7\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":679,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (679), with no line terminators","md5":"c1299ef3de7958ba64ee4f968e2d615f","sha1":"5d089589b9144f37bc2181cf3a2033644ee065f2","sha256":"bcc04b06e0014427e0594c54d147202615df95b0e8b22f68a9d1611a62209a2c","sha512":"9b2bf80948694abd5916a3b96c5e125701e4d895edff5878556c60bf85c0d984c96c6f769d90b8e46c7a5e8a1cb6fa9ce216a07a209188fde3099e12ced0e1ff","ssdeep":"","tlshash":"73017b661dbc7f54d41659acd40a2c6031e502534eed9e91eb2d4f79134ccce9a10143","first_seen":"2025-12-17T17:11:29.071963Z","last_seen":"2026-01-11T07:14:06.873678Z","times_seen":22,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useTooltipAnimation.c1mAZbq5.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/useTooltipAnimation.c1mAZbq5.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-68c\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1676,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1675)","md5":"c99a3d106e5b70004072ec6994b24672","sha1":"cfe82ab0a7c16e0c5aed5432eeeecedc959afa9e","sha256":"f23915297d72f335f2be5cbfbe4590720128b9f9a5ef6b376c2903650e17a88f","sha512":"878418028dc79efe82e86f33588eba334c103de5be47dad17372a047e7173fbfb49df8666109deae602828dca310415ebea0ecca13ab2c6c644462b0c23478e3","ssdeep":"","tlshash":"cf319ba8b591637ca04b439c916c7ac0280d12f1d44f4ff1f23a0675174cd58bd0e745","first_seen":"2025-12-17T17:11:29.079487Z","last_seen":"2026-01-03T21:05:26.195962Z","times_seen":21,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_14.Y4431cte.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_14.Y4431cte.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"be6d60955bc2abf911c7a8bccc3416d8","sha1":"5bcc09866d4b910a6db217fca2cd6c664c865eea","sha256":"3efac3a5371d643ea8c4406f0d9a594a5ec75098ce84ef30347925915285e59d","sha512":"026fa0e409d8ec24c15f6c519e412e9223243c6785fe59e1077382dfa731d4cfc5f7ab73453a613da9b5df6276157ae9129eae83dfa61cffb40a1dd74eedcfef","ssdeep":"","tlshash":"57f0dc8953f02916412a125cc35911413d981633469c8f52e3bc0237436c9dea5183c3","first_seen":"2025-12-17T17:11:29.007061Z","last_seen":"2026-05-04T13:08:44.375283Z","times_seen":92,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_33.BzY8EPZI.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_33.BzY8EPZI.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"e1a72877f6984da8c14704a152f815a4","sha1":"9457b49fea646c0d243f2aa704d0bdbb5817c59a","sha256":"2e212c97e339171f1dc6f7e4ea4f7958e00c6087cae0f1413ee8b966fd6cdcfd","sha512":"f53c998fbd5bffdff18ffaa9349e09e9f9262d44790978aca964c0e4190ec028c1720e4290655c93d995aef79e1063a242cea87e032deb00fdaf687fbf1405d4","ssdeep":"","tlshash":"d0f0abc4b7f05e58402a23ade36253013b98112353dc4fa5e27c873ba39eebec900283","first_seen":"2025-12-17T17:11:29.039195Z","last_seen":"2026-05-04T13:08:44.405473Z","times_seen":97,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_39.nj_sb_Pt.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_39.nj_sb_Pt.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"b94c74c0bd60fde55ba56b1ca031f500","sha1":"46e09976ce4e6291366335633734dc07fa40e86c","sha256":"782c3e8012caac35e4470a5d946ae655e481ab8471427c842aaa6c4182a06b24","sha512":"d0c3a0cd88dc0dcd202ee51e27ddae1a6c4e8b092a5e7c4f2acdf36709c326ba57bde30df3b32852760760b0ea13242a37ff228693787928ce9e4ef6b963d8c8","ssdeep":"","tlshash":"74f0ec856ab06915412622bcd2555a4674d8403685dcdb95d1bccb3ba39f9ded900283","first_seen":"2025-12-17T17:11:29.044889Z","last_seen":"2026-05-10T13:02:40.389458Z","times_seen":87,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_46.C1kCLdfz.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_46.C1kCLdfz.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"53c71d402baa9638817c62f244cb941a","sha1":"8758c725eac4efeaefa93276be8039c11f87c340","sha256":"863be3d865d8d4ecc2384991adefcf63c938e02ffbe93a3710c11a5522013289","sha512":"8f4f3c7891330b43fd4b41182d659aff953aa3f8d4887fc4c6858ecff51e811d7dfc67505c3cfe08d11ec8183efb46920a9fc82bce8f36d8791da7a9d3c0dd06","ssdeep":"","tlshash":"0ff05c8067f02e5c4029239cd247544636d50137a7cc9f51e17c877a535da9e9504343","first_seen":"2025-12-17T17:11:28.994604Z","last_seen":"2026-05-04T13:08:44.382179Z","times_seen":95,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fmscc.com/sync-do","fqdn":"fmscc.com","domain":"fmscc.com","tld":"com"},"ip":{"addr":"104.18.37.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fmscc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 14:43:32 GMT","end":"Fri, 13 Feb 2026 15:43:23 GMT"},"fingerprint":{"sha1":"17:EE:8D:B0:F0:B7:85:35:B3:2D:BD:DF:4C:F2:53:75:F4:51:D9:A8","sha256":"BE:13:9C:0C:8C:E2:C9:67:5E:D2:D4:0F:E0:12:7F:E3:0D:B5:DB:0A:3A:3C:3A:3B:7F:FD:31:CF:FC:6E:34:12"}}},"request":{"raw":"OPTIONS /sync-do HTTP/1.1\r\nHost: fmscc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://cdn.lcwss.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-length: 0\r\ncf-ray: 9b61be8728be712e-OSL\r\naccess-control-allow-origin: https://cdn.lcwss.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=_3xM.l9h7MnOE.xhtfAlL9gpTLjRjV.K2hNEgGynqO4-1767099879-1.0.1.1-IFj9S083mN1CHf__p.ZyAPmBmBIEfOcM1Ci26gDoQqwm7x7KQUvPXwjd0Ni1a9DwZRbS1VUV6iTXKA50thALmY.n7UAFIvWe7YCekSASDnI; path=/; expires=Tue, 30-Dec-25 13:34:39 GMT; domain=.fmscc.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-14T15:59:10.713383Z","times_seen":15173623,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":20,"dns":1,"connect":1,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.Z8Z-8Yyt.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/index.Z8Z-8Yyt.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-371\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":881,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (881), with no line terminators","md5":"6b4a3a6ea68f1ffd21cf78232bd7eb7b","sha1":"153732d3d5a035adcb9e17e79a5a02186131406a","sha256":"ee653bc7a8bdfcef21e38ddc480ce005b3fc7812afe92d57ceb52bef6410cbdb","sha512":"53def17055be6e5d23dea4844ddbbb0b75b65caedd198a3e99c143aec9959750496794b4c0030f06455796663ad4d16b24d059582456bc779d3173c03a2cd77d","ssdeep":"","tlshash":"e611236991f086a4c22e13ece15273053255647361cecfa0a07a0b3c676fecea40c60b","first_seen":"2025-12-17T05:47:47.214764Z","last_seen":"2026-01-08T06:11:29.272615Z","times_seen":355,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_50.BPGELZtB.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_50.BPGELZtB.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"88a987cff217c7217a4cb9c965b1dc43","sha1":"a75fe719ea5e3fd900afdda15166de227bcbf662","sha256":"2e61a3539a5df15c8d7db49ca70b8eceadbf537940e22e485bafb30d24348333","sha512":"715727e5d659c8e46ad9ba4217f3cea63ce5222bdfcff126acd4895b21ae3f5b92e0cf7688bf90b7db41580adcffafeec385dd150f29e418dcbfead88cb6845b","ssdeep":"","tlshash":"1af0278566f06954412512edc24651813ab8126362cc1e61f378062b83997ddd850783","first_seen":"2025-12-17T17:11:29.058276Z","last_seen":"2026-05-10T13:02:40.389898Z","times_seen":87,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_2.7JktJqxv.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_2.7JktJqxv.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1be\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":446,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (446), with no line terminators","md5":"ef1259c355e38cc866a57131f7875d25","sha1":"703eb92eecd560efdb7e5d8a199fc0693275cb1c","sha256":"600bc766fe4e0778d9720343a4ad69029061bb999f0fb6518c0c2d926d8f09b6","sha512":"61287e6065b8326b4d07ba1bccd9184b5224f34dc57895f7d1952659b8b46d5cb5833d749cb4fa938c126fdb9e444b2543d4726dbcbaa03b2da1e41483637f30","ssdeep":"","tlshash":"5af0dcc2a6f41a05402f129cc60270417a6d013362cc8f04e37906bb43abede5904383","first_seen":"2025-12-17T17:11:29.013313Z","last_seen":"2026-05-10T13:02:40.360636Z","times_seen":105,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/favicon.svg","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=gotucam24sjm8up46xmx8raty6kjsm5u; syncedCookie=true; oaidts=1767099879\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 28447\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: \"694a8a3d-6f1f\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28447,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cfad15d30dae3df09e5cdf3b91556214","sha1":"5c451c15700279f2a2bf7d58261eff6ba6c2d4dc","sha256":"9a353afca57aed8c872145fc3d8686a2a27c80655d3c5306bb03a5fde1e5cfda","sha512":"3dde52c8ab8bc6b9603c7111f50895700d410d03c5838666cbc3f95aba7592a1ebe9b6b544191b80967e2aaf95551463c1232b8929fb8355b4b43a4ff35c5226","ssdeep":"768:hKAtKOZ5G2H6P/8awFZkU9pDaFy2nbhoAmF:PtKe6MawFZkUbKy2bh7mF","tlshash":"05d2e0b064bf4b5c47658a05f22bcc1cacc6faa3051d53f35be8663269888f44b7dd92","first_seen":"2025-09-22T03:35:17.75072Z","last_seen":"2026-04-29T02:25:57.516388Z","times_seen":1043,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/helpers.fiiY6F8d.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/helpers.fiiY6F8d.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-8a3\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2211,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2211), with no line terminators","md5":"f3444bc7f609f38927f4fd7fee6087fc","sha1":"5f833301d4d2df0dc4028099c43458143927c173","sha256":"1ad2af884e821a5d7bb51e8c9a99e0140f9a293d98d44d16c7029e07fc1d5e92","sha512":"967f47de07f0ebffe7c82be2094bbc00830c1446066ad816e6474aded1fdd6dcaf0dde8dac266ffca944b26d90fc12a23d53d1228de00139c748bb5dab224363","ssdeep":"","tlshash":"7b41775d48a1cc70a38c65dcf6395e2215b6521738948b86f26f4b680a5cccf831377a","first_seen":"2025-12-17T05:47:47.216372Z","last_seen":"2026-01-08T06:11:29.280581Z","times_seen":354,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_19.3AcZYBxK.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_19.3AcZYBxK.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"813ca2222ba9b9a5ccd87e2840fe7bf2","sha1":"e24d2ce450890bef022d958f234e017df70797f7","sha256":"655e9803758a30ce9e797e8ee62dbb18306b73804c79e19ff63471105ff50ab0","sha512":"ad92f66c1a0bfa07b88b37626d40cc1077f46846ec5a5b156c866741765bc7988fe770b91e8e87253eac488506e6f26638f8bb20f6758b342361ff1911ac2507","ssdeep":"","tlshash":"d7f05c855bf43e9c406e225cc556205abe58512342ad0f51f17a073b436dfcd8e00783","first_seen":"2025-12-17T17:11:29.094216Z","last_seen":"2026-05-04T13:08:44.364261Z","times_seen":98,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_28.DZ0uVARj.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_28.DZ0uVARj.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"4f83a4e6d5918c28adea6b872b25cf91","sha1":"e53316efeb822fb201602b2282e5b3f7e7186d87","sha256":"bb47449e071818af29ffe75c30f487fd747f7929cddb7936c8f8f0092e8863ea","sha512":"ae7aba68176b2ba342ce367378b924fe08d957052e3d8793136d62b31c838a223e6aae8d412dd213793720de7178a64b1e5a45dda740ad47227240ec8b79f41a","ssdeep":"","tlshash":"57f0a38577f43a59822b12acc265144136dd012306cc4f51d27c463753fd5cf8440383","first_seen":"2025-12-17T17:11:29.043052Z","last_seen":"2026-05-04T13:08:44.409031Z","times_seen":96,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_29.B_aT5iYk.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_29.B_aT5iYk.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"82d06abe1aa825e875dcd17ba0de79ba","sha1":"2d66f3b506d2b0f58dce5756202a34ed930d50ad","sha256":"51aef67eedb683eab7b981eed9c5bff835a6981aa24ef8eaf14311dc80b4477b","sha512":"30e884ec9c62317cc9da40af0467e3e47c9d5e4721a35795fa7eb7203de0f28833d8e41d6f555298f90c32da3e356dfaaedebabb5a58343b612937e106eacc27","ssdeep":"","tlshash":"9cf027c16ae46f65843a237ec2a514457698102712dd2e92e2be0f3a936e9cd5c14387","first_seen":"2025-12-17T17:11:29.095459Z","last_seen":"2026-05-04T13:08:44.450985Z","times_seen":104,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_43.B8fDnrqB.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_43.B8fDnrqB.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"a7d6859267b15c1ce2d3bf25efd5ae09","sha1":"f50523431c3298d904bc467e1bb2fb26a724c8a4","sha256":"ecb5831ea9743f7418ad3527a12d1b69d3c3d8b605ce3b7af53c327cb1dc80ba","sha512":"8423f6815c57205f7cac22d17d54d2aad269579deceb624ff19d226124bc80a4898647229f965dfcd4d03e7e4c67bb30ed08ac3e6b5de370ea22b5aafcd0c957","ssdeep":"","tlshash":"fbf05c449ef4ea5b403d135cd6555401795c517356cc8f51d17c4776636decf9904383","first_seen":"2025-12-17T17:11:29.014262Z","last_seen":"2026-05-04T21:01:28.745498Z","times_seen":89,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_48.CCr_4oit.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_48.CCr_4oit.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"9acb088f245f352cf7514a3e296a0df1","sha1":"a605bb51140d64348d250eed7f8849c9f2f193b6","sha256":"e76b4c5babe0d20296238d8baab1329152de0bc7d8d0015f848d0f75fa1d7982","sha512":"4f18b6320133c4d9e7b2171ce8b73230e848fee57a31f1391143c4584729d3b72585fbde39fe357c0beb47adc2d08955a916de93b8616387d0135c8ff9a38126","ssdeep":"","tlshash":"aef05c85aff45e54c139135cd6172515769d1033568c4f91f23c46ba636db9e8c10243","first_seen":"2025-12-17T17:11:28.983636Z","last_seen":"2026-05-04T13:08:44.395338Z","times_seen":93,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_24.Be_XcdfA.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_24.Be_XcdfA.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"1f89dfd9eefd8850d7c3de85cd487091","sha1":"21400f46ed296c1d4ffdb042ecea798356474c17","sha256":"131a94df6fdab5f93f6dacb8eefd2550987424f5d42bb846302cbbdb92ce08a2","sha512":"2d581083532226596d56ed6076acefc6bc342ea948c1ea86637ba332612d9ff6f5dce06192ab61771c625273259bfc6955a4ca77e5ab4f5d7a78c1f166df162c","ssdeep":"","tlshash":"3bf055857af45e0c842912aec7a250013eab502a12cc6f62e27c0b3b7379dcae910793","first_seen":"2025-12-17T17:11:28.975344Z","last_seen":"2026-05-06T13:02:57.3163Z","times_seen":82,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_38.CRCW1fPo.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_38.CRCW1fPo.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"778facc96c34ed67448389c123494ac5","sha1":"822ab90a5304fa4136c5fac357fbd151ec0736fd","sha256":"818fba55ba8d39d6d268ca76d3e835b6efbe8cd46f5e572015f11d5e37d88e5a","sha512":"1e746b96daabef36df48791674abd147bae94d2b0880d61406230eeb1e5d1e64b6c959c900fb437854f41f30c785b2fd7c1d5439bd2db50614c6857402785204","ssdeep":"","tlshash":"cbf05c44d7f06e15802a12bcca8511417b6801679edc3f11d3bc063b43fa98e9d412d7","first_seen":"2025-12-17T17:11:29.114322Z","last_seen":"2026-05-04T13:08:44.323558Z","times_seen":101,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/iframe.XARsmtYo.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/iframe.XARsmtYo.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-3e8\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1000,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (999)","md5":"0e7a7b3109e11840e7464a8e5d790c53","sha1":"6b53fd02bb2c75aa4c30d287bd8229576e21fbc6","sha256":"f990d00b19833eba9668f0c6a1a6b0954a2e412b686f0379b94d9d02c0a41e53","sha512":"ea8619e54dab6a3b0f81e03eec39cf6b736724b74eb4667c167024933acf5cdd175269f144d542c5a9ca7232d79b72ee894f2f9ea5e7338ff17d0b5514bfb751","ssdeep":"","tlshash":"e8110e8e84f0066c419512efd66bb32174240657778d9b91a16d8fbc6729dcb8504bcb","first_seen":"2025-12-17T09:40:52.755818Z","last_seen":"2026-01-08T03:12:00.646906Z","times_seen":103,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/urlParams.BvC2X5TV.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/urlParams.BvC2X5TV.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-22cb\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8907,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (8907), with no line terminators","md5":"4b846ead436b8d9c059046376022877e","sha1":"e4aac924176600cf257d8104e68b36978abec3cb","sha256":"f29611f2afbfe4e7912a784962e6d2341e7d352d126926fd610d407a48b6e9e4","sha512":"d1c742c195ae46ad2dff61db1cedbbc4e6fbf97eea22366a777df8d6f33c5f245773e1cedb0dd166eeb29c6d01eeccf41e826368d68374040cc691c917906ce4","ssdeep":"192:YhZdoLRmRIvVvwEwhIWV8VapX+sXq4UvTvbkKKSkGL2j2rm:Y5f4Vahp+2q4E7fxKiK","tlshash":"6b0257accd69e28d1ab501d42248ef31632e4b1f6045e3a4fb715f5fd72ed3aac82254","first_seen":"2025-12-17T05:47:47.287181Z","last_seen":"2026-01-19T10:31:19.234824Z","times_seen":466,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.DE442wj0.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/index.DE442wj0.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-372\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":882,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (882), with no line terminators","md5":"df3e914580428a8af3efcf3767af0d1b","sha1":"5e77a95cd5d2f1b9c00c9ff336ca19fbbade7cfb","sha256":"37aa84ef20534863400780bec6d2c28f77a48cabc27fb41feb48eaf3caec8233","sha512":"ec22b4036b90a044e75892854d354354d7528a9e81f009ed589017e284f5506e86efeff7ded69ef4ac9cbce6262fccad1b1b528bfc633147a5ef7fb80455baae","ssdeep":"","tlshash":"481116cf5bd1a247462b57bef2261b01b936123b57cc8f10e1a5172932ce9aed910683","first_seen":"2025-12-17T05:47:47.213615Z","last_seen":"2026-01-08T06:11:29.264071Z","times_seen":355,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useCustomAutoexitFunction.DT1a9Lq8.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/useCustomAutoexitFunction.DT1a9Lq8.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-22a\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":554,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"27a49fe3c74a5c87d1870ce73a10e8da","sha1":"1e1317374b2b6dbe60fabdf36587244c86f1d7c1","sha256":"9a0aee2a7675733c5d2df24debf7099f5af55a7e0ddc144cefdd2a649f022836","sha512":"ca8bf03c5cdb89c1cfaeb09c3072effac842e25772cf0d51648a86071e951999aacb41200e57d34d566dec4247a7f10d8da9a13d849114906c8c43a250744c04","ssdeep":"","tlshash":"ddf0599be9f0a379408e1bddd52790126a52413722cd4f90b02d873e17faece6d19b93","first_seen":"2025-12-17T05:47:47.276736Z","last_seen":"2026-01-08T06:11:29.231702Z","times_seen":211,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/types.BGMreeeV.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/types.BGMreeeV.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-46f\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1135,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1135), with no line terminators","md5":"8506d4e19453aedbf3c1fc04342b89c9","sha1":"0e2bb5bdcf7088e8614858622e74e932b0c2fa2c","sha256":"184cd18e2112ed9660cd49257113c5aad97d659890668992cdc1635e21f374a1","sha512":"aea362c50d524712756f68f2889fc20a454c6d90196b625c6970314765b332c69bbca873363ba29779f6bcf904bb42f976a317349f70b3a85158398d0bd1b97e","ssdeep":"","tlshash":"a02100d1b6486b0ea53e3fddf0cb184036301123ce8d5683d2174722634fd49427dba6","first_seen":"2025-06-24T19:07:51.391409Z","last_seen":"2026-02-23T22:20:45.176058Z","times_seen":2159,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_16.B4Ubqub2.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_16.B4Ubqub2.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"9030e413d22c84843de395d5513a0aa9","sha1":"94955f7832d9c393203bfaa39fb8c6b898cfeead","sha256":"c0a1bf72881f0c53aeedaa1e55751da43f068d9ec3a95d0913708bfdcfcd1e65","sha512":"45df5a0b665653c88948856575b1d6eb140b615896b5711fb2849f1483774a015f873016e74f7c25ee7d1e0821b6fa642694880e76a7c7fc08f7cfa8e617bf5f","ssdeep":"","tlshash":"28f05c88a7f05aa6402e129dc259641535d90133028d5f62e2bd063a53adacf9c002c3","first_seen":"2025-12-17T17:11:28.964314Z","last_seen":"2026-05-06T13:02:57.335277Z","times_seen":115,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_24.DpaSnjK0.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_24.DpaSnjK0.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"db6adf6a2dfd6975d1204debc62c5062","sha1":"88bb33905a9b3fb9fc49e8f151ff0290901ddafb","sha256":"8c77a289cef6fd3550bd22be011d5b4a0ace061b544845cc17ba7cd7ea36c47f","sha512":"f6274ead1a2a1d744e0bee3a6756fe242de371a23080fad2384eca09261fb628f7d784d474c3a8067915a867365e5ca96a126f224a79cadca0984ad6471dd8df","ssdeep":"","tlshash":"f4f02b852bf44f06402e22cec71e211175882073a3cc1f8ad2380bba43aadcebc08343","first_seen":"2025-12-17T17:11:29.047634Z","last_seen":"2026-05-04T13:08:44.41491Z","times_seen":101,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_3.tzx13wh5.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_3.tzx13wh5.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1be\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":446,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (446), with no line terminators","md5":"5ac393cb8224d0bf20c016eadd6bcdc8","sha1":"4454c8b36af584ea3bf01beda9d24582e8324d55","sha256":"a05fb966b9be3d4e9824d04a8afef522ac45d980f6905608bcad3f8effa6f51d","sha512":"1901da2b8e27a011914cc0011133c30599fc3bfe1ea2dd1c87e13f7943e1fcba5f07713288a48852b5dbcedd6bdb188c70962a11a9c3a8248a5e2ccb200f1ecf","ssdeep":"","tlshash":"42f055855bb24e98802e129de2921a413da91037a3dc0f41f2bc0b3fd3a9d899e00687","first_seen":"2025-12-17T17:11:29.053284Z","last_seen":"2026-05-04T13:08:44.45498Z","times_seen":90,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/getExitDomainsFromLandData.CmAaG5m4.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/getExitDomainsFromLandData.CmAaG5m4.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-2cf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":719,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (719), with no line terminators","md5":"41ebe9afa6fc99b8dd6994de17cd4613","sha1":"c8cc1221c0a8d88e3edd3ee85fb5db386608c6cd","sha256":"70cb5d23b7c1762b7414844a5ec8207e099f9f51f3f9af2bb5610adb590d1ac5","sha512":"25cdedef33a4aaeafc35923e26723fcd1fda154088a30b647e1f9d71cafe91553c4f73ae905c54fbd505a2bef5762223bfbef858d21b769181f416878f0c233b","ssdeep":"","tlshash":"f401441a4ef00776458d17ece403b4002d6491bb91cd8741ec3f1636a74c6ced619309","first_seen":"2025-12-17T05:47:47.252954Z","last_seen":"2026-01-08T06:11:29.243849Z","times_seen":355,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js?userId=gotucam24sjm8up46xmx8raty6kjsm5u","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:37:04 GMT","end":"Tue, 24 Mar 2026 18:37:01 GMT"},"fingerprint":{"sha1":"05:4F:CA:93:1E:46:6C:B4:A4:49:3A:2A:0C:AD:DB:CA:8C:CF:BC:9C","sha256":"81:B0:0B:B9:30:D8:5D:FE:11:36:CE:28:36:04:4F:41:74:05:00:57:EE:04:F0:1D:44:B3:B4:6F:A6:4F:D8:FD"}}},"request":{"raw":"GET /gid.js?userId=gotucam24sjm8up46xmx8raty6kjsm5u HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cdn.lcwss.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://cdn.lcwss.com\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=gotucam24sjm8up46xmx8raty6kjsm5u; expires=Wed, 30 Dec 2026 13:04:38 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9b61be812d645685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"56d552f50df7bc7dda7dcde611d2c7b5","sha1":"cb56d40caadf6c21a209f32e335ec9fe884e5bd7","sha256":"dfdae745cd219b5dea1d16efbbbd8e72e6805e3b3f4b62f30872ceed067a81d5","sha512":"bd43f34b914ecbbd5a19871e011655c71b015566de4220952c9096bf0b99d3ec1b74d19b82c67c7052fdaaea53043386f39f60f226cf7626e64c724ef225de2f","ssdeep":"","tlshash":"2ea00290489cdb88050656a9d947eb8721550491d8d8920849dcc292518abec78a6365","first_seen":"2025-12-30T13:05:22.763187Z","last_seen":"2025-12-30T13:05:22.763187Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":16,"dns":0,"connect":1,"send":0,"wait":34,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_9.BSounB6E.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_9.BSounB6E.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1be\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":446,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (446), with no line terminators","md5":"2234d1ff76788a9114ab1657847d937b","sha1":"10d17c5082a7355a453e1260d53cf6b466595b0b","sha256":"9127246d8899b285e15eaa66d5becd39214c309ee93036e9ab193e7cd838fc59","sha512":"45f36a29021717c3bbc3333242e5297bcfc588893c305c0fd283346dc74c9b016e54c42a9818688b29f85f76d1f73cf7d5d1d26e41dc73b6d7192e00ec22b662","ssdeep":"","tlshash":"e5f05580baf96e088079229dd2a56485b59801339adc1f52e2784b3a93addcf9814283","first_seen":"2025-12-17T17:11:29.107364Z","last_seen":"2026-05-04T13:08:44.39475Z","times_seen":87,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_40.BkCewPji.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_40.BkCewPji.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"a3fa6f6be1911afd54f777d8748f81d2","sha1":"831378e96a34f56495fd98c58bfcae38b670337e","sha256":"b8becde6ce3b0568fd1257d660249dbf2733fc7ed00ad5b2d0b81f8db2558b89","sha512":"e4fef753cf2ab835c09a9dd1c2f9e477d84b07a7e06e4d8ebea7f95eed968f28782de66c8b62bedfcb3c74da9929c153369381334791a24b5e57b02bd6d3cca2","ssdeep":"","tlshash":"41f02788f7f46e544429139cd3963002355a006b97ec0f51d3b8063e63add898810783","first_seen":"2025-12-17T17:11:28.974444Z","last_seen":"2026-05-10T03:30:41.608072Z","times_seen":100,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_21.NLB8m4PA.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_21.NLB8m4PA.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"d08b3430f4429798682f506fc6e78a01","sha1":"2439222cc8a54962a8b329edef261dd34d53ab28","sha256":"c42f0389f8635d5e346be628be926ba82a8daa00f487ac34658b6e7b2b684b28","sha512":"0a2c7613231daa15aee854c0809ee1dd331fef40d81bf057ef756b5b3d51485389ff6694a70ff586b0e34ed07057e6bf335b28d22828c35d35c38d437a126ce7","ssdeep":"","tlshash":"0df0559167f08a9941aa22edc25225523aad003746dd0f51e2780a3a63aae8a9d24247","first_seen":"2025-12-17T17:11:29.026745Z","last_seen":"2026-05-04T13:08:44.345522Z","times_seen":92,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_22.DACP-2p5.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_22.DACP-2p5.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"beae418fbd7336e046e8d2bfb816bab5","sha1":"fdf92303abfd4377f0b7f97309795e5396267f20","sha256":"4654752c0760013c24cc6d1434026f5ff7d55e6cccb3524a99bb72298734b354","sha512":"8adf4da48a208e2d79c2ec96accece41f60c81a26f60e1805602fa0fb540be994d93f5d774996c01aa3ef0957f5b3d038303fa049af719d34f4e933842bf53b1","ssdeep":"","tlshash":"b8f05c8256b09e1a4119269de65a544175d9012381dc5f02f338863ae39d69e8541243","first_seen":"2025-12-17T17:11:29.003979Z","last_seen":"2026-05-10T13:02:40.364567Z","times_seen":100,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_25.C7yPcFUv.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_25.C7yPcFUv.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"50b198ee745ad7e0110ad65e98135e61","sha1":"ac1d9fafdd45469f1f27a3655ed5a360586c874d","sha256":"ac7ad98d0b78c4b2009018ff56426f1cb12591447331f60b4f671bb63075d4a1","sha512":"104d05f2f91bdd9dfc5fe6fda1d873427a2a750606170423e7b1142df109ade512c2a4865416e88eab035c3569a5ac85d7ea8193545600b1c72fcf5589410576","ssdeep":"","tlshash":"2cf05589a6b059a5802e229cd2a2754179ec4137a7cc9f65e2380a7f739d9cd6800383","first_seen":"2025-12-17T17:11:29.031696Z","last_seen":"2026-05-04T13:08:44.373243Z","times_seen":96,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/sync-metrics","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1172\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1172,"data":"[{\"app\":\"landings\",\"event\":\"adex_script_load\",\"usid\":\"19b6f5c4a9a9585847b85c1\",\"sub_id\":\"1029854111395223121\",\"teenage\":0,\"project_id\":1,\"landing_name\":\"finance-survey\",\"event_source\":1,\"ymid\":\"7\",\"request_var\":\"7\",\"landing_domain\":\"cdn.lcwss.com\",\"landing_url\":\"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3\",\"source_zone_id\":10295867,\"config_id\":1167,\"build_version\":\"v0.0.655-verticals\",\"landing_load_date_time\":\"2025-12-30 13:04:38.000274 +00:00\",\"vertical\":\"finance\",\"events_history\":[{\"timeStamp\":1767099878042,\"event\":\"start\",\"timeOrigin\":0},{\"timeStamp\":1767099878274,\"event\":\"adex_init\",\"timeOrigin\":232},{\"timeStamp\":1767099878531,\"event\":\"load\",\"timeOrigin\":257},{\"timeStamp\":1767099878628,\"event\":\"adex_script_load\",\"timeOrigin\":97}]}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: 2ffabb51d53784d95680c9657ae1b579\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-05-14T15:56:42.639741Z","times_seen":134466,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_17.Ed4CXWMq.webp","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_17.Ed4CXWMq.webp HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11506\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: \"694a8a3d-2cf2\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11506,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"846774fd41ac0ce770349dca2c9fccae","sha1":"f1b26e17d180ef8ea583abfb8c812ca4df1281d2","sha256":"496ec3b021e0b83782bc37da3c11ed269ba3d7227976857179e2b875ea242aa6","sha512":"3b1ab7b6a154f28fc6841bbf18fbcc336055b015563c9baf7ac6acbf5cfadecd69d35d3d0cebb3e5ec8fa971ecf29686045e4c138e960a6a02f065f20e5d6257","ssdeep":"192:pzZIk0IzRCOGVFQhEjRb6kyX/ymR+jRnDuLeImd1JtQHwMWPFhQEkSuNs2FbNzAb:pzZFhEjt4//aR1IW1JtQHwM+YzSwsINC","tlshash":"b432cfb12e7062c2c122117aa9951a93e73ffe61eb70925d093e50176f903ec2135bbe","first_seen":"2025-01-13T21:08:42.10443Z","last_seen":"2026-05-03T13:01:37.797144Z","times_seen":46,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_32.BeXMbV9r.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_32.BeXMbV9r.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"e208cbc9f387a1adeaecc5f050ed4103","sha1":"b4d35d206f68b68e328a7efa2e321e4ade6318c6","sha256":"87d10d29361a2a1196209a21209844b05a34ca7b87bcbcabf5ee37648065a8c5","sha512":"82717966260f2899458743e4698850479797ab7ce98e93c487d027478d6ba4899ca48d349ba9bb8cd9a40b69a017c4a5a8010f1e5d40413d8ab0ec7ed76fee32","ssdeep":"","tlshash":"f7f05c9197f06f59801d33dec256114675981127c2ce0f61e37c063793e9f8d9904747","first_seen":"2025-12-17T17:11:28.968986Z","last_seen":"2026-05-04T13:08:44.369726Z","times_seen":111,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_35.DflWETwo.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_35.DflWETwo.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"5420e565a5ccb6753fd5fa6871fd0079","sha1":"801f43d5e89d67438f1c2fca24af14f205d43857","sha256":"ce47464b6bd38dc35ae465b521d6fb10a2a977cc2251fb1242d597f5537f7224","sha512":"d6fbc65c01f905d09e56e78c030b92cc7895d32ab8ba761e30fe5057e40236db9057ba131f266d8d27a029252a23700eef9248435c92f51ea44d8204b3fed53d","ssdeep":"","tlshash":"66f0a3c457f14d96423e135dd6671a51b9c55033c2ed1f61e27c0f7b535ea8e9a30243","first_seen":"2025-12-17T17:11:29.087249Z","last_seen":"2026-05-04T13:08:44.398858Z","times_seen":107,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_45.CvoQjYns.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_45.CvoQjYns.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"665155c18d2f9889461492f837cbd181","sha1":"025e91fb1c423cf1ca6567d46c5374fd11d83fe6","sha256":"860ab75dae2d57da9d73b848ab4ed92947a7e4d5a5f35e6aaa7344c1b7c9abc4","sha512":"fce0d6ce173be8f6aec86953304e5461ff762cca08e88b93cf6edfec86b858660dfdeb892b0337855cf30a0a9c026aaddf2034af8bf08c4da72bfd5900a56533","ssdeep":"","tlshash":"c0f0a3507bf4ed04c069327eda556046b5dc147707cd8fd1d279067e539e9cb5850383","first_seen":"2025-12-17T17:11:29.100982Z","last_seen":"2026-05-04T13:08:44.456499Z","times_seen":86,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_40.NVzjEFiu.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_40.NVzjEFiu.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"d3da746ed1d66d695b69aa1bd87a0d37","sha1":"76a51f2bad7facc7f9dc8416ba2be031e3891e99","sha256":"c4fdc2e886e0a280e5af53b42c87b14d609e8703eb2f4ae03890076b4927ea1e","sha512":"844811d83ec20620e4e5d97f6a7da39dd55d9bebfe642be595938c147d865e3c7d192bf1916d70e4ec09b421e8ee52a186da12504f0232a6b35e8ccf7f8f0984","ssdeep":"","tlshash":"b8f0a385d7f1195dc02e23dec25511017695047347cc1fd1e1bd073717ede8aa910393","first_seen":"2025-12-17T17:11:29.109791Z","last_seen":"2026-05-04T13:08:44.31906Z","times_seen":86,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_42.b3pwpx1q.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_42.b3pwpx1q.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"63a4b6641c435ebac91b1cb925a90626","sha1":"548b43cd0439fadf072865438ae359cf4da93181","sha256":"83196178a0ef7703f363284548471f2689e0a0fe3032cf2acf6288f81fa4f8e3","sha512":"ecb64aeb57ad87c8b2df0789ecf6db4d0a9aea0e6159d7ea5ae6e2abeed4efa429194072f30c53b0e58f1e331df969443e94a32728445da094dfd2a6ff2a40c1","ssdeep":"","tlshash":"6df05c809ff05e85403622dedb115509769a613b428d9f11e37c477e534fecd9e00347","first_seen":"2025-12-17T17:11:29.104396Z","last_seen":"2026-05-04T13:08:44.415769Z","times_seen":97,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/preload-helper.CDVdm_vr.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/preload-helper.CDVdm_vr.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-5e4\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1508,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1507)","md5":"bde6731db5b37e240ebb6245f05cfef4","sha1":"32e76cde423fae50bafd263090b454bce92059b6","sha256":"d8d70ffacf7707dafabf1ab58bc04e52c202f3577257a43b90dd7cdb7febd309","sha512":"8ab9639575e5c260af75a73693c421497738a79c42abab9595bb1f11dce2f829379b675b12e09e5ae77c6212080d0e6afad486bd94aa699cb0656cad4d7f4a50","ssdeep":"","tlshash":"8e31b7c926e0a032920c1eddd07ba313f5e0246364481891b12e4dbbab2decfd5e4f51","first_seen":"2025-12-17T05:47:47.282137Z","last_seen":"2026-05-14T15:03:20.559454Z","times_seen":1605,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useTabUnder.Dyq4rOq2.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/useTabUnder.Dyq4rOq2.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-6bb\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1723,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1722)","md5":"ab751c62549410a1fb719c19b9a698e8","sha1":"0a3306988c867e154a8a6e91133fbdcb66d0518d","sha256":"594fca508a9aa98e4b9f4551291844c197c1bdb6f24711d3537e9ee8e09552bd","sha512":"a0cd4ce541131398c9aca8780607e61c0a44ad0119952d2fd7b25f2a015b26db37867af49940a3b5f12793ca7215f13dd95d00df0a77af5b6e08c9f6aa48dfad","ssdeep":"","tlshash":"a231ff4e957052f9419d49edc169ea3263250137aa48abe0607d4e35137ddcb912ab43","first_seen":"2025-12-17T05:47:47.251325Z","last_seen":"2026-01-08T06:11:29.244685Z","times_seen":274,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fmscc.com/sync-do","fqdn":"fmscc.com","domain":"fmscc.com","tld":"com"},"ip":{"addr":"104.18.37.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fmscc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 14:43:32 GMT","end":"Fri, 13 Feb 2026 15:43:23 GMT"},"fingerprint":{"sha1":"17:EE:8D:B0:F0:B7:85:35:B3:2D:BD:DF:4C:F2:53:75:F4:51:D9:A8","sha256":"BE:13:9C:0C:8C:E2:C9:67:5E:D2:D4:0F:E0:12:7F:E3:0D:B5:DB:0A:3A:3C:3A:3B:7F:FD:31:CF:FC:6E:34:12"}}},"request":{"raw":"POST /sync-do HTTP/1.1\r\nHost: fmscc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 171\r\nOrigin: https://cdn.lcwss.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":171,"data":"[{\"name\":\"lead-cross\",\"check\":true,\"prefix\":\"finance-survey\",\"defaultTtl\":604800},{\"name\":\"lead-teenage-cross\",\"check\":true,\"prefix\":\"finance-survey\",\"defaultTtl\":604800}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-ray: 9b61be876f55b4f9-OSL\r\nvary: Accept-Encoding\r\nx-trace-id: 03782c4f0b9426e0f3ea013895a2317c\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://cdn.lcwss.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=Te6NzLhtfgByBxIoemBh70odQ_PxtgHS.v.RxTMwdN0-1767099879-1.0.1.1-aJaE3sDkDcBYEgOrX9TXpMkEKELVRSPmAkBTOnhJNpynOKX9Jmn8QcCRmqUpa5Uyr.J_lbqxuRGYuPwUfZho5q7GfG_xLjmyksCKzOt9sUI; path=/; expires=Tue, 30-Dec-25 13:34:39 GMT; domain=.fmscc.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":189,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b42403f676a5faf6273404f28f415662","sha1":"fe2fe635f61acf5c8085f338abe0265ed09b6503","sha256":"5d326640df5048f6b83caac21e2946da7092d2054561ea08fae5bc0da04ac286","sha512":"b42c181cfe07c8485eb0159cd6401999ab451e51caa5255fca5ac8e2bbbab5e3b205abd105d489394e2aa48eef0f6cf76c5a3aa8b0f367f84b7159c260e13d7e","ssdeep":"","tlshash":"75c0121e860908ffce1425cc3dd115caabc2c501785888468053cc56abc138200663ce","first_seen":"2025-12-12T11:08:38.306205Z","last_seen":"2026-05-04T13:08:44.324298Z","times_seen":70,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wuytu.com/blog?link=8d93ee96e3045e6fd6a5\u0026SUBID=$","fqdn":"wuytu.com","domain":"wuytu.com","tld":"com"},"ip":{"addr":"5.11.87.209","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-30T13:04:37.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wuytu.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 07:23:06 GMT","end":"Mon, 09 Mar 2026 07:23:05 GMT"},"fingerprint":{"sha1":"5D:69:C6:4C:AC:D9:F2:C2:82:00:12:3D:D4:21:90:58:A3:7A:2D:A7","sha256":"55:ED:ED:7C:C9:3E:2C:6D:22:02:DB:40:1E:85:17:70:F1:1C:26:D6:44:0D:CF:90:48:E8:82:E9:0E:4E:18:2A"}}},"request":{"raw":"GET /blog?link=8d93ee96e3045e6fd6a5\u0026SUBID=$ HTTP/1.1\r\nHost: wuytu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Tue, 30 Dec 2025 13:04:37 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nlocation: https://mmzod.com/nwtrck?browser=Firefox\u0026geo=NO\u0026os=Windows\u0026osversion=Windows\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Tue, 30 Dec 2025 13:04:37 GMT\r\nset-cookie: e3b0c4_7=sn67rk3kkmnp9; expires=Wed, 31 Dec 2025 13:04:37 GMT; path=/; domain=wuytu.com; secure; httponly; samesite=none\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":127195,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-14T15:59:10.713383Z","times_seen":15173623,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":71,"dns":21,"connect":17,"send":0,"wait":48,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/CookieSync.CWPvbhq9.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/CookieSync.CWPvbhq9.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-535\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1333,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1333), with no line terminators","md5":"38d7eec256d21a38558768ed483adbdb","sha1":"3aeef2b9537afd62ea7ebff361fe1d8163ffd023","sha256":"8f8a87d26e42fbc1161101f34ffb66801275816d373bc4b8177a2235c75b982a","sha512":"34617076f695544b4bb4f3dcdb6e86904abdafce87a48a80dbfdf011d424b74643a8b9bbd533bc0ae0fe6661c7d3eab376cc4fa6b67fc1fefa80c82a2ebafeab","ssdeep":"","tlshash":"d421530ab2f060b581651afdc0551130667345b3378c8f51b6ad1e310beda6ae92ab13","first_seen":"2025-12-17T05:47:47.261878Z","last_seen":"2026-01-08T03:12:00.598187Z","times_seen":137,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/buildNonProdAttributes.BXOIAHer.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/buildNonProdAttributes.BXOIAHer.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-17c\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":380,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (380), with no line terminators","md5":"288673570a996ffb82c7a73876dad4dd","sha1":"e1f9a20f7e7740e8058cacdbcf3a6e89ebc4a87a","sha256":"89c46392411bed9ac1dc2ac634543c192e666600bfb09f56fb648e53543c73cd","sha512":"5823a12dafd38b0bc29ed845ce945493ef057dad001da461be8dafe0fefe905166bd9c4497ec0b482118628524ee9d93905567401a83a8cfe52ce27fd606e202","ssdeep":"","tlshash":"3ce092c5dee1ca1a820a236fd21a6a5174c4042782ed5fa5b27cc62933899ea9414246","first_seen":"2025-12-17T05:47:47.254741Z","last_seen":"2026-05-14T15:03:20.526406Z","times_seen":1605,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_17.DerJGWkV.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_17.DerJGWkV.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"e942e7fc67e903b537554a86c97e53d4","sha1":"81922a049a738bda60fc5b8c29c4991379e6c347","sha256":"367c271af72084962640bfca9958c33c029cc0fbb7ffdcc3657b2e760836c54f","sha512":"5a2b188d84f8086306381d80d7151900aa3e55ec552c1e49c940e0752f1801fb6a34fd5653d7ff8a0c25347b75293e52e4440612925237cd5409e36b6ea5c513","ssdeep":"","tlshash":"d8f0dc8463f45e09416913dec351304275b9012a02cd4f42e17c873e43fedce6800343","first_seen":"2025-12-17T17:11:29.011603Z","last_seen":"2026-05-04T13:08:44.351798Z","times_seen":99,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_31.Cchg5hCj.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_31.Cchg5hCj.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"7ef08d78deef0167b95b915c4e8cfd46","sha1":"daa0b9443616e475ba52058c6dd1eaec5ee04c25","sha256":"e40b91db8f1b33ee5a533428b1457256024cf8e719cc614bb10af5521e7aa9c2","sha512":"240c806aada0070f78c32a9041679d1eb16a00643713e995ddc5595f122d1084e21e18d8c0342bd7f6ad75a3a1c677f067047a6b506ce85b79c303f23fa1a950","ssdeep":"","tlshash":"52f05586a6f0ae09c02913fcd352215a7a9c147286cc4f52e2bc073e8379a9a5808743","first_seen":"2025-12-17T17:11:29.048519Z","last_seen":"2026-05-04T13:08:44.343218Z","times_seen":94,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_21.BPb0DZfa.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_21.BPb0DZfa.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"ba58af4d7d206a8edd5a38a7c162f07c","sha1":"b3d5345cd7ef548c6442fbd207d6f8a3cde804a4","sha256":"5143f9d75109cf4ea6f10199a619cc1dc47fc24c317e6480962e35289f4eaca1","sha512":"17f2937c4d85e7d2d97b3fe147ed1d44e8204a44d8555d9228134767abe1eefbf8a9f67230b31f5eac4e508416fdea47303539103cb87d84976fdc36d07e231b","ssdeep":"","tlshash":"29f05c81a7f02b298129139dd191d242b258203343cd4f12e3fd063e53aedddcb14247","first_seen":"2025-12-17T17:11:28.977409Z","last_seen":"2026-05-04T13:08:44.39815Z","times_seen":100,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/adex.CjaJHaT5.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/adex.CjaJHaT5.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-357\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":855,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (855), with no line terminators","md5":"4cdb1bf059283f3124909b6fea7d54d7","sha1":"2d4664fa6d9a3c0e482ab011c3d2b561b4e7cc53","sha256":"a1042626d686bf3d1081e38841cb2ad334a0150068af5ef7bff54074d95b1d51","sha512":"2451cec9bbb3f83c0721078bd61f39f01814d6aa4b602cbaaa24503c636cc0ebc9f15c1aa5d8e5990b5ba6ee44108657f9f30e58fb9f48ffde9f74ecf2622c36","ssdeep":"","tlshash":"5f11e38e53f347b8421163ddc12eb1415008203799ce47e0d03547b82be4aee9355b1b","first_seen":"2025-12-17T05:47:47.25032Z","last_seen":"2026-01-12T12:33:46.087451Z","times_seen":393,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.DUnKCy-f.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/index.DUnKCy-f.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-4d22\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19746,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19745)","md5":"712a990d9979efe2db0083f75e1249dd","sha1":"1ddde916d5a95f0cfaead0047bba6daedc6bead3","sha256":"e26dc9a02e24f4fefee88654fc042794f0141fc8ea8579fe6c17ec98da09ee83","sha512":"f2e164a04e2614c71c3ec6e800c902ea00f4e2aac0ca681f57621623de7728afd181b12dc7fd8d25c2bf2a513ffbdb2b68cad8d7e272edbd17b3505ef123158a","ssdeep":"384:MICImIJ8X2KrkUE950iUToPmLN+VNvOwP:GIBKjrp25mToDVBO+","tlshash":"3e92fbf0932851d5d51e07bde93d60e1a2392effa7cd828072ac7ea5546c2d52e08fd1","first_seen":"2025-12-17T09:40:52.784088Z","last_seen":"2026-01-08T03:12:00.629574Z","times_seen":55,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_20.D5f37klN.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_20.D5f37klN.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"8edb8d7d4092e7b020cbc3b61d9a7f52","sha1":"300b65381fdcac51e6c13c130b2019804de5bb11","sha256":"29c360f39c6422df80798cf8452fec709dec1d8c5f3cc92c1546aec7acb1ccb1","sha512":"8d88f1e63f6712c73a0cddf91defdb15d3ccfa869da87960a311a5b2293589b5b822344c93d3e4a99ff2a1c663dcd8c0371d548bd66d62adb63bd65248824e53","ssdeep":"","tlshash":"baf05c8177fa6e458079235dc24578067694813252cdaf51f13d077663ae9de4500347","first_seen":"2025-12-17T17:11:29.073466Z","last_seen":"2026-05-04T13:08:44.368797Z","times_seen":90,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_39.C6YIrucu.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_39.C6YIrucu.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"e7631ce74113ca18ed407735e30007c1","sha1":"8f0eb7a8fb8b342cae4a4c7dfc64c4b8cb6cc2cb","sha256":"0f5df2bb03d2743249d82359c9eee597a829371202c3c670ada855ffd39bf0dc","sha512":"df3e2aa41434e2cf5fa7b372cf67ac57e73684131800a8e5fa5124977794002e85ac1b8283539d294ad72a47f58d3a3915bade8d576a0dd00995f7ff8c12c7f4","ssdeep":"","tlshash":"93f0a38597f479658036139cd1571a0275d8023747cc0f12d2bc0b77439da9dec18243","first_seen":"2025-12-17T17:11:29.089068Z","last_seen":"2026-05-08T21:02:09.34261Z","times_seen":87,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_10.DS3ftZQk.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_10.DS3ftZQk.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"fe8a678b28ad88d15668cc8bd35649f1","sha1":"887909a30767b4ad5378ed4bbda467dfa8d1e6f2","sha256":"03894ccb7d50788eef2cbaa01bd7b150abf4755703ab6d8f05dab329c4235725","sha512":"b11e5bcc43a3de8df6e0c95485a2daa9b83d25e6a1ba6adc33c7b5de5405ddb173962520adfbbeba229f2c917ee21decbd2940018b213a377fd10ac9224b5fe9","ssdeep":"","tlshash":"14f055ca56f4996a922a279cc646604232f8062343cd9f21e378167e576ee9d9e80383","first_seen":"2025-12-17T17:11:29.028339Z","last_seen":"2026-05-04T13:08:44.297508Z","times_seen":95,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_27.DV4ZO8dy.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_27.DV4ZO8dy.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"0edb71f49d7e45d8e0976fdc64938d71","sha1":"99f773987c6ef218eb3bf9befa5d02e19dfbf0bc","sha256":"3d8bb8bba78a8a7d857f806c04a0d2b7cd18ebec39aaa735a4ecc1a774c3e8da","sha512":"398f343357fc7015f82f60a86b489bac84d3f2cfbad81090faae0b26aa24074c84eab6d1a481dbe48067d08a02c566328eccd4b31aa21063764556004d97695e","ssdeep":"","tlshash":"6bf05c8957f09d08c12d339dda5254c1b6a8417253cc4f51e27c863a63aeace9800393","first_seen":"2025-12-17T17:11:29.024308Z","last_seen":"2026-05-10T03:30:41.619519Z","times_seen":103,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_34.CmavYSXC.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_34.CmavYSXC.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"8b4577d75e39bd1fb1aee4a4023fa006","sha1":"d23bc00afeee6d0efc39952b6315814d9d38f499","sha256":"fccce1fa55fffc0daf1315d98f77bfc4a7ab05d5573167c7d719c615e9347d47","sha512":"d63cf3e6bca90e06f46b57393f59b2c6da581b646bfde7a1c565f40a0d0c4c24362ccc26020c6dfcb5b8076febe4052dec10f7eb1f24fbc9960335eb54dc83c8","ssdeep":"","tlshash":"f1f0abc8f7f49f0940a913aed29215813aad00b317dd6f12e2b80b3b835ddcac848353","first_seen":"2025-12-17T17:11:28.980875Z","last_seen":"2026-05-06T13:02:57.26502Z","times_seen":94,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.GaAO3M0r.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/index.GaAO3M0r.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-17d7\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6103,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5821)","md5":"3b30c18ab2870d9ad448dfcb23554336","sha1":"f06c603aebe54e6272ddfc711e753ef021693fb3","sha256":"c7dcf098a319e49691e6aced157fd8733df5da43871d0f4e9ed4f6082955c98f","sha512":"4154f40b791dd2290f7762fc9067063fdf093824cb7bde1aeb28023a8667e8904845ad93d5a0d63e3a295df09bacdb9b65c6b2ca3ac05d5af755ed08f55ab3a2","ssdeep":"96:jXa6qPWMDYdk+Ui4N+hmJ3uMOZBWKEWA00UfI2lDDJfuZtPDo6uowBzC56M:La7PWMDYS3N+hifOFpAoAA5l61AdM","tlshash":"aac1946cf17515b9b01b8ddcd17a122766353263ed8ed7b0a4be2e240389b8463877e3","first_seen":"2025-12-17T05:47:47.242073Z","last_seen":"2026-01-08T06:11:29.278991Z","times_seen":122,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useAndroidWebView.9_5waoHF.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/useAndroidWebView.9_5waoHF.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-204\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":516,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (515)","md5":"5afb629b1e524da75b0127b543d3e852","sha1":"06e4a6f00e94afbe1a3e9ffdc0557f1bba450a01","sha256":"d94cb73432d871f5f98c874b7c8229dec26fa6ba048991df6fdd5af83e2e9935","sha512":"26d6babd7ada3c38ee2409b5a9906758532baa494653286c7135f3e425fe03f9c8f78ecbde563f70d355a20662f34aeea007a79d143f1075bfb97f855de33757","ssdeep":"","tlshash":"40f0598a9af55a6ec08f23ded62269017a94007293cc4fc1b13d4739739e68fc504b83","first_seen":"2025-12-17T05:47:47.252148Z","last_seen":"2026-01-08T06:11:29.273146Z","times_seen":274,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/InAppOverlay.zBVtcbJJ.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/InAppOverlay.zBVtcbJJ.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-12fa\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4858,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4857)","md5":"cb1d8cbcfc2bd72e62ffae9942cebbc6","sha1":"4739feda2540c74c02aec996a38244ac9eebc378","sha256":"9a37909bb3a1b01adf0c5c3d5d7f5703d9faed4ca392a44b33b4000125a04c54","sha512":"c76a281491bdfd92cad16c022dcbb153536d6bae701d6d0225949d84490db224457a449a0862d4f192a5fd6b4021251e873626a36fca65d457526908fe084e68","ssdeep":"96:f1l58A+epOTJn/IyfcKs/7801DNMnB+LA6rQgJsiMdDUSl2on:f1l58A+8OT6x780tNMB+8KJsiMNUSl2M","tlshash":"83a1759ee02081bca5998decd132f631263111a673d8d3e0e09f5f364769d97919af07","first_seen":"2025-12-17T05:47:47.283115Z","last_seen":"2026-01-08T06:11:29.289604Z","times_seen":202,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_30.BBhmSs3w.webp","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_30.BBhmSs3w.webp HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10230\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: \"694a8a3d-27f6\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10230,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9ed453c69f5122cd515717a00c285317","sha1":"45df417012cb8c39c521b6c1a328149ae51e7115","sha256":"acfd2549638be92af6ed42958a7b2c592fed1a93ad3d998bb9cb2a67ef4c6355","sha512":"bfb210a7c02e082d62b71939898557217e229992a8e573ebf1b88206efaa4fe79a28d03ef65a3b5d7ff02fc4b59358e6e661eb4f89eca643fcfafec67bb65a47","ssdeep":"192:0zDr85DGopu5g+fRhjjzJaNecN1D3BIEXbX50bQzETMFJ8e:0zoDGg0fRna1BIELIQKM78e","tlshash":"ba22bfb08b1e6b68c8b19cf0725bf644d733706a579694972b19290b3e03f421ea654e","first_seen":"2025-01-21T02:33:45.124726Z","last_seen":"2026-05-10T03:30:41.605766Z","times_seen":94,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_5.Br0wmheL.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_5.Br0wmheL.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1be\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":446,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (446), with no line terminators","md5":"9ecb23f7c0561e284d22c3fec0f8e7df","sha1":"d71b3aa7cf6ac6c0d809ff394019954e79a1c7b6","sha256":"173b08ed1ce9db1105f56e6079b770fc6e2839a748794972c7a6107dbbcaa0aa","sha512":"47432b9c889580214de1968431b4245062dadafbe7fa2ea539812707c4043d45bccdb2a906f1ddb7816ed175cc523f3681977943a6be0122555653643b291947","ssdeep":"","tlshash":"a6f05c945ff06f6650aa32aec39b21067555416252cc2f61e27c8b365359acd4940343","first_seen":"2025-12-17T17:11:29.020654Z","last_seen":"2026-05-10T13:02:40.373561Z","times_seen":98,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_46.BYAeF7RP.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_46.BYAeF7RP.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"220af7b16cf73b4c82fb8efee121ab5e","sha1":"528388e0c9ab6e1ac0417be71babf231d190c7e5","sha256":"e56b5b06fbd9382e353cc52a2d021a51d7ebe9a040897a1bd62715db73f4c3e8","sha512":"e408d54bfa1b6665f91dafd70c95c1697fadfc8a5636087f11945c9fb717b62deae526aadbf99b712b9a1637e6419d9723d1d57cd26f9f52c59c29eabfa53051","ssdeep":"","tlshash":"11f0dcc777f05ea85069229ec162408475d4013606cc1f66d3bd063ac3ddaceba04387","first_seen":"2025-12-17T17:11:29.056574Z","last_seen":"2026-05-04T13:08:44.378523Z","times_seen":94,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_26.DUsvWkBR.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_26.DUsvWkBR.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:39 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"2dea85180b65840a4fcc6e72927f5017","sha1":"3deb4f8ffc5db602c99df764f1505cca79c4714a","sha256":"fd34c848f5162970a1d4cd82d4b5833424b7d77c04c69f197b0a11f3244c746a","sha512":"c24a18ed08aa048723a996002ad8f7c09dcf87025d7fa83f736315554619047d975f68af5e7fa43a86548e675fd075031fc7fa41879f61351982153cfa29ffd0","ssdeep":"","tlshash":"f5f05c9556f1991c852d12dce152a5137a990923d6cc4f11e23c4f3b239efdd88a0343","first_seen":"2025-12-17T17:11:28.970079Z","last_seen":"2026-05-06T13:02:57.285013Z","times_seen":82,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/syncMetric.4vzhBu_4.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/syncMetric.4vzhBu_4.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1d8f\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7567,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7567), with no line terminators","md5":"73eb619915786fa74f63dfcce2526d18","sha1":"cfd7016170151f5660bf908e9afee9442bd14fc1","sha256":"5e37929a1ac2ace87f3fb94865993d2d4650abbcf7a7fb73f87012f308c0b333","sha512":"8b106eaf8d29ea27c5a1f6019b740a559e84f4269d600299f0a0df8c12dd1656872aa63702a26af7e7f0aab4879c9910b3435254936c8280a6f83a704925dcb8","ssdeep":"192:otDESwsPK91FGe/RxAMctkvxseqR/7j/6vz5O24j6YyyB:oJESfKBz/RaMctkvxsRR/3/mtB4j6Yyy","tlshash":"adf1d69670d1872451b993ddb2122612e33c460638dc4b64f02b9e25368dd4fe3b77b6","first_seen":"2025-12-17T05:47:47.212427Z","last_seen":"2026-01-08T06:11:29.297509Z","times_seen":355,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useGetExitDetails.DayDbfl0.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/useGetExitDetails.DayDbfl0.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-19fd\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6653,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6653), with no line terminators","md5":"edc2593b136efe29e8ee97a23d5759f2","sha1":"86702cb096396f9aebfdc1778988ba1d0417894c","sha256":"1be35b48b8735daeb56e6d339a2038b7ceb2b5a861c9b3b38a3fa09988b44c11","sha512":"243e7436cc8a5d31681fe55f4e6eb41cab89998a67494ff42ba88d4f314cb4c39418ce8c42992a56e404d0c0117d85fdd0baae48020ebb89d4d717914bff762f","ssdeep":"192:iWQIlB2Vh90F+TGCILqhayShmzxr2TA3TN9T4Iuh2DYM7awyPoLD/6c5TkV:i1hVh90F+TkLqomzxr2M3R90Iuh+YSaP","tlshash":"4dd185d0e0c5d5fd0ade59da65a0d131b3244e07388eda24f06a8c2967fec47a1b770b","first_seen":"2025-12-17T05:47:47.278553Z","last_seen":"2026-01-08T06:11:29.214104Z","times_seen":355,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/push.CJYB3Ae1.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/push.CJYB3Ae1.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-29d\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":669,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (669), with no line terminators","md5":"7cf16d101b71373348c42bd765d772a9","sha1":"d44981487275a237d3ce272c0008038f5e6db516","sha256":"037793a3af8b5bc7a92dcfea4148b0fc44e37063eaf95b2a1795fb2b1e9fca2b","sha512":"498846c248bb04d499abb2cfcd451abb3929415b51486e4cfb5ade041f71ad4f615fe77a7b97a79f7b717ae63c6faa152ed2b85768ce3635e9f6bbd89b92ebe4","ssdeep":"","tlshash":"d9017367bfe80b70a146836ff736564111e2103f5ddc27d9d1b68a790344fcd5409b45","first_seen":"2025-12-17T05:47:47.247183Z","last_seen":"2026-05-14T15:03:20.504393Z","times_seen":1602,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/sync-metrics","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1034\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1034,"data":"[{\"app\":\"landings\",\"event\":\"adex_init\",\"usid\":\"19b6f5c4a9a9585847b85c1\",\"sub_id\":\"1029854111395223121\",\"teenage\":0,\"project_id\":1,\"landing_name\":\"finance-survey\",\"event_source\":1,\"ymid\":\"7\",\"request_var\":\"7\",\"landing_domain\":\"cdn.lcwss.com\",\"landing_url\":\"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3\",\"source_zone_id\":10295867,\"config_id\":1167,\"build_version\":\"v0.0.655-verticals\",\"landing_load_date_time\":\"2025-12-30 13:04:38.000274 +00:00\",\"vertical\":\"finance\",\"events_history\":[{\"timeStamp\":1767099878042,\"event\":\"start\",\"timeOrigin\":0},{\"timeStamp\":1767099878274,\"event\":\"adex_init\",\"timeOrigin\":232}]}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: f807e0f9a3178c10215568b8bd6da8c2\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-05-14T15:56:42.639741Z","times_seen":134466,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_41.DfHdKdYC.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_41.DfHdKdYC.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"cd37ecb5135abe7fc9c09bb71ca64d33","sha1":"c8c2b8d60af115f43c79df0109468b91a0c6788c","sha256":"b1745e59d497d863949c3dfdc2d09185df091d1244f71181ea94f230702ee105","sha512":"639b5e12a27f0bdbe45d4178c3f2dc88cafd43836ca259deafb736ed7e2b5c000f2a1654545df7ac41541b1f00d998bbc02ef49d8db299ad76ef33ac247568d7","ssdeep":"","tlshash":"b4f055c8abf06954812913ddd7526006b6aa123306dc9f22e2bc077b937c9ce8810797","first_seen":"2025-12-17T17:11:29.057437Z","last_seen":"2026-05-04T13:08:44.29088Z","times_seen":99,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_30.vcboUjRT.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_30.vcboUjRT.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"2a5283c7976778d7769e8147364527ea","sha1":"21722d472f882ceeed9edd59a8f318fa10ccd497","sha256":"8c4890c250f937044fb644989961351d8c5ea06364c469af2c72e96396785046","sha512":"10b838ac07601023b8dfe5bf7a658e4d52b61f054f1750bdadc68c194c5f587f834429227d44e1dd29b2e1b08774e5baa392b2ab2b5c1ec4e643570cf9cf823e","ssdeep":"","tlshash":"99f0a3899bf06f484039139cd26334073694002b83cf0f11e13d8a3693dd7ee8900b93","first_seen":"2025-12-17T17:11:29.111579Z","last_seen":"2026-05-04T21:01:28.675125Z","times_seen":88,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_8.lfERJB-d.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_8.lfERJB-d.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1be\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":446,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (446), with no line terminators","md5":"597f9403b967b4f0015073f945ebb0f6","sha1":"0a59889bc3021a52e0dda3f49a6cb9c5c8ee7d4c","sha256":"0ae744c1621cd7b9d9ff2c023ad4c91468facba855df4002994d697ac136353e","sha512":"14835f37038e77cc778bc0b42801115400bdd00cbbd15a379033cf1ce64564dfd4eedaa0c20d75959f638c830ee1ec69891ae542ce19077e691a2161bbd1ef45","ssdeep":"","tlshash":"38f05cc3f7f03e54443912aed6912445b6e5007313cd0f51f278167b5779ac98512343","first_seen":"2025-12-17T17:11:29.08366Z","last_seen":"2026-05-04T13:08:44.314937Z","times_seen":99,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_42.DLI-TDqZ.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_42.DLI-TDqZ.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"6455f077f6f5150be5cec391b471d106","sha1":"61a3a59584b5e9694bb34da3071834abd4fe46c1","sha256":"cb8300f824f57cdfeb74eff7b2d3560de03110855d1908c7222273b4da912340","sha512":"3b359acf127d78ad5860dbed54fe3ac1b222dbc1ff53ee66a644c0ab535967232772629fd675ca2f6fb906427bc825c920676182a4cde4a114e334c61f607d46","ssdeep":"","tlshash":"aef05586e7f03d55806e23dcc392280a7198212342cc0f52e2b8063ae3ad98f9814383","first_seen":"2025-12-17T17:11:29.096808Z","last_seen":"2026-05-04T13:08:44.438136Z","times_seen":98,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/Button.CfdqZ-ZD.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/Button.CfdqZ-ZD.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-4d4\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1236,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1235)","md5":"d30fc72864c06744d2d10bc613f56fb2","sha1":"a4155ed45e626b593bd64a5d7a90a59f2d7138f6","sha256":"b919ac76d9bea61f7442a640a87ebc216acb2c57b24b050a730941df96ccc00f","sha512":"c08fd5194fa0ed36cf0da4c7faa2867af4a58837006db44e356fb215d55db90021ec6c87acba375e03e0260065c53bb2a3f3bd2b106dc2bd183a6b21e66853f9","ssdeep":"","tlshash":"bf2165ace07043fd490b61bde1be50197c5403238f8d4b92d1bc53391bab5899815b81","first_seen":"2025-12-17T05:47:47.28025Z","last_seen":"2026-01-08T06:11:29.285462Z","times_seen":204,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/index.enCFs2ex.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/index.enCFs2ex.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-49e\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1182,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1181)","md5":"2013c66864cd56bc89f74e5e4e1f55e9","sha1":"f76c33b2936bed4aeb69be4a3834b6f213e2d54b","sha256":"e28d3035316a3caaca744488a275bc73b51331ae2a0378e4f6c79f6289fda442","sha512":"bd2f7c67d07b23fc080c067f7d8bd1cf32d25e231ac228fe419eda050f2b17566c848cfa153dcb68e69dccb76305b190625330105b50c2ce9bc18290d74078d2","ssdeep":"","tlshash":"542133dfd4f4967202663bade26a961235b9027702d89b41a03d0f78137689fe0186c2","first_seen":"2025-12-24T06:12:29.563891Z","last_seen":"2026-01-08T01:34:50.933583Z","times_seen":13,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/useTimer.pX3KZMvA.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/useTimer.pX3KZMvA.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-377\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":887,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (886)","md5":"2617f5b86bd982c7fdf4bf7a5442e208","sha1":"292a01c2ee43a56a7e7dc40ac6dd4e5f9d60f85b","sha256":"9154feadb415b464cfd2ef4f79547d5025a74cf37c105950e226f6f800b40050","sha512":"bd96463f66965a7129e9490ba49bf6051fceccd27c607fcac2f09302d14ffd367a745db35c164e176bc1ee424b8e2b5405ab8d53cbbdba3cfbf01212fb3fe23b","ssdeep":"","tlshash":"c111e38a11f80b45556803ecc05121003e59937374ae4fd5f1be1566239eeded12c787","first_seen":"2025-12-17T17:11:29.092581Z","last_seen":"2026-01-08T01:34:51.00189Z","times_seen":111,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_1.DYC6Hkj9.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_1.DYC6Hkj9.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1be\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":446,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (446), with no line terminators","md5":"a7b4760f41a4592ed811fcede3851821","sha1":"ae46285114dfceb86aaea9255f438362bd21f8b5","sha256":"21ec233935e893b83ac4618d7fbd5e995e2c9e2c432ccdab83b7bb010af1b9db","sha512":"9f174cc77436dc720d5fd989cdc8de0c688656a4928d420735a1d14a71b0e9c6e61002a20a0051750f20b3c77d36c1c40f033d72286baf64fee433817ac9640e","ssdeep":"","tlshash":"a3f05c8d56f00d0a832612add286208334940137c19d9f42e13c47b7e35d59a5d103c6","first_seen":"2025-12-17T17:11:28.991164Z","last_seen":"2026-05-10T13:02:40.412906Z","times_seen":97,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_13.DAVfKFVT.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_13.DAVfKFVT.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"2eadcbf4ff5e620332f8faa68699becc","sha1":"f74f0746bec068a6aabd7e33cb69481c3003a66f","sha256":"fac5f5bee11b9f10d5017af11fbb98e8a590b76eaf80dc2d1514390a99a611b6","sha512":"0afb16005038df4cbd1bcdcb8a95ebddccef05a4d9b75888864369e8b0af3d043abef09765445be3c7959ebf3789ded84b1fbc0c909ce61376f790840a4af678","ssdeep":"","tlshash":"18f055c89ff0bf54806a12dcd2651056b9dc063303cc5f26e2bc473ad3aa98da800783","first_seen":"2025-12-17T17:11:29.084742Z","last_seen":"2026-05-08T21:02:09.322349Z","times_seen":105,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_23.DW8sTnwt.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_23.DW8sTnwt.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"3e22b5354c05976ad8502f5dab81d0d8","sha1":"5f8703cee40fd15f9e48cf9b94cd10944bb4f690","sha256":"4f30ea94cef6c0f234a137401fe3fba44153fa79ad85468a7a85834e1d51cad9","sha512":"656683b7f8e844fec357067aa1fc972fef769474436ac557742f80a3d38a2658ceb5adbb5cc53911f5197b861a007128410b0089b46d17ddcc16c99c804bfa02","ssdeep":"","tlshash":"bbf0dc4976b04d58411a025cc3d510063289013393cc4f21f23c073653aaa8ea840347","first_seen":"2025-12-17T17:11:29.064655Z","last_seen":"2026-05-04T13:08:44.423665Z","times_seen":103,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/m_44.C9L9K8B2.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/m_44.C9L9K8B2.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"195c9b789e597ac94abc9eba89d3f8cd","sha1":"7023b61a92191150097c25080cae30474b0b1677","sha256":"d6c6ed84e5f288ec83673a84027b5b21d039765cb9dc276254229c5234866e9c","sha512":"40c095cd9d8c6e506ab2d7da0ac282ec3502d2eaa11cf7a8fe72e848bea8a247756753d026aad7c0994685d150c504ed898858723a0f99a8365ef4539a703c2b","ssdeep":"","tlshash":"d7f05c8157f06ead42aa26ddc3856982b5b8003312de4f11e178477a537978ed900783","first_seen":"2025-12-17T17:11:28.96517Z","last_seen":"2026-05-04T13:08:44.326852Z","times_seen":95,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/f_4.cFmKGrac.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:39.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/f_4.cFmKGrac.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-1be\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":446,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (446), with no line terminators","md5":"253d839a49d597b8c179d6968c2210c7","sha1":"d30e9188823bf2b30a6bf79748e935e9c63e2c6e","sha256":"65c945578ca795d15ea1fc0a1b4f38740f16a9f65cbeb9905332bf658a45739d","sha512":"1351e430b5189c7591a0ec86401a44678448821689478897a9dbfbdefef03c19d5f67bb78b5d120f6fc7bbc2213a7e34d641e9d393355d75f343ca8ca08bfee6","ssdeep":"","tlshash":"1bf05595e7f42e79442972ecd24760823299013397cc0fa2f37c0aba13adadd9808343","first_seen":"2025-12-17T17:11:29.054262Z","last_seen":"2026-05-10T03:30:41.590954Z","times_seen":100,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/Adex.Bk7bA9Ec.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/Adex.Bk7bA9Ec.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-c11\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3089,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3088)","md5":"62dc585c4f8061d16a6248b9a3c6a880","sha1":"8d51c9977da92e30845b750dc4b1847d31e86de1","sha256":"82ec4a8be85e82ddd2d07d306e3687107a4f7a5281712e714baafbc5fc7a53d2","sha512":"00d7781cbe882af3a60aca89cc2a121dd5ef389064bd7992151eea05fb4dcc96850b11c4ae32442c5d36be9cfaa94a4394f19e175fddb1246edd3af75a754930","ssdeep":"","tlshash":"7e51c7bb85958879080d61ded235d3272c3414267d45c9e2a4bd8c2d53e68c5e13db2b","first_seen":"2025-12-17T05:47:47.268059Z","last_seen":"2026-01-08T06:11:29.277304Z","times_seen":355,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/NonUnique.BXon4Wl-.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/NonUnique.BXon4Wl-.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-a1e\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2590,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2590), with no line terminators","md5":"9883e8ba6b3d658f4303e03746703806","sha1":"7ae2faf6e5555020e0e57dfe1e31d2b28462f3bd","sha256":"199dfbeba6c374acc37c030fd3c57081ed343489d59451b5bc90f001d1aaaf64","sha512":"be04ea3fbac50d7cdf52e8140f4b4b79eb135194992fe84018afd787e65109a86821781f8a604a44e6c5c107966a3e6cdcd6e90fef0d5214b1857aa80feb7ae6","ssdeep":"","tlshash":"f4512f4fd460c5fc401a9dfed015e5726b3a166b27c8c731d4afae350365a8aa21fb43","first_seen":"2025-12-17T07:42:20.216805Z","last_seen":"2026-01-08T06:11:29.319779Z","times_seen":73,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lcwss.com/_astro/CrossDomainNonUniqueCheck.B3JhEnNW.js","fqdn":"cdn.lcwss.com","domain":"lcwss.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.lcwss.com/finance-survey/1167/en.html?expires=1767100477\u0026ip=91.90.42.154\u0026md5=C7gYeBKJ3XpMPJXqC1UD3A\u0026md5Ip=P2UW2wb2IuBqlLohzQWR4Q\u0026s=1029854111395223121\u0026sg=_35xh6bwj05OyfTkYOkVUw\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=tyX6RXlsTqHZ6GM1bb2jNg\u0026sgr=zESHS7wTO9XiwT_CaWA7Hw\u0026sgt=1767099877\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=27ca6e9e2a5bdf955e5a3ea97366578a\u0026ssk2=\u0026svar=1767099877\u0026var=7\u0026var_3=7\u0026ymid=7\u0026z=10295867\u0026zdekr=xYGJDhNaq2MJiwuMJfpaxw\u0026zdekrIp=LCNa-Mdyq5WgcJbaPVLT0Q\u0026rdk=rk3","date":"2025-12-30T13:04:38.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.lcwss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:32:43 GMT","end":"Thu, 05 Feb 2026 02:32:42 GMT"},"fingerprint":{"sha1":"E8:8E:A9:57:CC:0D:B9:5E:DF:4B:F6:C2:C6:5B:F6:DE:7D:60:53:06","sha256":"E8:93:3F:03:95:B6:53:06:4B:D6:08:CC:41:89:30:4F:DE:24:5C:F9:22:D7:72:85:04:17:50:3B:CA:BB:1F:1E"}}},"request":{"raw":"GET /_astro/CrossDomainNonUniqueCheck.B3JhEnNW.js HTTP/1.1\r\nHost: cdn.lcwss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 13:04:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 12:25:33 GMT\r\netag: W/\"694a8a3d-3dd\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 2026 13:04:38 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":989,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (989), with no line terminators","md5":"6cc653a35a6be06ace8fcb51ee76790b","sha1":"de0d10f53978e10e9c3e0c9613fd4c5d7b97f550","sha256":"3d14532a3890d88a6c7581a1e6f1607de30d61ce69208b59fa899442a1846b44","sha512":"99f5c0d83c296961aa381730cfaf74462893aabb3eaf708c662009c7db7fd1014d38ba6eaad41fe78199c4d62582dafe5a087bb0f9e2983ad095f6a15d1cc5ad","ssdeep":"","tlshash":"ef11614f20e0419480065aded11663a0a831017723cecfa2f1dc9b7807bc69cce25393","first_seen":"2025-12-17T05:47:47.225123Z","last_seen":"2026-01-08T03:12:00.613079Z","times_seen":128,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"cdn.lcwss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}