{"report_id":"b146245c-c2b6-4f5a-846c-32e0b21b4eb3","version":0,"status":"done","tags":[],"date":"2026-09-05T22:56:15Z","url":{"schema":"http","addr":"worldlibertyfinancesystem.net/","fqdn":"worldlibertyfinancesystem.net","domain":"worldlibertyfinancesystem.net","tld":"net"},"ip":{"addr":"162.218.117.172","port":0,"asn":53755,"as":"IOFLOOD","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"worldlibertyfinancesystem.net/","fqdn":"worldlibertyfinancesystem.net","domain":"worldlibertyfinancesystem.net","tld":"net"},"title":"Security Check Required","dom":{"size":39847,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5109)","md5":"1464a6199127bc0f409aefeae7e29d70","sha1":"67eacbc2d3a0684df86cdd16e7316bc8bfb6093e","sha256":"667fb76344c42929d4c28bf1e7c77f728b16c82125c85092cbccf7963cfafc3b","sha512":"85763f4b4ebc531876c02345635a15dc07c22ddbb62c6bbd4378dd515fa70133003c6337846ec4e1813bf8121109b87cad90a026d4c86a7f3ab733ba6d22571a","ssdeep":"384:lUL9rqiw1qCTtVqygFCCHy0Y6OJiKI+Jkud9Sf6CMWz/Dip9QyKv7e:lUL9rqiw1qutg1Y6O9JdrCjDAd","tlshash":"9a03f936a9e300662913929d6fe7634a72749047d445ea783fcd9254cf8e0eac9f2b4c","dom_hash":"domhasha662ed656e253e4781042bb713595c67","first_seen":"2026-09-05T22:56:16.930496Z","last_seen":"2026-09-05T22:56:16.930496Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"worldlibertyfinancesystem.net/","fqdn":"worldlibertyfinancesystem.net","domain":"worldlibertyfinancesystem.net","tld":"net"},"ip":{"addr":"162.218.117.172","port":0,"asn":53755,"as":"IOFLOOD","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-10T22:56:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"worldlibertyfinancesystem.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"worldlibertyfinancesystem.net","ip":{"addr":"162.218.117.172","port":443,"asn":53755,"as":"IOFLOOD","country":"United States","country_code":"US"},"domain_registered":"2026-05-15","domain_rank":0,"first_seen":"2026-09-05T22:49:15.663627Z","last_seen":"2026-09-05T22:49:15.663627Z","alert_count":2,"request_count":2,"received_data":33600,"sent_data":1032,"comment":"","tags":null,"fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-30T23:14:54.105192Z","alert_count":0,"request_count":1,"received_data":67567,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"opsshield.com","ip":{"addr":"172.67.68.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-06-30","domain_rank":418735,"first_seen":"2026-05-22T19:53:36.704258Z","last_seen":"2026-08-31T04:04:07.910006Z","alert_count":0,"request_count":1,"received_data":11344,"sent_data":564,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"worldlibertyfinancesystem.net/","fqdn":"worldlibertyfinancesystem.net","domain":"worldlibertyfinancesystem.net","tld":"net"},"ip":{"addr":"162.218.117.172","port":443,"asn":53755,"as":"IOFLOOD","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fcf1447abb520c4b0dba10576c4824aa","sha1":"5051ba947d79d16f90693745ec6621e81bdbd736","sha256":"a77a1e32a2d3b763b6887e5011d297ca959a1d76f00fa8e179778cb13e84fbf6","sha512":"d61cf7bd3994241b906b2c2ef38ce6a43314ac340d9c28f6eb2b25b0cc0c02b6d05b68c8a944496649c0bae54caca28e5548b7aa3571ccad306f8f090cdd96be","ssdeep":"96:+Ph0Tk/j6TOvCZRQhiRTnq1lZSyrCDegkX7eIQ2KERZy0:+Ph0Y/yOKZRiipnClsyrC6gkX73vXRZf","tlshash":"4db12fae28f2102519a3602e479bb60831319117304adcb97e5cd354afa44afa7f7fdd","size":5348,"data":"","first_seen":"2026-08-31T06:39:02.071948Z","last_seen":"2026-09-06T20:48:34.799928Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancesystem.net/","fqdn":"worldlibertyfinancesystem.net","domain":"worldlibertyfinancesystem.net","tld":"net"},"ip":{"addr":"162.218.117.172","port":443,"asn":53755,"as":"IOFLOOD","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b7f2a3723296894ba94934b7aa897539","sha1":"a459d8cefacfb7fd2ab910a0f64ce75210c691b1","sha256":"acde5daa02120964de5d7548d0aa416a474619a783e9e002002a215d33a27c54","sha512":"17593a41902f5e57e0a80ba1e5254416289e434b5daa470213a0030831bca090d9a34cf62c5e866ded6c6ff271c120efdecf3a228cfcc7c1eec15bda2cfa7a00","ssdeep":"192:z1UVku6Q9Sf6C7QYFnz/DIXELu9QygD7v+nkPZWLyMCEGDf:ukud9Sf6CMWz/Dip9QyKv7X","tlshash":"cc22e81158cf14920081124fdda37149714542efee91ba68bfad48582fe905fc7f7bad","size":10245,"data":"","first_seen":"2026-08-31T06:39:02.076662Z","last_seen":"2026-09-06T20:48:34.800676Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/altcha/dist/altcha.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e426c3c79a12dad829e2c8d34acbaf8f","sha1":"7021e2cb47b0f624379b67d9efa01445799cc93e","sha256":"cf728ec14dfaa3ccd99768408c0e77cfb92cfe1ed70063e080dd60e02030ad0b","sha512":"4720608b8916d2c358d91a9656ee1acf67610952045de2250e66ca6097ca58650fe62297582a8b301e17fd75f8052d99b50c404040698377268cc8a75b443a86","ssdeep":"1536:NaRx/Ny7K/Wro57TOWEJrf4rDq+M/aE22Q4aiegfxkmwg8k4oa9ueO2MGWwgieyT:i/WroYf4rDk22Q4aiegfxkmwg8k4oa9f","tlshash":"c6633ca136c4f0365bf342a660ff0115f3346199780f8124a67aecc978af9e561e7e2d","size":66790,"data":"","first_seen":"2025-12-21T00:04:19.471335Z","last_seen":"2026-09-06T20:48:34.798101Z","times_seen":171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"worldlibertyfinancesystem.net/","fqdn":"worldlibertyfinancesystem.net","domain":"worldlibertyfinancesystem.net","tld":"net"},"ip":{"addr":"162.218.117.172","port":443,"asn":53755,"as":"IOFLOOD","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T22:55:45.839Z","timestamp":1788648945839,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"worldlibertyfinancesystem.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 13:43:32 GMT","end":"Wed, 14 Oct 2026 13:43:31 GMT"},"fingerprint":{"sha1":"25:92:E0:19:F3:AF:69:E7:85:1B:CB:51:19:7A:88:B0:2A:48:37:C9","sha256":"FE:F0:A9:29:32:A1:C0:C1:54:4C:56:AD:9C:26:77:AA:3A:6C:EE:4A:DF:E9:07:1F:A7:EF:E4:15:EE:14:4B:D2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: worldlibertyfinancesystem.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 22:55:47 GMT\r\nContent-Type: text/html\r\nContent-Length: 33301\r\nLast-Modified: Tue, 01 Sep 2026 20:23:00 GMT\r\nConnection: close\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0\r\nPragma: no-cache\r\nExpires: 0\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33301,"size_decoded":33600,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (592)","md5":"e6c9c57562a526c56700531097359652","sha1":"54606636436dc264e519de982f9367618d945b4b","sha256":"cdf59a197cd57ed52e4f124d8018f726ee1fd11cf0c164c2a2eecbf5d5774fb5","sha512":"7f1ac14dfb9240542b4580dc7efb86fb17347808a1cd4b971505a3aa6193a56b2d031e8ac073f8df551879b8a6f10c434dc82b5e74a09cca8e0ef7441c92a9e0","ssdeep":"384:8UL9rqiw1qSD6/0Y6OJiFI+nkud9Sf6CMWz/Dip9QyKv7N:8UL9rqiw1qy656O4zdrCjDAM","tlshash":"f0e2092aa8e70065291361ad5feb764a73649047d806ed783fcd52584f8a0efc6f378c","first_seen":"2026-09-05T22:49:25.903815Z","last_seen":"2026-09-05T22:56:16.935235Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1141,"timings":{"blocked":0,"dns":349,"connect":157,"send":0,"wait":314,"receive":1,"ssl":320},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"worldlibertyfinancesystem.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/altcha/dist/altcha.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://worldlibertyfinancesystem.net/","date":"2026-09-05T22:55:47.339Z","timestamp":1788648947339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/altcha/dist/altcha.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://worldlibertyfinancesystem.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://worldlibertyfinancesystem.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 2.3.0\r\nx-jsd-version-type: version\r\netag: W/\"104e6-cCHiy0ew9iQ3m2fZ76AURXmcyT4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 05 Sep 2026 22:55:47 GMT\r\nage: 42798\r\nx-served-by: cache-fra-etou8220185-FRA, cache-bma-essb1270078-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24226\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":66790,"size_decoded":25003,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65303)","md5":"e426c3c79a12dad829e2c8d34acbaf8f","sha1":"7021e2cb47b0f624379b67d9efa01445799cc93e","sha256":"cf728ec14dfaa3ccd99768408c0e77cfb92cfe1ed70063e080dd60e02030ad0b","sha512":"4720608b8916d2c358d91a9656ee1acf67610952045de2250e66ca6097ca58650fe62297582a8b301e17fd75f8052d99b50c404040698377268cc8a75b443a86","ssdeep":"1536:NaRx/Ny7K/Wro57TOWEJrf4rDq+M/aE22Q4aiegfxkmwg8k4oa9ueO2MGWwgieyT:i/WroYf4rDk22Q4aiegfxkmwg8k4oa9f","tlshash":"c6633ca136c4f0365bf342a660ff0115f3346199780f8124a67aecc978af9e561e7e2d","first_seen":"2025-12-21T00:04:19.471335Z","last_seen":"2026-09-06T20:48:34.798101Z","times_seen":171,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":5,"connect":9,"send":0,"wait":9,"receive":3,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opsshield.com/images/cpguard-logo.svg","fqdn":"opsshield.com","domain":"opsshield.com","tld":"com"},"ip":{"addr":"172.67.68.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldlibertyfinancesystem.net/","date":"2026-09-05T22:55:47.349Z","timestamp":1788648947349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opsshield.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:56:44 GMT","end":"Wed, 21 Oct 2026 11:56:40 GMT"},"fingerprint":{"sha1":"6D:81:E3:CD:17:0F:F8:61:D5:7D:70:ED:1C:D6:27:E6:C3:D3:A3:8A","sha256":"9F:86:BF:FC:6F:4C:81:5C:BD:98:DE:77:14:45:E2:5D:A5:01:78:56:19:43:4A:0E:28:F6:80:8C:42:A7:1A:4D"}}},"request":{"raw":"GET /images/cpguard-logo.svg HTTP/1.1\r\nHost: opsshield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://worldlibertyfinancesystem.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 22:55:47 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5047\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Jan 2024 13:27:51 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yxdpgJCmyUv48rcPaCvb5TwxaCOyUu8PdLIT%2BqBeHsagw44EWHEjmGqsI355%2FpEeZbtCp5KAo28NNxC4%2FLS93v%2F63IpMUKbqMQGjS99ORbY4y%2BBNVz8w%2BQiGCQw1ZdY%3D\"}]}\r\nage: 4933\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\ncf-ray: a368d2d11c5232fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10562,"size_decoded":5829,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9a89262ae71122aac73387774272b81c","sha1":"fe59255cb7c52f29aff4a280c158334349725d78","sha256":"22afb842e091d1a7041a8b4e5a9531c5cd7fdcd36f07eaf6c6748c1416e5c7c2","sha512":"0a4f66cc101832b2b21c689f540a059a6d9654694b3e23526a88c7f684bfd1e0e7d10c4759bfa1e2d32748d5de551ebc9fe9423bc0bf99c62dd8a4736298a34d","ssdeep":"192:84CL1ul4eG1YGFpXAL2RpWLYLBF49WIklyfJUiLA9RJdMf5GWkfcN:8tul41lFy2RL9i9l+uJUkA7MfYWk0N","tlshash":"5c2267ca433491f879e52aac4e203ed63bb164bd65718348c73b59076883ef6a15cd7c","first_seen":"2026-05-22T19:53:42.265841Z","last_seen":"2026-09-06T20:48:34.798738Z","times_seen":11,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":10,"connect":1,"send":0,"wait":23,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancesystem.net/favicon.ico","fqdn":"worldlibertyfinancesystem.net","domain":"worldlibertyfinancesystem.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldlibertyfinancesystem.net/","date":"2026-09-05T22:55:47.416Z","timestamp":1788648947416,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"worldlibertyfinancesystem.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 13:43:32 GMT","end":"Wed, 14 Oct 2026 13:43:31 GMT"},"fingerprint":{"sha1":"25:92:E0:19:F3:AF:69:E7:85:1B:CB:51:19:7A:88:B0:2A:48:37:C9","sha256":"FE:F0:A9:29:32:A1:C0:C1:54:4C:56:AD:9C:26:77:AA:3A:6C:EE:4A:DF:E9:07:1F:A7:EF:E4:15:EE:14:4B:D2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: worldlibertyfinancesystem.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://worldlibertyfinancesystem.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-07T00:13:55.061548Z","times_seen":18319651,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"worldlibertyfinancesystem.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}