{"report_id":"b25e8673-4441-4876-8e10-84ee6e69ee2f","version":0,"status":"done","tags":[],"date":"2026-09-14T13:58:23Z","url":{"schema":"http","addr":"whitmanclearing.co/","fqdn":"whitmanclearing.co","domain":"whitmanclearing.co","tld":"co"},"ip":{"addr":"104.21.4.98","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"whitmanclearing.co/","fqdn":"whitmanclearing.co","domain":"whitmanclearing.co","tld":"co"},"title":"mail.ladner-treasury.co - mail UI","dom":{"size":40159,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8543)","md5":"f9467d9120dc054f596de7e6c38d747c","sha1":"d7864afb2e53c35df0ec856418752450067f2dbc","sha256":"3235ee9f54e32c9415a372ad469e3a3deaaa5447584af6b28165b5af34a53625","sha512":"b709414a3845135be7718abf58280418118c9388fd644086b103b516b7e7ce420ecdc4fded8db25d74f75229cce86628a388eccb7a2b3f424c1e6f638903ff09","ssdeep":"768:XCjsZS6gABnugNRhfvr3DjJAfw3bG9+3byLlzwYczgk6oPJ7QJ3:XKsZYKHhLzjJAfd+3bQzKzgk6oPJ7QJ3","tlshash":"ef03e85689f204730bf351df7a5667023ae58063d254890039fd839c5fecee6ba27a8d","dom_hash":"domhasha610404ffd7f37a59ab184d0db08860c","first_seen":"2026-09-14T13:58:26.400029Z","last_seen":"2026-09-14T13:58:26.400029Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"whitmanclearing.co/","fqdn":"whitmanclearing.co","domain":"whitmanclearing.co","tld":"co"},"ip":{"addr":"104.21.4.98","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-19T13:58:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"whitmanclearing.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"whitmanclearing.co","ip":{"addr":"172.67.153.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-14T13:55:39.723864Z","last_seen":"2026-09-14T13:55:39.723864Z","alert_count":16,"request_count":16,"received_data":2558132,"sent_data":8924,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"whitmanclearing.co/cache/f75fc18841220092813e9074629be2caf3f65b5a.js","fqdn":"whitmanclearing.co","domain":"whitmanclearing.co","tld":"co"},"ip":{"addr":"172.67.153.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"21d0e0b409c2fbe4a71115b9db6828b6","sha1":"b999b89dba721e13f558034669890f168d52b8ea","sha256":"d945932755d529bc7c234e8b016c0395b2093d44eee5205f649655cbecfa0c58","sha512":"78ff87ca44bb54140ec3f5c5ab701673e0a83ce8f6239388e581272a1af3ae1b7486f0dccd9177944e59f1d0127188876e3a69c5983ec1f2b4694dbba8def674","ssdeep":"24576:FB360bBy4QKcg1YjVXc2NhnyKMeIaQIFcpCL1JLJ32AaV5vWw:FB36UByZKcmYjVXcKhnyKMeIaQIFcpCy","tlshash":"4d154a497341703a42eb20f6586f0a0ab23695556409c4b8f5bcc9d92dbac4372bff7e","size":924245,"data":"","first_seen":"2026-04-26T21:23:37.087168Z","last_seen":"2026-09-21T07:10:21.132742Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"whitmanclearing.co/fonts/noto-sans-v12-latin_greek_cyrillic-italic.woff2","fqdn":"whitmanclearing.co","domain":"whitmanclearing.co","tld":"co"},"ip":{"addr":"172.67.153.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whitmanclearing.co/","date":"2026-09-14T13:57:53.274Z","timestamp":1789394273274,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitmanclearing.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 20:53:38 GMT","end":"Sat, 05 Dec 2026 21:52:25 GMT"},"fingerprint":{"sha1":"41:B4:59:1D:BD:E7:0C:27:A2:41:AE:64:6D:76:54:CE:EC:16:F1:FC","sha256":"8C:8C:DB:76:CF:BF:00:31:13:98:4B:ED:2A:EC:BD:A1:5F:23:08:5F:EC:71:CF:3E:53:9F:9B:3F:01:F6:C6:86"}}},"request":{"raw":"GET /fonts/noto-sans-v12-latin_greek_cyrillic-italic.woff2 HTTP/1.1\r\nHost: whitmanclearing.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://whitmanclearing.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: MCSESSID=aa10b409fc278d5a00b0976f1a47be49\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 13:57:53 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 06 Sep 2026 17:04:33 GMT\r\netag: \"6a9d9d21-1d1d8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nage: 166\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QL0ztZhwbwekj2hU%2B%2F1Xt3jNvUlsEmzu%2F9HZVCjYNVD6Elzs3f2qq9LndRsqRvDtGPmGsl1Q3OyL1b6MuD86iZasvR%2BuQgVEsnltLwWRjXMwUBY53CxCKvvoOxJFpzzrsbNnNeY%3D\"}]}\r\ncf-ray: a3afe73ffb510b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 119256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119256,"size_decoded":120018,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 119256, version 1.0","md5":"b3bf407526d73f71794361c5fb48290f","sha1":"9473aff269af1a8912f6e4cfeeb3b20a84b83b21","sha256":"a954c0a79c10d3b1bc92da8061a74c4bf99ade39a5f0b385de63e14e569a23db","sha512":"0e0c2f9a90c5b580654738f855fcc0eba15416c1a3354195573ec418a2378bb6d9b4be0ae68f1dc9c1bffa9cb634dc064ba06598a0a577fe67d10e597f1a771c","ssdeep":"3072:1Xx2eAGMpObjvthHSpqaivDKJi8YDMrkKTXIpnSVKh:B79Ms1hs5iWEWgKYpSVs","tlshash":"4cc3123ed6b67bc4ba31cff935a88d6280539681a1377383e85108ac76116df95c2e4f","first_seen":"2023-05-21T01:22:48Z","last_seen":"2026-10-13T16:08:14.840112Z","times_seen":834,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"whitmanclearing.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitmanclearing.co/fonts/noto-sans-v12-latin_greek_cyrillic-regular.woff2","fqdn":"whitmanclearing.co","domain":"whitmanclearing.co","tld":"co"},"ip":{"addr":"172.67.153.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whitmanclearing.co/","date":"2026-09-14T13:57:53.496Z","timestamp":1789394273496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitmanclearing.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 20:53:38 GMT","end":"Sat, 05 Dec 2026 21:52:25 GMT"},"fingerprint":{"sha1":"41:B4:59:1D:BD:E7:0C:27:A2:41:AE:64:6D:76:54:CE:EC:16:F1:FC","sha256":"8C:8C:DB:76:CF:BF:00:31:13:98:4B:ED:2A:EC:BD:A1:5F:23:08:5F:EC:71:CF:3E:53:9F:9B:3F:01:F6:C6:86"}}},"request":{"raw":"GET /fonts/noto-sans-v12-latin_greek_cyrillic-regular.woff2 HTTP/1.1\r\nHost: whitmanclearing.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://whitmanclearing.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: MCSESSID=aa10b409fc278d5a00b0976f1a47be49\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 13:57:53 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 06 Sep 2026 17:04:33 GMT\r\netag: \"6a9d9d21-264d4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nage: 166\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EwY8ePeMmLRX143GXvheSWf3m5zDgJbsXdLCKTI1J7kBcIUBMONq8BCB3ZLq7RSA6mgEArfj0F1Fd%2FFAhQRutSQ722ZBq7EmF%2FiPCbiS18SPzDYVlbi7iDhtSQ7A4%2FeXLftTMW0%3D\"}]}\r\ncf-ray: a3afe7415b610b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 156884\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156884,"size_decoded":157644,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 156884, version 1.0","md5":"562c99547de538ff0ba6e31082d63f54","sha1":"854b89b02edcc2358b34c0bd92847cadab9afaac","sha256":"16bb3d8fb5c371c9e4fa6b5f313c0a5e2edd911c0ce6d0f9c3cee01e9560a2b3","sha512":"efaba6c39d659349c349f1d16046f64830756495471434d5a041fab9052db033091bad8f9afeee75e9665a31966778eda6ef9dcca0c00dd56614b11042d1f874","ssdeep":"3072:LuxuBf1oEcdfIp93FuFQd7Zg2c4j+99jPfe7egFsQCEjvOQjpw:ykBdZGfIv3FuFQpZncV99XeyiHiQja","tlshash":"5de312e025cb809ff52347a9e9a0dc2acb7a488d52d85b90a18bcd7fd17de6121ec061","first_seen":"2023-05-15T21:21:54Z","last_seen":"2026-10-13T16:08:14.828186Z","times_seen":1079,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"whitmanclearing.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitmanclearing.co/fonts/noto-sans-v12-latin_greek_cyrillic-700italic.woff2","fqdn":"whitmanclearing.co","domain":"whitmanclearing.co","tld":"co"},"ip":{"addr":"172.67.153.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whitmanclearing.co/","date":"2026-09-14T13:57:53.501Z","timestamp":1789394273501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitmanclearing.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 20:53:38 GMT","end":"Sat, 05 Dec 2026 21:52:25 GMT"},"fingerprint":{"sha1":"41:B4:59:1D:BD:E7:0C:27:A2:41:AE:64:6D:76:54:CE:EC:16:F1:FC","sha256":"8C:8C:DB:76:CF:BF:00:31:13:98:4B:ED:2A:EC:BD:A1:5F:23:08:5F:EC:71:CF:3E:53:9F:9B:3F:01:F6:C6:86"}}},"request":{"raw":"GET /fonts/noto-sans-v12-latin_greek_cyrillic-700italic.woff2 HTTP/1.1\r\nHost: whitmanclearing.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://whitmanclearing.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: MCSESSID=aa10b409fc278d5a00b0976f1a47be49\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 13:57:53 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 06 Sep 2026 17:04:33 GMT\r\netag: \"6a9d9d21-1e93c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nage: 166\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dFHBgKl%2Fl0h9GGEHt4PHuBEEDHmkNKb%2BSvoOm4sm9wc2rZ9OpAWyrbmR0d2p%2F5vR9IGkH70P9fBiAuatg%2BoEPtItvOhgzQwjsxFDkupvZ2QvEubVHmqTeaI8AZUforH6Xp3ep9A%3D\"}]}\r\ncf-ray: a3afe7416b640b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 125244\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125244,"size_decoded":126006,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 125244, version 1.0","md5":"dc1e0f60d0747904166eb7e3a6b516f3","sha1":"3013731bd1a4e86083809168666082013810ecbb","sha256":"0bc6089e574f4e86713e5c4911a09ed7766cdf6b6a23991a7d024ea3df16754d","sha512":"12d3c5cec151dcfb6a7463df0c94dd50fe9695f10c3a02f941750f7e3c2dfbd6096797b3d29e11f0f0fa5be6da5f4392158271ca4f2069c941c11ad2010b99c8","ssdeep":"3072:hKYtXKGmEYbbM3VqcOg0vrRwhNc1tKV8+H0J+:hx1zmEYb2V3h0vF8c1e8U0J+","tlshash":"c5c3121452a5485f0f096bce03a681c3dddf7e396f2656e2e06a7977176084a1efb204","first_seen":"2023-05-21T01:22:48Z","last_seen":"2026-10-08T22:34:29.848485Z","times_seen":605,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"whitmanclearing.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitmanclearing.co/","fqdn":"whitmanclearing.co","domain":"whitmanclearing.co","tld":"co"},"ip":{"addr":"172.67.153.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-14T13:57:51.203Z","timestamp":1789394271203,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitmanclearing.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 20:53:38 GMT","end":"Sat, 05 Dec 2026 21:52:25 GMT"},"fingerprint":{"sha1":"41:B4:59:1D:BD:E7:0C:27:A2:41:AE:64:6D:76:54:CE:EC:16:F1:FC","sha256":"8C:8C:DB:76:CF:BF:00:31:13:98:4B:ED:2A:EC:BD:A1:5F:23:08:5F:EC:71:CF:3E:53:9F:9B:3F:01:F6:C6:86"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: whitmanclearing.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 13:57:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: MCSESSID=aa10b409fc278d5a00b0976f1a47be49; path=/; secure; HttpOnly; SameSite=Lax\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=15768000;\r\nx-content-type-options: nosniff\r\nx-robots-tag: none\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NPyp6HuTZVNdJ%2B5Dvl6fvOZOj9ynQrKfmYk5%2B9SBkY8d7u8%2Frc1qHDOg1UBQla1bEIWH%2B%2FL1jmLakDA5GpIHMoYzvFzrtR4880uw1prbgxpppvSbCkHx%2B41otTscihspQe1UhN0%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3afe7333acc0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"MCSESSID","value":"aa10b409fc278d5a00b0976f1a47be49","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"MCSESSID=aa10b409fc278d5a00b0976f1a47be49; path=/; secure; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39926,"size_decoded":12557,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8543)","md5":"4cf15e9c81578c140a408c963cfd172a","sha1":"f2e3a2d41a7cd98a9fcde2d6d387ebe47fd19f55","sha256":"dab2b7bd30cb000e7a60998b431dfa8c5c72141335820680f83ee58399cf758d","sha512":"14801e28679a4a4105b6222d5ee39d7ef8ca83c43f4f579e1ad2bd229be845343e2cc7739cc039c107778cc691011530673603b0acd16e8bdf28343fb503154c","ssdeep":"768:2BdsZSwgABnugNRhfvr3DjJAfw3bG9+3byLlzwYczgk6oPJ7QJ7:2jsZ8KHhLzjJAfd+3bQzKzgk6oPJ7QJ7","tlshash":"6d03e85689f204330bf351df7a5667033ae58063d254890079fd429c5fecee6ba27a8d","first_seen":"2026-09-14T13:58:26.40604Z","last_seen":"2026-09-14T13:58:26.40604Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1679,"timings":{"blocked":-1,"dns":4,"connect":19,"send":0,"wait":1654,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"whitmanclearing.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitmanclearing.co/img/cow_mailcow.svg","fqdn":"whitmanclearing.co","domain":"whitmanclearing.co","tld":"co"},"ip":{"addr":"172.67.153.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whitmanclearing.co/","date":"2026-09-14T13:57:53.126Z","timestamp":1789394273126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitmanclearing.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 20:53:38 GMT","end":"Sat, 05 Dec 2026 21:52:25 GMT"},"fingerprint":{"sha1":"41:B4:59:1D:BD:E7:0C:27:A2:41:AE:64:6D:76:54:CE:EC:16:F1:FC","sha256":"8C:8C:DB:76:CF:BF:00:31:13:98:4B:ED:2A:EC:BD:A1:5F:23:08:5F:EC:71:CF:3E:53:9F:9B:3F:01:F6:C6:86"}}},"request":{"raw":"GET /img/cow_mailcow.svg HTTP/1.1\r\nHost: whitmanclearing.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whitmanclearing.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: MCSESSID=aa10b409fc278d5a00b0976f1a47be49\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 13:57:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 06 Sep 2026 17:04:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9d9d27-280\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1096\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L0K7361faxHyt9SU3sYQe5gUt4Nkn0b%2FwlNzJfMgBKNehqyMhz4VI3ADpQgvug3lN%2FjmQK61xN6TkV7cEL3NqWBx%2FYZACZB4lc0%2Fn06TaCeFzXCitm0BLt9A8mMoFcQpq8OMW%2Bs%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3afe73f0b480b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":640,"size_decoded":1146,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"133ae6bfc0b920faa47bae95b92f0078","sha1":"ef283c51270ef5641bd94066c104227e74eb910c","sha256":"08728fe7b67bb09bdb058eb44f345b64c25a0d7ba47e156fa43e7dfaff846af9","sha512":"ec4db4986b401081acfa4ceccdebc041156fa3a52871da3c2289f984c10556918d0e5f9b85849ca195ad167350cfd5d87da99aa570573b793e4c58a95247e877","ssdeep":"","tlshash":"41f0dd784658c736f8a4a3601a3d6078e47ab1fe06e4a2f15085ab902b05cf2981bac4","first_seen":"2026-09-14T13:55:44.432374Z","last_seen":"2026-09-14T13:58:26.407405Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"whitmanclearing.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitmanclearing.co/fonts/noto-sans-v12-latin_greek_cyrillic-700italic.woff2","fqdn":"whitmanclearing.co","domain":"whitmanclearing.co","tld":"co"},"ip":{"addr":"172.67.153.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whitmanclearing.co/","date":"2026-09-14T13:57:53.275Z","timestamp":1789394273275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitmanclearing.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 20:53:38 GMT","end":"Sat, 05 Dec 2026 21:52:25 GMT"},"fingerprint":{"sha1":"41:B4:59:1D:BD:E7:0C:27:A2:41:AE:64:6D:76:54:CE:EC:16:F1:FC","sha256":"8C:8C:DB:76:CF:BF:00:31:13:98:4B:ED:2A:EC:BD:A1:5F:23:08:5F:EC:71:CF:3E:53:9F:9B:3F:01:F6:C6:86"}}},"request":{"raw":"GET /fonts/noto-sans-v12-latin_greek_cyrillic-700italic.woff2 HTTP/1.1\r\nHost: whitmanclearing.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://whitmanclearing.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: MCSESSID=aa10b409fc278d5a00b0976f1a47be49\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 13:57:53 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 06 Sep 2026 17:04:33 GMT\r\netag: \"6a9d9d21-1e93c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nage: 166\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2Bzm8n0rA4ccRZXEttfgxCeTZLPQZKAaEgIH2jqu65sb8uVdsUDJhFTm3vTBvvW%2BXaRrYhUjubfhqF7BKN9Yei2VE6afFdv6EuQOeuCn9DHCoVwEB7Nbpu09Tsdft5N1DdR8a7M%3D\"}]}\r\ncf-ray: a3afe73ffb520b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 125244\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125244,"size_decoded":126002,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 125244, version 1.0","md5":"dc1e0f60d0747904166eb7e3a6b516f3","sha1":"3013731bd1a4e86083809168666082013810ecbb","sha256":"0bc6089e574f4e86713e5c4911a09ed7766cdf6b6a23991a7d024ea3df16754d","sha512":"12d3c5cec151dcfb6a7463df0c94dd50fe9695f10c3a02f941750f7e3c2dfbd6096797b3d29e11f0f0fa5be6da5f4392158271ca4f2069c941c11ad2010b99c8","ssdeep":"3072:hKYtXKGmEYbbM3VqcOg0vrRwhNc1tKV8+H0J+:hx1zmEYb2V3h0vF8c1e8U0J+","tlshash":"c5c3121452a5485f0f096bce03a681c3dddf7e396f2656e2e06a7977176084a1efb204","first_seen":"2023-05-21T01:22:48Z","last_seen":"2026-10-08T22:34:29.848485Z","times_seen":605,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"whitmanclearing.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitmanclearing.co/fonts/noto-sans-v12-latin_greek_cyrillic-italic.woff2","fqdn":"whitmanclearing.co","domain":"whitmanclearing.co","tld":"co"},"ip":{"addr":"172.67.153.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whitmanclearing.co/","date":"2026-09-14T13:57:53.499Z","timestamp":1789394273499,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitmanclearing.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 20:53:38 GMT","end":"Sat, 05 Dec 2026 21:52:25 GMT"},"fingerprint":{"sha1":"41:B4:59:1D:BD:E7:0C:27:A2:41:AE:64:6D:76:54:CE:EC:16:F1:FC","sha256":"8C:8C:DB:76:CF:BF:00:31:13:98:4B:ED:2A:EC:BD:A1:5F:23:08:5F:EC:71:CF:3E:53:9F:9B:3F:01:F6:C6:86"}}},"request":{"raw":"GET /fonts/noto-sans-v12-latin_greek_cyrillic-italic.woff2 HTTP/1.1\r\nHost: whitmanclearing.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://whitmanclearing.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: MCSESSID=aa10b409fc278d5a00b0976f1a47be49\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 13:57:53 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 06 Sep 2026 17:04:33 GMT\r\netag: \"6a9d9d21-1d1d8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nage: 166\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZFDmCnnAzY7p81PaJ%2BJgbRX6HcyDDyPQU9khQafxyaGVRkkf%2F%2FWO96ZsPDxSerOn2Sta4%2FXp4UY0Pl1UOlSJ6was0wAOr1D0EJYEyzJA%2BRF8%2BqQxLmTYK2pT%2BoZfZyZ0X3QrHic%3D\"}]}\r\ncf-ray: a3afe7416b630b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 119256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119256,"size_decoded":120024,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 119256, version 1.0","md5":"b3bf407526d73f71794361c5fb48290f","sha1":"9473aff269af1a8912f6e4cfeeb3b20a84b83b21","sha256":"a954c0a79c10d3b1bc92da8061a74c4bf99ade39a5f0b385de63e14e569a23db","sha512":"0e0c2f9a90c5b580654738f855fcc0eba15416c1a3354195573ec418a2378bb6d9b4be0ae68f1dc9c1bffa9cb634dc064ba06598a0a577fe67d10e597f1a771c","ssdeep":"3072:1Xx2eAGMpObjvthHSpqaivDKJi8YDMrkKTXIpnSVKh:B79Ms1hs5iWEWgKYpSVs","tlshash":"4cc3123ed6b67bc4ba31cff935a88d6280539681a1377383e85108ac76116df95c2e4f","first_seen":"2023-05-21T01:22:48Z","last_seen":"2026-10-13T16:08:14.840112Z","times_seen":834,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"whitmanclearing.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitmanclearing.co/cache/f75fc18841220092813e9074629be2caf3f65b5a.js","fqdn":"whitmanclearing.co","domain":"whitmanclearing.co","tld":"co"},"ip":{"addr":"172.67.153.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whitmanclearing.co/","date":"2026-09-14T13:57:53.122Z","timestamp":1789394273122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitmanclearing.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 20:53:38 GMT","end":"Sat, 05 Dec 2026 21:52:25 GMT"},"fingerprint":{"sha1":"41:B4:59:1D:BD:E7:0C:27:A2:41:AE:64:6D:76:54:CE:EC:16:F1:FC","sha256":"8C:8C:DB:76:CF:BF:00:31:13:98:4B:ED:2A:EC:BD:A1:5F:23:08:5F:EC:71:CF:3E:53:9F:9B:3F:01:F6:C6:86"}}},"request":{"raw":"GET /cache/f75fc18841220092813e9074629be2caf3f65b5a.js HTTP/1.1\r\nHost: whitmanclearing.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whitmanclearing.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: MCSESSID=aa10b409fc278d5a00b0976f1a47be49\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 13:57:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Tue, 14 Sep 2027 13:38:32 GMT\r\npragma: cache\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15768000;\r\nx-content-type-options: nosniff\r\nx-robots-tag: none\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin\r\ncontent-encoding: gzip\r\nage: 1095\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 14 Sep 2026 13:39:37 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nQvNBgkUnq7KkITQ7c01m%2Fd5nGG87ueCK3RaUMzsFGa%2FyPwGTdg3bLjeog86gteg7hiwx3Vt0xdBkpFcOiOaEWaKBqd0asL93%2F5lL%2BuOo9KAnTlvzgN8TJUzwwCTXJQXkBVVndo%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3afe73f0b470b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":924245,"size_decoded":262963,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"21d0e0b409c2fbe4a71115b9db6828b6","sha1":"b999b89dba721e13f558034669890f168d52b8ea","sha256":"d945932755d529bc7c234e8b016c0395b2093d44eee5205f649655cbecfa0c58","sha512":"78ff87ca44bb54140ec3f5c5ab701673e0a83ce8f6239388e581272a1af3ae1b7486f0dccd9177944e59f1d0127188876e3a69c5983ec1f2b4694dbba8def674","ssdeep":"24576:FB360bBy4QKcg1YjVXc2NhnyKMeIaQIFcpCL1JLJ32AaV5vWw:FB36UByZKcmYjVXcKhnyKMeIaQIFcpCy","tlshash":"4d154a497341703a42eb20f6586f0a0ab23695556409c4b8f5bcc9d92dbac4372bff7e","first_seen":"2026-04-26T21:23:37.087168Z","last_seen":"2026-09-21T07:10:21.132742Z","times_seen":32,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"whitmanclearing.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitmanclearing.co/fonts/noto-sans-v12-latin_greek_cyrillic-700.woff2","fqdn":"whitmanclearing.co","domain":"whitmanclearing.co","tld":"co"},"ip":{"addr":"172.67.153.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whitmanclearing.co/","date":"2026-09-14T13:57:53.273Z","timestamp":1789394273273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitmanclearing.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 20:53:38 GMT","end":"Sat, 05 Dec 2026 21:52:25 GMT"},"fingerprint":{"sha1":"41:B4:59:1D:BD:E7:0C:27:A2:41:AE:64:6D:76:54:CE:EC:16:F1:FC","sha256":"8C:8C:DB:76:CF:BF:00:31:13:98:4B:ED:2A:EC:BD:A1:5F:23:08:5F:EC:71:CF:3E:53:9F:9B:3F:01:F6:C6:86"}}},"request":{"raw":"GET /fonts/noto-sans-v12-latin_greek_cyrillic-700.woff2 HTTP/1.1\r\nHost: whitmanclearing.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://whitmanclearing.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: MCSESSID=aa10b409fc278d5a00b0976f1a47be49\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 13:57:53 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 06 Sep 2026 17:04:33 GMT\r\netag: \"6a9d9d21-25e10\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nage: 166\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VIBJsTsUzpT2cNveb2HH31Xif%2BKcDaslkYAm83uA8BDYnIDZgrO9EYC3bbFuf%2B7SXhjeVM7bU%2FgfpzybvqVhm6U%2B9Rc%2Fwg0qo0mI%2Bepacp0bTFj0lFNwrucd2hNf6499WpFfZPU%3D\"}]}\r\ncf-ray: a3afe73ffb500b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 155152\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155152,"size_decoded":155918,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 155152, version 1.0","md5":"c66bedf0712ec4954b9a63d8924c4b9e","sha1":"6340eceeeb07f4234e0618df488e16062c68f65d","sha256":"6a2f4003a98a3d8b367702823291c5e43078623288deff831d9d83c8f2db9b16","sha512":"4187579e570f36fba5efe3e8260be7f47669468ee77e478df3e206b303c7fbef81eeb21750e694dd5d151ccc2ec09733d3907b90ceab8d1529208e5561b6ef4d","ssdeep":"3072:Rnuyyh362si6MpXlK/53z+6E55c0w7uPtAbFh1obbLV6FG+gMPmVp97Ttiqgh0aM:Zk768cBD+J5bwC6h1I2gM29oz0aM","tlshash":"74e31229432a5a7f4150e27e96542b51a3fb3747212a310f0a8c64bfd744bcc6bc7ead","first_seen":"2023-05-15T21:21:54Z","last_seen":"2026-10-13T16:08:14.842085Z","times_seen":1036,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"whitmanclearing.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitmanclearing.co/api/v1/get/passwordpolicy/html","fqdn":"whitmanclearing.co","domain":"whitmanclearing.co","tld":"co"},"ip":{"addr":"172.67.153.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://whitmanclearing.co/","date":"2026-09-14T13:57:53.372Z","timestamp":1789394273372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitmanclearing.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 20:53:38 GMT","end":"Sat, 05 Dec 2026 21:52:25 GMT"},"fingerprint":{"sha1":"41:B4:59:1D:BD:E7:0C:27:A2:41:AE:64:6D:76:54:CE:EC:16:F1:FC","sha256":"8C:8C:DB:76:CF:BF:00:31:13:98:4B:ED:2A:EC:BD:A1:5F:23:08:5F:EC:71:CF:3E:53:9F:9B:3F:01:F6:C6:86"}}},"request":{"raw":"GET /api/v1/get/passwordpolicy/html HTTP/1.1\r\nHost: whitmanclearing.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whitmanclearing.co/\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: MCSESSID=aa10b409fc278d5a00b0976f1a47be49\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 13:57:53 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTION, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, X-Api-Key, Origin\r\nstrict-transport-security: max-age=15768000;\r\nx-content-type-options: nosniff\r\nx-robots-tag: none\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E58ZvOTUHuM7A7b26nhENDkcyuxo9EGdT1oSE4xw%2B71gdCBV5QkRTxPUJKXDhOdCUCCqBTqUPeW%2B1qto0qCrTHQqJrnmuKFjUyTvTwiDxq4TzVOYuOVe8pDJ5iXLe8EOy7GzeNM%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3afe7409b560b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1116,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T21:38:38.165528Z","times_seen":19106563,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"whitmanclearing.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitmanclearing.co/favicon.png","fqdn":"whitmanclearing.co","domain":"whitmanclearing.co","tld":"co"},"ip":{"addr":"172.67.153.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whitmanclearing.co/","date":"2026-09-14T13:57:53.375Z","timestamp":1789394273375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitmanclearing.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 20:53:38 GMT","end":"Sat, 05 Dec 2026 21:52:25 GMT"},"fingerprint":{"sha1":"41:B4:59:1D:BD:E7:0C:27:A2:41:AE:64:6D:76:54:CE:EC:16:F1:FC","sha256":"8C:8C:DB:76:CF:BF:00:31:13:98:4B:ED:2A:EC:BD:A1:5F:23:08:5F:EC:71:CF:3E:53:9F:9B:3F:01:F6:C6:86"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: whitmanclearing.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whitmanclearing.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: MCSESSID=aa10b409fc278d5a00b0976f1a47be49\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 13:57:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 06 Sep 2026 17:04:33 GMT\r\netag: \"6a9d9d21-44cb\"\r\nstrict-transport-security: max-age=15768000;\r\nx-content-type-options: nosniff\r\nx-robots-tag: none\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin\r\naccept-ranges: bytes\r\nage: 158\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LCyf%2FPBvL7%2Ffr7IotKqLFBDEH5c7nW594fQhZmvIYvGLfNiy4ZYp5Vcpmu10xtcMgEkk2WVOXuix2932%2FWWmQG4emr3%2BXWOMm6W%2FqSAPED2Zx%2B5JTH4%2B8WWUleBQsUrVBLlIyLU%3D\"}]}\r\ncf-ray: a3afe7413b600b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17611\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17611,"size_decoded":18553,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"e78b44f90f9bb1da18152c9c0f9973ca","sha1":"8425331eb0802c1badac5256321b326d21dc4405","sha256":"0ad400d228ad2786ccfd32a54997e5b79ceb45beb7a629dd8eb692b47b70738e","sha512":"30ee8c47d33ef700a1d1510654dfa2036e12bdcb29a37c31c5cb443abd426fb1c6f63f3b80e06c233fee0b60ff46c7cfff48343ae5cf7dcb80ebfbfbfef0203f","ssdeep":"384:oqTiSU1F3ar5UqyOXMc7ruetUkemiCxwLk/Mj:oqTi/g+eMcf/lX7Mj","tlshash":"fa82c00d8f4206dbd22e7d7356cc04bf67bd6bf0c05db65aba082641158aecf865d306","first_seen":"2025-09-21T02:37:39.786418Z","last_seen":"2026-09-21T07:10:21.128799Z","times_seen":236,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"whitmanclearing.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitmanclearing.co/fonts/noto-sans-v12-latin_greek_cyrillic-700.woff2","fqdn":"whitmanclearing.co","domain":"whitmanclearing.co","tld":"co"},"ip":{"addr":"172.67.153.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whitmanclearing.co/","date":"2026-09-14T13:57:53.498Z","timestamp":1789394273498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitmanclearing.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 20:53:38 GMT","end":"Sat, 05 Dec 2026 21:52:25 GMT"},"fingerprint":{"sha1":"41:B4:59:1D:BD:E7:0C:27:A2:41:AE:64:6D:76:54:CE:EC:16:F1:FC","sha256":"8C:8C:DB:76:CF:BF:00:31:13:98:4B:ED:2A:EC:BD:A1:5F:23:08:5F:EC:71:CF:3E:53:9F:9B:3F:01:F6:C6:86"}}},"request":{"raw":"GET /fonts/noto-sans-v12-latin_greek_cyrillic-700.woff2 HTTP/1.1\r\nHost: whitmanclearing.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://whitmanclearing.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: MCSESSID=aa10b409fc278d5a00b0976f1a47be49\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 13:57:53 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 06 Sep 2026 17:04:33 GMT\r\netag: \"6a9d9d21-25e10\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nage: 166\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xQgx9RnJnTI6tTzgdisEsLYgGsvMsYKqTnDwMIqS28GUCRXwWvIZuPGif5PaVrl5OLBGyFx0YXWms05U8U2xRldtQ0kI1LwJe1xlSa%2FnPpZFkxqVAdU6wtWe749C0mxue0RtikQ%3D\"}]}\r\ncf-ray: a3afe7415b620b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 155152\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155152,"size_decoded":155908,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 155152, version 1.0","md5":"c66bedf0712ec4954b9a63d8924c4b9e","sha1":"6340eceeeb07f4234e0618df488e16062c68f65d","sha256":"6a2f4003a98a3d8b367702823291c5e43078623288deff831d9d83c8f2db9b16","sha512":"4187579e570f36fba5efe3e8260be7f47669468ee77e478df3e206b303c7fbef81eeb21750e694dd5d151ccc2ec09733d3907b90ceab8d1529208e5561b6ef4d","ssdeep":"3072:Rnuyyh362si6MpXlK/53z+6E55c0w7uPtAbFh1obbLV6FG+gMPmVp97Ttiqgh0aM:Zk768cBD+J5bwC6h1I2gM29oz0aM","tlshash":"74e31229432a5a7f4150e27e96542b51a3fb3747212a310f0a8c64bfd744bcc6bc7ead","first_seen":"2023-05-15T21:21:54Z","last_seen":"2026-10-13T16:08:14.842085Z","times_seen":1036,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"whitmanclearing.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitmanclearing.co/cache/3c8c8b3a1c6b3ce2aa532d167f918f5d056abec5.css","fqdn":"whitmanclearing.co","domain":"whitmanclearing.co","tld":"co"},"ip":{"addr":"172.67.153.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://whitmanclearing.co/","date":"2026-09-14T13:57:53.120Z","timestamp":1789394273120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitmanclearing.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 20:53:38 GMT","end":"Sat, 05 Dec 2026 21:52:25 GMT"},"fingerprint":{"sha1":"41:B4:59:1D:BD:E7:0C:27:A2:41:AE:64:6D:76:54:CE:EC:16:F1:FC","sha256":"8C:8C:DB:76:CF:BF:00:31:13:98:4B:ED:2A:EC:BD:A1:5F:23:08:5F:EC:71:CF:3E:53:9F:9B:3F:01:F6:C6:86"}}},"request":{"raw":"GET /cache/3c8c8b3a1c6b3ce2aa532d167f918f5d056abec5.css HTTP/1.1\r\nHost: whitmanclearing.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whitmanclearing.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: MCSESSID=aa10b409fc278d5a00b0976f1a47be49\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 13:57:53 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Tue, 14 Sep 2027 13:38:32 GMT\r\npragma: cache\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15768000;\r\nx-content-type-options: nosniff\r\nx-robots-tag: none\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin\r\ncontent-encoding: gzip\r\nage: 1095\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 14 Sep 2026 13:39:37 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dj8DaWhUSAVS6UCGuF3eM8K1pnFFqkHghcGn%2FihVUsqZpFmvizAb3%2F%2BBkFz3cojTnSRpLvDYhYzCRuhUJD4Bv8oycQYjPF1B105T8O%2BlpSNsxKfv6hxGnxOAfms3SQMYOLcBaJM%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a3afe73f0b460b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":346102,"size_decoded":53838,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65170)","md5":"b91cbb98a38ece9d9f20878d4e3204d6","sha1":"57d9365a8e832d17023cc438eb79d171dd6223fb","sha256":"c55b0c7fd6bd21a897ae43c0c55cbaf1c3756ad28953177369517129e8e8bf01","sha512":"fee5cc5e5040fbbf896e4323707b32f25a820c68550d5eca9ca6e0fe6ea67db9dcb4e648ae5d0f06335ddb4ef7091e07baedbf015a065fb8fba43a102c8620e1","ssdeep":"6144:3t+5ZLm8c4uTLj1cU7oovLYz3i6PSbh68r:NLj1cUsovLYz3i6PSbhtr","tlshash":"097462a2f58520ddf363c02bbb817b6c61aff559d6410e7af01b626c4ac128516b3f78","first_seen":"2025-04-23T22:59:47.742922Z","last_seen":"2026-10-05T14:53:24.872605Z","times_seen":432,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"whitmanclearing.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitmanclearing.co/css/flags/4x3/en.svg","fqdn":"whitmanclearing.co","domain":"whitmanclearing.co","tld":"co"},"ip":{"addr":"172.67.153.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whitmanclearing.co/","date":"2026-09-14T13:57:53.243Z","timestamp":1789394273243,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitmanclearing.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 20:53:38 GMT","end":"Sat, 05 Dec 2026 21:52:25 GMT"},"fingerprint":{"sha1":"41:B4:59:1D:BD:E7:0C:27:A2:41:AE:64:6D:76:54:CE:EC:16:F1:FC","sha256":"8C:8C:DB:76:CF:BF:00:31:13:98:4B:ED:2A:EC:BD:A1:5F:23:08:5F:EC:71:CF:3E:53:9F:9B:3F:01:F6:C6:86"}}},"request":{"raw":"GET /css/flags/4x3/en.svg HTTP/1.1\r\nHost: whitmanclearing.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whitmanclearing.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: MCSESSID=aa10b409fc278d5a00b0976f1a47be49\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 13:57:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 06 Sep 2026 17:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9d9d21-21a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1093\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kOEcnlJblERhxtQ9m4rgjXO65mcPJRuJ%2FRcO01m9meMoY17UqbsD4k4sbXxn6oRWDfdXih4Rg9%2BWmr%2FOR0qAv%2Fyaz5Fcl1o%2BEtZvU3RfFiu3a6SdLhEkEfznhRUjsrtBnke5Qks%3D\"}]}\r\npriority: u=4,i\r\ncf-ray: a3afe73fcb4c0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":538,"size_decoded":1099,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d3ddd6025a06a78535b0d432d14905bf","sha1":"2b5148a18b90f933e47bf895c26d61a52d21d9d8","sha256":"825310f9bcc8892559317bfc87fc28d5d7bad06c02d562b5740aafcf4b040803","sha512":"618481c44206c46bf35212f5b2206457c641417ce2bd575867eb6cf43776a7e363ae7aef7ce339d304c4d73a1054b1d5f6c5ebf6f8d8dbf2bdf41d442e2e33ad","ssdeep":"","tlshash":"d2f0c9d8c72c3044c70a97105cacb8e3d4d9a1cd999004eab8e09ae460a9b97dccadd1","first_seen":"2023-04-07T07:31:08Z","last_seen":"2026-10-14T09:14:42.773922Z","times_seen":5331,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"whitmanclearing.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitmanclearing.co/fonts/bootstrap-icons.woff2?524846017b983fc8ded9325d94ed40f3","fqdn":"whitmanclearing.co","domain":"whitmanclearing.co","tld":"co"},"ip":{"addr":"172.67.153.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whitmanclearing.co/","date":"2026-09-14T13:57:53.269Z","timestamp":1789394273269,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitmanclearing.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 20:53:38 GMT","end":"Sat, 05 Dec 2026 21:52:25 GMT"},"fingerprint":{"sha1":"41:B4:59:1D:BD:E7:0C:27:A2:41:AE:64:6D:76:54:CE:EC:16:F1:FC","sha256":"8C:8C:DB:76:CF:BF:00:31:13:98:4B:ED:2A:EC:BD:A1:5F:23:08:5F:EC:71:CF:3E:53:9F:9B:3F:01:F6:C6:86"}}},"request":{"raw":"GET /fonts/bootstrap-icons.woff2?524846017b983fc8ded9325d94ed40f3 HTTP/1.1\r\nHost: whitmanclearing.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://whitmanclearing.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: MCSESSID=aa10b409fc278d5a00b0976f1a47be49\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 13:57:53 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 06 Sep 2026 17:04:33 GMT\r\netag: \"6a9d9d21-19088\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nage: 166\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=scJpmQiGJX7qMPEZzUI%2FciZ7047Z65P26jBIeIoUdVaEWnZHKlYtmWO7RM9MVbk5Tp5uorBtni3H8jbZhfABgbfDAsSf0eaTbFUokKweCuDgZdYCoovyX4mjiXfsEtU0BjY30xs%3D\"}]}\r\ncf-ray: a3afe73ffb4e0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 102536\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102536,"size_decoded":103292,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 102536, version 1.0","md5":"1ed478a6b265d4b4f5c26bb063203588","sha1":"1ca5e8c7d2fb8e9d60ad1a1feb2a46e98c248a3d","sha256":"c874e14c63db86c4c5318c77cb557fce7036645edc7d690dcc1d23b389631b13","sha512":"6aa92a97373e55521584bf67eae83160e01f38f636e09aa90ddfb085b020d02662393998e620e416a2bb6a198b90f1f0bd1ab66fa350e310f0f6511bd01b0ec9","ssdeep":"1536:JdO26Vlt/8WEjNkZWNvZy4m4I2Do5H7Z3BvgoXK/tNh8XEorh/gQOns6trAk2Xt:J42o3WY4I2Do5NxvgxtNGXEofDW4","tlshash":"3fa31232a784011e2128daf7a453f2f805d9e786efb327d963c0817597e78d267a43d2","first_seen":"2023-04-07T09:04:20Z","last_seen":"2026-10-14T14:37:37.274599Z","times_seen":5238,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"whitmanclearing.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitmanclearing.co/fonts/noto-sans-v12-latin_greek_cyrillic-regular.woff2","fqdn":"whitmanclearing.co","domain":"whitmanclearing.co","tld":"co"},"ip":{"addr":"172.67.153.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whitmanclearing.co/","date":"2026-09-14T13:57:53.271Z","timestamp":1789394273271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitmanclearing.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 20:53:38 GMT","end":"Sat, 05 Dec 2026 21:52:25 GMT"},"fingerprint":{"sha1":"41:B4:59:1D:BD:E7:0C:27:A2:41:AE:64:6D:76:54:CE:EC:16:F1:FC","sha256":"8C:8C:DB:76:CF:BF:00:31:13:98:4B:ED:2A:EC:BD:A1:5F:23:08:5F:EC:71:CF:3E:53:9F:9B:3F:01:F6:C6:86"}}},"request":{"raw":"GET /fonts/noto-sans-v12-latin_greek_cyrillic-regular.woff2 HTTP/1.1\r\nHost: whitmanclearing.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://whitmanclearing.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: MCSESSID=aa10b409fc278d5a00b0976f1a47be49\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 13:57:53 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 06 Sep 2026 17:04:33 GMT\r\netag: \"6a9d9d21-264d4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nage: 166\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uHFgPAfAE%2Fj5wWSdFL7OUz5DN3gOZr5FuzC%2B6PgAQ0h18m6BlVtsr6Itst%2FqEme6wwyclUqiKmXVkAqbBwYhcmcrwq8dB0kJGvINJO5HkqVxrR0z7smwScWYH0hZaEE0Mi4htSw%3D\"}]}\r\ncf-ray: a3afe73ffb4f0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 156884\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156884,"size_decoded":157644,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 156884, version 1.0","md5":"562c99547de538ff0ba6e31082d63f54","sha1":"854b89b02edcc2358b34c0bd92847cadab9afaac","sha256":"16bb3d8fb5c371c9e4fa6b5f313c0a5e2edd911c0ce6d0f9c3cee01e9560a2b3","sha512":"efaba6c39d659349c349f1d16046f64830756495471434d5a041fab9052db033091bad8f9afeee75e9665a31966778eda6ef9dcca0c00dd56614b11042d1f874","ssdeep":"3072:LuxuBf1oEcdfIp93FuFQd7Zg2c4j+99jPfe7egFsQCEjvOQjpw:ykBdZGfIv3FuFQpZncV99XeyiHiQja","tlshash":"5de312e025cb809ff52347a9e9a0dc2acb7a488d52d85b90a18bcd7fd17de6121ec061","first_seen":"2023-05-15T21:21:54Z","last_seen":"2026-10-13T16:08:14.828186Z","times_seen":1079,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"whitmanclearing.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}