{"report_id":"b4555209-bf0d-4d94-b157-49dde484ea5a","version":6,"status":"done","tags":[],"date":"2025-09-25T10:14:18Z","url":{"schema":"http","addr":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","fqdn":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","domain":"liquidity.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.142.2","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","fqdn":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","domain":"liquidity.eu.com","tld":"eu.com"},"title":"Welcome to Aave Delight | Exquisite Dining Experience"},"submit":{"url":{"schema":"http","addr":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","fqdn":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","domain":"liquidity.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.142.2","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-30T10:14:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","ip":{"addr":"104.21.87.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":38,"request_count":20,"received_data":8262333,"sent_data":10968,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-21T22:11:31.798564Z","alert_count":0,"request_count":1,"received_data":8950,"sent_data":575,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-21T22:11:31.014241Z","alert_count":0,"request_count":3,"received_data":73533,"sent_data":1749,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/images/cf43bd2a.png","fqdn":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","domain":"liquidity.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.87.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","date":"2025-09-25T10:13:55.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liquidity.eu.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 22:01:17 GMT","end":"Thu, 18 Dec 2025 22:01:16 GMT"},"fingerprint":{"sha1":"FC:4B:B7:93:19:0D:54:B0:6B:50:5B:F0:B4:87:0E:7E:BB:AC:75:D6","sha256":"44:CB:A9:3E:7A:08:FD:10:B7:5D:E2:78:B9:31:3C:24:41:B3:6B:F7:C9:A3:1B:FD:FB:F2:49:E6:6D:0D:62:10"}}},"request":{"raw":"GET /images/cf43bd2a.png HTTP/1.1\r\nHost: xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Oct 2025 10:13:55 GMT\r\netag: \"a5a97-68801cc6-3543576;;;\"\r\nlast-modified: Tue, 22 Jul 2025 23:20:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 678551\r\naccept-ranges: bytes\r\ndate: Thu, 25 Sep 2025 10:13:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fS5WbLJtUqcRflIt2f3%2BUakRH%2FtWtc4Lh4tTnnpQWwFTdYfnEotGM0p2bwwzraLBtiv1%2F3MRNXxZKK%2FH4JF2uh1AQymnCEHTyNnC6sJdowXQt2WJkrHVsLTqzQxYt7nZVDGnw8xgtPq0Y90bIUvMcsvw0Lly%2BOXfgll7F3o6VQGvCg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9849c06c88f30b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":678551,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced","md5":"3e553a8ef9dd46c1eea73d5f1d4a4492","sha1":"b5d32513d3f6585dbfc4c4c40efe46244b50f309","sha256":"7e8c976562d3d5a048726b57ceeeb59d76054c2229f58632d7cfe1c666e92008","sha512":"d19419c52d618d50d333d55cc1ec476eb6dde7b227952247bc6b83ebfdb0f4f619bb386fd97efab605a50bc874fffe71ec0fd023c87abb2cb43e547e6dd87ff1","ssdeep":"12288:1HhRrRPE/3y1xLwQMOylbpizhcxyMPJL7GqE1x8U2lbRvJW9njIVNn+IIwMWe7lu:lNPE/3y1xJebkzhEh7GqE0/bRBU0TnTV","tlshash":"cfe43369c84c7111f61975691ac4efd90863e83c879b3a97cc9bb1bc126b86d80ff493","first_seen":"2025-09-25T10:14:30.350315Z","last_seen":"2025-09-25T10:14:30.350315Z","times_seen":1,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":361,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/images/2a616ee1.png","fqdn":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","domain":"liquidity.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.87.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","date":"2025-09-25T10:13:55.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liquidity.eu.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 22:01:17 GMT","end":"Thu, 18 Dec 2025 22:01:16 GMT"},"fingerprint":{"sha1":"FC:4B:B7:93:19:0D:54:B0:6B:50:5B:F0:B4:87:0E:7E:BB:AC:75:D6","sha256":"44:CB:A9:3E:7A:08:FD:10:B7:5D:E2:78:B9:31:3C:24:41:B3:6B:F7:C9:A3:1B:FD:FB:F2:49:E6:6D:0D:62:10"}}},"request":{"raw":"GET /images/2a616ee1.png HTTP/1.1\r\nHost: xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Oct 2025 10:13:55 GMT\r\netag: \"306-68801cc4-3543566;;;\"\r\nlast-modified: Tue, 22 Jul 2025 23:20:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 774\r\naccept-ranges: bytes\r\ndate: Thu, 25 Sep 2025 10:13:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9J%2F6xhBb1BywTHtdfnh5HJ3htA7jjCcRkPkt2k9LIdH9eNvm%2FgRnG2uM7YrHdGRjRWy2NF8U7fvMk64oqBy%2B7kUgnOSJq75js%2Bm5jDmWEI0H7VlCAgk%2BKxxfnNpKl7CfXtVVgIq3%2BDp0zXzVKNuo4Z7Xtu3f%2BeXlaJTrfcewMaavDg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9849c06c98f90b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":774,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 4-bit colormap, non-interlaced","md5":"0859271d209276597d947ba81fc40828","sha1":"b9e8d3b4bdfa5f76a0252f2a7373d79780b2910e","sha256":"2d3462749969b3e190fedee3f9ad965a587acb4a32ad24f29aac2bbf1d4ecee8","sha512":"3fbc493f134853edb5e1b4c9cd998dba8e30543d71e136161d37db64a666c3075eb1445dcd2ae0595ef79fdca003a32958239ed6f10edae0b8582d98f0b2b0d2","ssdeep":"","tlshash":"9c01b5c5f7f36eb84c03602bb82b08d14869f0f1b90226aacbb1218a4f7068372a5513","first_seen":"2025-09-25T10:14:30.358458Z","last_seen":"2025-09-25T10:14:30.358458Z","times_seen":1,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/images/4ef9ea3b.png","fqdn":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","domain":"liquidity.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.87.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","date":"2025-09-25T10:13:55.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liquidity.eu.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 22:01:17 GMT","end":"Thu, 18 Dec 2025 22:01:16 GMT"},"fingerprint":{"sha1":"FC:4B:B7:93:19:0D:54:B0:6B:50:5B:F0:B4:87:0E:7E:BB:AC:75:D6","sha256":"44:CB:A9:3E:7A:08:FD:10:B7:5D:E2:78:B9:31:3C:24:41:B3:6B:F7:C9:A3:1B:FD:FB:F2:49:E6:6D:0D:62:10"}}},"request":{"raw":"GET /images/4ef9ea3b.png HTTP/1.1\r\nHost: xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Oct 2025 10:13:55 GMT\r\netag: \"98d9f-68801cc5-3543568;;;\"\r\nlast-modified: Tue, 22 Jul 2025 23:20:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 626079\r\naccept-ranges: bytes\r\ndate: Thu, 25 Sep 2025 10:13:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xo%2FsjIFHB8%2FueN75AltQaDfJstAiTvvKZLoKAnv4oREcOLPz1BCfzhj%2BRlGG0jVUZMR2CJSxykkbQFtqX0%2Frn7h19gFYf7SMDS%2BXJhQQGWeHJcygePOD7OKGBMl7cVMVOrBo7xT9BHt2tCrRkbo6xN8h%2BCX95FlmHv2bVjo7BU4guQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9849c06c98fb0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":626079,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced","md5":"cb0f9df8664f213baf4032bce81b9022","sha1":"837eac3a9137cfe1a12ad71be96e4785e7357858","sha256":"ec1423c484f22ea0d418650fdc784ba355d2d9b0e08f0b49ab4cc564e0497296","sha512":"5a82fcc3de76863f789478101750717f5d2fe17336df347535562c4690fdbeff5787b409ccc066f460a8a639aea019caeaff0691a38ea52849cd92873626b4da","ssdeep":"12288:3RkKIB4hJcjvSjruTmeu7lS62T71z9ujBNBOfcyhKPh6+AuH3O:uBZvwiT3u7lS62T71z9ujBNBotcZ6+AZ","tlshash":"47d4233a99ddc36b832f7892fe552d2bf4253a013278d1a8c9066cdda5170ed3139b36","first_seen":"2025-09-25T10:14:30.361423Z","last_seen":"2025-09-25T10:14:30.361423Z","times_seen":1,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":435,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/logo.png","fqdn":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","domain":"liquidity.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.87.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","date":"2025-09-25T10:13:55.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liquidity.eu.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 22:01:17 GMT","end":"Thu, 18 Dec 2025 22:01:16 GMT"},"fingerprint":{"sha1":"FC:4B:B7:93:19:0D:54:B0:6B:50:5B:F0:B4:87:0E:7E:BB:AC:75:D6","sha256":"44:CB:A9:3E:7A:08:FD:10:B7:5D:E2:78:B9:31:3C:24:41:B3:6B:F7:C9:A3:1B:FD:FB:F2:49:E6:6D:0D:62:10"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Oct 2025 10:13:55 GMT\r\netag: \"28bd-68801cc2-354355e;;;\"\r\nlast-modified: Tue, 22 Jul 2025 23:20:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 10429\r\naccept-ranges: bytes\r\ndate: Thu, 25 Sep 2025 10:13:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zSKRDxlD3XVrhoqoVSL%2FUf22036ypwJ11bt6dnBBDVmsFqjagfvHibpiAJBJvhdAjsBuRDYUZeUMRR%2BpQ5bcMztDT7cb4Z1kZnD0LDr0BFv%2Bpt%2BLZgNo2cZrSzvBal6QK4deq9FoGZMMgnkqheARQVKjz%2BG6D76DK%2BjWxEVnUgEoyQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9849c06ca9000b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":10429,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"828b93de2e306c4cc149e2744d2b3bc8","sha1":"f496d898586860630ecafeefee17ce4a7d23c4cd","sha256":"3bf134a37c36efa6c4ef9c21dbeb70fea93e68d33863ac1d4c332dabbd6dc7f4","sha512":"6c7a5ef134a012fc99bfd0147eccefec4525b0a6063536fa27404893b84dba6ed97e46822455a2234c576a8a8013a6ec05a5733a76f847a6f3be009ecdaa8e8c","ssdeep":"192:OaObJJllSbfpjpEBl4amqUjSovs0/l9w1YxP8iJRKHQd:Oa4fPgEzOjbs0M2P8iP","tlshash":"6b229e9fecb0c855dc24528da014b57494d09e0b28b1d78bc272e987281735fb397eec","first_seen":"2025-09-08T09:54:37.643338Z","last_seen":"2025-09-25T10:14:30.364212Z","times_seen":2,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","fqdn":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","domain":"liquidity.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.87.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-25T10:13:54.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liquidity.eu.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 22:01:17 GMT","end":"Thu, 18 Dec 2025 22:01:16 GMT"},"fingerprint":{"sha1":"FC:4B:B7:93:19:0D:54:B0:6B:50:5B:F0:B4:87:0E:7E:BB:AC:75:D6","sha256":"44:CB:A9:3E:7A:08:FD:10:B7:5D:E2:78:B9:31:3C:24:41:B3:6B:F7:C9:A3:1B:FD:FB:F2:49:E6:6D:0D:62:10"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Sep 2025 10:13:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.1.33\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NLXvmMBr811wG%2Bfyq%2B9nZ4H296G6qjmkDzqXeN6UQKgY4X7xeVhsaK9vg1A1JvPZ%2B3ZhvO1aCEiBzbqTjTUFOON2brNo%2BB7hOsDGEhpauPed8FhKaPNS5m1FaSgIfBHagp58MLaSs%2FjJuEodg95GR1na8JGmdYfbiHdHVStez095%2BV4s\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9849c069ef625ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":25496,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (308)","md5":"c47b70ac58e72bd127e18fe12e8ac1a9","sha1":"b37d55a48337f178835f89a3be4b38773078744d","sha256":"068e9686ff63be36aed50532e3187f36514091a0ce80448a43f67995bdde8ca4","sha512":"cdf66ec616642b639ff3e6f6fd011ab23fe8860a37e024a2edc6a9c58aff9fb59b676b738ec6abc23e787e1f4772358d88693fbc419dbaf2605e07bf481bfd4f","ssdeep":"384:nrvXHcHyL8sNhk7s7B7OzEZi5vEG6OSF2Mra+McV79CvNg0LFelftM:fNNMYZiFEG6OSF2MrabEYfd","tlshash":"16b2c821a5e22177408380d2aa663f6bbfd1d94bca4b4244b2fc87d80fd7c86cd2756d","first_seen":"2025-09-25T10:14:30.367259Z","last_seen":"2025-09-25T10:14:30.367259Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":16,"dns":0,"connect":1,"send":0,"wait":201,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/styles.css","fqdn":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","domain":"liquidity.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.87.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","date":"2025-09-25T10:13:55.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liquidity.eu.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 22:01:17 GMT","end":"Thu, 18 Dec 2025 22:01:16 GMT"},"fingerprint":{"sha1":"FC:4B:B7:93:19:0D:54:B0:6B:50:5B:F0:B4:87:0E:7E:BB:AC:75:D6","sha256":"44:CB:A9:3E:7A:08:FD:10:B7:5D:E2:78:B9:31:3C:24:41:B3:6B:F7:C9:A3:1B:FD:FB:F2:49:E6:6D:0D:62:10"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Oct 2025 10:13:55 GMT\r\netag: \"12dcf-68801cc3-354355f;br\"\r\nlast-modified: Tue, 22 Jul 2025 23:20:35 GMT\r\ncontent-type: text/css\r\ncontent-length: 11042\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 25 Sep 2025 10:13:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4t%2Bii7CapkScYVJhE97Gs1565kbgZgbtVeNRq8tLx2X2u5rLDQizd32Ha4eWx8dYppJgeCO8oMudvdDQBSmUFYW6XvpmJQLbj0baTVPGgUJVZTieSgVvo8kQZBTLZ3iHejNgK9oFgyn8k8D61IzOTluKmL8taqkZRr6i34YOu7LxJA%3D%3D\"}]}\r\ncf-ray: 9849c06c78ed0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77263,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b436d6cf991cd688f8a9c38583d125d5","sha1":"253c20f21c5ca5cdc2eac933f1512c5f55ed129b","sha256":"5077d92b71886198a7516ab79e28dfac4951ed644f2ca5c65c74f637d6f075ba","sha512":"483ec607cfaf1a35bf0115738ce01b75d95c7fc83258f3eb2fb065bf98722963fc873d9cd691ce96e2c3b4b6eb3abea8b9b3af79f5be6f37b62b19e1dd8b5a9d","ssdeep":"384:Ea9/Ndj6oNS/qdoWBjMIDTu0Knq7LTKHZDidYDn4TZoxCS0DfdBhlDr2+L9igHvZ:h/fHjADSBHDrB0ivhc4NdXki","tlshash":"4b73b719f751213c6427c4a4d2eab6dc861988b4ef671afbe5032b218acf3d7197394c","first_seen":"2025-09-25T10:14:30.369658Z","last_seen":"2025-09-25T10:14:30.369658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/images/934daca4.png","fqdn":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","domain":"liquidity.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.87.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","date":"2025-09-25T10:13:55.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liquidity.eu.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 22:01:17 GMT","end":"Thu, 18 Dec 2025 22:01:16 GMT"},"fingerprint":{"sha1":"FC:4B:B7:93:19:0D:54:B0:6B:50:5B:F0:B4:87:0E:7E:BB:AC:75:D6","sha256":"44:CB:A9:3E:7A:08:FD:10:B7:5D:E2:78:B9:31:3C:24:41:B3:6B:F7:C9:A3:1B:FD:FB:F2:49:E6:6D:0D:62:10"}}},"request":{"raw":"GET /images/934daca4.png HTTP/1.1\r\nHost: xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Oct 2025 10:13:55 GMT\r\netag: \"b397c-68801cc6-3543573;;;\"\r\nlast-modified: Tue, 22 Jul 2025 23:20:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 735612\r\naccept-ranges: bytes\r\ndate: Thu, 25 Sep 2025 10:13:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=40pvVBRCMo2HM7EIDYbMMWQEJZ5WXz0l22VKVr6ZBQfAM0njhFzeI6hKBriPpsyOjo%2BlGrszINj7iiWW2lknTzJzYQahh6zECzcGhN3avn4%2FknrNuiEwgfKjICtb%2B0D5sZhBf%2FOpO4drvHxDHmektqYsGacv%2BxjPUYz1ewHfbq778Q%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9849c06c78ee0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":735612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced","md5":"5e5fec80bf984f836ce5a3d8c0e2b697","sha1":"f1e0ca2dcc51bdea837dbc0961ea19f07a99e032","sha256":"ce5ae3f689dac91a6d9e38b9b74691f812daae617efb0876b80f8f0803a58d8b","sha512":"968e0434d57155aa6c2480537f4ed6c6eaf51bf9ed281c935848727ecee6bdc07138e8c05d6e855a4340bfe57ff91e5d470067dfb5f02a6fd595a281f28ea620","ssdeep":"12288:WlOgEQ89nN5nnji6uswM8f9JL308fx9jLL8MKNBHcdNS7r4AFyByWmfVvBbB6lfs:GOLQuJyM8Fh39/jLLXXA7rc49BbBEw","tlshash":"22f42368d89b1bc984d30b756891c64805fc7c8ad33e5431f4bb6a12ff45a8ce9e3b46","first_seen":"2025-09-25T10:14:30.371746Z","last_seen":"2025-09-25T10:14:30.371746Z","times_seen":1,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":280,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/images/9f93fb13.png","fqdn":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","domain":"liquidity.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.87.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","date":"2025-09-25T10:13:55.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liquidity.eu.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 22:01:17 GMT","end":"Thu, 18 Dec 2025 22:01:16 GMT"},"fingerprint":{"sha1":"FC:4B:B7:93:19:0D:54:B0:6B:50:5B:F0:B4:87:0E:7E:BB:AC:75:D6","sha256":"44:CB:A9:3E:7A:08:FD:10:B7:5D:E2:78:B9:31:3C:24:41:B3:6B:F7:C9:A3:1B:FD:FB:F2:49:E6:6D:0D:62:10"}}},"request":{"raw":"GET /images/9f93fb13.png HTTP/1.1\r\nHost: xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Oct 2025 10:13:55 GMT\r\netag: \"89339-68801cc5-3543564;;;\"\r\nlast-modified: Tue, 22 Jul 2025 23:20:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 561977\r\naccept-ranges: bytes\r\ndate: Thu, 25 Sep 2025 10:13:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yKyLWPrUTjoR5CxiamFeyEWmiXGptbopGvOQD3%2BnFr%2B9EPRv5tMJNTTbzpUooEIZNN2bmcPUObE2kf6%2B73KI9xI9web03DTub5R19zDjukIhhdZP604GZFlZasmr4QvsDqbVab%2B1hyuNKBX7pSLBedrpMVV3ulI0YGkl4uuU%2BgsM5g%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9849c06c88f20b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":561977,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced","md5":"c44b44160157933ba9aca727cb916a2b","sha1":"c254fa7b1be003eb3be09930e8eaecaba1e7eefe","sha256":"46843f2c211894126a0f8e20e0e512540d45112731229ce40d8adbe2d43daadc","sha512":"fb6ebe36b85a591af7f94f260eafeab3c3f41177f2ece862bc2c9adca1e48d6e882aa9ea168e5256fff04baf0e44f6b986e8ad41d337c9f3f3c391457dd2dd37","ssdeep":"12288:XGWCZiedxUw837O2O7s5+a5UfgnuR49f/:XGWCgedCdrOXi+YS4h/","tlshash":"f2c4238a5de8a231c6f0f6bfd07c5c1b81926cbf64b69f867ee4c755cb0840e2855e42","first_seen":"2025-09-25T10:14:30.374238Z","last_seen":"2025-09-25T10:14:30.374238Z","times_seen":1,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":329,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Lato:ital,wght@0,100;0,300;0,400;0,700;0,900;1,100;1,300;1,400;1,700;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","date":"2025-09-25T10:13:55.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Lato:ital,wght@0,100;0,300;0,400;0,700;0,900;1,100;1,300;1,400;1,700;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 25 Sep 2025 10:13:55 GMT\r\ndate: Thu, 25 Sep 2025 10:13:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8264,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3e60d92d1a3ec9b0ecddb3b2f3818ffd","sha1":"517b66169afb17d5d0538ae8d559371698077511","sha256":"9aa57887b113c39cf22bae9d6289ec0c6624a0b274c2124555e81235df512597","sha512":"791f3208a2b56caa224bd13ccb1f89f5660be92fa92e8d0163a5c0a081f0738e2de67c9258a67f2616e968cfce980018d1c18aec1741b2f05540357d77d68895","ssdeep":"192:43pv33pUn/J3n/lOw3Oir/i3r/Ux/o3x/TpwOp7RIu71D5Mp76D:4353m/R/lFx7u7Up8pTHF","tlshash":"0802c092086ba508db930dc222da7e36ff0fa25064559935efff14c8bc97c6a5361b0c","first_seen":"2025-09-17T05:16:48.274798Z","last_seen":"2026-08-12T11:04:27.791092Z","times_seen":8857,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":211,"dns":1,"connect":15,"send":0,"wait":38,"receive":0,"ssl":192},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u8w4BMUTPHjxsAXC-q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","date":"2025-09-25T10:13:55.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/lato/v25/S6u8w4BMUTPHjxsAXC-q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24408\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Sep 2025 00:05:59 GMT\r\nexpires: Thu, 24 Sep 2026 00:05:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 122877\r\nlast-modified: Mon, 15 Sep 2025 17:09:43 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24408,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24408, version 1.0","md5":"efee2d080d7bebdd2e0aeb2e030813a0","sha1":"f8d38f9f9584e48c2e469877ebd94232265585f1","sha256":"bca1d88ada544d9c80872d4da27133fab6d347361fa26e932b47ec9559088fd0","sha512":"16c55ad46a26e0af340f2b8a89bd98c1ccad5c976b434aafa7d1d8cd5049b40a58c5350fa42029710c9dd8040e7cea05e57979731b941086ca096239169f4f3c","ssdeep":"384:lwfLHrvMt+iWkciwtprblXNenWbFrqBY34OlZDsnNBvlUg0/qxFul2sOgZl06t2b:6bjU6PflXNHFrZJLDsT+gpx59cS6t2b","tlshash":"55b2e06f8ee485008cd9cc61f39bfa6e96d73d9f437d96c2ce8311360e9a199115424f","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-08-12T11:04:27.789565Z","times_seen":31489,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":191,"dns":2,"connect":27,"send":0,"wait":27,"receive":2,"ssl":173},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/images/35d58647.png","fqdn":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","domain":"liquidity.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.87.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","date":"2025-09-25T10:13:55.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liquidity.eu.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 22:01:17 GMT","end":"Thu, 18 Dec 2025 22:01:16 GMT"},"fingerprint":{"sha1":"FC:4B:B7:93:19:0D:54:B0:6B:50:5B:F0:B4:87:0E:7E:BB:AC:75:D6","sha256":"44:CB:A9:3E:7A:08:FD:10:B7:5D:E2:78:B9:31:3C:24:41:B3:6B:F7:C9:A3:1B:FD:FB:F2:49:E6:6D:0D:62:10"}}},"request":{"raw":"GET /images/35d58647.png HTTP/1.1\r\nHost: xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Oct 2025 10:13:55 GMT\r\netag: \"bee35-68801cc5-354356b;;;\"\r\nlast-modified: Tue, 22 Jul 2025 23:20:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 781877\r\naccept-ranges: bytes\r\ndate: Thu, 25 Sep 2025 10:13:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V7NwWo%2FrGn1%2B%2BDU5OQwEQ8EfTzE4ggHPREotW5cDFs0RxBDqoT7G2UB%2FRZdwQDXPHyez5zjLHxIR0UyHswZ%2BdToncy8pKhJB6ygiJevzS56ZnjxVcXa9uwEnhT7ite4a5jzF3vWuwE04eCaeB03giJu%2Fp6xikyJh0wFqp8sN9Vmkaw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9849c06c78ef0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":781877,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced","md5":"08d19f6fe1a92d925cba793ad70d8e1e","sha1":"a56a1c9fdb3d24ad6eb58f63cb84f3de36f9e09d","sha256":"911196bca48f784feea070264190e44e583648b95f2f1770dbfd0c9d7e32929b","sha512":"d112bffa2bc83d46e58fca87bac7f8bb45d1b31d4e917bd5a11f9a76c24488b0c9643f8a387875841b96413bd59a675f0b90c49b2de9f972742b19f2248c0a13","ssdeep":"12288:l7Kj+5uswPAUitKrEB0viYbrQoiqJEQD0R0cN9IhKfUPwUR5sAuHai9PlqPc:lWyZ3MrEB0vvrLiJQYDeE84h9sPc","tlshash":"5df433ddefcd8c23b6bb8871e5f099495dc6cd02214091ba1485ceb989ade99f0c7b4c","first_seen":"2025-09-25T10:14:30.379179Z","last_seen":"2025-09-25T10:14:30.379179Z","times_seen":1,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":303,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/images/648eb6f6.png","fqdn":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","domain":"liquidity.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.87.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","date":"2025-09-25T10:13:55.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liquidity.eu.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 22:01:17 GMT","end":"Thu, 18 Dec 2025 22:01:16 GMT"},"fingerprint":{"sha1":"FC:4B:B7:93:19:0D:54:B0:6B:50:5B:F0:B4:87:0E:7E:BB:AC:75:D6","sha256":"44:CB:A9:3E:7A:08:FD:10:B7:5D:E2:78:B9:31:3C:24:41:B3:6B:F7:C9:A3:1B:FD:FB:F2:49:E6:6D:0D:62:10"}}},"request":{"raw":"GET /images/648eb6f6.png HTTP/1.1\r\nHost: xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Oct 2025 10:13:55 GMT\r\netag: \"b483c-68801cc6-3543571;;;\"\r\nlast-modified: Tue, 22 Jul 2025 23:20:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 739388\r\naccept-ranges: bytes\r\ndate: Thu, 25 Sep 2025 10:13:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qRnYTFSNKrmw4FX7Im7hoZUu06dFo0ycC0eeoc7ZqeN24l61ZLZbZVIiJnT%2FHwdY4oUHA6exz1DuPq25lI2vFdFjC%2Fp0KBJ%2B7rWLnomKa%2FrS1go3AVnkblvIkskS2juvdpzB2SGVakQm4X3JuYgSAPBWX2NEjEMcs5Ql1tnPuS5Hhg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9849c06c88f40b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":739388,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced","md5":"0aa5ea220e5db588ac22fc1861ec7a32","sha1":"d820adaefa464f72508b86c64ed646d5d650718d","sha256":"49affd69c091548553296a7b7c28c632108731a3c6fe4db10f39bb961659e124","sha512":"cd76bc11a6d2d349f95e0c52807fb6643f41c7e04f22c82c9b30dca16eef3eee42b221add5e04922b28d3d7c7896651234a5e1315b2215968a404a846befcc40","ssdeep":"12288:0zDiFQiQdTTMzWa2CHpGOn7VVlsnwWyX8LORVxZ/TGTddUY1TO5m:0zDiFQiQdTAzWuGO7VEnwWmvrP/Tq6mN","tlshash":"c5f43339c6857633d9c19d1d801ea2cfe27036f63f5a1fc8461a8af3b6d032639d4299","first_seen":"2025-09-25T10:14:30.381757Z","last_seen":"2025-09-25T10:14:30.381757Z","times_seen":1,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":388,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/images/6d2a9ddb.png","fqdn":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","domain":"liquidity.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.87.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","date":"2025-09-25T10:13:55.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liquidity.eu.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 22:01:17 GMT","end":"Thu, 18 Dec 2025 22:01:16 GMT"},"fingerprint":{"sha1":"FC:4B:B7:93:19:0D:54:B0:6B:50:5B:F0:B4:87:0E:7E:BB:AC:75:D6","sha256":"44:CB:A9:3E:7A:08:FD:10:B7:5D:E2:78:B9:31:3C:24:41:B3:6B:F7:C9:A3:1B:FD:FB:F2:49:E6:6D:0D:62:10"}}},"request":{"raw":"GET /images/6d2a9ddb.png HTTP/1.1\r\nHost: xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Oct 2025 10:13:55 GMT\r\netag: \"ab125-68801cc5-3543567;;;\"\r\nlast-modified: Tue, 22 Jul 2025 23:20:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 700709\r\naccept-ranges: bytes\r\ndate: Thu, 25 Sep 2025 10:13:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sBpJsR1wKaSkGpTcHjMQoxRiqiyTMHTQEL55PT6E6RqBeHUtCZ1xs3fpxrEmm3cDEh2tMw1mMWK4Tv7w4nhGiTclL4ATD%2BRB0TeHr11YmtufrABJsdm0xi5F%2FF2cv0DUjbIoWCEOdd6bDXtECvJWr0tOE9WEfhuYb9%2FdV4t12%2F6fzw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9849c06ca8fe0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":700709,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced","md5":"5695c5cec78371e614c385827c22224d","sha1":"379c3aacc0d17713bbab10f3612a4fc172780a6a","sha256":"ed6ced6f0cad98a0c7b916f9225b76c70653239f6a1b95654c8d33a2d4f86ea2","sha512":"8ae98dae994683a2d4be405f92c9519548ec0fdde951f85988c33711b64766064b4b2434ebdf922d6f3b8b5fa90ac5705a1ec3440daaa9d7c3765d82c80ae0f7","ssdeep":"12288:N4nl6JW/Nvv92c8uhG58GSYPX0dUUbm3WmZuUtVj1m+0JtzJOAMC5SUsZ94:NklwW/iluhG5O+EdUQmGYW/oAvI34","tlshash":"d1e433e9dfcbc012a1436716c9e085f50ba7fb57cad18b42088657766b21be1ecc92dc","first_seen":"2025-09-25T10:14:30.384827Z","last_seen":"2025-09-25T10:14:30.384827Z","times_seen":1,"resource_available":false,"data":null}},"time_used":703,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":540,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/logo.png","fqdn":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","domain":"liquidity.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.87.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","date":"2025-09-25T10:13:56.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liquidity.eu.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 22:01:17 GMT","end":"Thu, 18 Dec 2025 22:01:16 GMT"},"fingerprint":{"sha1":"FC:4B:B7:93:19:0D:54:B0:6B:50:5B:F0:B4:87:0E:7E:BB:AC:75:D6","sha256":"44:CB:A9:3E:7A:08:FD:10:B7:5D:E2:78:B9:31:3C:24:41:B3:6B:F7:C9:A3:1B:FD:FB:F2:49:E6:6D:0D:62:10"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Oct 2025 10:13:55 GMT\r\netag: \"28bd-68801cc2-354355e;;;\"\r\nlast-modified: Tue, 22 Jul 2025 23:20:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 10429\r\naccept-ranges: bytes\r\ndate: Thu, 25 Sep 2025 10:13:56 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7pHh4G4V5nbXCFGoG4kLQaQ0tVjKbaaoTLuSLHcUCPIV5h3TyMwOWY2Z7ra3S806I086HXY3l7p%2BFvry%2Bt3enDEd37RrbSgz8ArMglyseiJPEu36o9dLVo6PYn2VV3O%2FNxlvq4cZ1LVtTHzsrfLro7RXEMmCggzNVOHyRHIaRT0GGQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9849c07219240b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10429,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"828b93de2e306c4cc149e2744d2b3bc8","sha1":"f496d898586860630ecafeefee17ce4a7d23c4cd","sha256":"3bf134a37c36efa6c4ef9c21dbeb70fea93e68d33863ac1d4c332dabbd6dc7f4","sha512":"6c7a5ef134a012fc99bfd0147eccefec4525b0a6063536fa27404893b84dba6ed97e46822455a2234c576a8a8013a6ec05a5733a76f847a6f3be009ecdaa8e8c","ssdeep":"192:OaObJJllSbfpjpEBl4amqUjSovs0/l9w1YxP8iJRKHQd:Oa4fPgEzOjbs0M2P8iP","tlshash":"6b229e9fecb0c855dc24528da014b57494d09e0b28b1d78bc272e987281735fb397eec","first_seen":"2025-09-08T09:54:37.643338Z","last_seen":"2025-09-25T10:14:30.364212Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","date":"2025-09-25T10:13:55.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Sep 2025 00:02:22 GMT\r\nexpires: Thu, 24 Sep 2026 00:02:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 123094\r\nlast-modified: Mon, 15 Sep 2025 17:11:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23040,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23040, version 1.0","md5":"de69cf9e514df447d1b0bb16f49d2457","sha1":"2ac78601179c3a63ba3f3f3081556b12ddcaf655","sha256":"c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49","sha512":"4aebb7e54d88827d4a02808f04901c0d09b756c518202b056a6c0f664948f5585221d16967f546e064187c6545acef15d59b68d0a7a59897bd899d3e9dda37b1","ssdeep":"384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD","tlshash":"fca2e1c05cc1e2d4ae02daf7fda5a4eab4e2f01123a8f65f8f114b75d505993640fe01","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-08-12T11:28:24.079738Z","times_seen":186217,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":237,"dns":3,"connect":29,"send":0,"wait":17,"receive":3,"ssl":219},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/images/7af017ad.png","fqdn":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","domain":"liquidity.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.87.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","date":"2025-09-25T10:13:55.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liquidity.eu.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 22:01:17 GMT","end":"Thu, 18 Dec 2025 22:01:16 GMT"},"fingerprint":{"sha1":"FC:4B:B7:93:19:0D:54:B0:6B:50:5B:F0:B4:87:0E:7E:BB:AC:75:D6","sha256":"44:CB:A9:3E:7A:08:FD:10:B7:5D:E2:78:B9:31:3C:24:41:B3:6B:F7:C9:A3:1B:FD:FB:F2:49:E6:6D:0D:62:10"}}},"request":{"raw":"GET /images/7af017ad.png HTTP/1.1\r\nHost: xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Oct 2025 10:13:55 GMT\r\netag: \"29f-68801cc4-3543569;;;\"\r\nlast-modified: Tue, 22 Jul 2025 23:20:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 671\r\naccept-ranges: bytes\r\ndate: Thu, 25 Sep 2025 10:13:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ylkWt9cBvA1NtMp5j7hMrYRIBAAtf%2BannHUBXKLqELxVJ9qooEaBgHx08HzeqpSeCJRpBZ%2FDTfSGtuXBFMeU%2BFLqOeLzvpANSyYrc7XR%2F%2Fo35Y567M6%2Bk0TnZmoKAaoCnuqo%2BnJhNi0LBBQJGWXwDPrHX5IFubLvRSTTj1pICSC3g%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9849c06c88f60b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":671,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 4-bit colormap, non-interlaced","md5":"c3418193a8f5b08aac58219694325cf9","sha1":"9e0e3720c26987a429442be3e939281f2e6f0d7d","sha256":"d3583a16ad76371fd921c9550bb4cd693cc7f2e683a1b86dd6a45411812aaceb","sha512":"747fbaaa05a89b321d6233f23d0da6be985adafb90f53108b29533b6b1466dda4efc760c3065f9f2bcee231e707f8536bdc0dac7fe2008464808137cfa309a2e","ssdeep":"","tlshash":"d2014eb23fd06e309a32f203e51894e09fdcb4ff419b28a698348138d5048a4e282677","first_seen":"2025-09-25T10:14:30.388426Z","last_seen":"2025-09-25T10:14:30.388426Z","times_seen":1,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/images/46d83081.png","fqdn":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","domain":"liquidity.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.87.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","date":"2025-09-25T10:13:55.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liquidity.eu.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 22:01:17 GMT","end":"Thu, 18 Dec 2025 22:01:16 GMT"},"fingerprint":{"sha1":"FC:4B:B7:93:19:0D:54:B0:6B:50:5B:F0:B4:87:0E:7E:BB:AC:75:D6","sha256":"44:CB:A9:3E:7A:08:FD:10:B7:5D:E2:78:B9:31:3C:24:41:B3:6B:F7:C9:A3:1B:FD:FB:F2:49:E6:6D:0D:62:10"}}},"request":{"raw":"GET /images/46d83081.png HTTP/1.1\r\nHost: xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Oct 2025 10:13:55 GMT\r\netag: \"a4dc3-68801cc5-354356c;;;\"\r\nlast-modified: Tue, 22 Jul 2025 23:20:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 675267\r\naccept-ranges: bytes\r\ndate: Thu, 25 Sep 2025 10:13:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dIK9W5gkEh6aJggscU7bHBufArdzFGW%2BiEJ25lFfQCMUgfyuahm6G01W%2FO2zGUVj02FOVN5xKQvD3iTCk2ZrEdsOS%2BjpoR%2FIaGOR5lAWTHKWiTD56IscoOaDLeTInBGjVK5DH8p%2Fphadvk5MZBE9D0veo853Bh4xiAvixWvyDsPJDg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9849c06c98fa0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":675267,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced","md5":"0d08e711de52b6966b60bdf4ddfc90e9","sha1":"1893837d62db54c31db895443b638f302d96f7aa","sha256":"3b04c5c3f6081602eb5a5a1474e48800d3671ecb7546e2afab6efa1a6e5b3c63","sha512":"f0a0d30f0593ff46518e3cdd1a609ad1cd2cd50b38f7e5c7440c5b753259c6f3f40d7f92006d95ba84dfb1e4df9131d3d9663c5a1198bb0318fd873c9237274e","ssdeep":"12288:puJLq59TD6O7dHqBvOY2jiBK08S0qgq7cJ1aAcKh4G8GnPbaVDSWvw2jJelU378:puJe/D6O7VqBvn2jD08S0q2cKh4GZPbN","tlshash":"a3e4238dfe9e88e1a6ca807bd1aca958cc7737c5863c3d0233562dc125cd09659dbb2d","first_seen":"2025-09-25T10:14:30.392035Z","last_seen":"2025-09-25T10:14:30.392035Z","times_seen":1,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":412,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/images/f2990675.png","fqdn":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","domain":"liquidity.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.87.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","date":"2025-09-25T10:13:55.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liquidity.eu.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 22:01:17 GMT","end":"Thu, 18 Dec 2025 22:01:16 GMT"},"fingerprint":{"sha1":"FC:4B:B7:93:19:0D:54:B0:6B:50:5B:F0:B4:87:0E:7E:BB:AC:75:D6","sha256":"44:CB:A9:3E:7A:08:FD:10:B7:5D:E2:78:B9:31:3C:24:41:B3:6B:F7:C9:A3:1B:FD:FB:F2:49:E6:6D:0D:62:10"}}},"request":{"raw":"GET /images/f2990675.png HTTP/1.1\r\nHost: xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Oct 2025 10:13:55 GMT\r\netag: \"aa240-68801cc6-354357a;;;\"\r\nlast-modified: Tue, 22 Jul 2025 23:20:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 696896\r\naccept-ranges: bytes\r\ndate: Thu, 25 Sep 2025 10:13:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CGcyUVIXJ0mxOL5P%2BeEVDen3gkXg1FHZvHipEa23%2Fdo7wm7FeiQQmTIirvsZ4P74ZYP4Z3YF2hqzL4uSjvkyJ7abqW7iHPFkYzVfqtdJsGtCCv0tchnNnRCdjqjfHbPE%2B3WglyGaiXSBGE%2Bwky9SYoKGgz%2Ba6SYgNC3bGOn%2B9kdZFQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9849c06ca8fd0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":696896,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced","md5":"3d8c31e9c0c1f6da3f05c6833512d52d","sha1":"19d3db28468f0cb388b6ab2dd8365f5abd5def68","sha256":"96f883a00e90637bce709b464c9dc511316f3ca2bf07c5a3994f1ce9260e242b","sha512":"807ffb851a3a16caf8ddbe924683abd53719bb78935e37a5f6732617619c82c1d2639556bfd5431b9aab3d551c53c3cd857905cbfdc8bcbafffcbc103d04a9c2","ssdeep":"12288:P0z8qV03RiXcgiMMRtCjYCCKYkb5J+nucj5fCazuN+fFsyrv2COV2Cqf7JhXWBcB:P0z8qV0BiXcgWyZddT+nucj56pk2yvug","tlshash":"7de4338eb9604db4861e693008a8d1716bc1cd7365ad48ac5526b78fa0ecfc8c74dfdb","first_seen":"2025-09-25T10:14:30.394698Z","last_seen":"2025-09-25T10:14:30.394698Z","times_seen":1,"resource_available":false,"data":null}},"time_used":668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":503,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/images/a41c6523.png","fqdn":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","domain":"liquidity.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.87.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","date":"2025-09-25T10:13:55.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liquidity.eu.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 22:01:17 GMT","end":"Thu, 18 Dec 2025 22:01:16 GMT"},"fingerprint":{"sha1":"FC:4B:B7:93:19:0D:54:B0:6B:50:5B:F0:B4:87:0E:7E:BB:AC:75:D6","sha256":"44:CB:A9:3E:7A:08:FD:10:B7:5D:E2:78:B9:31:3C:24:41:B3:6B:F7:C9:A3:1B:FD:FB:F2:49:E6:6D:0D:62:10"}}},"request":{"raw":"GET /images/a41c6523.png HTTP/1.1\r\nHost: xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Oct 2025 10:13:55 GMT\r\netag: \"a26aa-68801cc7-354357b;;;\"\r\nlast-modified: Tue, 22 Jul 2025 23:20:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 665258\r\naccept-ranges: bytes\r\ndate: Thu, 25 Sep 2025 10:13:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0iapmwPyA35RX5cvo1eE7IgaiqdadyuLuP%2BtMHhr8AxjBVFHXykR4xxKrQojlvoS%2FkJ4rIWUiEql2PGtoY0KIOfvcZ14mveVkqTgD0ZYQoYosIYkNz%2FvSD2edukV2TqHWpBafjtlM1zUBDNlO5jCQvZax0f402CjIC0NrQJc1yPbFQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9849c06ca8ff0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":665258,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced","md5":"ae933424c44f0d431ae93dbe24280b65","sha1":"2a0687d6919ef6a2964029d94268ece2deb61249","sha256":"450b00e277525c373bfb25d3297e04f3e2bfa7201714664fac95755a96552440","sha512":"fa80abec5b7fdd47db0130fc3ff0f81272068d680c20140c4a24771c0b39822d9d2b9f204ea1f698ab4c389d2c7665cf14ac255ae90ca72efa07481e110ad814","ssdeep":"12288:8BTrE+hb1L0gjcfTDTvWuSesC551QlUUl1VWk9zU8PdQS1Xr:UkAcfjOuzBWlUUl1LFFRXr","tlshash":"7fe4230db9292b3cd119b2e430e5968fe5fdbc81b327c23ff6c5c6d11b48205aa55ac6","first_seen":"2025-09-25T10:14:30.39724Z","last_seen":"2025-09-25T10:14:30.39724Z","times_seen":1,"resource_available":false,"data":null}},"time_used":730,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":570,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","date":"2025-09-25T10:13:55.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Sep 2025 00:01:34 GMT\r\nexpires: Thu, 24 Sep 2026 00:01:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 123142\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-08-12T11:40:53.420396Z","times_seen":256011,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":148,"dns":16,"connect":18,"send":0,"wait":16,"receive":14,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/images/f54b8ecc.png","fqdn":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","domain":"liquidity.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.87.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","date":"2025-09-25T10:13:55.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liquidity.eu.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 22:01:17 GMT","end":"Thu, 18 Dec 2025 22:01:16 GMT"},"fingerprint":{"sha1":"FC:4B:B7:93:19:0D:54:B0:6B:50:5B:F0:B4:87:0E:7E:BB:AC:75:D6","sha256":"44:CB:A9:3E:7A:08:FD:10:B7:5D:E2:78:B9:31:3C:24:41:B3:6B:F7:C9:A3:1B:FD:FB:F2:49:E6:6D:0D:62:10"}}},"request":{"raw":"GET /images/f54b8ecc.png HTTP/1.1\r\nHost: xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Oct 2025 10:13:55 GMT\r\netag: \"9b2d1-68801cc6-3543578;;;\"\r\nlast-modified: Tue, 22 Jul 2025 23:20:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 635601\r\naccept-ranges: bytes\r\ndate: Thu, 25 Sep 2025 10:13:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0KmJ1cdqkomqMwY0myD%2BkrtHoUxWVUzefwd%2B6BLeTBfvD5rsf3VjA7sK1RcZHDPsxN4H8NdnBCkzaY0aamkJXodP2UiQFu%2FmUbkRpcU%2BoNGIdmVaO3ZhbC4fSsKqv%2BdX7fDxVpp0mUFFINm%2B77orU6FIjBZLk2TMbnYF2SMVbdDVjw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9849c06c88f00b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":635601,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced","md5":"12d65c0c50660f6abb7dda200887d983","sha1":"e3a7ee8072c033cb34a1dfadb6e84541fc623506","sha256":"712050e8768df544cea3aefe4cff3c2fdc90622f5e2f4328249d24df5bfcbc6a","sha512":"0ca69ecc8edd75bc2e1a88a1280e06cf1e6d641f985f706dad64fbc9c51c270e67f497a053ca38a0880c2b92c6749d3af3807ed29c0e6a2f2ea1a421e0cefca2","ssdeep":"12288:kuMkxQ9naswu9VNDphnT4hNauO3tDb6+9GQR+vCpgdTJMp0VG8xoGlYpMBDp:RMkaaswwjDnTipc56+k0Dm1SJGlwMZp","tlshash":"12d433136684f13ef356728a2a55ef463d6c275912397838bbdec43ea15368901b23fc","first_seen":"2025-09-25T10:14:30.400812Z","last_seen":"2025-09-25T10:14:30.400812Z","times_seen":1,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":319,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/images/b9b50d6c.png","fqdn":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","domain":"liquidity.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.87.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","date":"2025-09-25T10:13:55.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liquidity.eu.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 22:01:17 GMT","end":"Thu, 18 Dec 2025 22:01:16 GMT"},"fingerprint":{"sha1":"FC:4B:B7:93:19:0D:54:B0:6B:50:5B:F0:B4:87:0E:7E:BB:AC:75:D6","sha256":"44:CB:A9:3E:7A:08:FD:10:B7:5D:E2:78:B9:31:3C:24:41:B3:6B:F7:C9:A3:1B:FD:FB:F2:49:E6:6D:0D:62:10"}}},"request":{"raw":"GET /images/b9b50d6c.png HTTP/1.1\r\nHost: xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Oct 2025 10:13:55 GMT\r\netag: \"40c-68801cc6-3543575;;;\"\r\nlast-modified: Tue, 22 Jul 2025 23:20:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 1036\r\naccept-ranges: bytes\r\ndate: Thu, 25 Sep 2025 10:13:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QINAx%2BIf4eeFLDQ1DurBT%2BaXam7G%2BsksNeQMle977JbzcCaYWoeebHaUPg1kcd3OaXd0eUGwDVnyJDCHJqzcnF2Ct49P2Eo2wQQSbxRwKyWEwzPuGsv4yCM08v%2BSFN4FbnqJ%2BtKl6PTaJzatd8meL%2FKqzQUelfPz%2FbEaw5Cxz0l16w%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9849c06c98f80b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1036,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"50017a8aa9de48222f4d64ebbbdc03a2","sha1":"620d2a6dacfa1faa4bdb88c205474eecdae76064","sha256":"7e7580f923a116dbec4050838b88d5567805e4cf8ab0d4da0836505fa3372fbc","sha512":"1f3d5196c4c0f7ff6e35aaacf91d5dbcf77bfa72ac4876cfcf6f38a5d835ab31668ac9fbccba68bd9955e089be75673c54e03a267fe50dcf355bcf96e4c81504","ssdeep":"","tlshash":"0f1175802f1573dbac289630f74d5454e9a3f67920489f198b50c9612447639c26a9b7","first_seen":"2025-09-25T10:14:30.40305Z","last_seen":"2025-09-25T10:14:30.40305Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/images/8e99e805.png","fqdn":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","domain":"liquidity.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.87.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","date":"2025-09-25T10:13:55.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liquidity.eu.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 22:01:17 GMT","end":"Thu, 18 Dec 2025 22:01:16 GMT"},"fingerprint":{"sha1":"FC:4B:B7:93:19:0D:54:B0:6B:50:5B:F0:B4:87:0E:7E:BB:AC:75:D6","sha256":"44:CB:A9:3E:7A:08:FD:10:B7:5D:E2:78:B9:31:3C:24:41:B3:6B:F7:C9:A3:1B:FD:FB:F2:49:E6:6D:0D:62:10"}}},"request":{"raw":"GET /images/8e99e805.png HTTP/1.1\r\nHost: xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Oct 2025 10:13:55 GMT\r\netag: \"50b-68801cc4-3543565;;;\"\r\nlast-modified: Tue, 22 Jul 2025 23:20:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 1291\r\naccept-ranges: bytes\r\ndate: Thu, 25 Sep 2025 10:13:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3QGJTouFWMxeDEUWgcX%2BgJz5TzGl45pxE6j37Da0wRwvr%2FnOc2%2FIqCtDcUwvVX0trNIDi118SwJSjd2dfFjvPOSWqXwBM8SZueQXokE5hvhzuR1IdQLLAcRfgGTG%2FiWO3vBBwUmFEJSZSoR2Bc9YuLshNufp5xHRQyjXwZtR%2BhqyNg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9849c06c98f70b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1291,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"64b982a5843d2d6b0de5f0e763bcfb5b","sha1":"0f745819bf6d39ece5fe5ee6f8a0f4fe516a2254","sha256":"b648f0526f060b2854a86e27392f1311943a676594539a80fb8062dad6bd05db","sha512":"185f8246372bfae74dd87ff2d8c30fcb1c844e322c7b2bf7763e025f0f6aa3de3680ef3af5da8b1891d7e48b6050cb59988c85e3e85befad95823a9a1c6b0d89","ssdeep":"","tlshash":"2421f868cde19cb981ec8b306625ad3b75664f324040aebb0684912f6f1a21ec135cdf","first_seen":"2025-09-25T10:14:30.40493Z","last_seen":"2025-09-25T10:14:30.40493Z","times_seen":1,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/images/f1726db4.png","fqdn":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","domain":"liquidity.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.87.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/","date":"2025-09-25T10:13:55.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liquidity.eu.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 22:01:17 GMT","end":"Thu, 18 Dec 2025 22:01:16 GMT"},"fingerprint":{"sha1":"FC:4B:B7:93:19:0D:54:B0:6B:50:5B:F0:B4:87:0E:7E:BB:AC:75:D6","sha256":"44:CB:A9:3E:7A:08:FD:10:B7:5D:E2:78:B9:31:3C:24:41:B3:6B:F7:C9:A3:1B:FD:FB:F2:49:E6:6D:0D:62:10"}}},"request":{"raw":"GET /images/f1726db4.png HTTP/1.1\r\nHost: xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Oct 2025 10:13:55 GMT\r\netag: \"97be8-68801cc6-3543579;;;\"\r\nlast-modified: Tue, 22 Jul 2025 23:20:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 621544\r\naccept-ranges: bytes\r\ndate: Thu, 25 Sep 2025 10:13:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9HoxIPsjVKqVyeLP0AGZ3KfvlZ5uU6h0kYzg5if9ChkWatRm3UuMa%2BFXveLQZdYyjz%2B6zlBo%2BBRNKr%2FqOBcpcTXOU8Vo6%2Fi2Ztf1gmPJJsekequhXQAGMW9SvqKZfsxjlBwgewf9yH5rCeNrW21r9IowY2tylvvWpXqg4kIFPF9hsg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9849c06c98fc0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":621544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced","md5":"33b302f7860dc0441bd3dc38df176c97","sha1":"d1722233ffa9bc6bc07ab3674049b6a7444d4d4a","sha256":"d48fbdf0d60edbe89cf83c4022267f9e453329b49dbfc8e1dab047f961e4acc3","sha512":"00e9702bba5b2d2755e18788cf864df9f7bf6bde873c5f659b504294f33c5c1f1da901d8cca1a9bbfa1216f6df2f3458c19a64d312b47364dc9f5f00fbdba52b","ssdeep":"12288:e1yMPpSmi4mevysVTwV9IZJxJHFKtO7+Z//pNqjAS7YrKLgEY7UmMHFe2YHl6FG9:oyMPtywMVaZbJlKtO7SLS7Yeq7U9sHlz","tlshash":"52d423e291b878ba7c0289b00c5ca76e264e15fca751e017b7ea49382369fb3f153614","first_seen":"2025-09-25T10:14:30.406674Z","last_seen":"2025-09-25T10:14:30.406674Z","times_seen":1,"resource_available":false,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":467,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-25","alert":"Sinkholed","trigger":"xn--av-6kcw.xn--cmaahbrgh-5yh2mfeta15aw4hha3153kdaj.liquidity.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}