{"report_id":"b4adc928-51f9-44ff-a940-d6893ca6c8d7","version":0,"status":"done","tags":[],"date":"2026-09-11T03:02:18Z","url":{"schema":"http","addr":"worldlibertyfinancialsol.com/","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":0,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"final":{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"title":"World Liberty Financial","dom":{"size":27235,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (24277)","md5":"1677dd95b7af6b723e3601ffdcb4796e","sha1":"b8af1d14cb952bb7c23a48e05356b395cee0bf84","sha256":"42968448cf8b9d716edc2e9a731379a5481cf0b3c004d6a0bdbb7221386d99f0","sha512":"176b9148e9c60e6b57f076f5ab3f36ff956630667861ad11a91038ffee5c8e523216a44c33e7e49ac253cfe99ec9632e979c1f3aa3f7bb17f6086410fba6e518","ssdeep":"384:f4uJyhziKiPxV7lRIGHwr1nyB289BfGHwpLbcfuL220c:NoxiKirBwpyBV9wwpLbcfuqI","tlshash":"58c2f93d1501546f47131582e2539a3b638f932ae2cb2d80a3fbdb44abc78fc45a764b","dom_hash":"domhash3d569e746d439f92806fdc3a0b2f5063","first_seen":"2026-09-11T03:02:29.328903Z","last_seen":"2026-09-11T03:02:29.328903Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"worldlibertyfinancialsol.com/","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":0,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-16T03:02:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"worldlibertyfinancialsol.com","ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"domain_registered":"2024-09-14","domain_rank":0,"first_seen":"2026-09-11T03:02:23.444826Z","last_seen":"2026-09-11T03:02:23.444826Z","alert_count":116,"request_count":58,"received_data":4949005,"sent_data":42061,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/16986861c9946f34.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c7c743004dca603925d363eb0488e4a","sha1":"c0ff5d7b9ec3155959bce82a49e29c091b889ade","sha256":"4c929dbc1c588754d73021632552578c1b96325b07eac58a3bc887c1cf943267","sha512":"a58a029196f84ffe7f727a4fd3ec9fe046173267b57a89f6eea3901e90f5aa37c1583ac3919fc8cd6501f4e94641321cac6d287e4ff512a6b96e6b8e4b861201","ssdeep":"384:06JfBdNuejE4Ovb36Gf+gDrlTd77Yc3oakrg8u2HvBh4G4FoLgzlLTgq21hLaUPx:0ydNueDOvb36I+gDrlTaSoaks8u2j4G7","tlshash":"be62f608b28f75579a75f4d8407f0045b8b59d01f00c9cf6baaaf9d2ac29c4a41bbbb4","size":15748,"data":"","first_seen":"2026-09-11T03:02:29.376556Z","last_seen":"2026-09-11T03:02:29.376556Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/cd27c4b853f6da7a.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d653ed2263323209f80ca34c839af6b2","sha1":"db6b5bc122aa4f86dd5b13904d3d65e29b4cad94","sha256":"a442f7b4e9b97d7234609eebd05eed9ea8af2fc9718c0d74761a7ed1d912a8e3","sha512":"3793f98242c3b65d96d818a406bb495c730682272855f396eeba82b8457f4a03a02ee1c134c7016a4800234070f5edd8e8f15fe21d819523c111d9269ff532cf","ssdeep":"768:AYsOykjQibZFnBfUnkY5JgeL5+XOObYXVbxId8ZQeZ4Tq8S55PXzCpfLDVaGXGBI:A3yQ4jBdOEybxyr5TK964GN","tlshash":"4003fa5976c3626686b390e2303b8845b4b83f32f18e9ce5f685d4f43817c9887b7766","size":38087,"data":"","first_seen":"2026-09-11T03:02:29.34903Z","last_seen":"2026-09-11T03:02:29.34903Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/2bbc3f6203752838.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5790b48ff0beaea161917123cf4f250c","sha1":"685a678bc5ee7bc7c449b9986037026a90ada139","sha256":"c1f589a99289d1463a7087ea151e52e4f1eb38abd84ea876f78fc5657a2d2cca","sha512":"f5b04bc87ced6cb17040f7c1e23a909e862c3ba33cfd4157c82bfd3ed7d99cd812dc0a7fd58a6057519595119e20dbba9ee76b42115b90f646bc59826cc1527c","ssdeep":"768:46I2KyDhhywPHvkfx5MY1QJ6Mlnxiy8azzrw+M/LJO+FghDPdCTDVGjqwjO7vJEK:i2Ko8bMUx1OphMTDsjqw2CkiYWd0vwZa","tlshash":"47e22b6972a4f16ca523c8d4c13f2119b62f6498b50dc4d8f6bdddec381648ab027fb9","size":32692,"data":"","first_seen":"2026-09-11T03:02:29.331455Z","last_seen":"2026-09-11T03:02:29.331455Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/4c3bdd982b2ffb60.strings.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bee42521ebf6fa694d0e114130629320","sha1":"cdea88e2cebb52f898b853f1a5918d3571a3353d","sha256":"136f82eb05e11329ff6d9aa718a6e34febe8e703fe5fb376ed6f2e10c9819133","sha512":"80a2b43802668c69c281e10ee57f2ac287a933bc31fb7fcea6a99fe010939a2354130c2e4f9d47f04cdbe938fbc870b7f8728dd009cb58451c9e2f2ad6e47c96","ssdeep":"96:b5n3ZM69eClaX8VqL/jOxRH+RpwHJI2LXuawdzWV5aEO8eStOJX9F/XwDCg5lmIO:b5n3Z7/kwpZRwdzW6lo89FoCgaIpTw","tlshash":"b4c1a409e241d11dc252ae4f237ebdf0b157c26e178153b6eca9c12e825717eabe74c0","size":5683,"data":"","first_seen":"2026-09-11T03:02:29.371311Z","last_seen":"2026-09-11T03:02:29.371311Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/6f66ccc6be225571.en.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f070a7b28f9354ec1306611bba156b63","sha1":"f949a8d018c2f8dea0723cba24a64ca6d75c3046","sha256":"180a37506e90e53e841e8e67bf3c44f5355bd9a06981fa28fc8c88a15fc7e531","sha512":"bffea8869bda95c4d545a4a1f29fcf3191cbc3e19cddca6f0cda9f36f50c9fc8ac4ab0fdd28112d5997c755622533ace8c015411ec200471727a3e20b8cdf263","ssdeep":"","tlshash":"35e0c29a00a1faa4ff7b0ffc93aa35862c124b4410e2e6fc887041913be5c43cf604a8","size":312,"data":"","first_seen":"2026-09-11T03:02:29.367682Z","last_seen":"2026-09-11T03:02:29.367682Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/bea15141d7d2ea27.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"76eb9c2fa457ca2c54cd91974d96825e","sha1":"697010048e5c7a780c83268439728e9d64d8983c","sha256":"d565eac762202a5a9c4def4d61212d8bd36a0a6324f86aad427398393a5622ac","sha512":"9c01d8791bf70e157846d463267f8e2129150a855167cf5683eb2d0b3f342bf58b4cbafaf69c3d7277e8e8cfed964459c1b7322e36d99ccdb61d65d98d7b9137","ssdeep":"96:NnJ+rKPj8NPBKppeRPikzDQKS2foVuWu/WzMubiZV91tI6FNmA2a:NnJ+resqcUmQKSVMVZV7u6FNp2a","tlshash":"8091ea9d32d9984784d7a3c8471b0ea3702b911f729094ccf77bace1055866fa3a8a32","size":4293,"data":"","first_seen":"2026-09-11T03:02:29.337206Z","last_seen":"2026-09-11T03:02:29.337206Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/673765d44435a8d3.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"26be4ed01060b96796f36256d732fd93","sha1":"5ad89ed626804ce9062d69d6a4def70a47baf262","sha256":"247c6189b9d60d6e72899ad21de64c4501c2cc1bf5faee0bef3cf1f27168fb86","sha512":"31aeec554714ecdfda1cac84c8fdce75115f56c322714bbc78d0a0bd0faf86a578fd097988888c4533a28063325c0002c301c98caebdcab750d91f98a73a628c","ssdeep":"384:QrJdBVxAFiN7Cm7hS0krUgzlUutSLlod2y:QtVGiN7C87FotSLlon","tlshash":"4f42fc4476a6b56d66b344e8c03f4012f21e9ad5f44cc8a8be7df8d8a465840e773fb4","size":12783,"data":"","first_seen":"2026-09-11T03:02:29.34099Z","last_seen":"2026-09-11T03:02:29.34099Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/4c9e3fd7ce083ca0.runtime.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"02941a1391eb9b69d48337f97b2beda7","sha1":"a85ad06fad2b39221efa43feede85ccbaf36a183","sha256":"526ffc00638f28ae2a3a612950d82d7808031e0bccc571c98e5b76acced0eb8d","sha512":"ac7dcbd012e10810865a0545699e465cb3a7c96f769b8522ba526e2374c8550e46a465fca182370c253a8971894eefd3335f05a9b0fe3806126ca37a80aea5bd","ssdeep":"384:hhVUoKkVVXlsElyvGs/lCvkofkKdymhSYU6hRx2PEcYkIgxgRUhbAAU6xnBRJfvF:riOs/ofvd7QYU6hRx2PJ1IPUhU6xBRx9","tlshash":"4aa2e6e536b252a1e0f17ee4b5a5c427711c9cd920ad1aa1e7db7ca4ff40f22e033526","size":21719,"data":"","first_seen":"2026-09-11T03:02:29.343348Z","last_seen":"2026-09-11T03:02:29.343348Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/ef5a6e4d51372fed.vendor.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b53b16ddb3ab1121fe550c6c8590d0d5","sha1":"01f8f456759d86ec2ded40752e3d687f069e4ef2","sha256":"fc4a5d8502266b80bfb5e2d11415277b3aa9015ea3c3e766a1ef2fe153e18914","sha512":"fe47715c6b20d1fa967dc876a2ab5f39a63d24483805a442c9976a8d4e13b151c3afc540ca83c8bab1e99b278179a1a390d1e8955532b5df7b251e72a116bfe9","ssdeep":"12288:FoNWRPYnDdCdBf7sTv9DUZrtT+cGjP6XZfeT+cGg5DwWuW/o2H7XpqB5NR19K:FoNWRPYn0TfATv9DUZrtT+cGjP6XZfeF","tlshash":"78f4fadcb291b472539760f5406f010bf33e692d644d8198f269e8e57cb898e623bf78","size":731445,"data":"","first_seen":"2026-09-11T03:02:29.354104Z","last_seen":"2026-09-11T03:02:29.354104Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/b439b2bb1d627d4c.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5eb8c8945c81530eb597bc392f8dd5be","sha1":"23102553d6858998efae48dcd56ab9493dfde613","sha256":"dfb9cbe0fe3e0b1cc998270a89072e18ef3fd2857696eb4be0783dc7155258a6","sha512":"2e314e24a039dcbed012e307e6ac7ec4f3c922d076dad39b53c3c23705f95ba8fd2a7e40fe8fc3f1d6baea3d568bda19fc85849888ecd935dc1251d78b525c9e","ssdeep":"768:Fz5G1uro7bM57Mn6pBemq8PQffhqA9xkqRI5DJJzHIQC3gHvcVk02IoGzMeaXvmb:x5G1u07sIdrwo3gHvTpuzV4zS","tlshash":"05335dd072b77446c663c6d640bf0542b99bb910740e88fcea2eddc26d74c9922b2b3d","size":51171,"data":"","first_seen":"2026-09-11T03:02:29.350262Z","last_seen":"2026-09-11T03:02:29.350262Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/36748ca62985a880.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fc4a7d63a649b439597bb4f59c1a7b3","sha1":"48b5b2ed6b6218048563ff5d3e466eb4b320bc3a","sha256":"59d2b734b67540a686e0ca54239c184ac0ecfebaf829c5794b5badf130a637dc","sha512":"aef550cd35f5a9bce291258a0daa78216b050b985da192115bb33a2bf11c8f63c027e06bcfe8db1f1bc2adf53245a8c54e47a574d30014add3900f30e3d758d5","ssdeep":"","tlshash":"9421625834acfc9339f3a0d182cf1321c12bd493b4008cd5e611fd8664a96a9c338879","size":1437,"data":"","first_seen":"2026-09-11T03:02:29.344834Z","last_seen":"2026-09-11T03:02:29.344834Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/b7b570e68761bd2d.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecb1666fdede84bf92a16d7de62372bf","sha1":"42b5d3da00c361691c66b940c49618cdab48ae71","sha256":"2753587732919e2c57b088e16592fd77383ed7ae2320cf9138e81979c039da06","sha512":"fdf2880f510932abd3984b6a95946b04723b1395dfff1bb7bd8228bef34a70f6d781232b4dac7f273334d12277f72be4f9beee6f32eb1a83e7b8d089bde02ce7","ssdeep":"768:SCJ6/nvZfjXIIFzFJS0uqkAe5H55D2/OqZ3F5v/VCcwm/aey29XxC0i0ceuF2ilU:ZG48pJSpNXD2/OqdF1/VLw8DVxYcaKjP","tlshash":"db23c768f6a3a01cc676ccdac07f04a9a5693b0d7248dcbdf66b98d668445493339f3c","size":47358,"data":"","first_seen":"2026-09-11T03:02:29.361788Z","last_seen":"2026-09-11T03:02:29.361788Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/5949a372cca6fe6b.vendor.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"70efb97591ebdd598f97d20c88944be4","sha1":"edd4c8c9ddc4c4fe1ebb7f42fd21beee6146b4b7","sha256":"a8063a0d5e2b7c19cde2ceeedbdfe5154e450c6bdc9198cc200062092c17da31","sha512":"fbf0b2bdfa3a5a823d5a9dae26776221dd5c870b899d6b00de15c6261fd8934b44af43ca309740f6e8789da56d27340b36dc9b82b98d2f7cbe97b444c7e38618","ssdeep":"3072:SJPYswyYlvituo2NheWgz6+PFjCwaxqbqRYKv9:UIvit52CWG6+djCbgqp9","tlshash":"4924e8d87a96f1a157b352b740af1407b33d291b280c8960f211fcc979b845ea17bfad","size":210715,"data":"","first_seen":"2026-09-11T03:02:29.330271Z","last_seen":"2026-09-11T03:02:29.330271Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/9492f1846289769c.strings.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5f5fdd9c3674cbc93ed1bf2f618fb73","sha1":"d1d6ce95db72035c3ac9dd7333a8d50a20bb9a6b","sha256":"1736ee422542e463597dd2e52ca495983e5df4721b5feecced7f5710d57c10bc","sha512":"bc02ffb6adb9d4bd0b474b617a38f6363870cedb0088275b96f8bc437433039eda2680da0966e402a7d9b86b58368cffdc73c416d0df47bf28ebbfe9d8339df8","ssdeep":"","tlshash":"9281414a9e41c32cd92a4e8d16fe6edab657c1ae92b00774f896c0588353c7c2fb74c4","size":3864,"data":"","first_seen":"2026-09-11T03:02:29.372407Z","last_seen":"2026-09-11T03:02:29.372407Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/07bd8fc90c019813.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3d6e7c2a6adce4256606a4d9a4c3548","sha1":"465c23738fca789999518efd500927622c20cd71","sha256":"78d18005912ba2a303a87d769d32f38a21f05d66877a1e5a4870eeca8d0869a6","sha512":"4d0a19b00bf3a230d9f5ea70e8b9b4d8c2a30c2e8096b31a1a131af162cc2ea0b625d44c14c2aa02216ab9d468cd20e10a50cb45287599e1c2ec07aec54d50df","ssdeep":"24576:8whs2jNMKTGUT2Vfm6VVGuEDkc4t2u/EqJxk6aFQIUdCTwcKpp3LIbFbAtV5F7le:Ds2jNMKTGUMe6VVGuEDkc4t2u/EqJxkj","tlshash":"a5652a9472a3b0598223d8d5803f0056f53abd59f04c8cbcfaaeddda7858945627bf38","size":1545993,"data":"","first_seen":"2026-09-11T03:02:29.377782Z","last_seen":"2026-09-11T03:02:29.377782Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/88061a873fd06fdb.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6807edb0369bcc08723d734abdab5a37","sha1":"4577aba5bd781f9c511c59c1f9df7aa27889f4cf","sha256":"4ca094bcde443132f07fe01a8e78d3187bd78bacbb1a55a8e853233a4f8f2576","sha512":"8da35dfff63ace0d8f6f17e5ada2f22c6f6fb7c14484aa3c5a683418019ba10240c2b0cdfdd8401127d2c31b06297aeeb225ac572b3c6891974a09d1c66d04d8","ssdeep":"","tlshash":"534150583a0ef575e2b244e950071025a612c742f10dece8ba328cf6f0f4e81a675b7e","size":2388,"data":"","first_seen":"2026-09-11T03:02:29.358259Z","last_seen":"2026-09-11T03:02:29.358259Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"invoking a transformer from outside a reactive context won't memorized and is cleaned up immediately, unless keepAlive is set","filename":"https://worldlibertyfinancialsol.com/ef5a6e4d51372fed.vendor.js","line_number":2,"column_number":603618},{"level":"warn","text":"invoking a transformer from outside a reactive context won't memorized and is cleaned up immediately, unless keepAlive is set","filename":"https://worldlibertyfinancialsol.com/ef5a6e4d51372fed.vendor.js","line_number":2,"column_number":603618},{"level":"warn","text":"invoking a transformer from outside a reactive context won't memorized and is cleaned up immediately, unless keepAlive is set","filename":"https://worldlibertyfinancialsol.com/ef5a6e4d51372fed.vendor.js","line_number":2,"column_number":603618},{"level":"warn","text":"invoking a transformer from outside a reactive context won't memorized and is cleaned up immediately, unless keepAlive is set","filename":"https://worldlibertyfinancialsol.com/ef5a6e4d51372fed.vendor.js","line_number":2,"column_number":603618},{"level":"warn","text":"invoking a transformer from outside a reactive context won't memorized and is cleaned up immediately, unless keepAlive is set","filename":"https://worldlibertyfinancialsol.com/ef5a6e4d51372fed.vendor.js","line_number":2,"column_number":603618},{"level":"warn","text":"invoking a transformer from outside a reactive context won't memorized and is cleaned up immediately, unless keepAlive is set","filename":"https://worldlibertyfinancialsol.com/ef5a6e4d51372fed.vendor.js","line_number":2,"column_number":603618},{"level":"warn","text":"invoking a transformer from outside a reactive context won't memorized and is cleaned up immediately, unless keepAlive is set","filename":"https://worldlibertyfinancialsol.com/ef5a6e4d51372fed.vendor.js","line_number":2,"column_number":603618},{"level":"warn","text":"invoking a transformer from outside a reactive context won't memorized and is cleaned up immediately, unless keepAlive is set","filename":"https://worldlibertyfinancialsol.com/ef5a6e4d51372fed.vendor.js","line_number":2,"column_number":603618},{"level":"warn","text":"invoking a transformer from outside a reactive context won't memorized and is cleaned up immediately, unless keepAlive is set","filename":"https://worldlibertyfinancialsol.com/ef5a6e4d51372fed.vendor.js","line_number":2,"column_number":603618},{"level":"warn","text":"invoking a transformer from outside a reactive context won't memorized and is cleaned up immediately, unless keepAlive is set","filename":"https://worldlibertyfinancialsol.com/ef5a6e4d51372fed.vendor.js","line_number":2,"column_number":603618},{"level":"warn","text":"invoking a transformer from outside a reactive context won't memorized and is cleaned up immediately, unless keepAlive is set","filename":"https://worldlibertyfinancialsol.com/ef5a6e4d51372fed.vendor.js","line_number":2,"column_number":603618},{"level":"warn","text":"invoking a transformer from outside a reactive context won't memorized and is cleaned up immediately, unless keepAlive is set","filename":"https://worldlibertyfinancialsol.com/ef5a6e4d51372fed.vendor.js","line_number":2,"column_number":603618},{"level":"warn","text":"invoking a transformer from outside a reactive context won't memorized and is cleaned up immediately, unless keepAlive is set","filename":"https://worldlibertyfinancialsol.com/ef5a6e4d51372fed.vendor.js","line_number":2,"column_number":603618},{"level":"warn","text":"invoking a transformer from outside a reactive context won't memorized and is cleaned up immediately, unless keepAlive is set","filename":"https://worldlibertyfinancialsol.com/ef5a6e4d51372fed.vendor.js","line_number":2,"column_number":603618},{"level":"warn","text":"invoking a transformer from outside a reactive context won't memorized and is cleaned up immediately, unless keepAlive is set","filename":"https://worldlibertyfinancialsol.com/ef5a6e4d51372fed.vendor.js","line_number":2,"column_number":603618}]},"http":[{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/5949a372cca6fe6b.vendor.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.289Z","timestamp":1789095703289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /5949a372cca6fe6b.vendor.js HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:43 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=1,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df19f2856aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":210715,"size_decoded":67065,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65455)","md5":"70efb97591ebdd598f97d20c88944be4","sha1":"edd4c8c9ddc4c4fe1ebb7f42fd21beee6146b4b7","sha256":"a8063a0d5e2b7c19cde2ceeedbdfe5154e450c6bdc9198cc200062092c17da31","sha512":"fbf0b2bdfa3a5a823d5a9dae26776221dd5c870b899d6b00de15c6261fd8934b44af43ca309740f6e8789da56d27340b36dc9b82b98d2f7cbe97b444c7e38618","ssdeep":"3072:SJPYswyYlvituo2NheWgz6+PFjCwaxqbqRYKv9:UIvit52CWG6+djCbgqp9","tlshash":"4924e8d87a96f1a157b352b740af1407b33d291b280c8960f211fcc979b845ea17bfad","first_seen":"2026-09-11T03:02:29.330271Z","last_seen":"2026-09-11T03:02:29.330271Z","times_seen":1,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/2bbc3f6203752838.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.881Z","timestamp":1789095703881,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /2bbc3f6203752838.js HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df5486856aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32692,"size_decoded":14468,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5939)","md5":"5790b48ff0beaea161917123cf4f250c","sha1":"685a678bc5ee7bc7c449b9986037026a90ada139","sha256":"c1f589a99289d1463a7087ea151e52e4f1eb38abd84ea876f78fc5657a2d2cca","sha512":"f5b04bc87ced6cb17040f7c1e23a909e862c3ba33cfd4157c82bfd3ed7d99cd812dc0a7fd58a6057519595119e20dbba9ee76b42115b90f646bc59826cc1527c","ssdeep":"768:46I2KyDhhywPHvkfx5MY1QJ6Mlnxiy8azzrw+M/LJO+FghDPdCTDVGjqwjO7vJEK:i2Ko8bMUx1OphMTDsjqw2CkiYWd0vwZa","tlshash":"47e22b6972a4f16ca523c8d4c13f2119b62f6498b50dc4d8f6bdddec381648ab027fb9","first_seen":"2026-09-11T03:02:29.331455Z","last_seen":"2026-09-11T03:02:29.331455Z","times_seen":1,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/images/b46630e470f4040eba7033cf2435edce.woff","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.970Z","timestamp":1789095703970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /images/b46630e470f4040eba7033cf2435edce.woff HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://worldlibertyfinancialsol.com/f1ef4ef50dd0017c.ltr.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1136\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3936df5d89c56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1136,"size_decoded":1776,"mime_type":"application/octet-stream","magic":"Web Open Font Format, CFF, length 1136, version 1.0","md5":"b46630e470f4040eba7033cf2435edce","sha1":"ba26d2e1dc5bbc01a80446ac65bffb991953764a","sha256":"3e32aea52247a81c38b4735e84a28ba27b0cbc33f007a1d14e81e64ba766eadd","sha512":"eff809cc87517f9048f1c7a16561ef6f956ed0fe50b3382afaf111b6f159e769dd88af0dc0d8a03b748d407c5c554789b6148a137ac700f776a260fd153c0ae7","ssdeep":"","tlshash":"6321b6a2ea60c260dc4506707ae89bee732490ce2657be851e6b043bb48a304e380066","first_seen":"2023-04-08T14:15:10Z","last_seen":"2026-10-12T03:31:38.979343Z","times_seen":3567,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/media/5593f87b4e93a9b9373a2083b77aed6c.png","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.303Z","timestamp":1789095704303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /media/5593f87b4e93a9b9373a2083b77aed6c.png HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 315064\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a3936df7e9a656aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":315064,"size_decoded":315688,"mime_type":"image/png","magic":"PNG image data, 1500 x 500, 8-bit/color RGBA, non-interlaced","md5":"2e4afbc19ba7433daf8be3d1eac94844","sha1":"d7ace6d0795af6d57d0645b7e6381a3ae6a239b7","sha256":"d3a0a68ee5a59ae6c2426d58f441657c53916ff9c8069c2ba1d0037b72ad15cc","sha512":"dbfcdb240fe4e6ceb1ec747bd62e43937af9143f7d268e48c1eb9402f91b317dc46bed115d6967cf24d50da1ab36e946792bc5f797c1b140c58f26c8705c1f65","ssdeep":"6144:Rn/ba04w4Dkomb9shqF+rM+Mxj9eIG/PaZBJtivF1f6YR7wXwqpcgpWB20K:Nb9hOLqF+qjQIG/Paj6vFQYNwX3peBY","tlshash":"e06412c3aa0b6c5ab7c2fc7fe599b8a7c272d06612d358da3905c205f1073a5e3d8652","first_seen":"2026-09-11T03:02:29.333658Z","last_seen":"2026-09-11T03:02:29.333658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/media/a0d289cf94175245b9eb641aa0b882d7.png","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.305Z","timestamp":1789095704305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /media/a0d289cf94175245b9eb641aa0b882d7.png HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 317542\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a3936df7e9a956aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":317542,"size_decoded":318166,"mime_type":"image/png","magic":"PNG image data, 1500 x 500, 8-bit/color RGBA, non-interlaced","md5":"54da5b50f140cf6b338ea4c745637f78","sha1":"7074f8702f0669e46a2efb9f23eabd173b1ca2c0","sha256":"98c247f24211bc08fbb4be4d8a457673707a2ae35ffc22dbe5638733f1ba8264","sha512":"c422ed2a3fa2ce9fdee7292366bf6069050e75ac745976f8e4acb35024af1f36376ea58367891d6558d2c5b3ac61d1220acfa9a64a06170b9935a617f02e709d","ssdeep":"6144:oYX2lrCEvgYeqSfiMM2wlz1RxuOQlZ+ri87gFltDFFVRl:h2lrC29Sfoz1buOPi8kDFVRl","tlshash":"4c64125569afec699bf97638e8da6c40d6e16741b8e71839fd1fe128f123f72c804042","first_seen":"2026-09-11T03:02:29.334909Z","last_seen":"2026-09-11T03:02:29.334909Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/media/cc0acc02689e1f9dc4f3d954cfad7fae.jpg","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.323Z","timestamp":1789095704323,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /media/cc0acc02689e1f9dc4f3d954cfad7fae.jpg HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 44723\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a3936df809c556aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44723,"size_decoded":45347,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 798x266, components 3","md5":"9a4eb05633faeae85232acaa3626f948","sha1":"5ef500f322ffc7ba64a6981d043465680e8be113","sha256":"66bd86cdf51df1326961834b5f7c0438de8ccb82563a8d4692ba6247ace8740f","sha512":"24ce5ce8c9c7b3b408512fa924a5dcd8bd9d25e38d45263368482f3d30948e804bd37eb0a69079b80f420c535b752144a0ba70e8095fa26e290c58a95218b01a","ssdeep":"768:w8uEcu5NWb5b9YDM+QwPyIHak+wi+6K7s6Qw++Ai7F1Tg5ek:VUuDAxwPyIHaTw/bAtfi7F1TW","tlshash":"8e13f2221f466509da982c7484fb8dbf238c8de7856b427ef98634c6bc513a83095d6a","first_seen":"2026-09-11T03:02:29.336061Z","last_seen":"2026-09-11T03:02:29.336061Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/bea15141d7d2ea27.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.877Z","timestamp":1789095703877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /bea15141d7d2ea27.js HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df5386256aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4293,"size_decoded":2813,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1573)","md5":"76eb9c2fa457ca2c54cd91974d96825e","sha1":"697010048e5c7a780c83268439728e9d64d8983c","sha256":"d565eac762202a5a9c4def4d61212d8bd36a0a6324f86aad427398393a5622ac","sha512":"9c01d8791bf70e157846d463267f8e2129150a855167cf5683eb2d0b3f342bf58b4cbafaf69c3d7277e8e8cfed964459c1b7322e36d99ccdb61d65d98d7b9137","ssdeep":"96:NnJ+rKPj8NPBKppeRPikzDQKS2foVuWu/WzMubiZV91tI6FNmA2a:NnJ+resqcUmQKSVMVZV7u6FNp2a","tlshash":"8091ea9d32d9984784d7a3c8471b0ea3702b911f729094ccf77bace1055866fa3a8a32","first_seen":"2026-09-11T03:02:29.337206Z","last_seen":"2026-09-11T03:02:29.337206Z","times_seen":1,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/ceb117f01f914e61.ltr.css","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.879Z","timestamp":1789095703879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /ceb117f01f914e61.ltr.css HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df5486656aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2353,"size_decoded":1695,"mime_type":"text/css","magic":"ASCII text, with very long lines (2290)","md5":"330229f5b1b6c7d33ca86129b72f3354","sha1":"0d4bb874ecd91369150509cae4bdba739da11ff1","sha256":"3c770036dc873e6412d53b28d2b19edc6fbbb88c422d846fb851f6c54b311716","sha512":"7cd309403837b69ee452dd211421c94d269e29dbb7cf3968370074b19bb4c5b8ced3c68430ca36879f142bf7ee3a75a696e32b9f938bd00f0551ee65bb9beecd","ssdeep":"","tlshash":"b841a7b66a7cd13df82fd0a56a9895cd20316892f90107ecf8f8b237cac21f51836654","first_seen":"2026-09-11T03:02:29.338482Z","last_seen":"2026-09-11T03:02:29.338482Z","times_seen":1,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/c9bf091720f7f1c3.ltr.css","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.882Z","timestamp":1789095703882,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /c9bf091720f7f1c3.ltr.css HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df5486956aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105,"size_decoded":708,"mime_type":"text/css","magic":"ASCII text","md5":"afe4dd14d2e8a97b57a573e312d51629","sha1":"6bc7d2c82cd1f5d4db16091c8b4b3c6a11c1068a","sha256":"0af138df3180534e4dd15035bc9694f5c972796da41c5508be0b89d8609764c8","sha512":"b2c16d38b0429b2ac9e01426cd0f2b9fdc9f5602937238c055f83e21b04d2e63f4d4df604d132c3255ba63af0438736516b3115ccec4565cad052c79a6d81dcd","ssdeep":"","tlshash":"4bb012d7f8b06ebde437493635f50990206c60b5f0804f28f02530b9553204c7d3aa56","first_seen":"2023-11-10T16:37:35Z","last_seen":"2026-09-11T03:02:29.339547Z","times_seen":10,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/673765d44435a8d3.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.888Z","timestamp":1789095703888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /673765d44435a8d3.js HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df5486f56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12783,"size_decoded":5909,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3230)","md5":"26be4ed01060b96796f36256d732fd93","sha1":"5ad89ed626804ce9062d69d6a4def70a47baf262","sha256":"247c6189b9d60d6e72899ad21de64c4501c2cc1bf5faee0bef3cf1f27168fb86","sha512":"31aeec554714ecdfda1cac84c8fdce75115f56c322714bbc78d0a0bd0faf86a578fd097988888c4533a28063325c0002c301c98caebdcab750d91f98a73a628c","ssdeep":"384:QrJdBVxAFiN7Cm7hS0krUgzlUutSLlod2y:QtVGiN7C87FotSLlon","tlshash":"4f42fc4476a6b56d66b344e8c03f4012f21e9ad5f44cc8a8be7df8d8a465840e773fb4","first_seen":"2026-09-11T03:02:29.34099Z","last_seen":"2026-09-11T03:02:29.34099Z","times_seen":1,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/fonts/33696a29f45c1b554a4c12443b998d21.woff2","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.156Z","timestamp":1789095704156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /fonts/33696a29f45c1b554a4c12443b998d21.woff2 HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 41456\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3936df6f95856aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41456,"size_decoded":42097,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 41456, version 1.0","md5":"4971edf7a4a0359f252d44d4647aa2c2","sha1":"b7a585910ed4af3810783f842aa0e39274b76396","sha256":"66c862243067d2ed17d8881a57f8593e0dd35a7488babb3b3335111a5d1e3591","sha512":"f7c69269d0636b08807b86f716a6d245cc4ad69a91c192208463f7adb9c6950fedb43a9ea0c77f1440c6787106b9e395bfd08ee0f5da983bb29dfc60fafeac59","ssdeep":"768:EA6CYSTwaih5Mbei2P6ZEnwmnjRGfL4p/V0qA1E89qja7IcCXKui14zmp/llqu:EGYSUaiLCei2PgEnwoALiN0qA1E82afL","tlshash":"ce13f1e6a3a4f3d8c17aa170f489af4ab51534d5e1864c1b3c8ab97c0c487d076f56b1","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-10-08T18:29:28.222341Z","times_seen":746,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/4c9e3fd7ce083ca0.runtime.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.288Z","timestamp":1789095703288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /4c9e3fd7ce083ca0.runtime.js HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:43 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=1,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df18f2756aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21719,"size_decoded":8774,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21655)","md5":"02941a1391eb9b69d48337f97b2beda7","sha1":"a85ad06fad2b39221efa43feede85ccbaf36a183","sha256":"526ffc00638f28ae2a3a612950d82d7808031e0bccc571c98e5b76acced0eb8d","sha512":"ac7dcbd012e10810865a0545699e465cb3a7c96f769b8522ba526e2374c8550e46a465fca182370c253a8971894eefd3335f05a9b0fe3806126ca37a80aea5bd","ssdeep":"384:hhVUoKkVVXlsElyvGs/lCvkofkKdymhSYU6hRx2PEcYkIgxgRUhbAAU6xnBRJfvF:riOs/ofvd7QYU6hRx2PJ1IPUhU6xBRx9","tlshash":"4aa2e6e536b252a1e0f17ee4b5a5c427711c9cd920ad1aa1e7db7ca4ff40f22e033526","first_seen":"2026-09-11T03:02:29.343348Z","last_seen":"2026-09-11T03:02:29.343348Z","times_seen":1,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/36748ca62985a880.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.878Z","timestamp":1789095703878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /36748ca62985a880.js HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df5486556aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1437,"size_decoded":1378,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1101)","md5":"5fc4a7d63a649b439597bb4f59c1a7b3","sha1":"48b5b2ed6b6218048563ff5d3e466eb4b320bc3a","sha256":"59d2b734b67540a686e0ca54239c184ac0ecfebaf829c5794b5badf130a637dc","sha512":"aef550cd35f5a9bce291258a0daa78216b050b985da192115bb33a2bf11c8f63c027e06bcfe8db1f1bc2adf53245a8c54e47a574d30014add3900f30e3d758d5","ssdeep":"","tlshash":"9421625834acfc9339f3a0d182cf1321c12bd493b4008cd5e611fd8664a96a9c338879","first_seen":"2026-09-11T03:02:29.344834Z","last_seen":"2026-09-11T03:02:29.344834Z","times_seen":1,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/media/aeaded5b078e4a4673ac247ae1dac584.png","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.302Z","timestamp":1789095704302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /media/aeaded5b078e4a4673ac247ae1dac584.png HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 152532\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a3936df7e9a356aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152532,"size_decoded":153156,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"3d486f877ae7e2ea146c7ed339dd9c55","sha1":"49b90a9e0b2eb287aa574eae2ed73132bc88b09f","sha256":"a435c7b5bcb1e741cca7d356b826c0ed5fc4b7102238e12adebdbf1eec24eeed","sha512":"b0326721ae9afa44d41cd673b6f7ab547bf4e0c128df802795c9bb3afe32a56ee52db412de7894d6361a193413aa223c5fb16cbbb9effcba3a7dd76599c349cd","ssdeep":"3072:rBEihe1h0MzKayshFoS4W328xFXz4SbdEmJ1J11jNUUc1Ht+:dEi6htzKw34WNzz3J7jyUeHt+","tlshash":"afe3128cc022579ff11bfeb3c560246951f6f532e31a23d3381d6523a4bb09945ee6ba","first_seen":"2026-09-11T03:02:29.345869Z","last_seen":"2026-09-11T03:02:29.345869Z","times_seen":1,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/f1ef4ef50dd0017c.ltr.css","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.283Z","timestamp":1789095703283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /f1ef4ef50dd0017c.ltr.css HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:43 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df18f1e56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125790,"size_decoded":31235,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d5753a633020293f1089d3106704758c","sha1":"85f7e635bec63eb26df19a1d382de94a7bd1883e","sha256":"6e80e6b9b04e6f98daeb45b7203c3ea94b5ee52d06dfdb5740d910898550f538","sha512":"3f9cb857261ade8eb74b73425f596cc59b2ecc51a6219fedafb058644b107fa417e478cb98bb206552bae3811a65fc5ff1c1530cd4c044f34d0eb7e959bde76f","ssdeep":"768:g1b1pdWO9QBqdkap5xBf6nTPsQF4QLDCnFWC/RV2bEvv2r9roQnkPpqUFlTKyVwG:g1bP9CqdkabsLi3/R5QkPPlOyqyarwh","tlshash":"f1c32ab84a21a13cfc2ba12367dc9a5c1139b012ef6307ded665b6218acbff6157075c","first_seen":"2026-09-11T03:02:29.347861Z","last_seen":"2026-09-11T03:02:29.347861Z","times_seen":1,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/cd27c4b853f6da7a.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.873Z","timestamp":1789095703873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /cd27c4b853f6da7a.js HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df5385b56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38087,"size_decoded":12558,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2773)","md5":"d653ed2263323209f80ca34c839af6b2","sha1":"db6b5bc122aa4f86dd5b13904d3d65e29b4cad94","sha256":"a442f7b4e9b97d7234609eebd05eed9ea8af2fc9718c0d74761a7ed1d912a8e3","sha512":"3793f98242c3b65d96d818a406bb495c730682272855f396eeba82b8457f4a03a02ee1c134c7016a4800234070f5edd8e8f15fe21d819523c111d9269ff532cf","ssdeep":"768:AYsOykjQibZFnBfUnkY5JgeL5+XOObYXVbxId8ZQeZ4Tq8S55PXzCpfLDVaGXGBI:A3yQ4jBdOEybxyr5TK964GN","tlshash":"4003fa5976c3626686b390e2303b8845b4b83f32f18e9ce5f685d4f43817c9887b7766","first_seen":"2026-09-11T03:02:29.34903Z","last_seen":"2026-09-11T03:02:29.34903Z","times_seen":1,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/b439b2bb1d627d4c.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.883Z","timestamp":1789095703883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /b439b2bb1d627d4c.js HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df5486b56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51171,"size_decoded":18797,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1373)","md5":"5eb8c8945c81530eb597bc392f8dd5be","sha1":"23102553d6858998efae48dcd56ab9493dfde613","sha256":"dfb9cbe0fe3e0b1cc998270a89072e18ef3fd2857696eb4be0783dc7155258a6","sha512":"2e314e24a039dcbed012e307e6ac7ec4f3c922d076dad39b53c3c23705f95ba8fd2a7e40fe8fc3f1d6baea3d568bda19fc85849888ecd935dc1251d78b525c9e","ssdeep":"768:Fz5G1uro7bM57Mn6pBemq8PQffhqA9xkqRI5DJJzHIQC3gHvcVk02IoGzMeaXvmb:x5G1u07sIdrwo3gHvTpuzV4zS","tlshash":"05335dd072b77446c663c6d640bf0542b99bb910740e88fcea2eddc26d74c9922b2b3d","first_seen":"2026-09-11T03:02:29.350262Z","last_seen":"2026-09-11T03:02:29.350262Z","times_seen":1,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/fonts/33696a29f45c1b554a4c12443b998d21.woff2","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.140Z","timestamp":1789095704140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /fonts/33696a29f45c1b554a4c12443b998d21.woff2 HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 41456\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3936df6e94656aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41456,"size_decoded":42097,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 41456, version 1.0","md5":"4971edf7a4a0359f252d44d4647aa2c2","sha1":"b7a585910ed4af3810783f842aa0e39274b76396","sha256":"66c862243067d2ed17d8881a57f8593e0dd35a7488babb3b3335111a5d1e3591","sha512":"f7c69269d0636b08807b86f716a6d245cc4ad69a91c192208463f7adb9c6950fedb43a9ea0c77f1440c6787106b9e395bfd08ee0f5da983bb29dfc60fafeac59","ssdeep":"768:EA6CYSTwaih5Mbei2P6ZEnwmnjRGfL4p/V0qA1E89qja7IcCXKui14zmp/llqu:EGYSUaiLCei2PgEnwoALiN0qA1E82afL","tlshash":"ce13f1e6a3a4f3d8c17aa170f489af4ab51534d5e1864c1b3c8ab97c0c487d076f56b1","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-10-08T18:29:28.222341Z","times_seen":746,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.155Z","timestamp":1789095704155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2 HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 40708\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3936df6f95756aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40708,"size_decoded":41349,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40708, version 1.0","md5":"ffe7cc3945dcff0497df9901158ca5c9","sha1":"92b86140e39dc5b0ebaaf91ac3147f7ed7379851","sha256":"c856336c2c3439ef8a736b40a7b11a7e575979a739c96edf7baed2d1a5b131d8","sha512":"46c4ab2acac2269dccb459a04dbb5c959331ecaec9d75f79249909e9c6c1c2cb3ef1ff550cc5ab48c56e445fa84d4358789efddc94786cb8349d90bd79ce24d2","ssdeep":"768:Ai5GA2KblnJ80SVBPE/JDSHwih/OOcWE5DBEjufzqyH1pbYi8FzeMIX3oS7Kwx+:Ai4AHnXSVBPEkwih5cJ5DBaizhHPbYiO","tlshash":"3903f195fe79b63fbe0a416d0a41a0240f895b10e9be29c0f825507161fcb65f7a1c5b","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-10-08T18:29:28.169146Z","times_seen":859,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/media/db83feb22f5aeabf2e6510d3190d46c7.svg","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.467Z","timestamp":1789095704467,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /media/db83feb22f5aeabf2e6510d3190d46c7.svg HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df8ea0956aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":942,"size_decoded":1195,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5fff4f20317db9be7b10185d40466915","sha1":"fd8e16f8449415e4a056e35f75c0cac0c6d64a80","sha256":"cd7e7160ca0d0c3191f6ae719a179e808fa32a627bed10ec06fc8ad890ece259","sha512":"11bb22a83e531734a9c138a92673cbc73f1bd8a663c742c00ab6250e0de6098fcc22a7bb484bbe1e46dd1fc6c0b5b6a91498fe8b9eb36981604863b44988d64c","ssdeep":"","tlshash":"ce111405630a46a0ebc9cb8283f889516139d04ae8d0d2dcea6b1b46e4215f11f20d7d","first_seen":"2025-09-15T15:29:26.870804Z","last_seen":"2026-10-10T21:47:12.448078Z","times_seen":14,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/ef5a6e4d51372fed.vendor.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.290Z","timestamp":1789095703290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /ef5a6e4d51372fed.vendor.js HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:43 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=1,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df19f2956aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":731445,"size_decoded":213547,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65455)","md5":"b53b16ddb3ab1121fe550c6c8590d0d5","sha1":"01f8f456759d86ec2ded40752e3d687f069e4ef2","sha256":"fc4a5d8502266b80bfb5e2d11415277b3aa9015ea3c3e766a1ef2fe153e18914","sha512":"fe47715c6b20d1fa967dc876a2ab5f39a63d24483805a442c9976a8d4e13b151c3afc540ca83c8bab1e99b278179a1a390d1e8955532b5df7b251e72a116bfe9","ssdeep":"12288:FoNWRPYnDdCdBf7sTv9DUZrtT+cGjP6XZfeT+cGg5DwWuW/o2H7XpqB5NR19K:FoNWRPYn0TfATv9DUZrtT+cGjP6XZfeF","tlshash":"78f4fadcb291b472539760f5406f010bf33e692d644d8198f269e8e57cb898e623bf78","first_seen":"2026-09-11T03:02:29.354104Z","last_seen":"2026-09-11T03:02:29.354104Z","times_seen":1,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.152Z","timestamp":1789095704152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2 HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 40708\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3936df6f95256aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40708,"size_decoded":41349,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40708, version 1.0","md5":"ffe7cc3945dcff0497df9901158ca5c9","sha1":"92b86140e39dc5b0ebaaf91ac3147f7ed7379851","sha256":"c856336c2c3439ef8a736b40a7b11a7e575979a739c96edf7baed2d1a5b131d8","sha512":"46c4ab2acac2269dccb459a04dbb5c959331ecaec9d75f79249909e9c6c1c2cb3ef1ff550cc5ab48c56e445fa84d4358789efddc94786cb8349d90bd79ce24d2","ssdeep":"768:Ai5GA2KblnJ80SVBPE/JDSHwih/OOcWE5DBEjufzqyH1pbYi8FzeMIX3oS7Kwx+:Ai4AHnXSVBPEkwih5cJ5DBaizhHPbYiO","tlshash":"3903f195fe79b63fbe0a416d0a41a0240f895b10e9be29c0f825507161fcb65f7a1c5b","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-10-08T18:29:28.169146Z","times_seen":859,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.153Z","timestamp":1789095704153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2 HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 40708\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3936df6f95456aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40708,"size_decoded":41349,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40708, version 1.0","md5":"ffe7cc3945dcff0497df9901158ca5c9","sha1":"92b86140e39dc5b0ebaaf91ac3147f7ed7379851","sha256":"c856336c2c3439ef8a736b40a7b11a7e575979a739c96edf7baed2d1a5b131d8","sha512":"46c4ab2acac2269dccb459a04dbb5c959331ecaec9d75f79249909e9c6c1c2cb3ef1ff550cc5ab48c56e445fa84d4358789efddc94786cb8349d90bd79ce24d2","ssdeep":"768:Ai5GA2KblnJ80SVBPE/JDSHwih/OOcWE5DBEjufzqyH1pbYi8FzeMIX3oS7Kwx+:Ai4AHnXSVBPEkwih5cJ5DBaizhHPbYiO","tlshash":"3903f195fe79b63fbe0a416d0a41a0240f895b10e9be29c0f825507161fcb65f7a1c5b","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-10-08T18:29:28.169146Z","times_seen":859,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/fonts/33696a29f45c1b554a4c12443b998d21.woff2","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.158Z","timestamp":1789095704158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /fonts/33696a29f45c1b554a4c12443b998d21.woff2 HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 41456\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3936df6f95d56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41456,"size_decoded":42097,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 41456, version 1.0","md5":"4971edf7a4a0359f252d44d4647aa2c2","sha1":"b7a585910ed4af3810783f842aa0e39274b76396","sha256":"66c862243067d2ed17d8881a57f8593e0dd35a7488babb3b3335111a5d1e3591","sha512":"f7c69269d0636b08807b86f716a6d245cc4ad69a91c192208463f7adb9c6950fedb43a9ea0c77f1440c6787106b9e395bfd08ee0f5da983bb29dfc60fafeac59","ssdeep":"768:EA6CYSTwaih5Mbei2P6ZEnwmnjRGfL4p/V0qA1E89qja7IcCXKui14zmp/llqu:EGYSUaiLCei2PgEnwoALiN0qA1E82afL","tlshash":"ce13f1e6a3a4f3d8c17aa170f489af4ab51534d5e1864c1b3c8ab97c0c487d076f56b1","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-10-08T18:29:28.222341Z","times_seen":746,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/media/eb79472c2d5aac16e8e51138b40f9b95.png","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.306Z","timestamp":1789095704306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /media/eb79472c2d5aac16e8e51138b40f9b95.png HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 109231\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a3936df7e9ac56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":109231,"size_decoded":109855,"mime_type":"image/png","magic":"PNG image data, 798 x 266, 8-bit/color RGBA, non-interlaced","md5":"c13b86eb6098581ef53db91d7410fe84","sha1":"9b1887173614baf97469e6fa4150055f2170146f","sha256":"72b42f069667cc52bc3e3cf12c7f5b43ab9e8ea74b4654f5d83987df3e843cac","sha512":"3bee1348f72631b9c76b91a802b69dc5954b86faf48170c4cb2f93fa7b189b0267fa8aac57fa464227f3210a59aecf8524e6178359d1b0a7c102067b54d9f956","ssdeep":"3072:+ACLNO+7Bly90QHyyDkvVh+IUkEtce4uCZ0bzp2:2H7zG7SyDcV5veNzp2","tlshash":"66b3029fa34bd39fead00a7ec3dc69a51617844fd4c249b36618d034572752cc6eae0d","first_seen":"2026-09-11T03:02:29.355406Z","last_seen":"2026-09-11T03:02:29.355406Z","times_seen":1,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/static_font_4.ltr.css","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.284Z","timestamp":1789095703284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /static_font_4.ltr.css HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:43 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df18f2156aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1506,"size_decoded":1246,"mime_type":"text/css","magic":"ASCII text, with very long lines (1446)","md5":"d1437e0251d431b3a3080cb68d66c610","sha1":"e40f425d2630e3d7c770d913457b1209b7b81327","sha256":"138b5385f644aacbff65a59c31cdd4f12856f422ebf852afb7477230e9e002c8","sha512":"31045fca87d9d8f7c5015713d8a1d74e6f179524727855c1d488a644133d876ea2e9bcec8ab1fd1d253b1cccafec599d743b5a402f727af6825a50673f8d5d5e","ssdeep":"","tlshash":"4131ac341419918ed862795334df76721f3e10256f88622bdf1c58944fabca6f150f9e","first_seen":"2024-08-20T09:48:06.054128Z","last_seen":"2026-10-11T16:12:01.884229Z","times_seen":2267,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/88061a873fd06fdb.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.869Z","timestamp":1789095703869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /88061a873fd06fdb.js HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df5385856aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2388,"size_decoded":1701,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1417)","md5":"6807edb0369bcc08723d734abdab5a37","sha1":"4577aba5bd781f9c511c59c1f9df7aa27889f4cf","sha256":"4ca094bcde443132f07fe01a8e78d3187bd78bacbb1a55a8e853233a4f8f2576","sha512":"8da35dfff63ace0d8f6f17e5ada2f22c6f6fb7c14484aa3c5a683418019ba10240c2b0cdfdd8401127d2c31b06297aeeb225ac572b3c6891974a09d1c66d04d8","ssdeep":"","tlshash":"534150583a0ef575e2b244e950071025a612c742f10dece8ba328cf6f0f4e81a675b7e","first_seen":"2026-09-11T03:02:29.358259Z","last_seen":"2026-09-11T03:02:29.358259Z","times_seen":1,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.151Z","timestamp":1789095704151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2 HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 40708\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3936df6f95056aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40708,"size_decoded":41349,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40708, version 1.0","md5":"ffe7cc3945dcff0497df9901158ca5c9","sha1":"92b86140e39dc5b0ebaaf91ac3147f7ed7379851","sha256":"c856336c2c3439ef8a736b40a7b11a7e575979a739c96edf7baed2d1a5b131d8","sha512":"46c4ab2acac2269dccb459a04dbb5c959331ecaec9d75f79249909e9c6c1c2cb3ef1ff550cc5ab48c56e445fa84d4358789efddc94786cb8349d90bd79ce24d2","ssdeep":"768:Ai5GA2KblnJ80SVBPE/JDSHwih/OOcWE5DBEjufzqyH1pbYi8FzeMIX3oS7Kwx+:Ai4AHnXSVBPEkwih5cJ5DBaizhHPbYiO","tlshash":"3903f195fe79b63fbe0a416d0a41a0240f895b10e9be29c0f825507161fcb65f7a1c5b","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-10-08T18:29:28.169146Z","times_seen":859,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/media/811603f7972cfc2b537b6f785d93609f.png","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.307Z","timestamp":1789095704307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /media/811603f7972cfc2b537b6f785d93609f.png HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 117188\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a3936df7e9ae56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117188,"size_decoded":117812,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGB, non-interlaced","md5":"4f7224bc007e06fb8f26fe8bcb66b4e7","sha1":"be1e8640a78c170cef893e13795f222bdc6a6457","sha256":"eb25cdd9c48b5498e2f8704f1e9fdbd814d25c0dcedca76ce3747b70cd55544a","sha512":"304acf49726ece1bb54fe01a706e11985d09606f51e4329aab001978cf46c08ab4d230aedf5203089f4258a4cfdbb77f75179b177018a5302ae56be0e4acd92c","ssdeep":"3072:KE1UfWtpkbgsg4mLqQQNlWNZGVRzeScHVCIeS:Hu5bAONlEazmwIL","tlshash":"3cb312f153ce71d6d641b0b981cb4305622b052c65ad20f7bfda351b722e2057abacb6","first_seen":"2026-09-11T03:02:29.35935Z","last_seen":"2026-09-11T03:02:29.35935Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/118052af16110a6a.ltr.css","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.867Z","timestamp":1789095703867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /118052af16110a6a.ltr.css HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df5285756aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105,"size_decoded":713,"mime_type":"text/css","magic":"ASCII text","md5":"126308fa3f323f30d56ccb89f71ed06c","sha1":"3732a362d7823922e767519fda94114b1f64ff8a","sha256":"ca4fa9d0bd9ce4199150663aa1ad8d59f8e2cbd37ab76293a2d74983fb0d2ca0","sha512":"2499c0d3081bba1732ecf4d64bff34552df76ed51151efe64abeac273b14b6669ced0ed87fee27e1ce1521cde5b10c5b4cd0236a8ef8b096d1a1e7ae2dc140da","ssdeep":"","tlshash":"05b012bed8f12d6dd53357393971c05c50baa041f2d1891cb340214c93b6c019c3ad2a","first_seen":"2024-06-03T09:59:45Z","last_seen":"2026-09-11T03:02:29.360622Z","times_seen":36,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/b7b570e68761bd2d.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.885Z","timestamp":1789095703885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /b7b570e68761bd2d.js HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df5486d56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47358,"size_decoded":16191,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1855)","md5":"ecb1666fdede84bf92a16d7de62372bf","sha1":"42b5d3da00c361691c66b940c49618cdab48ae71","sha256":"2753587732919e2c57b088e16592fd77383ed7ae2320cf9138e81979c039da06","sha512":"fdf2880f510932abd3984b6a95946b04723b1395dfff1bb7bd8228bef34a70f6d781232b4dac7f273334d12277f72be4f9beee6f32eb1a83e7b8d089bde02ce7","ssdeep":"768:SCJ6/nvZfjXIIFzFJS0uqkAe5H55D2/OqZ3F5v/VCcwm/aey29XxC0i0ceuF2ilU:ZG48pJSpNXD2/OqdF1/VLw8DVxYcaKjP","tlshash":"db23c768f6a3a01cc676ccdac07f04a9a5693b0d7248dcbdf66b98d668445493339f3c","first_seen":"2026-09-11T03:02:29.361788Z","last_seen":"2026-09-11T03:02:29.361788Z","times_seen":1,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.141Z","timestamp":1789095704141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2 HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 40708\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3936df6e94756aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40708,"size_decoded":41349,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40708, version 1.0","md5":"ffe7cc3945dcff0497df9901158ca5c9","sha1":"92b86140e39dc5b0ebaaf91ac3147f7ed7379851","sha256":"c856336c2c3439ef8a736b40a7b11a7e575979a739c96edf7baed2d1a5b131d8","sha512":"46c4ab2acac2269dccb459a04dbb5c959331ecaec9d75f79249909e9c6c1c2cb3ef1ff550cc5ab48c56e445fa84d4358789efddc94786cb8349d90bd79ce24d2","ssdeep":"768:Ai5GA2KblnJ80SVBPE/JDSHwih/OOcWE5DBEjufzqyH1pbYi8FzeMIX3oS7Kwx+:Ai4AHnXSVBPEkwih5cJ5DBaizhHPbYiO","tlshash":"3903f195fe79b63fbe0a416d0a41a0240f895b10e9be29c0f825507161fcb65f7a1c5b","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-10-08T18:29:28.169146Z","times_seen":859,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.148Z","timestamp":1789095704148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2 HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 40708\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3936df6e94b56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40708,"size_decoded":41349,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40708, version 1.0","md5":"ffe7cc3945dcff0497df9901158ca5c9","sha1":"92b86140e39dc5b0ebaaf91ac3147f7ed7379851","sha256":"c856336c2c3439ef8a736b40a7b11a7e575979a739c96edf7baed2d1a5b131d8","sha512":"46c4ab2acac2269dccb459a04dbb5c959331ecaec9d75f79249909e9c6c1c2cb3ef1ff550cc5ab48c56e445fa84d4358789efddc94786cb8349d90bd79ce24d2","ssdeep":"768:Ai5GA2KblnJ80SVBPE/JDSHwih/OOcWE5DBEjufzqyH1pbYi8FzeMIX3oS7Kwx+:Ai4AHnXSVBPEkwih5cJ5DBaizhHPbYiO","tlshash":"3903f195fe79b63fbe0a416d0a41a0240f895b10e9be29c0f825507161fcb65f7a1c5b","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-10-08T18:29:28.169146Z","times_seen":859,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/images/d0c30cae7a2eefeb9fe3d9f2107a0a98.png","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.134Z","timestamp":1789095704134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /images/d0c30cae7a2eefeb9fe3d9f2107a0a98.png HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 12661\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a3936df6d94056aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12661,"size_decoded":13287,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced","md5":"cdcd9a8d53b37ac5316e625c165fafb1","sha1":"5db6570dd31fbfdcdb5329c70cda7ab244c4a51d","sha256":"e622bb606991057ced40bb29629a3e9e0466be6149ccec683440521a1deaebba","sha512":"54f464a6b5c7ea86d64acd93b1ba69da01465f42918a1e6bb44de21c4f9122534df323f875b981de7c644da6ec7af878bdb22a914f3070a74aa72cb9f0f43d75","ssdeep":"192:rK4ItE+KwHD8o3yw/gvrNOleQSrpha1jxPajnz+RJoHvdX3ECscJFIaIiGPBRL:cEmoLDvpOmi1xoJ3vJ6Nn","tlshash":"7342afc6aeb7f11adb306132abc520a337e76214b8bfe78c8ce56507d2151499523f23","first_seen":"2026-09-11T03:02:29.363075Z","last_seen":"2026-09-11T03:02:29.363075Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.149Z","timestamp":1789095704149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2 HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 40708\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3936df6f94d56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40708,"size_decoded":41349,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40708, version 1.0","md5":"ffe7cc3945dcff0497df9901158ca5c9","sha1":"92b86140e39dc5b0ebaaf91ac3147f7ed7379851","sha256":"c856336c2c3439ef8a736b40a7b11a7e575979a739c96edf7baed2d1a5b131d8","sha512":"46c4ab2acac2269dccb459a04dbb5c959331ecaec9d75f79249909e9c6c1c2cb3ef1ff550cc5ab48c56e445fa84d4358789efddc94786cb8349d90bd79ce24d2","ssdeep":"768:Ai5GA2KblnJ80SVBPE/JDSHwih/OOcWE5DBEjufzqyH1pbYi8FzeMIX3oS7Kwx+:Ai4AHnXSVBPEkwih5cJ5DBaizhHPbYiO","tlshash":"3903f195fe79b63fbe0a416d0a41a0240f895b10e9be29c0f825507161fcb65f7a1c5b","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-10-08T18:29:28.169146Z","times_seen":859,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/fonts/33696a29f45c1b554a4c12443b998d21.woff2","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.162Z","timestamp":1789095704162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /fonts/33696a29f45c1b554a4c12443b998d21.woff2 HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 41456\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3936df7096156aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41456,"size_decoded":42097,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 41456, version 1.0","md5":"4971edf7a4a0359f252d44d4647aa2c2","sha1":"b7a585910ed4af3810783f842aa0e39274b76396","sha256":"66c862243067d2ed17d8881a57f8593e0dd35a7488babb3b3335111a5d1e3591","sha512":"f7c69269d0636b08807b86f716a6d245cc4ad69a91c192208463f7adb9c6950fedb43a9ea0c77f1440c6787106b9e395bfd08ee0f5da983bb29dfc60fafeac59","ssdeep":"768:EA6CYSTwaih5Mbei2P6ZEnwmnjRGfL4p/V0qA1E89qja7IcCXKui14zmp/llqu:EGYSUaiLCei2PgEnwoALiN0qA1E82afL","tlshash":"ce13f1e6a3a4f3d8c17aa170f489af4ab51534d5e1864c1b3c8ab97c0c487d076f56b1","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-10-08T18:29:28.222341Z","times_seen":746,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/media/d1d87a1948b37dccfadc55cc6a7a8981.svg","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.300Z","timestamp":1789095704300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /media/d1d87a1948b37dccfadc55cc6a7a8981.svg HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df7e9a256aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":620,"size_decoded":1006,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f34726d05ecd5977fe7e1c4b5ca351e8","sha1":"ae6676e958c136faa01b6d035a8957128f502f03","sha256":"7d99a34c73e644a48a8c4421f3e365970fa9e0f3aca04c7301f8f6379136f5b4","sha512":"62a2271f68320cb4ce36b1907726057cf3d3f4fb514d4ee3e838f83ea9eb13cac268e9204ee3211a60698189d95d7b84dc85a61562fccb8119c0fe58525c39cd","ssdeep":"","tlshash":"e9f0d8368301c7a3c3448a9dbbf890409b6ca996acb482d8eae32512d01e1d4263c3ce","first_seen":"2026-02-01T08:38:59.44618Z","last_seen":"2026-09-11T03:02:29.364295Z","times_seen":2,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/images/d0c30cae7a2eefeb9fe3d9f2107a0a98.png","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.133Z","timestamp":1789095704133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /images/d0c30cae7a2eefeb9fe3d9f2107a0a98.png HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 12661\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a3936df6d93f56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12661,"size_decoded":13287,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced","md5":"cdcd9a8d53b37ac5316e625c165fafb1","sha1":"5db6570dd31fbfdcdb5329c70cda7ab244c4a51d","sha256":"e622bb606991057ced40bb29629a3e9e0466be6149ccec683440521a1deaebba","sha512":"54f464a6b5c7ea86d64acd93b1ba69da01465f42918a1e6bb44de21c4f9122534df323f875b981de7c644da6ec7af878bdb22a914f3070a74aa72cb9f0f43d75","ssdeep":"192:rK4ItE+KwHD8o3yw/gvrNOleQSrpha1jxPajnz+RJoHvdX3ECscJFIaIiGPBRL:cEmoLDvpOmi1xoJ3vJ6Nn","tlshash":"7342afc6aeb7f11adb306132abc520a337e76214b8bfe78c8ce56507d2151499523f23","first_seen":"2026-09-11T03:02:29.363075Z","last_seen":"2026-09-11T03:02:29.363075Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/fonts/33696a29f45c1b554a4c12443b998d21.woff2","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.157Z","timestamp":1789095704157,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /fonts/33696a29f45c1b554a4c12443b998d21.woff2 HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 41456\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3936df6f95a56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41456,"size_decoded":42097,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 41456, version 1.0","md5":"4971edf7a4a0359f252d44d4647aa2c2","sha1":"b7a585910ed4af3810783f842aa0e39274b76396","sha256":"66c862243067d2ed17d8881a57f8593e0dd35a7488babb3b3335111a5d1e3591","sha512":"f7c69269d0636b08807b86f716a6d245cc4ad69a91c192208463f7adb9c6950fedb43a9ea0c77f1440c6787106b9e395bfd08ee0f5da983bb29dfc60fafeac59","ssdeep":"768:EA6CYSTwaih5Mbei2P6ZEnwmnjRGfL4p/V0qA1E89qja7IcCXKui14zmp/llqu:EGYSUaiLCei2PgEnwoALiN0qA1E82afL","tlshash":"ce13f1e6a3a4f3d8c17aa170f489af4ab51534d5e1864c1b3c8ab97c0c487d076f56b1","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-10-08T18:29:28.222341Z","times_seen":746,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/fonts/33696a29f45c1b554a4c12443b998d21.woff2","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.159Z","timestamp":1789095704159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /fonts/33696a29f45c1b554a4c12443b998d21.woff2 HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 41456\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3936df7095f56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41456,"size_decoded":42097,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 41456, version 1.0","md5":"4971edf7a4a0359f252d44d4647aa2c2","sha1":"b7a585910ed4af3810783f842aa0e39274b76396","sha256":"66c862243067d2ed17d8881a57f8593e0dd35a7488babb3b3335111a5d1e3591","sha512":"f7c69269d0636b08807b86f716a6d245cc4ad69a91c192208463f7adb9c6950fedb43a9ea0c77f1440c6787106b9e395bfd08ee0f5da983bb29dfc60fafeac59","ssdeep":"768:EA6CYSTwaih5Mbei2P6ZEnwmnjRGfL4p/V0qA1E89qja7IcCXKui14zmp/llqu:EGYSUaiLCei2PgEnwoALiN0qA1E82afL","tlshash":"ce13f1e6a3a4f3d8c17aa170f489af4ab51534d5e1864c1b3c8ab97c0c487d076f56b1","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-10-08T18:29:28.222341Z","times_seen":746,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/fonts/33696a29f45c1b554a4c12443b998d21.woff2","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.160Z","timestamp":1789095704160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /fonts/33696a29f45c1b554a4c12443b998d21.woff2 HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 41456\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3936df7096056aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41456,"size_decoded":42097,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 41456, version 1.0","md5":"4971edf7a4a0359f252d44d4647aa2c2","sha1":"b7a585910ed4af3810783f842aa0e39274b76396","sha256":"66c862243067d2ed17d8881a57f8593e0dd35a7488babb3b3335111a5d1e3591","sha512":"f7c69269d0636b08807b86f716a6d245cc4ad69a91c192208463f7adb9c6950fedb43a9ea0c77f1440c6787106b9e395bfd08ee0f5da983bb29dfc60fafeac59","ssdeep":"768:EA6CYSTwaih5Mbei2P6ZEnwmnjRGfL4p/V0qA1E89qja7IcCXKui14zmp/llqu:EGYSUaiLCei2PgEnwoALiN0qA1E82afL","tlshash":"ce13f1e6a3a4f3d8c17aa170f489af4ab51534d5e1864c1b3c8ab97c0c487d076f56b1","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-10-08T18:29:28.222341Z","times_seen":746,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/media/db83feb22f5aeabf2e6510d3190d46c7.svg","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.298Z","timestamp":1789095704298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /media/db83feb22f5aeabf2e6510d3190d46c7.svg HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df7e9a156aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":942,"size_decoded":1192,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5fff4f20317db9be7b10185d40466915","sha1":"fd8e16f8449415e4a056e35f75c0cac0c6d64a80","sha256":"cd7e7160ca0d0c3191f6ae719a179e808fa32a627bed10ec06fc8ad890ece259","sha512":"11bb22a83e531734a9c138a92673cbc73f1bd8a663c742c00ab6250e0de6098fcc22a7bb484bbe1e46dd1fc6c0b5b6a91498fe8b9eb36981604863b44988d64c","ssdeep":"","tlshash":"ce111405630a46a0ebc9cb8283f889516139d04ae8d0d2dcea6b1b46e4215f11f20d7d","first_seen":"2025-09-15T15:29:26.870804Z","last_seen":"2026-10-10T21:47:12.448078Z","times_seen":14,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/media/8cabe6c4cf81370f1ba45275d8cb647a.jpg","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.308Z","timestamp":1789095704308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /media/8cabe6c4cf81370f1ba45275d8cb647a.jpg HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 88400\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a3936df7e9b056aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88400,"size_decoded":89024,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x500, components 3","md5":"f79173b73b1d5adfcdf5aec38ca19c14","sha1":"551d1b21a77e14603646a9f52cbffb93f80e41eb","sha256":"d07b56b8ab82abfc3baf56467f7f347b868121a5c190e3cfce056153eaa05caa","sha512":"6e6f81d8b3391b0ebd98b4702e1f7e0cd9741a316552dacdcd72a92c05419a8670fd708a883511e0bfcffabaa91e797af813d4fac5cb6fe857bc1d89f872109d","ssdeep":"1536:0EyLWkDPow7EJzekPZM/JLMB/jFRF3y0W2EcrJ23KARF+avIzB:0EyLmwEJ/MJwB/RPi4J2FFW","tlshash":"368312850e8b5433d75545388d0b7e84c194c3a11af57b80e6860aebad7d6788ffd392","first_seen":"2026-09-11T03:02:29.365404Z","last_seen":"2026-09-11T03:02:29.365404Z","times_seen":1,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/media/d1d87a1948b37dccfadc55cc6a7a8981.svg","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.480Z","timestamp":1789095704480,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /media/d1d87a1948b37dccfadc55cc6a7a8981.svg HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df90a1156aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":620,"size_decoded":1009,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f34726d05ecd5977fe7e1c4b5ca351e8","sha1":"ae6676e958c136faa01b6d035a8957128f502f03","sha256":"7d99a34c73e644a48a8c4421f3e365970fa9e0f3aca04c7301f8f6379136f5b4","sha512":"62a2271f68320cb4ce36b1907726057cf3d3f4fb514d4ee3e838f83ea9eb13cac268e9204ee3211a60698189d95d7b84dc85a61562fccb8119c0fe58525c39cd","ssdeep":"","tlshash":"e9f0d8368301c7a3c3448a9dbbf890409b6ca996acb482d8eae32512d01e1d4263c3ce","first_seen":"2026-02-01T08:38:59.44618Z","last_seen":"2026-09-11T03:02:29.364295Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/a0684b0780c739e9.vendor.ltr.css","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.281Z","timestamp":1789095703281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /a0684b0780c739e9.vendor.ltr.css HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:43 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df18f1b56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10359,"size_decoded":2351,"mime_type":"text/css","magic":"ASCII text, with very long lines (10099)","md5":"4eb0cc037aa215c5fa2eb3c1b342613d","sha1":"97d135c19209077c0335065f35d53fffc62caa88","sha256":"e8fb139770ec251e750403322d40db96c027b9feb48f4489b76a735f9f0869e5","sha512":"270302a621dd93de4ca144dab5f699270b2dcde0e759fbd63098b09d2c597cf9a07827b8caf40343e38d3108c8cbf1edef6af44e6944fa0bd99d8467a5d2dd56","ssdeep":"192:FFS+oMcpO2BMKGwLsreI0keXg6moYyfJWh:S+oMz2BMKGwLsreI0keXg6moYkQ","tlshash":"9022af6a3f57307f8393857ff042aae150c9e396a0e98515f0a5ef0429db4e5921af3c","first_seen":"2024-04-10T03:14:53Z","last_seen":"2026-10-10T21:47:12.556977Z","times_seen":2496,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/6f66ccc6be225571.en.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.287Z","timestamp":1789095703287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /6f66ccc6be225571.en.js HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:43 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=1,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df18f2456aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":312,"size_decoded":803,"mime_type":"application/javascript","magic":"ASCII text","md5":"f070a7b28f9354ec1306611bba156b63","sha1":"f949a8d018c2f8dea0723cba24a64ca6d75c3046","sha256":"180a37506e90e53e841e8e67bf3c44f5355bd9a06981fa28fc8c88a15fc7e531","sha512":"bffea8869bda95c4d545a4a1f29fcf3191cbc3e19cddca6f0cda9f36f50c9fc8ac4ab0fdd28112d5997c755622533ace8c015411ec200471727a3e20b8cdf263","ssdeep":"","tlshash":"35e0c29a00a1faa4ff7b0ffc93aa35862c124b4410e2e6fc887041913be5c43cf604a8","first_seen":"2026-09-11T03:02:29.367682Z","last_seen":"2026-09-11T03:02:29.367682Z","times_seen":1,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/3735dc52136d446c.ltr.css","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.884Z","timestamp":1789095703884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /3735dc52136d446c.ltr.css HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df5486c56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4349,"size_decoded":2114,"mime_type":"text/css","magic":"ASCII text, with very long lines (4286)","md5":"5006d6e0d0ee471e37d3369f2543e165","sha1":"52ecd37ab3dd9e30ecd540672a627d895f34a032","sha256":"8da519012c14d3e3863a5d2a61ec3828968db22fbb02c900e31e21ed68a0cbf5","sha512":"a334d6f3e0fbaddb66740bf784f63b0f16ff2c62910b7f62738811c24816694322e274bcc70c4e4609cae46834227c179d51fcb15debe3317d88253b208526c2","ssdeep":"96:+yWPEtk2pl6NMrJaNOXN8NOcq6YEwj0JBzOynpNR0W:+XMt5+NCJaNOXN8NOcBujD4pN","tlshash":"cd91c8744370b6fd67239725f6a0df8800b11111db2b03edf990eaaa84c316d29fb54d","first_seen":"2026-09-11T03:02:29.368786Z","last_seen":"2026-09-11T03:02:29.368786Z","times_seen":1,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.138Z","timestamp":1789095704138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2 HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 40708\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3936df6e94556aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40708,"size_decoded":41349,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40708, version 1.0","md5":"ffe7cc3945dcff0497df9901158ca5c9","sha1":"92b86140e39dc5b0ebaaf91ac3147f7ed7379851","sha256":"c856336c2c3439ef8a736b40a7b11a7e575979a739c96edf7baed2d1a5b131d8","sha512":"46c4ab2acac2269dccb459a04dbb5c959331ecaec9d75f79249909e9c6c1c2cb3ef1ff550cc5ab48c56e445fa84d4358789efddc94786cb8349d90bd79ce24d2","ssdeep":"768:Ai5GA2KblnJ80SVBPE/JDSHwih/OOcWE5DBEjufzqyH1pbYi8FzeMIX3oS7Kwx+:Ai4AHnXSVBPEkwih5cJ5DBaizhHPbYiO","tlshash":"3903f195fe79b63fbe0a416d0a41a0240f895b10e9be29c0f825507161fcb65f7a1c5b","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-10-08T18:29:28.169146Z","times_seen":859,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T03:01:42.673Z","timestamp":1789095702673,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:01:43 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: frame-ancestors 'self' *.canva.com canva.com; report-uri https://csp.canva.com/_cspreport?app=websites; base-uri 'self'; object-src 'none'; script-src 'report-sample' 'strict-dynamic' 'nonce-0511cf94-8c65-4bc5-a1d6-43eb8d950fb1' 'wasm-unsafe-eval' https://www.google.com/recaptcha/api.js;\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: all\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD; HttpOnly; SameSite=None; Secure; Path=/; Domain=worldlibertyfinancialsol.com; Expires=Fri, 11 Sep 2026 03:31:43 GMT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936def5e7e0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD","quoted":false,"path":"/","domain":"worldlibertyfinancialsol.com","expires":"2026-09-11T03:31:43Z","raw_expires":"Fri, 11 Sep 2026 03:31:43 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD; HttpOnly; SameSite=None; Secure; Path=/; Domain=worldlibertyfinancialsol.com; Expires=Fri, 11 Sep 2026 03:31:43 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18068,"size_decoded":6571,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14807)","md5":"17766e42c78fbfcd815be5a682d54246","sha1":"7a1f23588d59846f3426e3e7a2c6e46f1451f58b","sha256":"c515642b30ef70e7875ab9f90132781ace055255775906efe892f0bd51cdeb45","sha512":"088158d6e3c4f6ac675ca1225511482b27dd52e6bc4d95d5c9fce58a69a68ff0dbca4ea7acd3e283f7fdcef38ab7175f7168e526e602b4572021798ee9d2aaf3","ssdeep":"192:a6LgCogvdSOVgmnyB289BnEMGHwME5hLbncbTubUoJq0NUSLKx:5cC9b1nyB289BfGHwpLbcfuL2S2x","tlshash":"b6820a1e225194bf8a5325a7d793a83393cc5922a1cc3f41a5fbdb0897d70dc02bb627","first_seen":"2026-09-11T03:02:29.370069Z","last_seen":"2026-09-11T03:02:29.370069Z","times_seen":1,"resource_available":true,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":246,"connect":1,"send":0,"wait":172,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/4c3bdd982b2ffb60.strings.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.285Z","timestamp":1789095703285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /4c3bdd982b2ffb60.strings.js HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:43 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=1,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df18f2256aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5683,"size_decoded":3295,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5364)","md5":"bee42521ebf6fa694d0e114130629320","sha1":"cdea88e2cebb52f898b853f1a5918d3571a3353d","sha256":"136f82eb05e11329ff6d9aa718a6e34febe8e703fe5fb376ed6f2e10c9819133","sha512":"80a2b43802668c69c281e10ee57f2ac287a933bc31fb7fcea6a99fe010939a2354130c2e4f9d47f04cdbe938fbc870b7f8728dd009cb58451c9e2f2ad6e47c96","ssdeep":"96:b5n3ZM69eClaX8VqL/jOxRH+RpwHJI2LXuawdzWV5aEO8eStOJX9F/XwDCg5lmIO:b5n3Z7/kwpZRwdzW6lo89FoCgaIpTw","tlshash":"b4c1a409e241d11dc252ae4f237ebdf0b157c26e178153b6eca9c12e825717eabe74c0","first_seen":"2026-09-11T03:02:29.371311Z","last_seen":"2026-09-11T03:02:29.371311Z","times_seen":1,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.981Z","timestamp":1789095703981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2 HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 40708\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3936df5e8a156aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40708,"size_decoded":41349,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40708, version 1.0","md5":"ffe7cc3945dcff0497df9901158ca5c9","sha1":"92b86140e39dc5b0ebaaf91ac3147f7ed7379851","sha256":"c856336c2c3439ef8a736b40a7b11a7e575979a739c96edf7baed2d1a5b131d8","sha512":"46c4ab2acac2269dccb459a04dbb5c959331ecaec9d75f79249909e9c6c1c2cb3ef1ff550cc5ab48c56e445fa84d4358789efddc94786cb8349d90bd79ce24d2","ssdeep":"768:Ai5GA2KblnJ80SVBPE/JDSHwih/OOcWE5DBEjufzqyH1pbYi8FzeMIX3oS7Kwx+:Ai4AHnXSVBPEkwih5cJ5DBaizhHPbYiO","tlshash":"3903f195fe79b63fbe0a416d0a41a0240f895b10e9be29c0f825507161fcb65f7a1c5b","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-10-08T18:29:28.169146Z","times_seen":859,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.146Z","timestamp":1789095704146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2 HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 40708\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3936df6e94956aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40708,"size_decoded":41349,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40708, version 1.0","md5":"ffe7cc3945dcff0497df9901158ca5c9","sha1":"92b86140e39dc5b0ebaaf91ac3147f7ed7379851","sha256":"c856336c2c3439ef8a736b40a7b11a7e575979a739c96edf7baed2d1a5b131d8","sha512":"46c4ab2acac2269dccb459a04dbb5c959331ecaec9d75f79249909e9c6c1c2cb3ef1ff550cc5ab48c56e445fa84d4358789efddc94786cb8349d90bd79ce24d2","ssdeep":"768:Ai5GA2KblnJ80SVBPE/JDSHwih/OOcWE5DBEjufzqyH1pbYi8FzeMIX3oS7Kwx+:Ai4AHnXSVBPEkwih5cJ5DBaizhHPbYiO","tlshash":"3903f195fe79b63fbe0a416d0a41a0240f895b10e9be29c0f825507161fcb65f7a1c5b","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-10-08T18:29:28.169146Z","times_seen":859,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/9492f1846289769c.strings.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.871Z","timestamp":1789095703871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /9492f1846289769c.strings.js HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df5385956aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3864,"size_decoded":2277,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3560)","md5":"a5f5fdd9c3674cbc93ed1bf2f618fb73","sha1":"d1d6ce95db72035c3ac9dd7333a8d50a20bb9a6b","sha256":"1736ee422542e463597dd2e52ca495983e5df4721b5feecced7f5710d57c10bc","sha512":"bc02ffb6adb9d4bd0b474b617a38f6363870cedb0088275b96f8bc437433039eda2680da0966e402a7d9b86b58368cffdc73c416d0df47bf28ebbfe9d8339df8","ssdeep":"","tlshash":"9281414a9e41c32cd92a4e8d16fe6edab657c1ae92b00774f896c0588353c7c2fb74c4","first_seen":"2026-09-11T03:02:29.372407Z","last_seen":"2026-09-11T03:02:29.372407Z","times_seen":1,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/dc67baeccdf4d099.ltr.css","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.886Z","timestamp":1789095703886,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /dc67baeccdf4d099.ltr.css HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df5486e56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2445,"size_decoded":1518,"mime_type":"text/css","magic":"ASCII text, with very long lines (2382)","md5":"9fbe8c0be8486d17570f78ad1ff978e5","sha1":"522ebcf6d7b202708e29badd37ec89dad6f1d489","sha256":"903dd6e3f2ce072e246899512d79350e39427ddfec0c6dce203e3a3f4609825a","sha512":"7de1e2da3f9b7484139db9269cfd7ff493923d35b4b27846c9006ae292bf000a9911316ad78873851fa04198ce5f44d77e7eca6aa7fd91e84ba9b071273119c0","ssdeep":"","tlshash":"ce517469a5e072b48372f234cad23b4c0a3ec026d47b46dfa514a63ccdc667d1d35428","first_seen":"2026-09-11T03:02:29.373394Z","last_seen":"2026-09-11T03:02:29.373394Z","times_seen":1,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/fonts/33696a29f45c1b554a4c12443b998d21.woff2","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.984Z","timestamp":1789095703984,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /fonts/33696a29f45c1b554a4c12443b998d21.woff2 HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 41456\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3936df5e8a356aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41456,"size_decoded":42097,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 41456, version 1.0","md5":"4971edf7a4a0359f252d44d4647aa2c2","sha1":"b7a585910ed4af3810783f842aa0e39274b76396","sha256":"66c862243067d2ed17d8881a57f8593e0dd35a7488babb3b3335111a5d1e3591","sha512":"f7c69269d0636b08807b86f716a6d245cc4ad69a91c192208463f7adb9c6950fedb43a9ea0c77f1440c6787106b9e395bfd08ee0f5da983bb29dfc60fafeac59","ssdeep":"768:EA6CYSTwaih5Mbei2P6ZEnwmnjRGfL4p/V0qA1E89qja7IcCXKui14zmp/llqu:EGYSUaiLCei2PgEnwoALiN0qA1E82afL","tlshash":"ce13f1e6a3a4f3d8c17aa170f489af4ab51534d5e1864c1b3c8ab97c0c487d076f56b1","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-10-08T18:29:28.222341Z","times_seen":746,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/media/f8cdb052444027705476c6d63bdb50c8.png","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:44.304Z","timestamp":1789095704304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /media/f8cdb052444027705476c6d63bdb50c8.png HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 107913\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a3936df7e9a756aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107913,"size_decoded":108537,"mime_type":"image/png","magic":"PNG image data, 798 x 266, 8-bit/color RGBA, non-interlaced","md5":"6ac4cb804b4aa90a0a86bc092c57bc40","sha1":"c4f06da1b7a4d250274cca9c5a92a17f3eee1beb","sha256":"b87551f713a99c1f8483e749ba681720bdfc1e9fc44a195b8d444285adc8625d","sha512":"587d88ce5e1543741f9e6188cdea865beeeed0026ea92dac64e0f977e10009ac445495b291f4d13e2dae9d0c95152994436fa3092368a12833c4252700303044","ssdeep":"3072:Zo4U8Wo0mpR8+ugMh/PhjiWHqW127rqWVgqREnb:Zo4UWpR8DgMh/Pw8727r7VHR0","tlshash":"5fb3026ca02ec3e1beeb6070c7458d4bac511162336756b5e3ac66d4a14cf8873b253f","first_seen":"2026-09-11T03:02:29.374479Z","last_seen":"2026-09-11T03:02:29.374479Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/07bd8fc90c019813.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.291Z","timestamp":1789095703291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /07bd8fc90c019813.js HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:43 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=1,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df19f2b56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1545993,"size_decoded":515931,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (568)","md5":"8c8abcfef0868c400e55208c4c14124b","sha1":"c96890c2fc06acd5ec8561875be0a3cce022d8f1","sha256":"d5637c125a9538af092dddc064e63a25d77f538d8296034fea238cd3f7dafbe1","sha512":"b736e9903b32e797841401de06621ba6cebf8f79117fc0bfe375b2224c5b6d3ad53c10d253f1d76b720c1a30451b7bad405afcf7e28639a56075cca56bfa10e0","ssdeep":"24576:8whs2jNMKTGUT2Vfm6VVGuEDkc4t2u/EqJxk6aFQIUdCTwcKpp3LIbFbAtV5F7lR:Ds2jNMKTGUMe6VVGuEDkc4t2u/EqJxkq","tlshash":"55252a9476e3b05a8223e8e5803f0006f53aad55f04c8cbcf69dd9da7964949627bf3c","first_seen":"2026-09-11T03:02:29.375646Z","last_seen":"2026-09-11T03:02:29.375646Z","times_seen":1,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertyfinancialsol.com/16986861c9946f34.js","fqdn":"worldlibertyfinancialsol.com","domain":"worldlibertyfinancialsol.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://worldlibertyfinancialsol.com/","date":"2026-09-11T03:01:43.874Z","timestamp":1789095703874,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertyfinancialsol.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:26:59 GMT","end":"Sun, 22 Nov 2026 04:26:54 GMT"},"fingerprint":{"sha1":"25:A9:ED:00:EC:E7:78:D0:62:53:14:53:D6:CE:8E:7E:9D:9F:EE:80","sha256":"C1:83:97:29:50:F9:9B:9E:61:EF:5D:9C:A7:94:86:A2:B3:88:4E:26:22:64:FF:C6:AC:54:0E:36:D8:63:3E:0C"}}},"request":{"raw":"GET /16986861c9946f34.js HTTP/1.1\r\nHost: worldlibertyfinancialsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertyfinancialsol.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=PqBRFwnU3x7iGYfwWe82pqEUxMJlscUQHuKC6CNOl50-1789095702.9415507-1.0.1.1-DY7VqBXjuA6PBF_0c4B.l6YiKQMTljB3H_Z2OVmRehZyN09vpzhCsJh4MaQFLGL0F6GXVoJMmyRBZrySMH3XtPhjcVEmkSQtf2JQmtMPA1Ceq.b0CC0EZnfpeMezF2CD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:01:44 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 38b939e7dd097e0a65eed4c0a6700f667eacc11a71d65291315439e8f25f0f08\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3936df5385d56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15748,"size_decoded":6687,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1073)","md5":"6c7c743004dca603925d363eb0488e4a","sha1":"c0ff5d7b9ec3155959bce82a49e29c091b889ade","sha256":"4c929dbc1c588754d73021632552578c1b96325b07eac58a3bc887c1cf943267","sha512":"a58a029196f84ffe7f727a4fd3ec9fe046173267b57a89f6eea3901e90f5aa37c1583ac3919fc8cd6501f4e94641321cac6d287e4ff512a6b96e6b8e4b861201","ssdeep":"384:06JfBdNuejE4Ovb36Gf+gDrlTd77Yc3oakrg8u2HvBh4G4FoLgzlLTgq21hLaUPx:0ydNueDOvb36I+gDrlTaSoaks8u2j4G7","tlshash":"be62f608b28f75579a75f4d8407f0045b8b59d01f00c9cf6baaaf9d2ac29c4a41bbbb4","first_seen":"2026-09-11T03:02:29.376556Z","last_seen":"2026-09-11T03:02:29.376556Z","times_seen":1,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"worldlibertyfinancialsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}