{"report_id":"b4f6bdc5-dd5f-406d-a317-eda62b80126b","version":0,"status":"done","tags":[],"date":"2026-08-09T09:52:08Z","url":{"schema":"http","addr":"wlfinance.info/","fqdn":"wlfinance.info","domain":"wlfinance.info","tld":"info"},"ip":{"addr":"102.210.146.21","port":0,"asn":329184,"as":"Host-Africa-AS2","country":"Kenya","country_code":"KE"},"final":{"url":{"schema":"https","addr":"wlfinance.info/","fqdn":"wlfinance.info","domain":"wlfinance.info","tld":"info"},"title":"WLFI · Official Notification · The App Is Here","dom":{"size":37019,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1854)","md5":"16a939f960f86977caa08317f58fdd53","sha1":"f3f7c6507d0fe82ebda67346dff0568e239fc9c4","sha256":"0eaf0386c220e93a9091579a49f8956d49dd93fa95e05022d4b715608c5e660f","sha512":"a684ecf6299474ebcfda50d4a465c429f5d654dc4e92a6677ba2ffcebc6be972001791f21e91e0fd6ff2ed4bf5916e8a81a4f1e939a8992e69e5ef48b1120ec7","ssdeep":"384:8y5QYeeqhJT/4ct3dfr08azRVTE+JT9B71D868WvVi34OtlUaYNzolSZS+9fFABj:H5QphGK5xuRdnFcIpStRy4ai","tlshash":"98f229ff93e522e5408183e17f1292ba7e2f40bf7b98c680715c86686fd1d5d992b9c0","dom_hash":"domhash4b75b16abca46d421c705ae786486b93","first_seen":"2026-08-09T09:51:20.028674Z","last_seen":"2026-08-09T09:52:14.21834Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wlfinance.info/","fqdn":"wlfinance.info","domain":"wlfinance.info","tld":"info"},"ip":{"addr":"102.210.146.21","port":0,"asn":329184,"as":"Host-Africa-AS2","country":"Kenya","country_code":"KE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-13T09:52:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"wlfinance.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-02T22:20:16.100749Z","alert_count":0,"request_count":4,"received_data":295108,"sent_data":2224,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-08-02T22:44:21.067894Z","alert_count":0,"request_count":2,"received_data":222834,"sent_data":1104,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"wlfinance.info","ip":{"addr":"102.210.146.21","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"Kenya","country_code":"KE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-09T09:52:09.582776Z","last_seen":"2026-08-09T09:52:09.582776Z","alert_count":6,"request_count":6,"received_data":3450156,"sent_data":2961,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-02T22:23:34.841384Z","alert_count":0,"request_count":1,"received_data":10316,"sent_data":563,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":[{"md5":"d454d3b54717ce191336cd18dc98bbea","sha1":"2f5c5e6359fdd7eb5840830eddee42200dcf4cfa","sha256":"65f16c00a9e5d797b45bf2f6d0e8a85200a18939c31c71fa70c32309b3754be2","sha512":"fefa873d240efb62b2a63a16051570d975544d1ffe59796ebc0f349ffc065dfe4fe9ad3713a4ea1f7eeb1df4fdce4f3e66500da6273727075e57a2b99dd6c852","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":1709210,"url":{"schema":"https","addr":"wlfinance.info/WLFI-AppInstaller.zip","fqdn":"wlfinance.info","domain":"wlfinance.info","tld":"info"},"ip":{"addr":"102.210.146.21","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"Kenya","country_code":"KE"},"archive":null,"alerts":{"urlquery":null,"analyzer":null}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wlfinance.info/script.js","fqdn":"wlfinance.info","domain":"wlfinance.info","tld":"info"},"ip":{"addr":"102.210.146.21","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"Kenya","country_code":"KE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7f2ed90055e9dd9c377afeec1a004e5","sha1":"63a6cc2de4a8e37acf1615f895e246390baa647c","sha256":"8edb4c17348d8b2953c91053749ea2255aa4736c450ea14a7601dfe06e736a3e","sha512":"2723cdbccfbbbce1bce8baf79d2378b06748bd27094794f458207cb7998fdff32b088d97ee85e059b8c7d5db7dee6c105fe0483b8b8e9bc88df809c0369c0f99","ssdeep":"","tlshash":"4081331a323244754673a3be9bba875dfb3610332001c16a3fbc460d5f72949a462fde","size":4081,"data":"","first_seen":"2026-08-09T09:51:20.041316Z","last_seen":"2026-08-09T09:52:14.237697Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wlfinance.info/","date":"2026-08-09T09:51:38.394Z","timestamp":1786269098394,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://wlfinance.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 02 Aug 2026 10:34:00 GMT\r\nexpires: Mon, 02 Aug 2027 10:34:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 602258\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":72964,"size_decoded":73777,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-11T22:47:10.069572Z","times_seen":31791,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":30,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wlfinance.info/","date":"2026-08-09T09:51:38.396Z","timestamp":1786269098396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://wlfinance.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 02 Aug 2026 10:34:00 GMT\r\nexpires: Mon, 02 Aug 2027 10:34:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 602258\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":72964,"size_decoded":73777,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-11T22:47:10.069572Z","times_seen":31791,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":36,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wlfinance.info/","date":"2026-08-09T09:51:38.397Z","timestamp":1786269098397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.2/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://wlfinance.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 09 Aug 2026 09:51:38 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 117852\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Wed, 03 Apr 2024 02:35:32 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A06BEvTc6hrSsuUDzNw1Y8YkLZ54yypy2yUbsX36MkksZPn9amSsGrJAsfy%2F9Im2R1TIx2uspM7bZS3IEGuCei3rf7wlCIkFmeU3e0t5YkYvvqhqZOGkrxH3WmOeIq0s9UzU89au\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=5,i=?0\r\nserver: cloudflare\r\ncf-ray: a285dd090f23b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117852,"size_decoded":118834,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 117852, version 773.1280","md5":"b55b1345f0b919f0cab774ec25d6654e","sha1":"c39dd7c713983702de91b08ae00b194b0bdb9008","sha256":"232c6f6a7678304f9efaa26f30b1610debc2ba9f4cd636b5e6751c8d73761b92","sha512":"793756b3bf0e21181d06f44593a99a1986b90db4704f4765d4a1e8937acf3d1d38a750c6d6082545bbc80c04fc8dc03da5ab2b4a3f31b7f2345751050df115fb","ssdeep":"3072:Rs3c1iEht0b6W85CbPgRgaCMtsWOwydzrCyzhRaLZTBlZsEmOQadt:RDik3CzS8MtDOw+XaXZ8Of","tlshash":"74b31251ac7bce3f72b16c584a42db8aa3c4a3c9e3c174194eab3dadd11682e71d8d11","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T22:56:53.007636Z","times_seen":9582,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":50,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlfinance.info/landing_page/Windows_11_desktop_screen_icons_202608030658.jpeg","fqdn":"wlfinance.info","domain":"wlfinance.info","tld":"info"},"ip":{"addr":"102.210.146.21","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"Kenya","country_code":"KE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wlfinance.info/","date":"2026-08-09T09:51:38.417Z","timestamp":1786269098417,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wlfinance.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 07:38:44 GMT","end":"Mon, 02 Nov 2026 07:38:43 GMT"},"fingerprint":{"sha1":"3A:06:BC:F1:14:6D:DA:3A:BC:C2:52:4B:26:E3:84:B3:FB:A8:31:80","sha256":"70:60:79:CB:73:C4:D3:2F:59:3D:61:CE:95:54:3F:31:3E:5E:F3:08:AF:3F:3F:4F:55:6E:83:87:C0:A8:EC:30"}}},"request":{"raw":"GET /landing_page/Windows_11_desktop_screen_icons_202608030658.jpeg HTTP/1.1\r\nHost: wlfinance.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlfinance.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 09:51:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1684358\r\nlast-modified: Tue, 04 Aug 2026 17:01:50 GMT\r\netag: \"6a721afe-19b386\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1684358,"size_decoded":1684589,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2752x1536, components 3","md5":"12fc8ff5b30effae9b47a8b2e9ca541d","sha1":"1516690bd03c1cfaebdd5af32cf6a065d96af3ae","sha256":"7ff0fce08994f4064208b88495c18e87154f1038a19c1ba0c76482d3e4885864","sha512":"d2580976eeddaff100a91c74cc728520126fb62d20f613be90a0259194ab4e84d498a0cfa1a7e391d3dc18c4505aca581ccb93e3cccb89253eefab53742ad2c3","ssdeep":"24576:x0bkj6aYdL7E2h/B4UFi9S+BeA+KHf3O9PqpjN3lXfEm0Dn5o:UXvFi9SAimN3lcmN","tlshash":"502533ed9abc11d4d52f94d8f0949a4963340331a7d8ea72d851adb8f9eefc8385023d","first_seen":"2026-08-09T09:51:20.034836Z","last_seen":"2026-08-09T09:52:14.22389Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":180,"receive":1075,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"wlfinance.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlfinance.info/bird.svg","fqdn":"wlfinance.info","domain":"wlfinance.info","tld":"info"},"ip":{"addr":"102.210.146.21","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"Kenya","country_code":"KE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wlfinance.info/","date":"2026-08-09T09:51:38.602Z","timestamp":1786269098602,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wlfinance.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 07:38:44 GMT","end":"Mon, 02 Nov 2026 07:38:43 GMT"},"fingerprint":{"sha1":"3A:06:BC:F1:14:6D:DA:3A:BC:C2:52:4B:26:E3:84:B3:FB:A8:31:80","sha256":"70:60:79:CB:73:C4:D3:2F:59:3D:61:CE:95:54:3F:31:3E:5E:F3:08:AF:3F:3F:4F:55:6E:83:87:C0:A8:EC:30"}}},"request":{"raw":"GET /bird.svg HTTP/1.1\r\nHost: wlfinance.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlfinance.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 09:51:36 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Aug 2026 17:01:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a721afc-8c7\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2247,"size_decoded":1446,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fcf1503f06940769f871542268f13bd0","sha1":"430a32d3eb9760ca56528c690e50b1f8bac6987a","sha256":"d9fe92632ebcf00e0abec79caa5712b3de1078164a367268b5912bf916154f9f","sha512":"68b4af8ab520ef5bdb805b2903ca5f4152ac4125a66ca37669e2cc8c17306c26ff6260978026826c98ebd5b4d09c35903f990e1d8fc298bbb4c7e159ccdb72db","ssdeep":"","tlshash":"434175e5e3f6d2cc9002ebf0d374a4a6b92f38fb3a96c895c3e02d5c991551e454a4d3","first_seen":"2026-08-09T09:51:20.043871Z","last_seen":"2026-08-09T09:52:14.227019Z","times_seen":2,"resource_available":false,"data":null}},"time_used":699,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":699,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"wlfinance.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlfinance.info/WLFI-AppInstaller.zip","fqdn":"wlfinance.info","domain":"wlfinance.info","tld":"info"},"ip":{"addr":"102.210.146.21","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"Kenya","country_code":"KE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-09T09:51:40.413Z","timestamp":1786269100413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wlfinance.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 07:38:44 GMT","end":"Mon, 02 Nov 2026 07:38:43 GMT"},"fingerprint":{"sha1":"3A:06:BC:F1:14:6D:DA:3A:BC:C2:52:4B:26:E3:84:B3:FB:A8:31:80","sha256":"70:60:79:CB:73:C4:D3:2F:59:3D:61:CE:95:54:3F:31:3E:5E:F3:08:AF:3F:3F:4F:55:6E:83:87:C0:A8:EC:30"}}},"request":{"raw":"GET /WLFI-AppInstaller.zip HTTP/1.1\r\nHost: wlfinance.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlfinance.info/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 09:51:38 GMT\r\ncontent-type: application/zip\r\ncontent-length: 1709210\r\nlast-modified: Thu, 06 Aug 2026 22:07:06 GMT\r\netag: \"6a75058a-1a149a\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1709210,"size_decoded":236,"mime_type":"application/zip","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","md5":"d454d3b54717ce191336cd18dc98bbea","sha1":"2f5c5e6359fdd7eb5840830eddee42200dcf4cfa","sha256":"65f16c00a9e5d797b45bf2f6d0e8a85200a18939c31c71fa70c32309b3754be2","sha512":"fefa873d240efb62b2a63a16051570d975544d1ffe59796ebc0f349ffc065dfe4fe9ad3713a4ea1f7eeb1df4fdce4f3e66500da6273727075e57a2b99dd6c852","ssdeep":"24576:rKN0JCv2cQdLNd6duDBBCHv0u1N4IliVwaBeAGeHD3arPqDBl3PXfyYq:GYd0ujFu1XiVwcMyl3PaYq","tlshash":"062533fc9bb61dd8a12bc489e9466f588375127247e8aa72cc82367cf0bf7c83415539","first_seen":"2026-08-09T09:51:20.046318Z","last_seen":"2026-08-09T09:52:14.22987Z","times_seen":2,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":184,"receive":364,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"wlfinance.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlfinance.info/","fqdn":"wlfinance.info","domain":"wlfinance.info","tld":"info"},"ip":{"addr":"102.210.146.21","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"Kenya","country_code":"KE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-09T09:51:36.878Z","timestamp":1786269096878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wlfinance.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 07:38:44 GMT","end":"Mon, 02 Nov 2026 07:38:43 GMT"},"fingerprint":{"sha1":"3A:06:BC:F1:14:6D:DA:3A:BC:C2:52:4B:26:E3:84:B3:FB:A8:31:80","sha256":"70:60:79:CB:73:C4:D3:2F:59:3D:61:CE:95:54:3F:31:3E:5E:F3:08:AF:3F:3F:4F:55:6E:83:87:C0:A8:EC:30"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wlfinance.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 09:51:35 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 07 Aug 2026 08:37:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a759952-8ff1\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36849,"size_decoded":15623,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1866), with CRLF, CR line terminators","md5":"ae28e7e0e8ccf0a1affe673d9cdad7bd","sha1":"4625745998a2511f9a01d708823ffbd71284173e","sha256":"f4bdf0ff80d9f700429470f38b93732b99323267aca8cfbb2638c46651884f09","sha512":"f4b29bf40e5f326e0de1be3d9e56ac98ff54d1977cf28f3bdf7f6e38483f093eb5e005bee4d608436ef9bbc42320cb5d7e68ad7f3a05646ed0aa47fefc856d50","ssdeep":"384:uqR3YeeG5JH/4ctJpfr08azRbT2+BT9Jd1D86wWvHR34OUzhAYR9rlYQHN9EABBr:BR3L5yKTxuRHdTxIVHJR+lG","tlshash":"d6f228ff97a522e1419183e17f0696bebf2f00bf77988640705c86692fe1d4c992b9c1","first_seen":"2026-08-09T09:51:20.04928Z","last_seen":"2026-08-09T09:52:14.232183Z","times_seen":2,"resource_available":false,"data":null}},"time_used":825,"timings":{"blocked":-1,"dns":108,"connect":176,"send":0,"wait":356,"receive":0,"ssl":185},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"wlfinance.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wlfinance.info/","date":"2026-08-09T09:51:38.150Z","timestamp":1786269098150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.2/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 09 Aug 2026 09:51:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18938\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Wed, 03 Apr 2024 02:35:32 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eN%2BHDJjXfoZ7BmTm0ogizUVFgHp4go%2FYC29If9lVlBu4K2CwjV2aoFfk0J2gBvSlrbwE48wUw3QT%2FlP34wTXKzA1Tt00SB9dYKNuEp2qFIDnXxdz0CbpA9TwWJYXPT690pZBwvGu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a285dd077fadc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":103009,"size_decoded":19929,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52282)","md5":"c325be79a5ecca85d68eb9e5b65a547a","sha1":"f2a96686228994a46961657df4c9405afec8e9c2","sha256":"5ceaaba22d75b58e04150311f596306562a3e595e27ed4b1dfa451b82dda9e50","sha512":"4a71f958af9b67180f1ece38b96217f8b2c9009f7fd8f90f299e508808fa4daf3ac3e7ec6f64e47267d1c955f7a419cc15c57ba103c9925f507af4825abdd6e8","ssdeep":"1536:t1MCMPMCMjMCM4MCMwMCM3sVM3709gbQZMfjSFOlyPG9dXgRM0J:W709gUGGFwyPG9dwRM0J","tlshash":"16a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2024-04-05T18:44:57Z","last_seen":"2026-08-11T22:34:59.713607Z","times_seen":12616,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":2,"connect":7,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlfinance.info/styles.css","fqdn":"wlfinance.info","domain":"wlfinance.info","tld":"info"},"ip":{"addr":"102.210.146.21","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"Kenya","country_code":"KE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wlfinance.info/","date":"2026-08-09T09:51:38.152Z","timestamp":1786269098152,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wlfinance.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 07:38:44 GMT","end":"Mon, 02 Nov 2026 07:38:43 GMT"},"fingerprint":{"sha1":"3A:06:BC:F1:14:6D:DA:3A:BC:C2:52:4B:26:E3:84:B3:FB:A8:31:80","sha256":"70:60:79:CB:73:C4:D3:2F:59:3D:61:CE:95:54:3F:31:3E:5E:F3:08:AF:3F:3F:4F:55:6E:83:87:C0:A8:EC:30"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: wlfinance.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlfinance.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 09:51:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 17:01:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a721afe-2eea\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12010,"size_decoded":3657,"mime_type":"text/css","magic":"ASCII text, with very long lines (301)","md5":"e4f2776fbb23df73d67b6275d6fb6fc0","sha1":"056f0a388951259c13c50c8b36a5d705f746dc18","sha256":"edd7c98f6d37312e819f5f4fcb45ac8c7f834b2c00fa7834fe2b7a713cdacaa6","sha512":"27d1cbe43263b80b497ee969441f372ea43c4a337e67ebcb7c5c205d111a324286f37e452773ddc143336f88bb46e896578f65ae5af4b281c4f589ecf1419402","ssdeep":"192:IIADr8iwGfpXmLLBfWgBzxUBfBMwj/iTV/nzSr4EgPwMaOqeHeaNQfNGLSwjav79:rA1qOlOU","tlshash":"634249586eb344846d1781a86bfb875873bc90439d09c96d7bcf2284cf8d3e8b551f88","first_seen":"2026-08-09T09:51:20.051642Z","last_seen":"2026-08-09T09:52:14.235404Z","times_seen":2,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"wlfinance.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wlfinance.info/","date":"2026-08-09T09:51:38.390Z","timestamp":1786269098390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://wlfinance.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 02 Aug 2026 10:34:00 GMT\r\nexpires: Mon, 02 Aug 2027 10:34:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 602258\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":72964,"size_decoded":73777,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-11T22:47:10.069572Z","times_seen":31791,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":19,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wlfinance.info/","date":"2026-08-09T09:51:38.392Z","timestamp":1786269098392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://wlfinance.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 02 Aug 2026 10:34:00 GMT\r\nexpires: Mon, 02 Aug 2027 10:34:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 602258\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":72964,"size_decoded":73777,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-11T22:47:10.069572Z","times_seen":31791,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":23,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:opsz,wght@14..32,400;14..32,500;14..32,600;14..32,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wlfinance.info/","date":"2026-08-09T09:51:38.149Z","timestamp":1786269098149,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Inter:opsz,wght@14..32,400;14..32,500;14..32,600;14..32,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlfinance.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 09 Aug 2026 09:51:38 GMT\r\ndate: Sun, 09 Aug 2026 09:51:38 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9632,"size_decoded":1424,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c2465322fe6108a78bbef5da8d939124","sha1":"816122f9425fb10fba68998429c93fb16992e36c","sha256":"d8ae88b958facdc4b6b9e73922f8b9d9472e4938a4be328d3a9e70ba820bc262","sha512":"1bbbaa9885a0ad5188b4472b0388fc58c5e7345d2b1a24dc82196fea54ed15837747b40803e4810a86231cb55e40e98a4145d2dcd3cfc1b39941270473e693bf","ssdeep":"192:93N1aj34wfDg3OWJj3/Xf8Z3rTQj3i6flq3EM3j3RpfGN:BskLaiY52","tlshash":"54129c91006be500af431dda23df7e365d8e15566082d57e9bfe1cc55ceed22032878d","first_seen":"2026-01-28T07:57:49.134233Z","last_seen":"2026-08-11T14:47:42.166752Z","times_seen":403,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":33,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlfinance.info/script.js","fqdn":"wlfinance.info","domain":"wlfinance.info","tld":"info"},"ip":{"addr":"102.210.146.21","port":443,"asn":329184,"as":"Host-Africa-AS2","country":"Kenya","country_code":"KE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wlfinance.info/","date":"2026-08-09T09:51:38.153Z","timestamp":1786269098153,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wlfinance.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 07:38:44 GMT","end":"Mon, 02 Nov 2026 07:38:43 GMT"},"fingerprint":{"sha1":"3A:06:BC:F1:14:6D:DA:3A:BC:C2:52:4B:26:E3:84:B3:FB:A8:31:80","sha256":"70:60:79:CB:73:C4:D3:2F:59:3D:61:CE:95:54:3F:31:3E:5E:F3:08:AF:3F:3F:4F:55:6E:83:87:C0:A8:EC:30"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: wlfinance.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlfinance.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 09:51:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Aug 2026 20:40:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a74f158-ff1\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4081,"size_decoded":1677,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"c7f2ed90055e9dd9c377afeec1a004e5","sha1":"63a6cc2de4a8e37acf1615f895e246390baa647c","sha256":"8edb4c17348d8b2953c91053749ea2255aa4736c450ea14a7601dfe06e736a3e","sha512":"2723cdbccfbbbce1bce8baf79d2378b06748bd27094794f458207cb7998fdff32b088d97ee85e059b8c7d5db7dee6c105fe0483b8b8e9bc88df809c0369c0f99","ssdeep":"","tlshash":"4081331a323244754673a3be9bba875dfb3610332001c16a3fbc460d5f72949a462fde","first_seen":"2026-08-09T09:51:20.041316Z","last_seen":"2026-08-09T09:52:14.237697Z","times_seen":2,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"wlfinance.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}