{"report_id":"c44f2e59-0521-4d31-97b8-21a03a5aa099","version":0,"status":"done","tags":[],"date":"2026-09-05T04:49:42Z","url":{"schema":"http","addr":"www.liftnoble.info/","fqdn":"www.liftnoble.info","domain":"liftnoble.info","tld":"info"},"ip":{"addr":"207.207.210.229","port":0,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"liftnoble.info/","fqdn":"liftnoble.info","domain":"liftnoble.info","tld":"info"},"title":"porkbun.com | domain for sale","dom":{"size":2422,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (328)","md5":"88250e40862c14db637e22729f80da73","sha1":"173941e5490ce1e8090da7e3cc56488cd1d2013b","sha256":"6ef24f692c698edff57e05de9633338997e72a3c36239b73e91ded0430eadc39","sha512":"e0d3a380f1fd4b86fd8c85a00c174fe92e7ca292db70a5f3335b19bbe5c8ed731bef12c0774126a435e78a08eff45c3188c6221b222ea101e61d2e4742f0fc7e","ssdeep":"","tlshash":"7c419683bea0a4635143529c75e6f90dd9a65047da69e445b4ec83a67fc0fc3cc53448","dom_hash":"domhash2ed800ab9716ba1627e7980915419e23","first_seen":"2026-09-05T04:49:48.173141Z","last_seen":"2026-09-05T04:49:48.173141Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.liftnoble.info/","fqdn":"www.liftnoble.info","domain":"liftnoble.info","tld":"info"},"ip":{"addr":"207.207.210.229","port":0,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-10T04:49:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"liftnoble.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.liftnoble.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"liftnoble.info","ip":{"addr":"207.207.210.107","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-05T04:49:44.031123Z","last_seen":"2026-09-05T04:49:44.031123Z","alert_count":4,"request_count":4,"received_data":59987,"sent_data":2470,"comment":"","tags":null,"fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-30T22:35:21.728174Z","alert_count":0,"request_count":2,"received_data":844026,"sent_data":972,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.liftnoble.info","ip":{"addr":"207.207.210.107","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-05T04:49:44.029865Z","last_seen":"2026-09-05T04:49:44.029865Z","alert_count":1,"request_count":1,"received_data":199,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":6807,"first_seen":"2014-06-18T00:37:31Z","last_seen":"2026-08-31T08:36:53.430767Z","alert_count":0,"request_count":1,"received_data":122107,"sent_data":516,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"liftnoble.info/","fqdn":"liftnoble.info","domain":"liftnoble.info","tld":"info"},"ip":{"addr":"207.207.210.107","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"355c4a0ab78874c25531b2da9c419cba","sha1":"28d2b1c498f5c8980e16f7b6ad22e684dda30c17","sha256":"e9e9d7202721776c8fa9be294fa07725cdb0d1b164435934ebd1e5864c5a2236","sha512":"be8749a2bd81bb8d36acddb60a98fb71e2f01953cc5c75ecfeb18d0a3d409f8473b460c0c0fd83f1c0908cef50a572ffe423082fb000ab0e1ec67c52ecf28466","ssdeep":"","tlshash":"9fd02b88563dacb791df1b4ca76fbd06e12a2280d0b09a328e099e44ae28f079685c10","size":279,"data":"","first_seen":"2026-09-05T04:49:48.191583Z","last_seen":"2026-09-05T04:49:48.191583Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-59154711-35","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1af988f434cbf4e484df4c378032ce92","sha1":"58a135f15d1ca1e011013b310957383afe64c812","sha256":"ab35b219dbd15c22e8b28524bc6dec2c23aae50e87bdce55bfe24bba2529f1e0","sha512":"e67e878e781ea56ace83186d0b984bee467a8c1fcadf06706c953ca53e22760e6bab1c5dfde8a6324e5357093c13047bf48c33847beb1a993f1a193e7e8b96ce","ssdeep":"6144:7H1lHP7fo78xfPZKc3DR/dEpv3ygJOuMlxNwp:77s6uOBxk","tlshash":"ad8409ccb3d6746283a3b574503f018bb27a6992b84cc898f286dcd42e3465a5277f7d","size":380868,"data":"","first_seen":"2026-09-05T04:49:48.187344Z","last_seen":"2026-09-05T04:49:48.187344Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d39a8679ed70005ee063ea62886141a2","sha1":"52b556cb7bdbe59b9b1ab9415ff905b561b8399e","sha256":"b33ed8fd08f8cf0138f219167d4bb5817f1b09c1d9ac7431e833899ecfff40f1","sha512":"c65e2fe579412ea8ef38d29185f47dec1f4fb871ec28767c104821f1c3368793c4ff577ed58971d27a9bbac97fee734093766954f7e9d2fc0ff1cb687a0ab977","ssdeep":"96:A1VdZYqhPnjpsx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBf2PfCHiUr3:AXdZYqNjpm4yPqSMbqaQGL2QfdDayCZa","tlshash":"3ca1ca9929fb50210233b1bd1bafa918b63895236208dd61bd8c9264af94437d7f1bc9","size":4693,"data":"","first_seen":"2026-05-25T14:46:35.360433Z","last_seen":"2026-09-05T06:09:59.994035Z","times_seen":91249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-WZSBC7FK9S\u0026cx=c\u0026gtm=4e6921","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8bc5c335df32c0fd60913b8900cceb9","sha1":"faf29bb0a828728b4441d4f38da5306d8de6ac22","sha256":"915fe7a89d18d4b93a3e778ca2d5201ee774e26b7ca089a4d79995b38621c0fc","sha512":"86219efbd3a7a348c42e7c10d8986fdf14901e5e7cbaea2657829fcacc4993049df0fba42cea40ba280bef9c253b30ae4674bf411c65cb292f86e489806ec7a3","ssdeep":"6144:PkH1lhNPZfKXr3uNfDZyc3DR/dEpv3ygWWHQMleG7aTTp:uhZeCxbWHneiM","tlshash":"98a418cd73c674229392f678903f018bb67a29a2b44cc899f289dcd42d3469a5177f7c","size":461924,"data":"","first_seen":"2026-09-05T04:49:48.182822Z","last_seen":"2026-09-05T04:49:48.182822Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9}]},"http":[{"url":{"schema":"https","addr":"liftnoble.info/","fqdn":"liftnoble.info","domain":"liftnoble.info","tld":"info"},"ip":{"addr":"207.207.210.107","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T04:49:10.010Z","timestamp":1788583750010,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liftnoble.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Sep 2026 01:28:19 GMT","end":"Mon, 30 Nov 2026 01:28:18 GMT"},"fingerprint":{"sha1":"05:71:39:2B:FC:3C:01:FC:09:17:A7:65:5D:CB:66:F1:B2:CE:FE:E8","sha256":"82:02:83:07:04:29:84:8F:2F:42:57:59:29:11:E2:9A:D1:24:D1:7A:B4:9F:CD:F0:2A:8C:61:8D:72:80:5A:48"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: liftnoble.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sat, 05 Sep 2026 04:49:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: AWSALB=MX0iaavDdCiefkTrjKx2/IeCyh+OmgzhcsnAP8inchBq9KyxnRBR70ABQJrmI+if+3RR90di9fqNuBKwkaWNZliAzs2BFUcl5c3fBsz0ILtZQAxp6jlbdBwq1jYW; Expires=Sat, 12 Sep 2026 04:49:10 GMT; Path=/\nAWSALBCORS=MX0iaavDdCiefkTrjKx2/IeCyh+OmgzhcsnAP8inchBq9KyxnRBR70ABQJrmI+if+3RR90di9fqNuBKwkaWNZliAzs2BFUcl5c3fBsz0ILtZQAxp6jlbdBwq1jYW; Expires=Sat, 12 Sep 2026 04:49:10 GMT; Path=/; SameSite=None\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nx-cache: BYPASS\r\nx-service: pixie-default\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"AWSALB","value":"MX0iaavDdCiefkTrjKx2/IeCyh+OmgzhcsnAP8inchBq9KyxnRBR70ABQJrmI+if+3RR90di9fqNuBKwkaWNZliAzs2BFUcl5c3fBsz0ILtZQAxp6jlbdBwq1jYW","quoted":false,"path":"/","expires":"2026-09-12T04:49:10Z","raw_expires":"Sat, 12 Sep 2026 04:49:10 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"AWSALB=MX0iaavDdCiefkTrjKx2/IeCyh+OmgzhcsnAP8inchBq9KyxnRBR70ABQJrmI+if+3RR90di9fqNuBKwkaWNZliAzs2BFUcl5c3fBsz0ILtZQAxp6jlbdBwq1jYW; Expires=Sat, 12 Sep 2026 04:49:10 GMT; Path=/"},{"name":"AWSALBCORS","value":"MX0iaavDdCiefkTrjKx2/IeCyh+OmgzhcsnAP8inchBq9KyxnRBR70ABQJrmI+if+3RR90di9fqNuBKwkaWNZliAzs2BFUcl5c3fBsz0ILtZQAxp6jlbdBwq1jYW","quoted":false,"path":"/","expires":"2026-09-12T04:49:10Z","raw_expires":"Sat, 12 Sep 2026 04:49:10 GMT","secure":false,"http_only":false,"same_site":"None","partitioned":false,"raw":"AWSALBCORS=MX0iaavDdCiefkTrjKx2/IeCyh+OmgzhcsnAP8inchBq9KyxnRBR70ABQJrmI+if+3RR90di9fqNuBKwkaWNZliAzs2BFUcl5c3fBsz0ILtZQAxp6jlbdBwq1jYW; Expires=Sat, 12 Sep 2026 04:49:10 GMT; Path=/; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2202,"size_decoded":1791,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"8e2a42e0325dd2283f9a3fb5a38a77bb","sha1":"0ecc227ae49d6395f705d3aabf49e8fee7868596","sha256":"632bdacbd0b00713ce23f6df240e0ea3cdc9b3dbac2c5d49154a99f01289965a","sha512":"df1ffdb9f8f599c3a88ba577ad7f73dc58ff48707add1f099092dbc9c0f1b2a2a015c8598a97fca9f1d8b8563ed122822f789065e2b261a408f6caa6c30a7bcc","ssdeep":"","tlshash":"c941a742faa064735243435c79d6f90edde29147da6ea445b4dc87a6bfc0f83cca3508","first_seen":"2026-09-05T04:49:48.17662Z","last_seen":"2026-09-05T04:49:48.17662Z","times_seen":1,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":0,"dns":6,"connect":177,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"liftnoble.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"liftnoble.info/css/all.css","fqdn":"liftnoble.info","domain":"liftnoble.info","tld":"info"},"ip":{"addr":"207.207.210.107","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://liftnoble.info/","date":"2026-09-05T04:49:10.583Z","timestamp":1788583750583,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liftnoble.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Sep 2026 01:28:19 GMT","end":"Mon, 30 Nov 2026 01:28:18 GMT"},"fingerprint":{"sha1":"05:71:39:2B:FC:3C:01:FC:09:17:A7:65:5D:CB:66:F1:B2:CE:FE:E8","sha256":"82:02:83:07:04:29:84:8F:2F:42:57:59:29:11:E2:9A:D1:24:D1:7A:B4:9F:CD:F0:2A:8C:61:8D:72:80:5A:48"}}},"request":{"raw":"GET /css/all.css HTTP/1.1\r\nHost: liftnoble.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://liftnoble.info/\r\nCookie: AWSALB=MX0iaavDdCiefkTrjKx2/IeCyh+OmgzhcsnAP8inchBq9KyxnRBR70ABQJrmI+if+3RR90di9fqNuBKwkaWNZliAzs2BFUcl5c3fBsz0ILtZQAxp6jlbdBwq1jYW\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sat, 05 Sep 2026 04:49:10 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nset-cookie: AWSALB=gBfNi1RKT9MbxzQ6kWVCMizteWCt3lxQymEOK29S0tFY/9PXpC9gsbzp+gI67lm2vWFbabUKBOrdz3Xgpt2IuK5ikH7KW9/BjfK20NxfXVxnHY1HGFnG+fU3AaPl; Expires=Sat, 12 Sep 2026 04:49:10 GMT; Path=/\nAWSALBCORS=gBfNi1RKT9MbxzQ6kWVCMizteWCt3lxQymEOK29S0tFY/9PXpC9gsbzp+gI67lm2vWFbabUKBOrdz3Xgpt2IuK5ikH7KW9/BjfK20NxfXVxnHY1HGFnG+fU3AaPl; Expires=Sat, 12 Sep 2026 04:49:10 GMT; Path=/; SameSite=None\r\nlast-modified: Fri, 30 Sep 2022 23:50:30 GMT\r\netag: W/\"633780c6-2f8\"\r\nx-cache: BYPASS\r\nx-service: pixie-default\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"AWSALB","value":"gBfNi1RKT9MbxzQ6kWVCMizteWCt3lxQymEOK29S0tFY/9PXpC9gsbzp+gI67lm2vWFbabUKBOrdz3Xgpt2IuK5ikH7KW9/BjfK20NxfXVxnHY1HGFnG+fU3AaPl","quoted":false,"path":"/","expires":"2026-09-12T04:49:10Z","raw_expires":"Sat, 12 Sep 2026 04:49:10 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"AWSALB=gBfNi1RKT9MbxzQ6kWVCMizteWCt3lxQymEOK29S0tFY/9PXpC9gsbzp+gI67lm2vWFbabUKBOrdz3Xgpt2IuK5ikH7KW9/BjfK20NxfXVxnHY1HGFnG+fU3AaPl; Expires=Sat, 12 Sep 2026 04:49:10 GMT; Path=/"},{"name":"AWSALBCORS","value":"gBfNi1RKT9MbxzQ6kWVCMizteWCt3lxQymEOK29S0tFY/9PXpC9gsbzp+gI67lm2vWFbabUKBOrdz3Xgpt2IuK5ikH7KW9/BjfK20NxfXVxnHY1HGFnG+fU3AaPl","quoted":false,"path":"/","expires":"2026-09-12T04:49:10Z","raw_expires":"Sat, 12 Sep 2026 04:49:10 GMT","secure":false,"http_only":false,"same_site":"None","partitioned":false,"raw":"AWSALBCORS=gBfNi1RKT9MbxzQ6kWVCMizteWCt3lxQymEOK29S0tFY/9PXpC9gsbzp+gI67lm2vWFbabUKBOrdz3Xgpt2IuK5ikH7KW9/BjfK20NxfXVxnHY1HGFnG+fU3AaPl; Expires=Sat, 12 Sep 2026 04:49:10 GMT; Path=/; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":760,"size_decoded":912,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"471455653355f8522415709a7c044824","sha1":"b6ffda6c2a7274c8e1e0b8d968bca4388aa81035","sha256":"8f1a07a9d25f8024707864cc12f5651aff384619400f5a4972edab0ea3bb8ff1","sha512":"302d14eb62d78374b8b695e90f442aeedee6da9da53c02cc964d651a0d51e88c744a004da84f9beacf1a89105f6d9fa1c02e6ca023486a2854d2963eafb00358","ssdeep":"","tlshash":"6a011ac0f2a356b2372f521a63cd997e63e5a087cc64a618b6dc43537f482e9e7600c8","first_seen":"2023-04-08T09:44:11Z","last_seen":"2026-09-05T04:49:48.179703Z","times_seen":9904,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"liftnoble.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"liftnoble.info/images/_money.svg","fqdn":"liftnoble.info","domain":"liftnoble.info","tld":"info"},"ip":{"addr":"207.207.210.107","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://liftnoble.info/","date":"2026-09-05T04:49:10.594Z","timestamp":1788583750594,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liftnoble.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Sep 2026 01:28:19 GMT","end":"Mon, 30 Nov 2026 01:28:18 GMT"},"fingerprint":{"sha1":"05:71:39:2B:FC:3C:01:FC:09:17:A7:65:5D:CB:66:F1:B2:CE:FE:E8","sha256":"82:02:83:07:04:29:84:8F:2F:42:57:59:29:11:E2:9A:D1:24:D1:7A:B4:9F:CD:F0:2A:8C:61:8D:72:80:5A:48"}}},"request":{"raw":"GET /images/_money.svg HTTP/1.1\r\nHost: liftnoble.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://liftnoble.info/\r\nCookie: AWSALB=MX0iaavDdCiefkTrjKx2/IeCyh+OmgzhcsnAP8inchBq9KyxnRBR70ABQJrmI+if+3RR90di9fqNuBKwkaWNZliAzs2BFUcl5c3fBsz0ILtZQAxp6jlbdBwq1jYW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sat, 05 Sep 2026 04:49:10 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 53270\r\nset-cookie: AWSALB=yz4hFjUO4ti1oMgr6k00rP3JfVOFQUSMQE6rX8vadyYAfeV7D9iPsbKnOmevR9GpMtjtwcRCRgk6a9kt11n0pX63kaxG5AYxa1v0KfpOcue9GCvHt0A7sKMPbj1U; Expires=Sat, 12 Sep 2026 04:49:10 GMT; Path=/\nAWSALBCORS=yz4hFjUO4ti1oMgr6k00rP3JfVOFQUSMQE6rX8vadyYAfeV7D9iPsbKnOmevR9GpMtjtwcRCRgk6a9kt11n0pX63kaxG5AYxa1v0KfpOcue9GCvHt0A7sKMPbj1U; Expires=Sat, 12 Sep 2026 04:49:10 GMT; Path=/; SameSite=None\r\nlast-modified: Fri, 30 Sep 2022 23:50:30 GMT\r\netag: \"633780c6-d016\"\r\naccept-ranges: bytes\r\nx-cache: BYPASS\r\nx-service: pixie-default\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"AWSALB","value":"yz4hFjUO4ti1oMgr6k00rP3JfVOFQUSMQE6rX8vadyYAfeV7D9iPsbKnOmevR9GpMtjtwcRCRgk6a9kt11n0pX63kaxG5AYxa1v0KfpOcue9GCvHt0A7sKMPbj1U","quoted":false,"path":"/","expires":"2026-09-12T04:49:10Z","raw_expires":"Sat, 12 Sep 2026 04:49:10 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"AWSALB=yz4hFjUO4ti1oMgr6k00rP3JfVOFQUSMQE6rX8vadyYAfeV7D9iPsbKnOmevR9GpMtjtwcRCRgk6a9kt11n0pX63kaxG5AYxa1v0KfpOcue9GCvHt0A7sKMPbj1U; Expires=Sat, 12 Sep 2026 04:49:10 GMT; Path=/"},{"name":"AWSALBCORS","value":"yz4hFjUO4ti1oMgr6k00rP3JfVOFQUSMQE6rX8vadyYAfeV7D9iPsbKnOmevR9GpMtjtwcRCRgk6a9kt11n0pX63kaxG5AYxa1v0KfpOcue9GCvHt0A7sKMPbj1U","quoted":false,"path":"/","expires":"2026-09-12T04:49:10Z","raw_expires":"Sat, 12 Sep 2026 04:49:10 GMT","secure":false,"http_only":false,"same_site":"None","partitioned":false,"raw":"AWSALBCORS=yz4hFjUO4ti1oMgr6k00rP3JfVOFQUSMQE6rX8vadyYAfeV7D9iPsbKnOmevR9GpMtjtwcRCRgk6a9kt11n0pX63kaxG5AYxa1v0KfpOcue9GCvHt0A7sKMPbj1U; Expires=Sat, 12 Sep 2026 04:49:10 GMT; Path=/; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}],"data":{"size":53270,"size_decoded":53937,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c3a19b10280bd6dff146ccfa5d0cb80d","sha1":"206955a825263456a66b7204eaf04e266786074d","sha256":"ba2cdf02ba8b2102ad83083a871c3dd4802c972bc0e1588849ed85ba78d43f72","sha512":"db615345c219975d04139c2e9ad9818994ea05b289fdacfece40791cbf4d414c1925ed67b8a5e461f17dbf39c7691c581061372940a355b9e8fdeba71c7e98b8","ssdeep":"1536:ePi977E63P7EuJ+c5jis0mYb+YYoY6UYiY90aoOgzwoUMYGCcDyl9JMp+Rwi+MBb:Y","tlshash":"5833bebe03aa567ffc422fd8a6ce619972e1e483f34ac0d99b533027dd19c5b1a34605","first_seen":"2023-05-04T01:00:26Z","last_seen":"2026-09-05T04:49:48.181519Z","times_seen":755,"resource_available":true,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"liftnoble.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-WZSBC7FK9S\u0026cx=c\u0026gtm=4e6921","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://liftnoble.info/","date":"2026-09-05T04:49:10.808Z","timestamp":1788583750808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-WZSBC7FK9S\u0026cx=c\u0026gtm=4e6921 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://liftnoble.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 05 Sep 2026 04:49:10 GMT\r\nexpires: Sat, 05 Sep 2026 04:49:10 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 159139\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":461924,"size_decoded":159723,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"a8bc5c335df32c0fd60913b8900cceb9","sha1":"faf29bb0a828728b4441d4f38da5306d8de6ac22","sha256":"915fe7a89d18d4b93a3e778ca2d5201ee774e26b7ca089a4d79995b38621c0fc","sha512":"86219efbd3a7a348c42e7c10d8986fdf14901e5e7cbaea2657829fcacc4993049df0fba42cea40ba280bef9c253b30ae4674bf411c65cb292f86e489806ec7a3","ssdeep":"6144:PkH1lhNPZfKXr3uNfDZyc3DR/dEpv3ygWWHQMleG7aTTp:uhZeCxbWHneiM","tlshash":"98a418cd73c674229392f678903f018bb67a29a2b44cc899f289dcd42d3469a5177f7c","first_seen":"2026-09-05T04:49:48.182822Z","last_seen":"2026-09-05T04:49:48.182822Z","times_seen":1,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.liftnoble.info/","fqdn":"www.liftnoble.info","domain":"liftnoble.info","tld":"info"},"ip":{"addr":"207.207.210.107","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T04:49:09.293Z","timestamp":1788583749293,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liftnoble.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Sep 2026 01:28:19 GMT","end":"Mon, 30 Nov 2026 01:28:18 GMT"},"fingerprint":{"sha1":"05:71:39:2B:FC:3C:01:FC:09:17:A7:65:5D:CB:66:F1:B2:CE:FE:E8","sha256":"82:02:83:07:04:29:84:8F:2F:42:57:59:29:11:E2:9A:D1:24:D1:7A:B4:9F:CD:F0:2A:8C:61:8D:72:80:5A:48"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.liftnoble.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: openresty\r\ndate: Sat, 05 Sep 2026 04:49:09 GMT\r\ncontent-type: text/html\r\ncontent-length: 166\r\nlocation: http://liftnoble.info\r\nx-frame-options: sameorigin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-05T05:58:36.054699Z","times_seen":18287339,"resource_available":true,"data":null}},"time_used":708,"timings":{"blocked":0,"dns":160,"connect":178,"send":0,"wait":177,"receive":0,"ssl":192},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.liftnoble.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-59154711-35","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://liftnoble.info/","date":"2026-09-05T04:49:10.580Z","timestamp":1788583750580,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=UA-59154711-35 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://liftnoble.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 05 Sep 2026 04:49:10 GMT\r\nexpires: Sat, 05 Sep 2026 04:49:10 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 05 Sep 2026 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 134379\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":380868,"size_decoded":135029,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4939)","md5":"1af988f434cbf4e484df4c378032ce92","sha1":"58a135f15d1ca1e011013b310957383afe64c812","sha256":"ab35b219dbd15c22e8b28524bc6dec2c23aae50e87bdce55bfe24bba2529f1e0","sha512":"e67e878e781ea56ace83186d0b984bee467a8c1fcadf06706c953ca53e22760e6bab1c5dfde8a6324e5357093c13047bf48c33847beb1a993f1a193e7e8b96ce","ssdeep":"6144:7H1lHP7fo78xfPZKc3DR/dEpv3ygJOuMlxNwp:77s6uOBxk","tlshash":"ad8409ccb3d6746283a3b574503f018bb27a6992b84cc898f286dcd42e3465a5277f7d","first_seen":"2026-09-05T04:49:48.187344Z","last_seen":"2026-09-05T04:49:48.187344Z","times_seen":1,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":38,"receive":52,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://liftnoble.info/","date":"2026-09-05T04:49:10.581Z","timestamp":1788583750581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:52:42 GMT","end":"Fri, 27 Nov 2026 07:52:32 GMT"},"fingerprint":{"sha1":"F6:58:F9:2B:5B:29:DD:D1:99:3E:40:DB:56:17:DC:42:4E:6A:E9:05","sha256":"F3:FF:92:2E:B0:B0:F9:26:38:04:80:FE:73:FB:B7:4A:8E:03:4E:26:D7:44:86:CA:E3:D0:83:59:81:32:88:A3"}}},"request":{"raw":"GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://liftnoble.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://liftnoble.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 04:49:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"ec3bb52a00e176a7181d454dffaea219\"\r\nlast-modified: Mon, 25 Jan 2021 22:03:59 GMT\r\ncdn-cachedat: 08/01/2025 15:36:41\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1077\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: a68280f4c062164889a15f4afd8569e4\r\ncdn-cache: HIT\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3629b193f17b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121200,"size_decoded":21159,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65371)","md5":"ec3bb52a00e176a7181d454dffaea219","sha1":"6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68","sha256":"f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c","sha512":"e8c5daf01eae68ed7c1e277a6e544c7ad108a0fa877fb531d6d9f2210769b7da88e4e002c7b0be3b72154ebf7cbf01a795c8342ce2dad368bd6351e956195f8b","ssdeep":"768:Vy3Gxw/Vc/QWlJxtQOIuiHlq5mzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:nw/a1fIuiHlq5mN8lDbNmPbh","tlshash":"2cc3c7a0f21031ea7333c55a75d0ed872219a153e56a4fb7f22f25d88f845ca1673f1a","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-09-05T06:25:12.505233Z","times_seen":74417,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":3,"connect":12,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"liftnoble.info/favicon.ico","fqdn":"liftnoble.info","domain":"liftnoble.info","tld":"info"},"ip":{"addr":"207.207.210.107","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://liftnoble.info/","date":"2026-09-05T04:49:11.120Z","timestamp":1788583751120,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liftnoble.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Sep 2026 01:28:19 GMT","end":"Mon, 30 Nov 2026 01:28:18 GMT"},"fingerprint":{"sha1":"05:71:39:2B:FC:3C:01:FC:09:17:A7:65:5D:CB:66:F1:B2:CE:FE:E8","sha256":"82:02:83:07:04:29:84:8F:2F:42:57:59:29:11:E2:9A:D1:24:D1:7A:B4:9F:CD:F0:2A:8C:61:8D:72:80:5A:48"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: liftnoble.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://liftnoble.info/\r\nCookie: AWSALB=yz4hFjUO4ti1oMgr6k00rP3JfVOFQUSMQE6rX8vadyYAfeV7D9iPsbKnOmevR9GpMtjtwcRCRgk6a9kt11n0pX63kaxG5AYxa1v0KfpOcue9GCvHt0A7sKMPbj1U; _ga_WZSBC7FK9S=GS2.1.s1788583751$o1$g0$t1788583751$j60$l0$h0; _ga=GA1.1.789336335.1788583751\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sat, 05 Sep 2026 04:49:11 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1150\r\nset-cookie: AWSALB=l8BXg77pssyF+A0E+SV3uUBWcC1yyKi5Ga11IJt7rTALF/M3JPBzabBqr1H10D2qwAqUko6CWdIoUIuaCp8fYQKM+rbYRcp1mqgdKvLVX+oIevnFisuDIpDQYXla; Expires=Sat, 12 Sep 2026 04:49:11 GMT; Path=/\nAWSALBCORS=l8BXg77pssyF+A0E+SV3uUBWcC1yyKi5Ga11IJt7rTALF/M3JPBzabBqr1H10D2qwAqUko6CWdIoUIuaCp8fYQKM+rbYRcp1mqgdKvLVX+oIevnFisuDIpDQYXla; Expires=Sat, 12 Sep 2026 04:49:11 GMT; Path=/; SameSite=None\r\nlast-modified: Wed, 15 Sep 2021 16:58:59 GMT\r\netag: \"61422653-47e\"\r\naccept-ranges: bytes\r\nx-cache: BYPASS\r\nx-service: pixie-default\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"AWSALB","value":"l8BXg77pssyF+A0E+SV3uUBWcC1yyKi5Ga11IJt7rTALF/M3JPBzabBqr1H10D2qwAqUko6CWdIoUIuaCp8fYQKM+rbYRcp1mqgdKvLVX+oIevnFisuDIpDQYXla","quoted":false,"path":"/","expires":"2026-09-12T04:49:11Z","raw_expires":"Sat, 12 Sep 2026 04:49:11 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"AWSALB=l8BXg77pssyF+A0E+SV3uUBWcC1yyKi5Ga11IJt7rTALF/M3JPBzabBqr1H10D2qwAqUko6CWdIoUIuaCp8fYQKM+rbYRcp1mqgdKvLVX+oIevnFisuDIpDQYXla; Expires=Sat, 12 Sep 2026 04:49:11 GMT; Path=/"},{"name":"AWSALBCORS","value":"l8BXg77pssyF+A0E+SV3uUBWcC1yyKi5Ga11IJt7rTALF/M3JPBzabBqr1H10D2qwAqUko6CWdIoUIuaCp8fYQKM+rbYRcp1mqgdKvLVX+oIevnFisuDIpDQYXla","quoted":false,"path":"/","expires":"2026-09-12T04:49:11Z","raw_expires":"Sat, 12 Sep 2026 04:49:11 GMT","secure":false,"http_only":false,"same_site":"None","partitioned":false,"raw":"AWSALBCORS=l8BXg77pssyF+A0E+SV3uUBWcC1yyKi5Ga11IJt7rTALF/M3JPBzabBqr1H10D2qwAqUko6CWdIoUIuaCp8fYQKM+rbYRcp1mqgdKvLVX+oIevnFisuDIpDQYXla; Expires=Sat, 12 Sep 2026 04:49:11 GMT; Path=/; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}],"data":{"size":1150,"size_decoded":1814,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"fbe9e8b65fbb503a7aea9722b01e630c","sha1":"5902b9a47b0a21b6180ee9075a89139887988394","sha256":"db897943d379d0ec62705f42a980896fc936de5ed8a9c65dea59790aa915c37a","sha512":"c164360898e0a712e53c4637ed378b9f8e1b5856754f6eaefbeb340fe16e33b79d7c6dd77d645d2037a10fa82d5d2be80bc6a3ae2210b239079407f48d9f35be","ssdeep":"","tlshash":"ac21b501a5a323edf8e07e32093e6e47105aad7588a06ffa9813365f49734e65d4107f","first_seen":"2023-05-04T01:00:26Z","last_seen":"2026-09-05T04:49:48.1906Z","times_seen":11514,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"liftnoble.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}