{"report_id":"cf1c5a44-d5b3-4593-814f-f5a0b9e6297f","version":0,"status":"done","tags":[],"date":"2026-08-25T19:34:54Z","url":{"schema":"https","addr":"wethenorthurl.com/","fqdn":"wethenorthurl.com","domain":"wethenorthurl.com","tld":"com"},"ip":{"addr":"104.21.52.70","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"wethenorthurl.com/","fqdn":"wethenorthurl.com","domain":"wethenorthurl.com","tld":"com"},"title":"We The North Market | Verified Darknet Links \u0026 Access","dom":{"size":54902,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (575)","md5":"b1f006ad3d484d61e83c523f8c89b9fa","sha1":"e25683a38313dfdf86a0d3f808afeabf9c005697","sha256":"3ca6310c4945792ed586fb34d501b63b0a10763bf2251d158a35b9a95b8508a0","sha512":"c618bbe6874114430af2bed66b5862990655f7aae68ec3ee79bd025e592b4e363ba2f965a574d1e20b6c605979f5108f00b0a7a356ae1da2c9b62c8528ac2ea8","ssdeep":"768:oWia9C/FqTMmyDT3gZIIFUFLOB52yE8/bjjSKTSWxUCM2:7ivEGDTeIImFLOBxjjjSYfa+","tlshash":"0e33fa13b6e8163305730196b3b91f49bf20c42b0388a4687a9d824c6fd6975ef7b79d","dom_hash":"domhash980f69174b2427117c1ad33bdc373e4d","first_seen":"2026-08-25T19:30:31.78235Z","last_seen":"2026-08-25T19:34:55.68557Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"wethenorthurl.com/","fqdn":"wethenorthurl.com","domain":"wethenorthurl.com","tld":"com"},"ip":{"addr":"104.21.52.70","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-29T19:34:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"wethenorthurl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"wethenorthurl.com","ip":{"addr":"104.21.52.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-27","domain_rank":0,"first_seen":"2026-08-25T19:30:28.736597Z","last_seen":"2026-08-25T19:30:28.736597Z","alert_count":7,"request_count":7,"received_data":132410,"sent_data":3547,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wethenorthurl.com/fonts/ibm-plex-mono-bold.woff2","fqdn":"wethenorthurl.com","domain":"wethenorthurl.com","tld":"com"},"ip":{"addr":"104.21.52.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wethenorthurl.com/","date":"2026-08-25T19:34:27.005Z","timestamp":1787686467005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wethenorthurl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 17:20:13 GMT","end":"Sun, 22 Nov 2026 18:19:47 GMT"},"fingerprint":{"sha1":"BC:19:1C:AB:DA:B0:4F:08:27:56:E8:0B:94:9F:D9:BD:EA:B0:4D:2A","sha256":"BA:00:EE:3E:A2:29:79:4A:0D:53:D4:B9:28:09:72:03:87:48:2A:77:62:25:3D:96:35:D7:EA:DE:C2:59:5A:0D"}}},"request":{"raw":"GET /fonts/ibm-plex-mono-bold.woff2 HTTP/1.1\r\nHost: wethenorthurl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wethenorthurl.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 25 Aug 2026 19:34:27 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: application/octet-stream\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"008a7d76abdedd60c3841e3fbcbb192d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6o%2BXtJaacOnqU93dO3t%2FMl7JlEj2S1c%2BDZrsX6obeegLJvD0ze2fUrin2FZKIxtYZKfEJVjkYKqIdn37115BAx13%2Ff8c7DH5neJqkYacdAfEMAIMBVWjaKusdIDB7GURdbq9Tg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a30d08c2df8dafe5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14908\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14908,"size_decoded":15594,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 14908, version 1.0","md5":"59952787cc62a58c9963d84622a16b09","sha1":"223677cfccb782c2e4209a71bb75aaea4509ac71","sha256":"4f84d86cfd060f4ded334358ff8a4c81d4db2ed5addd568359d693f44a87765a","sha512":"04cf3edd39e44fdc3022bc8d8d957d3703ef98ac6ef384462bd03f1e488e77c2609e6ce0b5a84324417ed34ec4db4202809148239e8b5418e91254799ef747f5","ssdeep":"384:uOV7uQv/KCS9EbwR49fETTnaDKG6su7v2FCmXmQ5UD:ZiSP2ewR49fE3aDKG6su7ACF","tlshash":"6762d0a0e6eb2f50f4b6e3700f7895aa6a2c194563806335fdf7b760f0185116f5ec82","first_seen":"2025-09-19T21:57:53.895519Z","last_seen":"2026-08-25T19:34:55.689952Z","times_seen":833,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"wethenorthurl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wethenorthurl.com/css/main.css","fqdn":"wethenorthurl.com","domain":"wethenorthurl.com","tld":"com"},"ip":{"addr":"104.21.52.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wethenorthurl.com/","date":"2026-08-25T19:34:27.006Z","timestamp":1787686467006,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wethenorthurl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 17:20:13 GMT","end":"Sun, 22 Nov 2026 18:19:47 GMT"},"fingerprint":{"sha1":"BC:19:1C:AB:DA:B0:4F:08:27:56:E8:0B:94:9F:D9:BD:EA:B0:4D:2A","sha256":"BA:00:EE:3E:A2:29:79:4A:0D:53:D4:B9:28:09:72:03:87:48:2A:77:62:25:3D:96:35:D7:EA:DE:C2:59:5A:0D"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: wethenorthurl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wethenorthurl.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 25 Aug 2026 19:34:27 GMT\r\netag: W/\"861ee45f26c29da9697b05c8019169b2\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u1lgYtQ0B8LOAza5k9d1XqeilwfAGsQCjjIQkeAuh9KA4XxPWwCUM%2BxP1Eacyk2an7FkpzwK2YlB5QgTOKZnFjg8BZXVftg6w%2Fgq8utoiznU0W14KnZkHAdoytoZ36YgcqTw0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a30d08c2df8eafe5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17289,"size_decoded":5025,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"65f9ddf3688bd3c4b312b1147a55cdf1","sha1":"7f068912261495ea36a72a855dad8720ece9f320","sha256":"8f78bb4e02c4bfac8e32b874b1a70fbaf443388ed90e9f36d6f1e98673d88ba3","sha512":"63ecb0bafeefba3bdc76859ac5681134d3fb823065d1d0d126dc313d5fc3538ca774c241b4e7319fc5419bb9c97740a6db8e71f9156741526628751e5614bcf2","ssdeep":"192:wglv/HVvO+CVvsB+U96BkyicWOnYJraFVZViHHc3uFRZjKXYz:5v/1vO+GPBZWxJravjidFRZjSYz","tlshash":"f4720188b612e2f69e3bef75b746962cfbc491294e0503ecbee550046ac03fa5542f4d","first_seen":"2026-08-25T19:30:31.79466Z","last_seen":"2026-08-25T19:34:55.691291Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"wethenorthurl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wethenorthurl.com/images/wtnlogo.png","fqdn":"wethenorthurl.com","domain":"wethenorthurl.com","tld":"com"},"ip":{"addr":"104.21.52.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wethenorthurl.com/","date":"2026-08-25T19:34:27.014Z","timestamp":1787686467014,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wethenorthurl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 17:20:13 GMT","end":"Sun, 22 Nov 2026 18:19:47 GMT"},"fingerprint":{"sha1":"BC:19:1C:AB:DA:B0:4F:08:27:56:E8:0B:94:9F:D9:BD:EA:B0:4D:2A","sha256":"BA:00:EE:3E:A2:29:79:4A:0D:53:D4:B9:28:09:72:03:87:48:2A:77:62:25:3D:96:35:D7:EA:DE:C2:59:5A:0D"}}},"request":{"raw":"GET /images/wtnlogo.png HTTP/1.1\r\nHost: wethenorthurl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wethenorthurl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 25 Aug 2026 19:34:27 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"38df1b9bb60dfe5004d3d75404321f2d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i5cG7B3oDHQHAvIOYrLbkyyOxbLCGhWN8EPDvFGFFft07o9X7kd11skD1lJerVtHYirDdPpJ9FikSTbAM2KgZx6okg28Gi9viPF0gS3YP%2FRV9KQxoEJWWKe3imH9ow8PRpiJrw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a30d08c2ef90afe5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17334\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17334,"size_decoded":17996,"mime_type":"image/png","magic":"PNG image data, 250 x 90, 8-bit/color RGBA, non-interlaced","md5":"bfb0eefa8b87a1d96b9a2cb72a13e6a3","sha1":"fd2f89363fb39286b307cf8508cab4c3678cd3c3","sha256":"794fa8e930ea2060ecb0b42f371c87561655b525d0163fc84fe0bbb93dd418f7","sha512":"f32fe52fe23a83aa22fff437779752372de1b7b3dcc3601c5e504922ebeb49ded88b736a2384c1778e897ae9ab6cd3d9d75c033d3798ca89c72c961e8b5214f7","ssdeep":"384:Hm8+gtgIp9M3yUCFUiZyAwsrJ060swEIvZKAq9drjidbUKx:jpLMWFulsrJmhEEI9a1x","tlshash":"1672d07649132b26bc3c3b94167d9ac428135bdf15a3ceaaa024b13b1f7bd1910d9e47","first_seen":"2026-08-25T19:30:31.795844Z","last_seen":"2026-08-25T19:34:55.693849Z","times_seen":2,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"wethenorthurl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wethenorthurl.com/images/flag-canada.png","fqdn":"wethenorthurl.com","domain":"wethenorthurl.com","tld":"com"},"ip":{"addr":"104.21.52.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wethenorthurl.com/","date":"2026-08-25T19:34:27.016Z","timestamp":1787686467016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wethenorthurl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 17:20:13 GMT","end":"Sun, 22 Nov 2026 18:19:47 GMT"},"fingerprint":{"sha1":"BC:19:1C:AB:DA:B0:4F:08:27:56:E8:0B:94:9F:D9:BD:EA:B0:4D:2A","sha256":"BA:00:EE:3E:A2:29:79:4A:0D:53:D4:B9:28:09:72:03:87:48:2A:77:62:25:3D:96:35:D7:EA:DE:C2:59:5A:0D"}}},"request":{"raw":"GET /images/flag-canada.png HTTP/1.1\r\nHost: wethenorthurl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wethenorthurl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 25 Aug 2026 19:34:27 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"fc4f04148fb6efb7e87e158ada4f7d89\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RSUypI9%2FkiUV3FTBUZ8bVY8MGF0gxCTbWkiHqeg7LZPjOTJb6zO2gufxcvDo8XPQ9XIJeicd%2BV6WaX3cQ6lm%2FqqX5GgK%2FOIoReSLdtV%2FjrBXzg9n%2FPP3uA1WHlTo9YDWRir0iA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a30d08c2ef91afe5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3360\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3360,"size_decoded":4031,"mime_type":"image/png","magic":"PNG image data, 174 x 87, 8-bit/color RGBA, non-interlaced","md5":"98995cd1906af3040c047165c94dca3d","sha1":"c4578c7962959c1ee46daf4d6a6f91513fd66e00","sha256":"632ce5833cc9287f5edfe17c332ef961c9adeeeefe154451f7f8a9373eaeb045","sha512":"84865b14e62987e0dcc17a0280e20a67cdef7f1fc234f2a6de3909b83421cdb2cad7e04f4ea28f19443e0a84a2bcb4f51cb9a0426c29aed729afdd32386b5207","ssdeep":"","tlshash":"7c614aaf1c2c916caf19259104273a1be5e3169f9c917dfc00d39b47fe58615e0c0943","first_seen":"2026-05-14T11:03:56.73945Z","last_seen":"2026-08-25T19:34:55.69612Z","times_seen":3,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"wethenorthurl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wethenorthurl.com/favicon.png","fqdn":"wethenorthurl.com","domain":"wethenorthurl.com","tld":"com"},"ip":{"addr":"104.21.52.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wethenorthurl.com/","date":"2026-08-25T19:34:27.117Z","timestamp":1787686467117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wethenorthurl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 17:20:13 GMT","end":"Sun, 22 Nov 2026 18:19:47 GMT"},"fingerprint":{"sha1":"BC:19:1C:AB:DA:B0:4F:08:27:56:E8:0B:94:9F:D9:BD:EA:B0:4D:2A","sha256":"BA:00:EE:3E:A2:29:79:4A:0D:53:D4:B9:28:09:72:03:87:48:2A:77:62:25:3D:96:35:D7:EA:DE:C2:59:5A:0D"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: wethenorthurl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wethenorthurl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 25 Aug 2026 19:34:27 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"83a05e2b730a5e2003631ab4d851c864\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=goauEAX3Z%2Bw0DCBovZ04AxAqCYtEz3r0GNN%2BAVZ6DkbTCnvl3KJPIgV3QUbO0m%2BUw5JlcyDlP9d9B2I6ZDTg9mF32JfY4W%2BrTEFcAMjDlZ4IBhtBwxjl%2F2fqdZf9warxdTXbZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a30d08c38f96afe5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3887\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3887,"size_decoded":4559,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"5447a8d87a4ee476c70327aa0a9233af","sha1":"57c446b1abe87ec5e5a1f0f7b0728279b42cc601","sha256":"fc27e0ab5a08a233646d033af5bbe0a270909aa480596cc2602aaabe0637309f","sha512":"b73e9c814acadda49d687a452e1416b619c37caa2469481f278b20e7c27a5cd36398f750450776eae08d3b9d4a3809508eac42dc3e50d7466b8f37473d03b3d5","ssdeep":"","tlshash":"a3816ca7bab799a8910f131310f121baf8b400a482e379353e936f649824195f4f6e15","first_seen":"2026-08-25T19:30:31.784948Z","last_seen":"2026-08-25T19:34:55.697426Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"wethenorthurl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wethenorthurl.com/","fqdn":"wethenorthurl.com","domain":"wethenorthurl.com","tld":"com"},"ip":{"addr":"104.21.52.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-25T19:34:26.645Z","timestamp":1787686466645,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wethenorthurl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 17:20:13 GMT","end":"Sun, 22 Nov 2026 18:19:47 GMT"},"fingerprint":{"sha1":"BC:19:1C:AB:DA:B0:4F:08:27:56:E8:0B:94:9F:D9:BD:EA:B0:4D:2A","sha256":"BA:00:EE:3E:A2:29:79:4A:0D:53:D4:B9:28:09:72:03:87:48:2A:77:62:25:3D:96:35:D7:EA:DE:C2:59:5A:0D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wethenorthurl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 25 Aug 2026 19:34:26 GMT\r\ncontent-encoding: zstd\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oYJG4eN2RyGv2DHnegkzf%2B0tJ1hDqhf90nWvJxubptAsCDpv7uOxra7zAN0Jx%2FR4gV5ur4zujVtJfvamnybYPHos3iecft03NAanGfHI8OJIkZeJrUT%2FClwXE598nXeSunw74w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a30d08c0ff86afe5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56253,"size_decoded":15922,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (575), with CRLF line terminators","md5":"fbf4938d8c067c2c834c3f526ff1de62","sha1":"721e4e55b6b18126e6d2b4f5f0927ff43bdbd879","sha256":"8d5058d2aa026cec5e0821633cfef61969e24561a592ca395919c9139aa6e8b7","sha512":"1225e7d4bc0142996dd716b926e10b530fa901ad60aca6fbf7b5084deb8bf2db33aacca5a946a6357a07d0e92c6de5fc0b51dfae8a5c72cbd91d571ac8f003a2","ssdeep":"768:6B1WdRkQh+FJDgHIIpd4wQ4JLGMXF/+oguOH+UxJ4Z:Q0R6FJwII34wQ4Vp+ogzeqc","tlshash":"f243d823b6842a330573424af7795f8dff15812b0344516979be924e2ff2970db2ba9c","first_seen":"2026-08-25T19:30:31.792078Z","last_seen":"2026-08-25T19:34:55.70094Z","times_seen":2,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":26,"connect":37,"send":0,"wait":95,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"wethenorthurl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wethenorthurl.com/fonts/ibm-plex-mono-regular.woff2","fqdn":"wethenorthurl.com","domain":"wethenorthurl.com","tld":"com"},"ip":{"addr":"104.21.52.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wethenorthurl.com/","date":"2026-08-25T19:34:27.004Z","timestamp":1787686467004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wethenorthurl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 17:20:13 GMT","end":"Sun, 22 Nov 2026 18:19:47 GMT"},"fingerprint":{"sha1":"BC:19:1C:AB:DA:B0:4F:08:27:56:E8:0B:94:9F:D9:BD:EA:B0:4D:2A","sha256":"BA:00:EE:3E:A2:29:79:4A:0D:53:D4:B9:28:09:72:03:87:48:2A:77:62:25:3D:96:35:D7:EA:DE:C2:59:5A:0D"}}},"request":{"raw":"GET /fonts/ibm-plex-mono-regular.woff2 HTTP/1.1\r\nHost: wethenorthurl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wethenorthurl.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 25 Aug 2026 19:34:27 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: application/octet-stream\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"ef897057d33ad6cc626a9ea2c7950956\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tfZeyJ%2BV2gZEj4xlkmGzfj%2Fp0VlS5zfz2UF4Q3hFbUYrgfm9VWGUzuoguCMhbfS%2Bv37fvqcQea0YVv%2FfqXHnB6wKrJquHK8fci3li6IpBJhuuT5qKffwUkXLakMJ6JxHrzaogQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a30d08c2df8cafe5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14708\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14708,"size_decoded":15394,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 14708, version 1.0","md5":"79936b18df9f734fb6b0a256b20d36b4","sha1":"bb87500e3204a3a7c65d6633c79c5c840c3be8d3","sha256":"08949f728dc52d528e69b1667d15c89a5686a4ee9a296ff90983985f99c380f7","sha512":"d5b9ed102916ebc2e1ddfe322a5dee1302329de23c0c7895639106766a52906b8ec2b9bf3ac7884dbdce6166e27d315808128d35d9609e45841e3c8c2818031a","ssdeep":"384:i54PnCNUhrlC/trZov44r9cmuyWPCZpMbyKdlm+:i2P0mrlC/cv46VuyVZSFdl","tlshash":"c962b073691e2539e1c2afb0c6c81f6c50f8d70b5ba5c6109378a063b7615ae361e9b1","first_seen":"2025-09-19T06:27:38.321624Z","last_seen":"2026-08-25T23:56:16.20458Z","times_seen":3796,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"wethenorthurl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}