{"report_id":"d14ed031-2269-4084-a1be-80adc394eab6","version":0,"status":"done","tags":[],"date":"2026-10-13T09:29:54Z","url":{"schema":"http","addr":"live-kyc-verification.live/","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"live-kyc-verification.live/","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"title":"Blue Guardian — Trader Live KYC/AML Verifications","dom":{"size":19912,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19906), with no line terminators","md5":"c254d2d97c39301587ae800f62c389f5","sha1":"69b79c818046988b8cca7bc4ab0f0d8334e141d6","sha256":"4f436df5bbdcbac7b53047b1f8960e39e61ad825118d7cbb5aab60892164d691","sha512":"b3fbbe22a11e51bc7d409db0e4a7f9539a43f1c1e936ab1d94be68555fbd38ada5f970f2c5e8ba484227c0aeb38186f394efaa8c094f1aa038f15a90023e8d7a","ssdeep":"384:Q2phRVRJOx05nrGPKJgg8T4xksc64Jysq7v3+YqvaYvr:f+0rGV4xksc64Jysq7v3+YqvaYj","tlshash":"a9926780b40c12785d3fab11eec9a76cc121f542ae624876b10d048fe9d6ff539e6f66","dom_hash":"domhash3f8df274ecdf80d25b6a850406b14f2e","first_seen":"2026-10-13T09:29:57.521444Z","last_seen":"2026-10-13T09:29:57.521444Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"live-kyc-verification.live/","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-17T09:29:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"live-kyc-verification.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"live-kyc-verification.live","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-10-13T09:23:44.402517Z","last_seen":"2026-10-13T09:23:44.402517Z","alert_count":19,"request_count":19,"received_data":2311233,"sent_data":15242,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"live-kyc-verification.live/assets/jsx-runtime-Cltr0gcK.js","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"72059e47827263779ffb5e2e72fda9f5","sha1":"39bc063e3f7a76590befa8952db5f6c0b017ceec","sha256":"e26f105e9234109963ded8d5eba4b903477be697960ecda8ea710c5151aab8c3","sha512":"6cd8276949b7c2e19d2b3665c97bb8c6cd5c5df10ee84a0db4c980c6b520e2d45e3997de5d76fccaba1622052a35cd0689d878176511a8452d3d2745c5b4bbac","ssdeep":"192:XWR0l62y1qjc9oXvlRwejuclrIX1EwlI4:XDlLy1fIlAclrIX1EwlI4","tlshash":"ea02c6c974d5f161169375b2807f50aaf33e2899284c6460b222d9f57df484cc917f9f","size":8430,"data":"","first_seen":"2026-08-13T09:54:33.74276Z","last_seen":"2026-10-13T16:18:38.198676Z","times_seen":181,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/assets/useSelector-DXalI5tR.js","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a166538112aadff9550f683c061a2ac","sha1":"a6d6f0b5ce20b5173e9c8a0118b86266521ed797","sha256":"4726a002dcb4d7f843a0aa3dce853d30b90cefa5498a28d9fc9b23ab7767bc4c","sha512":"91b7eae61f6680251cd266efe8f4230d3e7ce637de4edf9688170596333dc140a22abe766f0f059b193ed19453cad12417866a0741718d17492cd35e65bcf556","ssdeep":"","tlshash":"804112c9f0d1f560562788b6c13f512bf33a7812281d5940d13ac9c9797842b97e3f2e","size":2105,"data":"","first_seen":"2026-10-06T08:27:21.164137Z","last_seen":"2026-10-13T09:29:57.526886Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/assets/invariant-CgFvOqN2.js","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7d072bd6db0894f28197ab3e8c75856","sha1":"3adbd5c63273295a8e4f55d02fa4e7cf707c7c69","sha256":"9581f7b30cfddeea2063d0f9ee9c4712ebd265221d0caa1b8b78828399b5e883","sha512":"0810eacbab8b46bf5e747d3bb2b586793401100b13ea6ced7112d577a8c8f74c0ec65a20215d849474a6f3e0369895fac990e2748197041d692f121034228345","ssdeep":"","tlshash":"3af0d4ad3954a23423530441c08774edf0b7554a01ee53101428aca2acec1ecc70fe0f","size":450,"data":"","first_seen":"2026-09-28T08:00:31.020336Z","last_seen":"2026-10-13T09:29:57.529776Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/assets/link-D4iki_Ag.js","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7b85e414b9888584607b484c463c817","sha1":"91240ce1658405796e672e7ecfdee675bc6ccb19","sha256":"cf1d7b5bfb345b31ebedec3149ed8fadec5c3322c42c18cea3b6405fbe8bafde","sha512":"cad9d7642cfc3201c281fe89a369a4fb702653128151d2e88c5d49186cfcc8ac99388d0f48726491064cac4b99a5fed97b9b55edf4c114937e56cfa14fb8f8af","ssdeep":"192:o9Uh62fdOdhM4evFO1UyA3CgnNi2aDrdZwXOnP1aciR:oSh62fdOdz5qF+3dZVccu","tlshash":"b812d7e973c2f1b683da455790ab8425f23a5dd41c0da800f070b4a67e3096ad6f7f3a","size":9279,"data":"","first_seen":"2026-10-06T08:27:21.162278Z","last_seen":"2026-10-13T09:29:57.532279Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/assets/index-BS5ftzXL.js","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6263ce41d679cc08cd0374a2fb8d7530","sha1":"3fe0c69cb93286cbfb1035bf1ec2de7ffe048a4f","sha256":"a9c520f4e10ca5ce2b71b65f2907aacaf5ccf9c82e559b635b61312e03eab5f2","sha512":"96ba69f462b9c8d82362889d96aef6587f32ce0612fa237261cc523b46a3d8dd21014cbfef7a6fc038044809d8b6d77dbabb49bd061b6ae9372776b3315cbfaa","ssdeep":"6144:hR0IrENfbxrbmkOtGvWHz6MtLmpMaa/7DkzIIPuYMxu7zEoQC/MBVD+cEjlI5Hff:kLx0LZIMxaz3Edp9n4/fRWSrUW4","tlshash":"c7e45dd473a6b0220bd681a2807f1502f3396555680e4418f268edef7bb9d84e6f7f78","size":674263,"data":"","first_seen":"2026-10-13T09:23:49.49214Z","last_seen":"2026-10-13T09:29:57.531791Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/assets/BrandMark-j1h404fQ.js","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"61bc8aa65a7adf9de9e8439ecb86be1f","sha1":"b61dfba8eeae91a5901c22f941e866c22fd5e7de","sha256":"8c7c184ddc215a1dc6a27de9df7495963d589f4f0a0f260f45a56a646d06efc5","sha512":"e45810aa05a19c40b2f754925970d14a820e5ad7e870b3ce0f37ef246361c4b6016d4dce717442569fd63711c3c3e1870fcd061080c195e374d816fe4b65a0a1","ssdeep":"","tlshash":"ac01bd5fd0c5fc69e5a3dd90911fb95e6206d190ce00c9b83134a5e7f2c146a2ea5f68","size":758,"data":"","first_seen":"2026-10-13T09:23:49.484436Z","last_seen":"2026-10-13T09:29:57.527375Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/assets/useRouter-CwjitLz4.js","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a11775e699774673b730b26bdf6e7948","sha1":"440535e9e8028f6628535eeffc9350c749536e78","sha256":"245e86ac62d16ed582f0713f7c5112c051294ffa377a72685c95af7a7a8b3619","sha512":"c8e5bf7227afed440ade2d214fc2ef91af99bd9b368c5af04a8aa1bf27960cb4be45360bfa60235c0e5f4e5f5fb4713afdad7e0d7915379b36b4e4dfe8b03e61","ssdeep":"","tlshash":"3dc08c2b948282b037020ce2403a80b39330b4a02348832048249d9862c88b8a53d9b4","size":151,"data":"","first_seen":"2026-09-01T23:38:10.311766Z","last_seen":"2026-10-13T15:39:56.493499Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/assets/matchContext-D7fiU5TJ.js","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7eba38f4fae8fa0980ba5e56a29cd8d1","sha1":"227f33759ee730cfbe570772e27988dda38cc15e","sha256":"b9668dcc014cd950d53cde00250d5516061793ab2ebba943692ceb437465b5ce","sha512":"b58f2c0a2bba79b034165534fb2d656098b5e5da0917fb76bc0255817ffa0095bc88d3955bf31505623c458d42f9bb07812a1d36064520b9d6ea67ac8747cde2","ssdeep":"","tlshash":"04c08c0edc8142b037674cc3c436c1f3d3707098076c9b8804269d9882caa98967dca6","size":162,"data":"","first_seen":"2026-09-01T23:38:10.30438Z","last_seen":"2026-10-13T16:18:38.230454Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/assets/not-found-DIgawKw1.js","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1937499fb5ed047887f1acb768448a2","sha1":"45307a607e625d129e5f3d529fa650faf4b49677","sha256":"ac8e8967ff892a5b649d743b4cb012a73eb22845ecac5325129d4ec5c99c83fc","sha512":"76e3c40b9ffcc1335233f02891b68ffaece316f7fc20530fcd523de714a37a3355bb70879efe5e79b04aa5b396d8627fa7a1aa29c8acbb4350f20872dc9b085e","ssdeep":"","tlshash":"409002ca70cf62e8651545318117c48af15459b85208439248058650a7144f04165c65","size":55,"data":"","first_seen":"2026-08-15T03:36:25.371603Z","last_seen":"2026-10-13T16:18:38.222479Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/~flock.js","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-10-13T16:35:03.561083Z","times_seen":18661,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/__l5e/events.33a4189afb1076e3.js","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb23a3aa09e630d589cfe162a2b9caf6","sha1":"22ffabf4f3e5177827ebb1b6f41e4f2269be7150","sha256":"90022cf49a0bbdedf3fea505ad945985b373d96793a906f6d01dbaa697dd3a21","sha512":"9225e64bfbba174b75482cf8bb718fab385680f851bb06bbe3332ef328e519c9458aff709bc286e0526562707cd75b8302a497e1d075a99f4d56f62cad2fa5cc","ssdeep":"768:VkDE0BoKrVMS07miDBb3EZkt1xczQOHoTZtbH8GyfxlTW5ZgJhN6FE2MDEqBVQeb:zyY1b3W1Kq/3xFVmmR2Mv139","tlshash":"fdb219d171c5b03797f28ae920554007b17caea3348d81e0e5ec8d3a4997a52e0bbf5e","size":25268,"data":"","first_seen":"2026-10-11T15:16:50.144391Z","last_seen":"2026-10-13T17:10:06.288015Z","times_seen":215,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/assets/routes-DnDZEBkT.js","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2439d4d4b9bc754d0537a816656f9057","sha1":"5e9ccefb61f60bb02a7f031d704cae4c55c5ba74","sha256":"524ebf4e2b2da3aa8cec3d4347e3b46f584d68f3019ced67486f510eabdb98d7","sha512":"f6362d1777ec13255eaf55bffaeffa2a193b743f5ebf61785d08d1619ee367610ce9a15f2b0de100bd2d3378421fb47084fc76ee3f17338bb66db6ab43fbe871","ssdeep":"","tlshash":"3721df16a0406bec744b08f5e16ed08eb61bd158c71a45e5b8be227527500f0b933bc5","size":1370,"data":"","first_seen":"2026-10-13T09:23:49.50408Z","last_seen":"2026-10-13T09:29:57.524481Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"live-kyc-verification.live/~flock.js","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://live-kyc-verification.live/","date":"2026-10-13T09:29:24.700Z","timestamp":1791883764700,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"live-kyc-verification.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Oct 2026 12:06:27 GMT","end":"Sat, 09 Jan 2027 13:06:23 GMT"},"fingerprint":{"sha1":"43:19:E1:98:C5:75:E9:A9:7F:85:D0:04:BF:9F:1F:BD:EB:CA:88:E8","sha256":"37:22:B0:A5:1E:2E:07:83:C8:3B:DB:2B:B4:EE:4F:77:8E:0E:CB:1A:A4:FB:6B:4A:B0:34:5E:72:09:DA:44:00"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: live-kyc-verification.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://live-kyc-verification.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs; __cf_bm=xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs"},{"name":"__cf_bm","value":"xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 09:29:24 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a49d51d95fb45ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21296,"size_decoded":8697,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-10-13T16:35:03.561083Z","times_seen":18661,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"live-kyc-verification.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/assets/not-found-DIgawKw1.js","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://live-kyc-verification.live/","date":"2026-10-13T09:29:24.685Z","timestamp":1791883764685,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"live-kyc-verification.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Oct 2026 12:06:27 GMT","end":"Sat, 09 Jan 2027 13:06:23 GMT"},"fingerprint":{"sha1":"43:19:E1:98:C5:75:E9:A9:7F:85:D0:04:BF:9F:1F:BD:EB:CA:88:E8","sha256":"37:22:B0:A5:1E:2E:07:83:C8:3B:DB:2B:B4:EE:4F:77:8E:0E:CB:1A:A4:FB:6B:4A:B0:34:5E:72:09:DA:44:00"}}},"request":{"raw":"GET /assets/not-found-DIgawKw1.js HTTP/1.1\r\nHost: live-kyc-verification.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://live-kyc-verification.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs; __cf_bm=xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs"},{"name":"__cf_bm","value":"xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 09:29:24 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a49d51d94f615ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55,"size_decoded":579,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"b1937499fb5ed047887f1acb768448a2","sha1":"45307a607e625d129e5f3d529fa650faf4b49677","sha256":"ac8e8967ff892a5b649d743b4cb012a73eb22845ecac5325129d4ec5c99c83fc","sha512":"76e3c40b9ffcc1335233f02891b68ffaece316f7fc20530fcd523de714a37a3355bb70879efe5e79b04aa5b396d8627fa7a1aa29c8acbb4350f20872dc9b085e","ssdeep":"","tlshash":"409002ca70cf62e8651545318117c48af15459b85208439248058650a7144f04165c65","first_seen":"2026-08-15T03:36:25.371603Z","last_seen":"2026-10-13T16:18:38.222479Z","times_seen":117,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"live-kyc-verification.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/assets/matchContext-D7fiU5TJ.js","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://live-kyc-verification.live/","date":"2026-10-13T09:29:24.692Z","timestamp":1791883764692,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"live-kyc-verification.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Oct 2026 12:06:27 GMT","end":"Sat, 09 Jan 2027 13:06:23 GMT"},"fingerprint":{"sha1":"43:19:E1:98:C5:75:E9:A9:7F:85:D0:04:BF:9F:1F:BD:EB:CA:88:E8","sha256":"37:22:B0:A5:1E:2E:07:83:C8:3B:DB:2B:B4:EE:4F:77:8E:0E:CB:1A:A4:FB:6B:4A:B0:34:5E:72:09:DA:44:00"}}},"request":{"raw":"GET /assets/matchContext-D7fiU5TJ.js HTTP/1.1\r\nHost: live-kyc-verification.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://live-kyc-verification.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs; __cf_bm=xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs"},{"name":"__cf_bm","value":"xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 09:29:24 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a49d51d94f905ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":162,"size_decoded":644,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"7eba38f4fae8fa0980ba5e56a29cd8d1","sha1":"227f33759ee730cfbe570772e27988dda38cc15e","sha256":"b9668dcc014cd950d53cde00250d5516061793ab2ebba943692ceb437465b5ce","sha512":"b58f2c0a2bba79b034165534fb2d656098b5e5da0917fb76bc0255817ffa0095bc88d3955bf31505623c458d42f9bb07812a1d36064520b9d6ea67ac8747cde2","ssdeep":"","tlshash":"04c08c0edc8142b037674cc3c436c1f3d3707098076c9b8804269d9882caa98967dca6","first_seen":"2026-09-01T23:38:10.30438Z","last_seen":"2026-10-13T16:18:38.230454Z","times_seen":22,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"live-kyc-verification.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/assets/routes-DnDZEBkT.js","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://live-kyc-verification.live/","date":"2026-10-13T09:29:24.696Z","timestamp":1791883764696,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"live-kyc-verification.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Oct 2026 12:06:27 GMT","end":"Sat, 09 Jan 2027 13:06:23 GMT"},"fingerprint":{"sha1":"43:19:E1:98:C5:75:E9:A9:7F:85:D0:04:BF:9F:1F:BD:EB:CA:88:E8","sha256":"37:22:B0:A5:1E:2E:07:83:C8:3B:DB:2B:B4:EE:4F:77:8E:0E:CB:1A:A4:FB:6B:4A:B0:34:5E:72:09:DA:44:00"}}},"request":{"raw":"GET /assets/routes-DnDZEBkT.js HTTP/1.1\r\nHost: live-kyc-verification.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://live-kyc-verification.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs; __cf_bm=xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs"},{"name":"__cf_bm","value":"xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 09:29:24 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a49d51d95fa35ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1370,"size_decoded":1159,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1370), with no line terminators","md5":"2439d4d4b9bc754d0537a816656f9057","sha1":"5e9ccefb61f60bb02a7f031d704cae4c55c5ba74","sha256":"524ebf4e2b2da3aa8cec3d4347e3b46f584d68f3019ced67486f510eabdb98d7","sha512":"f6362d1777ec13255eaf55bffaeffa2a193b743f5ebf61785d08d1619ee367610ce9a15f2b0de100bd2d3378421fb47084fc76ee3f17338bb66db6ab43fbe871","ssdeep":"","tlshash":"3721df16a0406bec744b08f5e16ed08eb61bd158c71a45e5b8be227527500f0b933bc5","first_seen":"2026-10-13T09:23:49.50408Z","last_seen":"2026-10-13T09:29:57.524481Z","times_seen":2,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"live-kyc-verification.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/__l5e/assets-v1/c5bc7b68-1c34-4976-bf68-f75e403c2970/bg-logo.png","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live-kyc-verification.live/","date":"2026-10-13T09:29:24.706Z","timestamp":1791883764706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"live-kyc-verification.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Oct 2026 12:06:27 GMT","end":"Sat, 09 Jan 2027 13:06:23 GMT"},"fingerprint":{"sha1":"43:19:E1:98:C5:75:E9:A9:7F:85:D0:04:BF:9F:1F:BD:EB:CA:88:E8","sha256":"37:22:B0:A5:1E:2E:07:83:C8:3B:DB:2B:B4:EE:4F:77:8E:0E:CB:1A:A4:FB:6B:4A:B0:34:5E:72:09:DA:44:00"}}},"request":{"raw":"GET /__l5e/assets-v1/c5bc7b68-1c34-4976-bf68-f75e403c2970/bg-logo.png HTTP/1.1\r\nHost: live-kyc-verification.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://live-kyc-verification.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs; __cf_bm=xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs"},{"name":"__cf_bm","value":"xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 09:29:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 1452696\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"5882f07ed7acb7b5f1fbb5edacbc01fb\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a49d51d96fd55ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1452696,"size_decoded":1453263,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced","md5":"85fc68a0636bb1660b8b344182b0e60f","sha1":"5457bc047db983d9366927c6a3bd48cf11b945ab","sha256":"d377e52f82f91033990167ecff7ab5b1bf76ef6abd9793f0ab17e2b6f05c9f3e","sha512":"f54f7ee16dad35e80d11c51db40dc53b1fdf05a992b05607576004e23f260b5ac14faa528f3c6cd003291e2aabadf0643d84524457bcf3b101d01278ee870f5a","ssdeep":"24576:wFf/42+GAvpCd6ZIeqWVAtOdZ7Ww3771FtqfB0fK9L:m42+GAvHqWVAMv165ki","tlshash":"f725333151cffa2a0708a459c056db8cb6feca19b04187176406e793f973d4a1aefaf1","first_seen":"2026-10-13T09:23:49.481385Z","last_seen":"2026-10-13T09:29:57.525258Z","times_seen":2,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"live-kyc-verification.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/__l5e/trackevents","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://live-kyc-verification.live/","date":"2026-10-13T09:29:35.357Z","timestamp":1791883775357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"live-kyc-verification.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Oct 2026 12:06:27 GMT","end":"Sat, 09 Jan 2027 13:06:23 GMT"},"fingerprint":{"sha1":"43:19:E1:98:C5:75:E9:A9:7F:85:D0:04:BF:9F:1F:BD:EB:CA:88:E8","sha256":"37:22:B0:A5:1E:2E:07:83:C8:3B:DB:2B:B4:EE:4F:77:8E:0E:CB:1A:A4:FB:6B:4A:B0:34:5E:72:09:DA:44:00"}}},"request":{"raw":"POST /__l5e/trackevents HTTP/1.1\r\nHost: live-kyc-verification.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: application/json\r\nReferer: https://live-kyc-verification.live/\r\nContent-Length: 1204\r\nOrigin: https://live-kyc-verification.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs; __cf_bm=xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS; session-id=ebde0599-70b5-4a13-8fa1-f5decbc370cc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs"},{"name":"__cf_bm","value":"xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS"},{"name":"session-id","value":"ebde0599-70b5-4a13-8fa1-f5decbc370cc"}],"method":"POST","post_data":{"size":1204,"data":"{\"envelope_schema_version\":1,\"batch_id\":\"da482298-919e-402f-9816-0c3aebf32c1a\",\"sent_at\":\"2026-10-13T09:29:35.354Z\",\"sdk\":{\"name\":\"lovable-user-app-events\",\"version\":\"0.3.0-automated-flag\"},\"automated\":false,\"artifact\":{\"kind\":\"dwl_content_hash\",\"id\":\"b3ff8b68cfb4379be7dee4a02e0b1f95eb8b0881af5e6ad6dfba56ce41aced46\",\"commit_sha\":\"79196747386cbc448e2553f3e9029588231d27fd\",\"context_token\":\"v1.eyJwcm9qZWN0X2lkIjoibG92cF8wc3g1YnE2OWRmOWgzcnBteHdqMnFjeDRlMCIsImFydGlmYWN0X2tpbmQiOiJkd2xfY29udGVudF9oYXNoIiwiYXJ0aWZhY3RfaWQiOiJiM2ZmOGI2OGNmYjQzNzliZTdkZWU0YTAyZTBiMWY5NWViOGIwODgxYWY1ZTZhZDZkZmJhNTZjZTQxYWNlZDQ2IiwiY29tbWl0X3NoYSI6Ijc5MTk2NzQ3Mzg2Y2JjNDQ4ZTI1NTNmM2U5MDI5NTg4MjMxZDI3ZmQiLCJleHAiOjE3OTQ0NzU3NjR9.j02KJCF7GEkRZ_kO6u3N0suBHK5-s63NYKULIZeIIcU\"},\"events\":[{\"event_id\":\"3571eed7-faaa-40f7-afe9-07129fb77207\",\"event_name\":\"lovable.page_engagement\",\"event_schema_version\":1,\"event_time\":\"2026-10-13T09:29:35.103Z\",\"session_id\":\"55261c53-d0b8-4ae8-923f-dc3a9ae665fd\",\"page_view_id\":\"b5468f9c-a865-46fe-b556-669c2d42c018\",\"trace_id\":\"b75815dcf75830726edebfcd94f3aee8\",\"span_id\":\"0172741d2603adfa\",\"parent_span_id\":\"bab3cf0b49de2133\",\"properties\":{\"reason\":\"threshold\",\"engagement_time_ms\":10174}}]}"}},"response":{"raw":"HTTP/2 202 \r\ndate: Tue, 13 Oct 2026 09:29:35 GMT\r\ncontent-type: application/json\r\ncontent-length: 17\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a49d521bfa315ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17,"size_decoded":338,"mime_type":"application/json","magic":"JSON text data","md5":"1125b91815c32790c1b224791b9d70fc","sha1":"becba42c161d72b4b90cfae9c81fc971e6803870","sha256":"11a49f853eb8befe94fef278d487125cd20930b9e41c4c0934394443e7f00878","sha512":"84bd85e5b348d7d910df3525a8d57ec6da3c8afaae5248e5c4bb81644e56c6c4d052046c4be3c069d9d234b52e24a02dc829cd17a179d3f9fc2a76c735c0e46d","ssdeep":"","tlshash":"e56000022a0008a08080008002002ba28000203000203088c00a200000a28000008002","first_seen":"2025-07-06T07:47:53.239897Z","last_seen":"2026-10-13T17:01:42.703419Z","times_seen":4367,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"live-kyc-verification.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/__l5e/events.33a4189afb1076e3.js","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://live-kyc-verification.live/","date":"2026-10-13T09:29:24.702Z","timestamp":1791883764702,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"live-kyc-verification.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Oct 2026 12:06:27 GMT","end":"Sat, 09 Jan 2027 13:06:23 GMT"},"fingerprint":{"sha1":"43:19:E1:98:C5:75:E9:A9:7F:85:D0:04:BF:9F:1F:BD:EB:CA:88:E8","sha256":"37:22:B0:A5:1E:2E:07:83:C8:3B:DB:2B:B4:EE:4F:77:8E:0E:CB:1A:A4:FB:6B:4A:B0:34:5E:72:09:DA:44:00"}}},"request":{"raw":"GET /__l5e/events.33a4189afb1076e3.js HTTP/1.1\r\nHost: live-kyc-verification.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://live-kyc-verification.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs; __cf_bm=xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs"},{"name":"__cf_bm","value":"xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 09:29:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a49d51d95fc05ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25268,"size_decoded":10639,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (25268), with no line terminators","md5":"cb23a3aa09e630d589cfe162a2b9caf6","sha1":"22ffabf4f3e5177827ebb1b6f41e4f2269be7150","sha256":"90022cf49a0bbdedf3fea505ad945985b373d96793a906f6d01dbaa697dd3a21","sha512":"9225e64bfbba174b75482cf8bb718fab385680f851bb06bbe3332ef328e519c9458aff709bc286e0526562707cd75b8302a497e1d075a99f4d56f62cad2fa5cc","ssdeep":"768:VkDE0BoKrVMS07miDBb3EZkt1xczQOHoTZtbH8GyfxlTW5ZgJhN6FE2MDEqBVQeb:zyY1b3W1Kq/3xFVmmR2Mv139","tlshash":"fdb219d171c5b03797f28ae920554007b17caea3348d81e0e5ec8d3a4997a52e0bbf5e","first_seen":"2026-10-11T15:16:50.144391Z","last_seen":"2026-10-13T17:10:06.288015Z","times_seen":215,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"live-kyc-verification.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/assets/useSelector-DXalI5tR.js","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://live-kyc-verification.live/","date":"2026-10-13T09:29:24.693Z","timestamp":1791883764693,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"live-kyc-verification.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Oct 2026 12:06:27 GMT","end":"Sat, 09 Jan 2027 13:06:23 GMT"},"fingerprint":{"sha1":"43:19:E1:98:C5:75:E9:A9:7F:85:D0:04:BF:9F:1F:BD:EB:CA:88:E8","sha256":"37:22:B0:A5:1E:2E:07:83:C8:3B:DB:2B:B4:EE:4F:77:8E:0E:CB:1A:A4:FB:6B:4A:B0:34:5E:72:09:DA:44:00"}}},"request":{"raw":"GET /assets/useSelector-DXalI5tR.js HTTP/1.1\r\nHost: live-kyc-verification.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://live-kyc-verification.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs; __cf_bm=xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs"},{"name":"__cf_bm","value":"xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 09:29:24 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a49d51d95f995ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2105,"size_decoded":1433,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2105), with no line terminators","md5":"0a166538112aadff9550f683c061a2ac","sha1":"a6d6f0b5ce20b5173e9c8a0118b86266521ed797","sha256":"4726a002dcb4d7f843a0aa3dce853d30b90cefa5498a28d9fc9b23ab7767bc4c","sha512":"91b7eae61f6680251cd266efe8f4230d3e7ce637de4edf9688170596333dc140a22abe766f0f059b193ed19453cad12417866a0741718d17492cd35e65bcf556","ssdeep":"","tlshash":"804112c9f0d1f560562788b6c13f512bf33a7812281d5940d13ac9c9797842b97e3f2e","first_seen":"2026-10-06T08:27:21.164137Z","last_seen":"2026-10-13T09:29:57.526886Z","times_seen":4,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"live-kyc-verification.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/assets/BrandMark-j1h404fQ.js","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://live-kyc-verification.live/","date":"2026-10-13T09:29:24.698Z","timestamp":1791883764698,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"live-kyc-verification.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Oct 2026 12:06:27 GMT","end":"Sat, 09 Jan 2027 13:06:23 GMT"},"fingerprint":{"sha1":"43:19:E1:98:C5:75:E9:A9:7F:85:D0:04:BF:9F:1F:BD:EB:CA:88:E8","sha256":"37:22:B0:A5:1E:2E:07:83:C8:3B:DB:2B:B4:EE:4F:77:8E:0E:CB:1A:A4:FB:6B:4A:B0:34:5E:72:09:DA:44:00"}}},"request":{"raw":"GET /assets/BrandMark-j1h404fQ.js HTTP/1.1\r\nHost: live-kyc-verification.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://live-kyc-verification.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs; __cf_bm=xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs"},{"name":"__cf_bm","value":"xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 09:29:24 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a49d51d95fae5ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":758,"size_decoded":966,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (758), with no line terminators","md5":"61bc8aa65a7adf9de9e8439ecb86be1f","sha1":"b61dfba8eeae91a5901c22f941e866c22fd5e7de","sha256":"8c7c184ddc215a1dc6a27de9df7495963d589f4f0a0f260f45a56a646d06efc5","sha512":"e45810aa05a19c40b2f754925970d14a820e5ad7e870b3ce0f37ef246361c4b6016d4dce717442569fd63711c3c3e1870fcd061080c195e374d816fe4b65a0a1","ssdeep":"","tlshash":"ac01bd5fd0c5fc69e5a3dd90911fb95e6206d190ce00c9b83134a5e7f2c146a2ea5f68","first_seen":"2026-10-13T09:23:49.484436Z","last_seen":"2026-10-13T09:29:57.527375Z","times_seen":2,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"live-kyc-verification.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/favicon.png","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live-kyc-verification.live/","date":"2026-10-13T09:29:24.952Z","timestamp":1791883764952,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"live-kyc-verification.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Oct 2026 12:06:27 GMT","end":"Sat, 09 Jan 2027 13:06:23 GMT"},"fingerprint":{"sha1":"43:19:E1:98:C5:75:E9:A9:7F:85:D0:04:BF:9F:1F:BD:EB:CA:88:E8","sha256":"37:22:B0:A5:1E:2E:07:83:C8:3B:DB:2B:B4:EE:4F:77:8E:0E:CB:1A:A4:FB:6B:4A:B0:34:5E:72:09:DA:44:00"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: live-kyc-verification.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://live-kyc-verification.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs; __cf_bm=xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs"},{"name":"__cf_bm","value":"xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 09:29:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 4476\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs\r\nserver: cloudflare\r\ncf-ray: a49d51daecb75ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4476,"size_decoded":4929,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"8ee821ef2a718b42df54ef3ca63b9ccd","sha1":"e5d6ed6e7c55e027d95fbb8c30f14a390fb7ddec","sha256":"473cb680322152187a6210cecf63453b2940c1ae077db3d8f23895270bfa3a2c","sha512":"7847af388b71bf58e8c7815c7e30d32a525db7735fc4ad365ae668d80de59f870ab4fda67aceb2e3167f14ea6a196e4cb9c93fb1d2d8d602bb5c7081fbc4b5e9","ssdeep":"96:OlDkHZyeHljZYPbat146eExvGDjHlEz9+CUU8BOdEN:igHAyN2b2K6bQDMH8BqEN","tlshash":"11915ca12bf415b5d6df2d50102b7845cfa4e11da61c69c8f3a1f9402da26d850b8cfc","first_seen":"2026-10-13T09:23:49.532789Z","last_seen":"2026-10-13T09:29:57.528074Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"live-kyc-verification.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/__l5e/trackevents","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://live-kyc-verification.live/","date":"2026-10-13T09:29:25.181Z","timestamp":1791883765181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"live-kyc-verification.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Oct 2026 12:06:27 GMT","end":"Sat, 09 Jan 2027 13:06:23 GMT"},"fingerprint":{"sha1":"43:19:E1:98:C5:75:E9:A9:7F:85:D0:04:BF:9F:1F:BD:EB:CA:88:E8","sha256":"37:22:B0:A5:1E:2E:07:83:C8:3B:DB:2B:B4:EE:4F:77:8E:0E:CB:1A:A4:FB:6B:4A:B0:34:5E:72:09:DA:44:00"}}},"request":{"raw":"POST /__l5e/trackevents HTTP/1.1\r\nHost: live-kyc-verification.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: application/json\r\nReferer: https://live-kyc-verification.live/\r\nContent-Length: 2678\r\nOrigin: https://live-kyc-verification.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs; __cf_bm=xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs"},{"name":"__cf_bm","value":"xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS"}],"method":"POST","post_data":{"size":2678,"data":"{\"envelope_schema_version\":1,\"batch_id\":\"e8ebaa3f-a7f4-4bf3-8502-620341989a6a\",\"sent_at\":\"2026-10-13T09:29:25.179Z\",\"sdk\":{\"name\":\"lovable-user-app-events\",\"version\":\"0.3.0-automated-flag\"},\"automated\":false,\"artifact\":{\"kind\":\"dwl_content_hash\",\"id\":\"b3ff8b68cfb4379be7dee4a02e0b1f95eb8b0881af5e6ad6dfba56ce41aced46\",\"commit_sha\":\"79196747386cbc448e2553f3e9029588231d27fd\",\"context_token\":\"v1.eyJwcm9qZWN0X2lkIjoibG92cF8wc3g1YnE2OWRmOWgzcnBteHdqMnFjeDRlMCIsImFydGlmYWN0X2tpbmQiOiJkd2xfY29udGVudF9oYXNoIiwiYXJ0aWZhY3RfaWQiOiJiM2ZmOGI2OGNmYjQzNzliZTdkZWU0YTAyZTBiMWY5NWViOGIwODgxYWY1ZTZhZDZkZmJhNTZjZTQxYWNlZDQ2IiwiY29tbWl0X3NoYSI6Ijc5MTk2NzQ3Mzg2Y2JjNDQ4ZTI1NTNmM2U5MDI5NTg4MjMxZDI3ZmQiLCJleHAiOjE3OTQ0NzU3NjR9.j02KJCF7GEkRZ_kO6u3N0suBHK5-s63NYKULIZeIIcU\"},\"events\":[{\"event_id\":\"175f8d60-f9ee-4be9-9318-8bb1a178295d\",\"event_name\":\"lovable.web_vital\",\"event_schema_version\":1,\"event_time\":\"2026-10-13T09:29:24.928Z\",\"session_id\":\"55261c53-d0b8-4ae8-923f-dc3a9ae665fd\",\"page_view_id\":\"b5468f9c-a865-46fe-b556-669c2d42c018\",\"trace_id\":\"b75815dcf75830726edebfcd94f3aee8\",\"span_id\":\"712c481c62fcd9fc\",\"parent_span_id\":\"bab3cf0b49de2133\",\"properties\":{\"url_path\":\"/\",\"metric\":\"TTFB\",\"value\":597,\"unit\":\"millisecond\",\"delta\":597,\"rating\":\"good\",\"id\":\"e0e5caa4-0abe-4051-a5ba-395739116e89\",\"navigation_type\":\"initial_load\"}},{\"event_id\":\"765c2672-5409-4cde-bcec-d6a76972a087\",\"event_name\":\"lovable.session_started\",\"event_schema_version\":1,\"event_time\":\"2026-10-13T09:29:24.929Z\",\"session_id\":\"55261c53-d0b8-4ae8-923f-dc3a9ae665fd\",\"page_view_id\":\"b5468f9c-a865-46fe-b556-669c2d42c018\",\"trace_id\":\"b75815dcf75830726edebfcd94f3aee8\",\"span_id\":\"c7b3f8dd951a81e4\",\"parent_span_id\":\"bab3cf0b49de2133\",\"properties\":{\"reason\":\"new_session\"}},{\"event_id\":\"5842cd24-82a3-47bc-8033-6b17a42b1e9b\",\"event_name\":\"lovable.page_viewed\",\"event_schema_version\":1,\"event_time\":\"2026-10-13T09:29:24.929Z\",\"session_id\":\"55261c53-d0b8-4ae8-923f-dc3a9ae665fd\",\"page_view_id\":\"b5468f9c-a865-46fe-b556-669c2d42c018\",\"trace_id\":\"b75815dcf75830726edebfcd94f3aee8\",\"span_id\":\"bab3cf0b49de2133\",\"properties\":{\"url_path\":\"/\",\"navigation_type\":\"initial_load\"}},{\"event_id\":\"63163e42-f8da-4cfa-84f8-5fdcfa01ee2d\",\"event_name\":\"lovable.web_vital\",\"event_schema_version\":1,\"event_time\":\"2026-10-13T09:29:24.961Z\",\"session_id\":\"55261c53-d0b8-4ae8-923f-dc3a9ae665fd\",\"page_view_id\":\"b5468f9c-a865-46fe-b556-669c2d42c018\",\"trace_id\":\"b75815dcf75830726edebfcd94f3aee8\",\"span_id\":\"12e665b95e8441c7\",\"parent_span_id\":\"bab3cf0b49de2133\",\"properties\":{\"url_path\":\"/\",\"metric\":\"FCP\",\"value\":1237,\"unit\":\"millisecond\",\"delta\":1237,\"rating\":\"good\",\"id\":\"aa260787-76f4-4006-bbd3-0d3857f34e23\",\"navigation_type\":\"initial_load\"}}]}"}},"response":{"raw":"HTTP/2 202 \r\ndate: Tue, 13 Oct 2026 09:29:25 GMT\r\ncontent-type: application/json\r\ncontent-length: 17\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a49d51dc59415ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17,"size_decoded":338,"mime_type":"application/json","magic":"JSON text data","md5":"1125b91815c32790c1b224791b9d70fc","sha1":"becba42c161d72b4b90cfae9c81fc971e6803870","sha256":"11a49f853eb8befe94fef278d487125cd20930b9e41c4c0934394443e7f00878","sha512":"84bd85e5b348d7d910df3525a8d57ec6da3c8afaae5248e5c4bb81644e56c6c4d052046c4be3c069d9d234b52e24a02dc829cd17a179d3f9fc2a76c735c0e46d","ssdeep":"","tlshash":"e56000022a0008a08080008002002ba28000203000203088c00a200000a28000008002","first_seen":"2025-07-06T07:47:53.239897Z","last_seen":"2026-10-13T17:01:42.703419Z","times_seen":4367,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"live-kyc-verification.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/~api/analytics","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://live-kyc-verification.live/","date":"2026-10-13T09:29:25.232Z","timestamp":1791883765232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"live-kyc-verification.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Oct 2026 12:06:27 GMT","end":"Sat, 09 Jan 2027 13:06:23 GMT"},"fingerprint":{"sha1":"43:19:E1:98:C5:75:E9:A9:7F:85:D0:04:BF:9F:1F:BD:EB:CA:88:E8","sha256":"37:22:B0:A5:1E:2E:07:83:C8:3B:DB:2B:B4:EE:4F:77:8E:0E:CB:1A:A4:FB:6B:4A:B0:34:5E:72:09:DA:44:00"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: live-kyc-verification.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://live-kyc-verification.live/\r\nContent-Type: application/json\r\nContent-Length: 347\r\nOrigin: https://live-kyc-verification.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs; __cf_bm=xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS; session-id=ebde0599-70b5-4a13-8fa1-f5decbc370cc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs"},{"name":"__cf_bm","value":"xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS"},{"name":"session-id","value":"ebde0599-70b5-4a13-8fa1-f5decbc370cc"}],"method":"POST","post_data":{"size":347,"data":"{\"timestamp\":\"2026-10-13T09:29:25.229Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"ebde0599-70b5-4a13-8fa1-f5decbc370cc\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://live-kyc-verification.live/\\\"}\"}"}},"response":{"raw":"HTTP/2 202 \r\ndate: Tue, 13 Oct 2026 09:29:25 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a49d51dcaa145ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8,"size_decoded":337,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"382ab522931673c11e398ead1b7b1678","sha1":"61a0572c4893ef34311320d84c82df88bea83e11","sha256":"a00fb0c50741f81bb51d35b4475a4357f8039aabd896a21036bc516839401595","sha512":"685c859b43ec0b2f873fb61ff4c48b3748ede3e31bdda719b69b528546f7a1d528216146db9626d1a411dccdd13f3fd155f3d62d3e2ec8090c71f6710ee60641","ssdeep":"","tlshash":"455000003c0000c0000000c000000000c0000000000000c0c000000000c0c000000000","first_seen":"2023-04-11T14:35:59Z","last_seen":"2026-10-13T17:01:42.745494Z","times_seen":8478,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"live-kyc-verification.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/assets/jsx-runtime-Cltr0gcK.js","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://live-kyc-verification.live/","date":"2026-10-13T09:29:24.683Z","timestamp":1791883764683,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"live-kyc-verification.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Oct 2026 12:06:27 GMT","end":"Sat, 09 Jan 2027 13:06:23 GMT"},"fingerprint":{"sha1":"43:19:E1:98:C5:75:E9:A9:7F:85:D0:04:BF:9F:1F:BD:EB:CA:88:E8","sha256":"37:22:B0:A5:1E:2E:07:83:C8:3B:DB:2B:B4:EE:4F:77:8E:0E:CB:1A:A4:FB:6B:4A:B0:34:5E:72:09:DA:44:00"}}},"request":{"raw":"GET /assets/jsx-runtime-Cltr0gcK.js HTTP/1.1\r\nHost: live-kyc-verification.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://live-kyc-verification.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs; __cf_bm=xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs"},{"name":"__cf_bm","value":"xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 09:29:24 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a49d51d94f555ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8430,"size_decoded":3728,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8430), with no line terminators","md5":"72059e47827263779ffb5e2e72fda9f5","sha1":"39bc063e3f7a76590befa8952db5f6c0b017ceec","sha256":"e26f105e9234109963ded8d5eba4b903477be697960ecda8ea710c5151aab8c3","sha512":"6cd8276949b7c2e19d2b3665c97bb8c6cd5c5df10ee84a0db4c980c6b520e2d45e3997de5d76fccaba1622052a35cd0689d878176511a8452d3d2745c5b4bbac","ssdeep":"192:XWR0l62y1qjc9oXvlRwejuclrIX1EwlI4:XDlLy1fIlAclrIX1EwlI4","tlshash":"ea02c6c974d5f161169375b2807f50aaf33e2899284c6460b222d9f57df484cc917f9f","first_seen":"2026-08-13T09:54:33.74276Z","last_seen":"2026-10-13T16:18:38.198676Z","times_seen":181,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"live-kyc-verification.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/assets/invariant-CgFvOqN2.js","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://live-kyc-verification.live/","date":"2026-10-13T09:29:24.687Z","timestamp":1791883764687,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"live-kyc-verification.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Oct 2026 12:06:27 GMT","end":"Sat, 09 Jan 2027 13:06:23 GMT"},"fingerprint":{"sha1":"43:19:E1:98:C5:75:E9:A9:7F:85:D0:04:BF:9F:1F:BD:EB:CA:88:E8","sha256":"37:22:B0:A5:1E:2E:07:83:C8:3B:DB:2B:B4:EE:4F:77:8E:0E:CB:1A:A4:FB:6B:4A:B0:34:5E:72:09:DA:44:00"}}},"request":{"raw":"GET /assets/invariant-CgFvOqN2.js HTTP/1.1\r\nHost: live-kyc-verification.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://live-kyc-verification.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs; __cf_bm=xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs"},{"name":"__cf_bm","value":"xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 09:29:24 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a49d51d94f725ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":450,"size_decoded":788,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (450), with no line terminators","md5":"a7d072bd6db0894f28197ab3e8c75856","sha1":"3adbd5c63273295a8e4f55d02fa4e7cf707c7c69","sha256":"9581f7b30cfddeea2063d0f9ee9c4712ebd265221d0caa1b8b78828399b5e883","sha512":"0810eacbab8b46bf5e747d3bb2b586793401100b13ea6ced7112d577a8c8f74c0ec65a20215d849474a6f3e0369895fac990e2748197041d692f121034228345","ssdeep":"","tlshash":"3af0d4ad3954a23423530441c08774edf0b7554a01ee53101428aca2acec1ecc70fe0f","first_seen":"2026-09-28T08:00:31.020336Z","last_seen":"2026-10-13T09:29:57.529776Z","times_seen":46,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"live-kyc-verification.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-13T09:29:23.751Z","timestamp":1791883763751,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"live-kyc-verification.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Oct 2026 12:06:27 GMT","end":"Sat, 09 Jan 2027 13:06:23 GMT"},"fingerprint":{"sha1":"43:19:E1:98:C5:75:E9:A9:7F:85:D0:04:BF:9F:1F:BD:EB:CA:88:E8","sha256":"37:22:B0:A5:1E:2E:07:83:C8:3B:DB:2B:B4:EE:4F:77:8E:0E:CB:1A:A4:FB:6B:4A:B0:34:5E:72:09:DA:44:00"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: live-kyc-verification.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 09:29:24 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nx-deployment-id: psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __dpl=psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs; Path=/; Max-Age=86400; SameSite=Lax; Secure\n__cf_bm=xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS; HttpOnly; SameSite=None; Secure; Path=/; Domain=live-kyc-verification.live; Expires=Tue, 13 Oct 2026 09:59:24 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a49d51d3fe855ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs","quoted":false,"path":"/","max_age":86400,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"__dpl=psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs; Path=/; Max-Age=86400; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS","quoted":false,"path":"/","domain":"live-kyc-verification.live","expires":"2026-10-13T09:59:24Z","raw_expires":"Tue, 13 Oct 2026 09:59:24 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS; HttpOnly; SameSite=None; Secure; Path=/; Domain=live-kyc-verification.live; Expires=Tue, 13 Oct 2026 09:59:24 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6855,"size_decoded":3820,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"bafcfd001e2e543542666814907f6c85","sha1":"2e4c72cec170dc1e218bed7fa94a1b164780f49c","sha256":"fd40c64deb916fbf65134ba81b12aa725cab652ede387554cdbb77f22002b342","sha512":"9bebcbeb41533320287340bd3a2a7c98f907a7d71077c66e03c41ca043308a0e1c15b4216b1f7b6316fbf5acbf0ecc03d24e6b9712d34857bdf6135a2653acc4","ssdeep":"192:QzkCE92hRVRob+YuNvaYvcqMWo4aaRN4i:9CphRVR6+YqvaYvRM74JRN7","tlshash":"dee1db7318409d2e0abaadf2f851f18dd292f109e466c97cf0ad54af25d1ed2c7a3931","first_seen":"2026-10-13T09:29:57.530261Z","last_seen":"2026-10-13T09:29:57.530261Z","times_seen":1,"resource_available":true,"data":null}},"time_used":685,"timings":{"blocked":0,"dns":73,"connect":1,"send":0,"wait":597,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"live-kyc-verification.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/assets/styles-9EgbZEWj.css","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://live-kyc-verification.live/","date":"2026-10-13T09:29:24.679Z","timestamp":1791883764679,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"live-kyc-verification.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Oct 2026 12:06:27 GMT","end":"Sat, 09 Jan 2027 13:06:23 GMT"},"fingerprint":{"sha1":"43:19:E1:98:C5:75:E9:A9:7F:85:D0:04:BF:9F:1F:BD:EB:CA:88:E8","sha256":"37:22:B0:A5:1E:2E:07:83:C8:3B:DB:2B:B4:EE:4F:77:8E:0E:CB:1A:A4:FB:6B:4A:B0:34:5E:72:09:DA:44:00"}}},"request":{"raw":"GET /assets/styles-9EgbZEWj.css HTTP/1.1\r\nHost: live-kyc-verification.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://live-kyc-verification.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs; __cf_bm=xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs"},{"name":"__cf_bm","value":"xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 09:29:24 GMT\r\ncontent-type: text/css; charset=utf-8\r\nx-deployment-id: psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a49d51d93f455ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94276,"size_decoded":16120,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65470)","md5":"806c2f22be4fc339eb4994460185b5a2","sha1":"fe57c4109e7a198c04c78346bd2224352576fae8","sha256":"55e3e6d32ee1f85ce157e53dd8bdc662f00b433a71a3658e9677871648b0fcf8","sha512":"45a74c0b429aee81d40972df7bbacd9756f70c18ef343c80c9b7372a55b441167be84acc3c47130fe0a870ae20906a51a437e947569e0bce3630545a4aabb839","ssdeep":"1536:wunvI5zophyLfICwyJEcuaqV4wCQ6lJfUDtujaNSsMq+WDhXX78TWXI732988R9C:7nvI5zophyLfTwyduaqV4wCQ6lpUDtu1","tlshash":"0b93d690b239e63f7d33a4f9a38cb89c610970c0dd7546e8fa16612246c7bf2ad77614","first_seen":"2026-10-13T09:23:49.487473Z","last_seen":"2026-10-13T09:29:57.531158Z","times_seen":2,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"live-kyc-verification.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/assets/index-BS5ftzXL.js","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://live-kyc-verification.live/","date":"2026-10-13T09:29:24.681Z","timestamp":1791883764681,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"live-kyc-verification.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Oct 2026 12:06:27 GMT","end":"Sat, 09 Jan 2027 13:06:23 GMT"},"fingerprint":{"sha1":"43:19:E1:98:C5:75:E9:A9:7F:85:D0:04:BF:9F:1F:BD:EB:CA:88:E8","sha256":"37:22:B0:A5:1E:2E:07:83:C8:3B:DB:2B:B4:EE:4F:77:8E:0E:CB:1A:A4:FB:6B:4A:B0:34:5E:72:09:DA:44:00"}}},"request":{"raw":"GET /assets/index-BS5ftzXL.js HTTP/1.1\r\nHost: live-kyc-verification.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://live-kyc-verification.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs; __cf_bm=xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs"},{"name":"__cf_bm","value":"xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 09:29:24 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a49d51d93f505ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":674263,"size_decoded":191723,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (50202)","md5":"6263ce41d679cc08cd0374a2fb8d7530","sha1":"3fe0c69cb93286cbfb1035bf1ec2de7ffe048a4f","sha256":"a9c520f4e10ca5ce2b71b65f2907aacaf5ccf9c82e559b635b61312e03eab5f2","sha512":"96ba69f462b9c8d82362889d96aef6587f32ce0612fa237261cc523b46a3d8dd21014cbfef7a6fc038044809d8b6d77dbabb49bd061b6ae9372776b3315cbfaa","ssdeep":"6144:hR0IrENfbxrbmkOtGvWHz6MtLmpMaa/7DkzIIPuYMxu7zEoQC/MBVD+cEjlI5Hff:kLx0LZIMxaz3Edp9n4/fRWSrUW4","tlshash":"c7e45dd473a6b0220bd681a2807f1502f3396555680e4418f268edef7bb9d84e6f7f78","first_seen":"2026-10-13T09:23:49.49214Z","last_seen":"2026-10-13T09:29:57.531791Z","times_seen":2,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"live-kyc-verification.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/assets/link-D4iki_Ag.js","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://live-kyc-verification.live/","date":"2026-10-13T09:29:24.688Z","timestamp":1791883764688,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"live-kyc-verification.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Oct 2026 12:06:27 GMT","end":"Sat, 09 Jan 2027 13:06:23 GMT"},"fingerprint":{"sha1":"43:19:E1:98:C5:75:E9:A9:7F:85:D0:04:BF:9F:1F:BD:EB:CA:88:E8","sha256":"37:22:B0:A5:1E:2E:07:83:C8:3B:DB:2B:B4:EE:4F:77:8E:0E:CB:1A:A4:FB:6B:4A:B0:34:5E:72:09:DA:44:00"}}},"request":{"raw":"GET /assets/link-D4iki_Ag.js HTTP/1.1\r\nHost: live-kyc-verification.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://live-kyc-verification.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs; __cf_bm=xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs"},{"name":"__cf_bm","value":"xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 09:29:24 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a49d51d94f7a5ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9279,"size_decoded":4742,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9275), with no line terminators","md5":"e7b85e414b9888584607b484c463c817","sha1":"91240ce1658405796e672e7ecfdee675bc6ccb19","sha256":"cf1d7b5bfb345b31ebedec3149ed8fadec5c3322c42c18cea3b6405fbe8bafde","sha512":"cad9d7642cfc3201c281fe89a369a4fb702653128151d2e88c5d49186cfcc8ac99388d0f48726491064cac4b99a5fed97b9b55edf4c114937e56cfa14fb8f8af","ssdeep":"192:o9Uh62fdOdhM4evFO1UyA3CgnNi2aDrdZwXOnP1aciR:oSh62fdOdz5qF+3dZVccu","tlshash":"b812d7e973c2f1b683da455790ab8425f23a5dd41c0da800f070b4a67e3096ad6f7f3a","first_seen":"2026-10-06T08:27:21.162278Z","last_seen":"2026-10-13T09:29:57.532279Z","times_seen":4,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"live-kyc-verification.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"live-kyc-verification.live/assets/useRouter-CwjitLz4.js","fqdn":"live-kyc-verification.live","domain":"live-kyc-verification.live","tld":"live"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://live-kyc-verification.live/","date":"2026-10-13T09:29:24.695Z","timestamp":1791883764695,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"live-kyc-verification.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Oct 2026 12:06:27 GMT","end":"Sat, 09 Jan 2027 13:06:23 GMT"},"fingerprint":{"sha1":"43:19:E1:98:C5:75:E9:A9:7F:85:D0:04:BF:9F:1F:BD:EB:CA:88:E8","sha256":"37:22:B0:A5:1E:2E:07:83:C8:3B:DB:2B:B4:EE:4F:77:8E:0E:CB:1A:A4:FB:6B:4A:B0:34:5E:72:09:DA:44:00"}}},"request":{"raw":"GET /assets/useRouter-CwjitLz4.js HTTP/1.1\r\nHost: live-kyc-verification.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://live-kyc-verification.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs; __cf_bm=xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs"},{"name":"__cf_bm","value":"xwW4bZ6a6Z2Z.xOEEdOZUnB.DclTFYyLZSGPDUynTQM-1791883763.8390644-1.0.1.1-MEre4hGSYbu2AEYXxekIUCbXlbP9Fj8W4O20xvLNLeIcWl5zSVtxkYE6Cq4IhhxXB2MC.YIRFBO_w1mPdqxuETFwpPjC3HlKQ9KTolM_Q7lVTkqTYSxHXiyIFHeS92zS"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 09:29:24 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.d76fd769-0677-433e-825d-627a7865ca66.1792488564.qCCKq279k8SotXvqciXXEakhyofuedT6MMIZsfXYAvs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a49d51d95f9f5ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":645,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"a11775e699774673b730b26bdf6e7948","sha1":"440535e9e8028f6628535eeffc9350c749536e78","sha256":"245e86ac62d16ed582f0713f7c5112c051294ffa377a72685c95af7a7a8b3619","sha512":"c8e5bf7227afed440ade2d214fc2ef91af99bd9b368c5af04a8aa1bf27960cb4be45360bfa60235c0e5f4e5f5fb4713afdad7e0d7915379b36b4e4dfe8b03e61","ssdeep":"","tlshash":"3dc08c2b948282b037020ce2403a80b39330b4a02348832048249d9862c88b8a53d9b4","first_seen":"2026-09-01T23:38:10.311766Z","last_seen":"2026-10-13T15:39:56.493499Z","times_seen":117,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"live-kyc-verification.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}