{"report_id":"e03338ba-0c8e-434d-8e9b-183acc9f7a55","version":0,"status":"done","tags":[],"date":"2026-08-24T02:01:22Z","url":{"schema":"http","addr":"worldlibertygroup.com/","fqdn":"worldlibertygroup.com","domain":"worldlibertygroup.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":0,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"worldlibertygroup.com/","fqdn":"worldlibertygroup.com","domain":"worldlibertygroup.com","tld":"com"},"title":"LibertyFi — Gateway to Digital Finance","dom":{"size":62175,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (59916)","md5":"6713635c6d6f1fa954bcfffe0152703f","sha1":"75baab4648a5ea1a6ffd6e4bbc9ff09c3dee4354","sha256":"9afede9173361f347d58d487516a754e5118c127a001cb2e46a1465a133b2316","sha512":"c884489ff164e8700d91c2259a12627dc1512fd2c4504eaf8cf58fc1e81f868d9cb96e65a0dee111df2074a7a41aef380cc7eb43592f8d3c179e804f9f5174ea","ssdeep":"768:Qqa8+ZfclKLZd7Wg4EIbT2eGRuFDBvq16X45d1S5U5f2Z3QRkXhAD:QqxadGhAD","tlshash":"2f53c8316344153ea1678be8f3a1773851afc399e74f886df5bc42e11b82d9cd96b280","dom_hash":"domhash683f546a9d683f1e5a2f09288ea6f405","first_seen":"2026-08-24T01:46:40.307808Z","last_seen":"2026-08-24T02:01:26.030969Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"worldlibertygroup.com/","fqdn":"worldlibertygroup.com","domain":"worldlibertygroup.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":0,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-28T02:01:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"worldlibertygroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"media.base44.com","ip":{"addr":"13.249.8.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-08-26","domain_rank":0,"first_seen":"2026-03-11T17:19:02.851517Z","last_seen":"2026-08-17T17:28:03.704464Z","alert_count":0,"request_count":5,"received_data":303066,"sent_data":3289,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-23T22:23:59.870946Z","alert_count":0,"request_count":1,"received_data":8959,"sent_data":567,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"worldlibertygroup.com","ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"domain_registered":"2026-08-20","domain_rank":0,"first_seen":"2026-08-24T01:46:35.440246Z","last_seen":"2026-08-24T01:46:35.440246Z","alert_count":8,"request_count":8,"received_data":1138249,"sent_data":4542,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-23T22:20:52.902616Z","alert_count":0,"request_count":4,"received_data":141640,"sent_data":2340,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"worldlibertygroup.com/assets/index-BCjNC3uf.js","fqdn":"worldlibertygroup.com","domain":"worldlibertygroup.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c21f021671c32881bbf2e3ce5c0a918","sha1":"237a27cca111c7aff762a74e8dd95b6c5ceab82f","sha256":"79dd01a9df8844e02cd27e3c15914950d6c6e774437a452839b6b1b2e64e76e4","sha512":"70f7e206c75c91aec2e91e7aaa8f24a27b04b59617bba871a0c4161ea58b83884041d8053849c87b778bda7eff151297edb3767070a21b87d2296e277f7059a6","ssdeep":"24576:PMpfT+B/o5KDWM/Qx9mahLkbxojH39y3swVEeDGhIJppK+0szY8d:PMpfT+B/EKDWM/Qx9mahLkbxojH39y3H","tlshash":"58254ac87192f56a87e345f0403f5107f23d6955a80dc464f239e8ea3e7484aa2bbf79","size":1043242,"data":"","first_seen":"2026-08-24T01:46:40.339594Z","last_seen":"2026-08-24T02:01:26.055869Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertygroup.com/","fqdn":"worldlibertygroup.com","domain":"worldlibertygroup.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"23b36320be1dda09f73338580c6490b0","sha1":"17eeb73b952cb768a0353e98e0928a184cf5cb88","sha256":"9c81d480ba5b6eea4310457aebd4f01257c4b87acb28aca1fd8ea1be0a7c58d2","sha512":"22bdc7410c5f962e3ae0e25267a14653551a23444b20e6b86bf2afa58860064c082eb500a6b6849a614f60c1a6536f47d5931cc57a2d21e0964ffa6806d37d27","ssdeep":"","tlshash":"d6c08c4e86e895360833b0260e8f6a0a226b034381cc89413fee17004fd7a25a0a29d1","size":173,"data":"","first_seen":"2026-07-05T00:58:57.127312Z","last_seen":"2026-08-24T02:01:26.059313Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"worldlibertygroup.com/api/apps/6a598b973b28cda124f4fdb5/analytics/track/batch","fqdn":"worldlibertygroup.com","domain":"worldlibertygroup.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://worldlibertygroup.com/","date":"2026-08-24T02:00:54.916Z","timestamp":1787536854916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertygroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 00:03:46 GMT","end":"Wed, 18 Nov 2026 01:03:44 GMT"},"fingerprint":{"sha1":"87:76:27:FC:DD:0F:92:CF:27:2C:BA:34:4B:12:2B:83:D0:77:63:93","sha256":"01:92:51:6A:54:8E:2D:98:0B:0E:0F:09:52:7B:93:16:79:91:3E:E7:EA:3E:27:27:0F:B0:F3:D9:95:90:B7:B7"}}},"request":{"raw":"POST /api/apps/6a598b973b28cda124f4fdb5/analytics/track/batch HTTP/1.1\r\nHost: worldlibertygroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertygroup.com/\r\nContent-Type: application/json\r\nX-App-Id: 6a598b973b28cda124f4fdb5\r\nX-Origin-URL: https://worldlibertygroup.com/\r\nX-Base44-Anonymous-Id: pu0qu08prng0qezgnc64v\r\nContent-Length: 189\r\nOrigin: https://worldlibertygroup.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":189,"data":"{\"events\":[{\"event_name\":\"__initialization_event__\",\"properties\":{\"referrer\":\"\"},\"timestamp\":\"2026-08-24T02:00:54.625Z\",\"page_url\":\"/\",\"user_id\":null,\"session_id\":\"pu0qu08prng0qezgnc64v\"}]}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 24 Aug 2026 02:00:55 GMT\r\ncontent-type: application/json\r\ncontent-length: 18\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Request-ID, X-Error-Code, x-wix-request-id, WWW-Authenticate\r\ncontent-encoding: br\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 34a1f78b-adcb-4054\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: a2fec41f3e4b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":618,"mime_type":"application/json","magic":"JSON text data","md5":"e429df1a22e7d9356a95dec9530e5396","sha1":"16549028e0fa19014d65eda12c44d95581f5ea27","sha256":"31afafe7ddcefe80ed34aaf3ffb13f8b70904529a45f35ee02357ac44b1331ed","sha512":"c92f0c8d98694aab2885c89306f36b169f57a2639ba150ac3f2b16aa50c65d534b281107efba56cc3258e11996e2859442563c3b6629767f441a62aa7d2c41cd","ssdeep":"","tlshash":"c46000003f000cc0000000c3000003c3c0003030003030ccc003000000c3c00000c000","first_seen":"2026-01-11T21:59:27.029211Z","last_seen":"2026-08-25T15:12:27.979291Z","times_seen":2175,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"worldlibertygroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://worldlibertygroup.com/","date":"2026-08-24T02:00:55.530Z","timestamp":1787536855530,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://worldlibertygroup.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:10:47 GMT\r\nexpires: Thu, 19 Aug 2027 13:10:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 391808\r\nlast-modified: Wed, 10 Sep 2025 16:48:54 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38404,"size_decoded":39217,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38404, version 1.0","md5":"ef05b30d6e5ca86ef9deda8c5bfa599a","sha1":"daeff530b773fd9ef9c50a803021a2cfba76083a","sha256":"e0c764a8e9e1cce92163c55bac4b2ad6cd4cf8c696ce2289ab5c41565e65b7e2","sha512":"0d5b2444bfe9e47a0665b6f25bf8bb161346888f8e5c49f2b8b4a6c4baacf3cde37a95aa8c3d5800d545fb5e684e3833df41582671073df12b60a42bf8ebb331","ssdeep":"768:FwI4wBedSjX1mVXUjvqnWIiYvffoRgF4vY7Ooy263B1kzEj9SSJxE:aIYdSjX+rWIiYXQRS4iTy2637ky0ExE","tlshash":"0603f1cb9b682138e95f513b0b8b13dd56ad112e9591d9a1821d8c0c96f033e5fff31a","first_seen":"2025-09-11T16:59:11.155785Z","last_seen":"2026-08-25T14:47:20.33122Z","times_seen":67906,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":37,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media.base44.com/images/public/6a598b973b28cda124f4fdb5/c1f1e14d2_230113120916-donald-trump-072622.jpg/v1/fill/w_20,h_15,fp_0.50_0.32,q_20,usm_0.66_1.00_0.01,enc_webp,quality_auto/c1f1e14d2_230113120916-donald-trump-072622.webp","fqdn":"media.base44.com","domain":"base44.com","tld":"com"},"ip":{"addr":"13.249.8.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldlibertygroup.com/","date":"2026-08-24T02:00:55.540Z","timestamp":1787536855540,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.base44.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 11:14:45 GMT","end":"Sat, 24 Oct 2026 11:14:44 GMT"},"fingerprint":{"sha1":"D6:C3:6C:E5:4D:95:1F:3F:B4:1E:6A:F0:BC:70:CA:CF:A7:E5:01:3B","sha256":"AC:81:CC:CA:45:DC:9A:2C:7A:58:07:91:23:B1:B8:5C:4B:91:4E:82:8A:31:6C:E6:87:B0:E4:CB:17:23:1D:F8"}}},"request":{"raw":"GET /images/public/6a598b973b28cda124f4fdb5/c1f1e14d2_230113120916-donald-trump-072622.jpg/v1/fill/w_20,h_15,fp_0.50_0.32,q_20,usm_0.66_1.00_0.01,enc_webp,quality_auto/c1f1e14d2_230113120916-donald-trump-072622.webp HTTP/1.1\r\nHost: media.base44.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertygroup.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\ncontent-length: 794\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-seen-by: image-manipulator-578dc678f4-6kq5l\r\nx-wixmp-trace: projects/wix-media-infrastructure/traces/3ILFUwL6hbzFMeZvDQB7pefKxtw\r\ndate: Mon, 24 Aug 2026 01:46:00 GMT\r\nvia: 1.1 google, 1.1 014a11ebf8efb524b8c418cda7b185d6.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nage: 895\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: MJItQqJL-XDZLjetiK6lY_NZM2ibC61D_09KJ4Hqq2fiEZNxz0NWOQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":794,"size_decoded":1356,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"081282150091bf4bb9028edd152b68f8","sha1":"b451362b2e8a92d966da4a6cb0478fdbb3bd16bb","sha256":"a9102b710402fde3e7f0866dfbf24c5ee81ed6dee1f9bf35e97a85718132b708","sha512":"00a3a7085bcb92da090d62b789fda44c8fdaa6155f8769c0b411aa69c380bae9ad7a080b3e7edf1d6e5a6f8455d369ae5a727c9841fb53500199997624c35508","ssdeep":"","tlshash":"060123aa67635f42c62135bc9ca62b89fb072f364620e9c213224916aec1dc0c95abc4","first_seen":"2026-08-24T01:46:40.321897Z","last_seen":"2026-08-24T02:01:26.042841Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertygroup.com/api/apps/6a598b973b28cda124f4fdb5/entities/User/me","fqdn":"worldlibertygroup.com","domain":"worldlibertygroup.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://worldlibertygroup.com/","date":"2026-08-24T02:00:55.543Z","timestamp":1787536855543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertygroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 00:03:46 GMT","end":"Wed, 18 Nov 2026 01:03:44 GMT"},"fingerprint":{"sha1":"87:76:27:FC:DD:0F:92:CF:27:2C:BA:34:4B:12:2B:83:D0:77:63:93","sha256":"01:92:51:6A:54:8E:2D:98:0B:0E:0F:09:52:7B:93:16:79:91:3E:E7:EA:3E:27:27:0F:B0:F3:D9:95:90:B7:B7"}}},"request":{"raw":"GET /api/apps/6a598b973b28cda124f4fdb5/entities/User/me HTTP/1.1\r\nHost: worldlibertygroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertygroup.com/\r\nX-App-Id: 6a598b973b28cda124f4fdb5\r\nX-Origin-URL: https://worldlibertygroup.com/\r\nX-Base44-Anonymous-Id: pu0qu08prng0qezgnc64v\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\ndate: Mon, 24 Aug 2026 02:00:55 GMT\r\ncontent-type: application/json\r\ncontent-length: 122\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: e95afef8-0f38-456a\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-render-origin-server: uvicorn\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2fec4231a8d0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164,"size_decoded":628,"mime_type":"application/json","magic":"JSON text data","md5":"62508598590abe8e69d9cc2c9fcbdc03","sha1":"e89f180d78ee2550e3b23fc57bc5ac3e594aeceb","sha256":"229a801afc84656154668655fc061817f95379074c71ba8596d43f7fd135b18d","sha512":"996b6958fea93180d8beb0ffd2e95207f1c6a89d9bd63d62356eca8601a5c0ac165d776264508b1b1083a86844c47426efb8b280e4401c0bf8235313bfd56b62","ssdeep":"","tlshash":"6ec08cd5e2d81c564e63238379507e4023adf42b01415c222159fa6822e913cd3eb2a4","first_seen":"2026-02-25T15:48:26.461491Z","last_seen":"2026-08-25T15:11:28.455924Z","times_seen":1835,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"worldlibertygroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertygroup.com/assets/index-DZ9qDoKB.css","fqdn":"worldlibertygroup.com","domain":"worldlibertygroup.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://worldlibertygroup.com/","date":"2026-08-24T02:00:53.934Z","timestamp":1787536853934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertygroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 00:03:46 GMT","end":"Wed, 18 Nov 2026 01:03:44 GMT"},"fingerprint":{"sha1":"87:76:27:FC:DD:0F:92:CF:27:2C:BA:34:4B:12:2B:83:D0:77:63:93","sha256":"01:92:51:6A:54:8E:2D:98:0B:0E:0F:09:52:7B:93:16:79:91:3E:E7:EA:3E:27:27:0F:B0:F3:D9:95:90:B7:B7"}}},"request":{"raw":"GET /assets/index-DZ9qDoKB.css HTTP/1.1\r\nHost: worldlibertygroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertygroup.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 24 Aug 2026 02:00:54 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncache-control: public, max-age=604800\r\nlast-modified: Mon, 24 Aug 2026 02:00:54 GMT\r\ncontent-encoding: br\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 2cfb8149-6df6-4206\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-render-origin-server: uvicorn\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\ncf-ray: a2fec4190f590731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88019,"size_decoded":15402,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ae7fb1cd3378179cb1c555a4168d78e7","sha1":"de5a231e587e8f733a1430658d0ede7d04d026a1","sha256":"df6ecc658d964d45bc262fc131847f73e5600328af952466a3e3467f3c459b68","sha512":"4628f0c96a0a4fc0034251c08abac7319d6cdb0377d28e47fbdc822a31ad9f7e1864b3766596864b5c96d52ae4a5b7e35cc8c3339f57f7a454b00f2cfd1f4291","ssdeep":"1536:IhbjwNRzBVkc64tMyemGOQJ378VQZkt5FNCoRS1:IhbjwNR7kutMyemGOQJ378VQZkt5FfR2","tlshash":"d1838719b959603f3c27a1f4c3cc75aca51af0c0de3a06b9bd9a41216bd23fa5dbb504","first_seen":"2026-08-24T01:46:40.334758Z","last_seen":"2026-08-24T02:01:26.046374Z","times_seen":2,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"worldlibertygroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertygroup.com/api/app-logs/6a598b973b28cda124f4fdb5/log-user-in-app/home","fqdn":"worldlibertygroup.com","domain":"worldlibertygroup.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://worldlibertygroup.com/","date":"2026-08-24T02:00:54.642Z","timestamp":1787536854642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertygroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 00:03:46 GMT","end":"Wed, 18 Nov 2026 01:03:44 GMT"},"fingerprint":{"sha1":"87:76:27:FC:DD:0F:92:CF:27:2C:BA:34:4B:12:2B:83:D0:77:63:93","sha256":"01:92:51:6A:54:8E:2D:98:0B:0E:0F:09:52:7B:93:16:79:91:3E:E7:EA:3E:27:27:0F:B0:F3:D9:95:90:B7:B7"}}},"request":{"raw":"POST /api/app-logs/6a598b973b28cda124f4fdb5/log-user-in-app/home HTTP/1.1\r\nHost: worldlibertygroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertygroup.com/\r\nOrigin: https://worldlibertygroup.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 24 Aug 2026 02:00:54 GMT\r\ncontent-type: application/json\r\ncontent-length: 20\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Request-ID, X-Error-Code, x-wix-request-id, WWW-Authenticate\r\ncontent-encoding: br\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 5ca86213-fb27-4f77\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-render-origin-server: uvicorn\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2fec41d7c6a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":620,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-08-25T14:39:49.400858Z","times_seen":185605,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"worldlibertygroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"media.base44.com/images/public/6a598b973b28cda124f4fdb5/c42e59043_generated_image.png","fqdn":"media.base44.com","domain":"base44.com","tld":"com"},"ip":{"addr":"13.249.8.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldlibertygroup.com/","date":"2026-08-24T02:00:55.112Z","timestamp":1787536855112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.base44.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 11:14:45 GMT","end":"Sat, 24 Oct 2026 11:14:44 GMT"},"fingerprint":{"sha1":"D6:C3:6C:E5:4D:95:1F:3F:B4:1E:6A:F0:BC:70:CA:CF:A7:E5:01:3B","sha256":"AC:81:CC:CA:45:DC:9A:2C:7A:58:07:91:23:B1:B8:5C:4B:91:4E:82:8A:31:6C:E6:87:B0:E4:CB:17:23:1D:F8"}}},"request":{"raw":"GET /images/public/6a598b973b28cda124f4fdb5/c42e59043_generated_image.png HTTP/1.1\r\nHost: media.base44.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertygroup.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 50184\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-seen-by: image-manipulator-578dc678f4-d6wzt\r\nx-wixmp-trace: projects/wix-media-infrastructure/traces/3IHycBgEyXvrKYEjueQJFnBWdu0\r\ndate: Sat, 22 Aug 2026 21:57:45 GMT\r\nvia: 1.1 google, 1.1 014a11ebf8efb524b8c418cda7b185d6.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nage: 100990\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: hc_JStS6p2a6dGXti-vpQxbD_jnFIL-KjUgl1WhB9m_AdK-lyxjk0Q==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":50184,"size_decoded":50750,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"0b4e88699994d8fd9a1cc92aea8d31ce","sha1":"24bb45106763d1cd654b77f91bf1530b249f36b8","sha256":"a2a894dfbcffa4357a8aaef6fb31eca7c0aa9d8a1ae87b77ea2adf780db589b4","sha512":"c2b8ee893914fc6fc3aa8565a7b167498cf4e28e89738a0ba8e0cf41f14859e4bb82dff146dfbe2de8ae3fe54931a506a001c0a66fe29122e84c3eba159e0d58","ssdeep":"768:o2K/0CKG2cE6o55fG6HCbFoYG0kWvUr7gxP/75SEqsDYoY64ZjuplMp5CP9:xi2n6o7fG31DvUr7g17i0NY644e2","tlshash":"3f33d077ff1953d6c769e73052e68f157e31e2b1a382981498a288633cd73007b42bad","first_seen":"2026-08-24T01:46:40.327807Z","last_seen":"2026-08-24T02:01:26.04908Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":27,"connect":16,"send":0,"wait":15,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media.base44.com/images/public/6a598b973b28cda124f4fdb5/b68390f11_logo.png","fqdn":"media.base44.com","domain":"base44.com","tld":"com"},"ip":{"addr":"13.249.8.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldlibertygroup.com/","date":"2026-08-24T02:00:55.114Z","timestamp":1787536855114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.base44.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 11:14:45 GMT","end":"Sat, 24 Oct 2026 11:14:44 GMT"},"fingerprint":{"sha1":"D6:C3:6C:E5:4D:95:1F:3F:B4:1E:6A:F0:BC:70:CA:CF:A7:E5:01:3B","sha256":"AC:81:CC:CA:45:DC:9A:2C:7A:58:07:91:23:B1:B8:5C:4B:91:4E:82:8A:31:6C:E6:87:B0:E4:CB:17:23:1D:F8"}}},"request":{"raw":"GET /images/public/6a598b973b28cda124f4fdb5/b68390f11_logo.png HTTP/1.1\r\nHost: media.base44.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertygroup.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 64895\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-seen-by: image-manipulator-578dc678f4-9nzhl\r\nx-wixmp-trace: projects/wix-media-infrastructure/traces/3I9yRYfXjqZECaiN3OkNuatgA4T\r\ndate: Thu, 20 Aug 2026 01:57:51 GMT\r\nvia: 1.1 google, 1.1 014a11ebf8efb524b8c418cda7b185d6.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nage: 345784\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: NIccG1PhJtzNSXOR6RoJRwy4i8YlNMa7xTmBTtV4AOzs97REbHcfaQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":64895,"size_decoded":65461,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"fb831de50a80899466846e6c87e141eb","sha1":"e2d105142aebe53771ac3078e0d02453b3fb3a22","sha256":"ab7deaa28bd53df3c6b9e33fc6e59773e1539f6f204f65de952e326faceb3305","sha512":"2c7a2f53abff92798091e2774f504333f31cd5e1dc82085cc478ddc152ecd27b09df0901467fb8f67f24726b2e972461f5aadcef42a99725107e9aadc47b30b3","ssdeep":"1536:yYt2b/r+b+NoStQOzFFiNzxQdIG4/JmKvOtIbR2cOyxo:yYa/r+ya4QAFUoXaDvOqw1yxo","tlshash":"1453f1bbaf0008f3c7d5b5b610a2e987ff3214499bf0886766d244273a1b7417d6d94e","first_seen":"2026-08-24T01:46:40.330572Z","last_seen":"2026-08-24T02:01:26.050484Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":12,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://worldlibertygroup.com/","date":"2026-08-24T02:00:55.533Z","timestamp":1787536855533,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://worldlibertygroup.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:10:47 GMT\r\nexpires: Thu, 19 Aug 2027 13:10:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 391808\r\nlast-modified: Wed, 10 Sep 2025 16:48:54 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38404,"size_decoded":39217,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38404, version 1.0","md5":"ef05b30d6e5ca86ef9deda8c5bfa599a","sha1":"daeff530b773fd9ef9c50a803021a2cfba76083a","sha256":"e0c764a8e9e1cce92163c55bac4b2ad6cd4cf8c696ce2289ab5c41565e65b7e2","sha512":"0d5b2444bfe9e47a0665b6f25bf8bb161346888f8e5c49f2b8b4a6c4baacf3cde37a95aa8c3d5800d545fb5e684e3833df41582671073df12b60a42bf8ebb331","ssdeep":"768:FwI4wBedSjX1mVXUjvqnWIiYvffoRgF4vY7Ooy263B1kzEj9SSJxE:aIYdSjX+rWIiYXQRS4iTy2637ky0ExE","tlshash":"0603f1cb9b682138e95f513b0b8b13dd56ad112e9591d9a1821d8c0c96f033e5fff31a","first_seen":"2025-09-11T16:59:11.155785Z","last_seen":"2026-08-25T14:47:20.33122Z","times_seen":67906,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":32,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://worldlibertygroup.com/","date":"2026-08-24T02:00:55.528Z","timestamp":1787536855528,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://worldlibertygroup.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:10:47 GMT\r\nexpires: Thu, 19 Aug 2027 13:10:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 391808\r\nlast-modified: Wed, 10 Sep 2025 16:48:54 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38404,"size_decoded":39217,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38404, version 1.0","md5":"ef05b30d6e5ca86ef9deda8c5bfa599a","sha1":"daeff530b773fd9ef9c50a803021a2cfba76083a","sha256":"e0c764a8e9e1cce92163c55bac4b2ad6cd4cf8c696ce2289ab5c41565e65b7e2","sha512":"0d5b2444bfe9e47a0665b6f25bf8bb161346888f8e5c49f2b8b4a6c4baacf3cde37a95aa8c3d5800d545fb5e684e3833df41582671073df12b60a42bf8ebb331","ssdeep":"768:FwI4wBedSjX1mVXUjvqnWIiYvffoRgF4vY7Ooy263B1kzEj9SSJxE:aIYdSjX+rWIiYXQRS4iTy2637ky0ExE","tlshash":"0603f1cb9b682138e95f513b0b8b13dd56ad112e9591d9a1821d8c0c96f033e5fff31a","first_seen":"2025-09-11T16:59:11.155785Z","last_seen":"2026-08-25T14:47:20.33122Z","times_seen":67906,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":2,"connect":30,"send":0,"wait":25,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media.base44.com/images/public/6a598b973b28cda124f4fdb5/fc6a7efbb_generated_image.png","fqdn":"media.base44.com","domain":"base44.com","tld":"com"},"ip":{"addr":"13.249.8.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldlibertygroup.com/","date":"2026-08-24T02:00:55.539Z","timestamp":1787536855539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.base44.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 11:14:45 GMT","end":"Sat, 24 Oct 2026 11:14:44 GMT"},"fingerprint":{"sha1":"D6:C3:6C:E5:4D:95:1F:3F:B4:1E:6A:F0:BC:70:CA:CF:A7:E5:01:3B","sha256":"AC:81:CC:CA:45:DC:9A:2C:7A:58:07:91:23:B1:B8:5C:4B:91:4E:82:8A:31:6C:E6:87:B0:E4:CB:17:23:1D:F8"}}},"request":{"raw":"GET /images/public/6a598b973b28cda124f4fdb5/fc6a7efbb_generated_image.png HTTP/1.1\r\nHost: media.base44.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertygroup.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 163582\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-seen-by: image-manipulator-578dc678f4-qslvd\r\nx-wixmp-trace: projects/wix-media-infrastructure/traces/3IGPSfDmFwBLWhF1sLKPWN7y6WL\r\ndate: Sat, 22 Aug 2026 08:38:52 GMT\r\nvia: 1.1 google, 1.1 014a11ebf8efb524b8c418cda7b185d6.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nage: 148923\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: IFr82RGxWXroA0cH-sigfL-RmdzQ5BV0qm728SHrsyRz91nNgp6fmA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":163582,"size_decoded":164149,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"add333abc73d6b1d07fd61938a8c9938","sha1":"fbdd4d828fe5cd2eb3d8a23afc1a1220b54f8c82","sha256":"c57c1856aa425a8c90db0650dc86ce82ad27d090e0c0dbad5efa18a93585cbfd","sha512":"54f01541ea53f91f5494d030fb7ccf7e8714f27fbe8de19eb16a2502b83971d62dce80a4920c94d73aea0921ae0dbec6b3cf6e1872d0de6941259a21a90fc7cb","ssdeep":"3072:kW+IImv+9pRwk7BSIJbjw8ZOPA0w84FPybgImg8RE4VNLDe4hLv2vKmECB:d9PvETDvVZx0w82PybFAVNXe4hLvbCB","tlshash":"4df312e6ab8840d2df46dd3498df0a128793b08c96c75462e1f7882aef27f54b22d54d","first_seen":"2026-08-24T01:46:40.318075Z","last_seen":"2026-08-24T02:01:26.051832Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media.base44.com/images/public/6a598b973b28cda124f4fdb5/c1f1e14d2_230113120916-donald-trump-072622.jpg/v1/fill/w_511,h_384,fp_0.50_0.32,q_90,usm_0.66_1.00_0.01,enc_webp,quality_auto/c1f1e14d2_230113120916-donald-trump-072622.webp","fqdn":"media.base44.com","domain":"base44.com","tld":"com"},"ip":{"addr":"13.249.8.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://worldlibertygroup.com/","date":"2026-08-24T02:00:55.549Z","timestamp":1787536855549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.base44.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 11:14:45 GMT","end":"Sat, 24 Oct 2026 11:14:44 GMT"},"fingerprint":{"sha1":"D6:C3:6C:E5:4D:95:1F:3F:B4:1E:6A:F0:BC:70:CA:CF:A7:E5:01:3B","sha256":"AC:81:CC:CA:45:DC:9A:2C:7A:58:07:91:23:B1:B8:5C:4B:91:4E:82:8A:31:6C:E6:87:B0:E4:CB:17:23:1D:F8"}}},"request":{"raw":"GET /images/public/6a598b973b28cda124f4fdb5/c1f1e14d2_230113120916-donald-trump-072622.jpg/v1/fill/w_511,h_384,fp_0.50_0.32,q_90,usm_0.66_1.00_0.01,enc_webp,quality_auto/c1f1e14d2_230113120916-donald-trump-072622.webp HTTP/1.1\r\nHost: media.base44.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertygroup.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\ncontent-length: 20786\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-seen-by: image-manipulator-578dc678f4-2lqcq\r\nx-wixmp-trace: projects/wix-media-infrastructure/traces/3ILFUvVy9krz3dS2Ah6FpwcH8zk\r\ndate: Mon, 24 Aug 2026 01:46:00 GMT\r\nvia: 1.1 google, 1.1 014a11ebf8efb524b8c418cda7b185d6.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nage: 895\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: IXzRgbr6P3L-LWY9yPAg3yKZeU_NUMXQghknIGAaTzDhvdPMSFsH4w==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":20786,"size_decoded":21350,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"91129d958e1ce3b426e5e40f0c6b9054","sha1":"54e54c04cfc6c32ababa58b52f50abfcf88feea5","sha256":"6d2d46ce2f3655fec0172949c2e233df2a0553c03d6f0aada8c6d14e783a10ba","sha512":"5b6fe7fd7dfbd309009df039015489b9456c716e435cb7a2c345c8713fa8fb559c80a7b71e819b838a421a38b7f05e987e950a308618f711d11fa8f7bcde0395","ssdeep":"384:uHK8BJ9PCvKKBvH8nJqmiiAMH4N9Zg+0l20F+rAuLMjdkVluojQr970ctj:DG9KvK6P2sMYN9Zg+0l20F+rAjjdk+DL","tlshash":"6792e1e23f5900a1e122e6789c70f33a6c7b69b6d68170c53764044d0bb2b76eed8ec1","first_seen":"2026-08-24T01:46:40.324938Z","last_seen":"2026-08-24T02:01:26.052967Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertygroup.com/","fqdn":"worldlibertygroup.com","domain":"worldlibertygroup.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-24T02:00:52.992Z","timestamp":1787536852992,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertygroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 00:03:46 GMT","end":"Wed, 18 Nov 2026 01:03:44 GMT"},"fingerprint":{"sha1":"87:76:27:FC:DD:0F:92:CF:27:2C:BA:34:4B:12:2B:83:D0:77:63:93","sha256":"01:92:51:6A:54:8E:2D:98:0B:0E:0F:09:52:7B:93:16:79:91:3E:E7:EA:3E:27:27:0F:B0:F3:D9:95:90:B7:B7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: worldlibertygroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 24 Aug 2026 02:00:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 916\r\ncontent-encoding: br\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 3fc7b8a1-c5f3-4951\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2fec413ae4b0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2275,"size_decoded":1429,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"bcc34570e31e9b951116bbf68084a17f","sha1":"30602e29cbe6922ecd3e85edea0dd9eed281fa8b","sha256":"18388d670b0d8fb93cd41d6d9242080722da4311bcf5350f4544199ba13ad50f","sha512":"3238a528e7efeef08d1857dfa0151de4c7d413f3e2bd98ffb80b867fb4da6ff5179727d16ec37b3570e34b97f5480ffb5a1c636817df80086aa5ea1d3adadff3","ssdeep":"","tlshash":"0c416549e8a01002c6316359af8f782c6d16e553724bca40baddd6459f81f22c5f7bdc","first_seen":"2026-08-24T01:46:40.332843Z","last_seen":"2026-08-24T02:01:26.054048Z","times_seen":2,"resource_available":false,"data":null}},"time_used":741,"timings":{"blocked":-1,"dns":59,"connect":1,"send":0,"wait":668,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"worldlibertygroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFRD-vYSZviVYUb_rj3ij__anPXDTnCjmHKM4nYO7KN_naUXtHA-Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://worldlibertygroup.com/","date":"2026-08-24T02:00:55.534Z","timestamp":1787536855534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFRD-vYSZviVYUb_rj3ij__anPXDTnCjmHKM4nYO7KN_naUXtHA-Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://worldlibertygroup.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23176\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 09:44:42 GMT\r\nexpires: Thu, 19 Aug 2027 09:44:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 404173\r\nlast-modified: Wed, 10 Sep 2025 16:48:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23176,"size_decoded":23989,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23176, version 1.0","md5":"7ac3358f7c5af4f9215af7611432f6eb","sha1":"4a37468976ae6135ffbc62601f9ecdeaf1fe1707","sha256":"8176ed854ef40b2cdebbdb7a1fd9283b3dada1e87c8e89d003f3485fc3c7435b","sha512":"a5c71731fa2dc939ca3a05a2e3a2a8905bd265a751a81846fd7a9543db764543451712de7bed2eb8ad841abe7879170bc64f4f6223c299b40903341dcbcc224c","ssdeep":"384:gl+1mf1gqyU0bXTSmr70erm6MUlF4KEtrIpJ5NE5+xq61q5oXJ3OsPBWtHT8dgfc:G+4qSus6MUlaKEtrIpJU5O7r55Wt7f4Z","tlshash":"88a2e05d6abfc6c5838d61a69af9752cfe13284a20074fc70c51b5a1ef3d4f25134a2d","first_seen":"2025-08-22T08:50:42.212145Z","last_seen":"2026-08-24T03:06:59.673782Z","times_seen":176,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":17,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertygroup.com/assets/index-BCjNC3uf.js","fqdn":"worldlibertygroup.com","domain":"worldlibertygroup.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://worldlibertygroup.com/","date":"2026-08-24T02:00:53.932Z","timestamp":1787536853932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertygroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 00:03:46 GMT","end":"Wed, 18 Nov 2026 01:03:44 GMT"},"fingerprint":{"sha1":"87:76:27:FC:DD:0F:92:CF:27:2C:BA:34:4B:12:2B:83:D0:77:63:93","sha256":"01:92:51:6A:54:8E:2D:98:0B:0E:0F:09:52:7B:93:16:79:91:3E:E7:EA:3E:27:27:0F:B0:F3:D9:95:90:B7:B7"}}},"request":{"raw":"GET /assets/index-BCjNC3uf.js HTTP/1.1\r\nHost: worldlibertygroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertygroup.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 24 Aug 2026 02:00:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800\r\nlast-modified: Mon, 24 Aug 2026 02:00:54 GMT\r\ncontent-encoding: br\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 1d85181a-6a32-4cc6\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-render-origin-server: uvicorn\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\ncf-ray: a2fec4190f570731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1043242,"size_decoded":312720,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37756)","md5":"5c21f021671c32881bbf2e3ce5c0a918","sha1":"237a27cca111c7aff762a74e8dd95b6c5ceab82f","sha256":"79dd01a9df8844e02cd27e3c15914950d6c6e774437a452839b6b1b2e64e76e4","sha512":"70f7e206c75c91aec2e91e7aaa8f24a27b04b59617bba871a0c4161ea58b83884041d8053849c87b778bda7eff151297edb3767070a21b87d2296e277f7059a6","ssdeep":"24576:PMpfT+B/o5KDWM/Qx9mahLkbxojH39y3swVEeDGhIJppK+0szY8d:PMpfT+B/EKDWM/Qx9mahLkbxojH39y3H","tlshash":"58254ac87192f56a87e345f0403f5107f23d6955a80dc464f239e8ea3e7484aa2bbf79","first_seen":"2026-08-24T01:46:40.339594Z","last_seen":"2026-08-24T02:01:26.055869Z","times_seen":2,"resource_available":true,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"worldlibertygroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Playfair+Display:ital,wght@0,600;0,700;0,800;0,900;1,600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://worldlibertygroup.com/","date":"2026-08-24T02:00:54.456Z","timestamp":1787536854456,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=Playfair+Display:ital,wght@0,600;0,700;0,800;0,900;1,600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertygroup.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 24 Aug 2026 02:00:54 GMT\r\ndate: Mon, 24 Aug 2026 02:00:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8275,"size_decoded":1332,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c383675a006b80f3bc4ce326fcee807e","sha1":"87e6006ae0cc0c222f4ac6e4838772172009b4c7","sha256":"90f35f3535f4683ca802ca8ba0271fb3fde08bb0357de331945893b449ee9f32","sha512":"7748893012bf1928384997f9b9e966dc476bbf754e3a216d450e0d230be8dee98869107ed471df074e01ec19c85866e60d179d4311e9f3d1b354ed2c616bf1b6","ssdeep":"192:JJEK293MEK290EK29AXEK29HZr2om/er2vNr2btzr26qr2om/dr2vOr2btsr26DJ:JJn293Mn290n29on29HF2R/Y2v52bp2q","tlshash":"0502cda20667a6109b434cc327cfbf229dae60507081827d6ffe1ddc5c9bd269264b0d","first_seen":"2026-08-24T01:46:40.341325Z","last_seen":"2026-08-24T02:01:26.056858Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":33,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertygroup.com/api/apps/6a598b973b28cda124f4fdb5/entities/User/me","fqdn":"worldlibertygroup.com","domain":"worldlibertygroup.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://worldlibertygroup.com/","date":"2026-08-24T02:00:54.638Z","timestamp":1787536854638,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertygroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 00:03:46 GMT","end":"Wed, 18 Nov 2026 01:03:44 GMT"},"fingerprint":{"sha1":"87:76:27:FC:DD:0F:92:CF:27:2C:BA:34:4B:12:2B:83:D0:77:63:93","sha256":"01:92:51:6A:54:8E:2D:98:0B:0E:0F:09:52:7B:93:16:79:91:3E:E7:EA:3E:27:27:0F:B0:F3:D9:95:90:B7:B7"}}},"request":{"raw":"GET /api/apps/6a598b973b28cda124f4fdb5/entities/User/me HTTP/1.1\r\nHost: worldlibertygroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertygroup.com/\r\nX-App-Id: 6a598b973b28cda124f4fdb5\r\nX-Origin-URL: https://worldlibertygroup.com/\r\nX-Base44-Anonymous-Id: pu0qu08prng0qezgnc64v\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\ndate: Mon, 24 Aug 2026 02:00:54 GMT\r\ncontent-type: application/json\r\ncontent-length: 122\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 5e9c5930-34ef-4e73\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: a2fec41d7c5f0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164,"size_decoded":628,"mime_type":"application/json","magic":"JSON text data","md5":"62508598590abe8e69d9cc2c9fcbdc03","sha1":"e89f180d78ee2550e3b23fc57bc5ac3e594aeceb","sha256":"229a801afc84656154668655fc061817f95379074c71ba8596d43f7fd135b18d","sha512":"996b6958fea93180d8beb0ffd2e95207f1c6a89d9bd63d62356eca8601a5c0ac165d776264508b1b1083a86844c47426efb8b280e4401c0bf8235313bfd56b62","ssdeep":"","tlshash":"6ec08cd5e2d81c564e63238379507e4023adf42b01415c222159fa6822e913cd3eb2a4","first_seen":"2026-02-25T15:48:26.461491Z","last_seen":"2026-08-25T15:11:28.455924Z","times_seen":1835,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"worldlibertygroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldlibertygroup.com/api/apps/public/prod/public-settings/by-id/6a598b973b28cda124f4fdb5","fqdn":"worldlibertygroup.com","domain":"worldlibertygroup.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://worldlibertygroup.com/","date":"2026-08-24T02:00:54.645Z","timestamp":1787536854645,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldlibertygroup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 00:03:46 GMT","end":"Wed, 18 Nov 2026 01:03:44 GMT"},"fingerprint":{"sha1":"87:76:27:FC:DD:0F:92:CF:27:2C:BA:34:4B:12:2B:83:D0:77:63:93","sha256":"01:92:51:6A:54:8E:2D:98:0B:0E:0F:09:52:7B:93:16:79:91:3E:E7:EA:3E:27:27:0F:B0:F3:D9:95:90:B7:B7"}}},"request":{"raw":"GET /api/apps/public/prod/public-settings/by-id/6a598b973b28cda124f4fdb5 HTTP/1.1\r\nHost: worldlibertygroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://worldlibertygroup.com/\r\nX-App-Id: 6a598b973b28cda124f4fdb5\r\nX-Origin-URL: https://worldlibertygroup.com/\r\nX-Base44-Anonymous-Id: pu0qu08prng0qezgnc64v\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 24 Aug 2026 02:00:55 GMT\r\ncontent-type: application/json\r\ncontent-length: 62\r\ncontent-encoding: br\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 5a61f728-44de-4921\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: a2fec41d8c6e0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74,"size_decoded":535,"mime_type":"application/json","magic":"JSON text data","md5":"d9dc32f6637ba3822ffafdfec5531153","sha1":"8b2ae338aae40aefedd9e4bf354acb04bbb9b068","sha256":"26fedd9cd58e1737690de782e6ab9e860e5b978722951e6342b4dd09d3633e1b","sha512":"d4198e1611b2e81b1da1e383c57c794255ffdcd0a365231731579fb6d2d62186a4131b83336843943f6780901c13144d2b8ade119604b30255e371eb2f0cad53","ssdeep":"","tlshash":"47a011022a2c888a82880e0a0c0222b2000a00202c8aebaa00b2f00200e028282082a3","first_seen":"2026-08-24T01:46:40.344904Z","last_seen":"2026-08-24T02:01:26.057962Z","times_seen":2,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":721,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"worldlibertygroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}
