{"report_id":"f554e838-51e2-49cb-9661-082ff6379562","version":6,"status":"done","tags":[],"date":"2025-08-31T03:07:34Z","url":{"schema":"http","addr":"unlock-worldlibertyfinancial.xyz/","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.48.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"http","addr":"unlock-worldlibertyfinancial.xyz/","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"title":"Suspected phishing site | Cloudflare"},"submit":{"url":{"schema":"http","addr":"unlock-worldlibertyfinancial.xyz/","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.48.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-05T03:07:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"unlock-worldlibertyfinancial.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"unlock-worldlibertyfinancial.xyz","ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":25,"request_count":25,"received_data":52014,"sent_data":10518,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2025-08-27T16:18:45.165697Z","alert_count":0,"request_count":9,"received_data":598779,"sent_data":6386,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5d6e2ce756c099d7e1ba7fc25afb46b3","sha1":"662041af6e4df42f03780eaa91293d54e005e796","sha256":"444a907429162f388146a9b7237ca650d4dcba1b0102e9af5e1b2c3ece229de9","sha512":"7995969f45f62e4a7f4e2393fd5d56c3abb0f07bd592e593cdcfb4f1411da3f53d2ff6762fc45fc3aabff63ec14421663701e8995288d4494ac1b4d371bf7422","ssdeep":"3:N/BKL1XLT0On:eL13H","tlshash":"ca5504d0554030701410dc11d3541c15541d140170350d13735d04f4173110000105d0","size":1337359,"data":"","first_seen":"2025-08-31T03:07:42.576249Z","last_seen":"2025-08-31T03:07:42.576249Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"44fe86d7a45101e0a27ae8bc2c781497","sha1":"c944ea94b35e75872137050606820bfa10755c0e","sha256":"cef3bac893accf168e0d1078aa5ed1f34637b7e9f5b273d1366089860b510847","sha512":"7046f47603199533eef51aa1679ef205e47f8fdfe382dda42d4a6504428bf56466d74e16698d7c55fcffd305ff34c40344e34c0eda3da969f3bda38bd81e1fb7","ssdeep":"3:N/BKL1XLT0cn:eL135n","tlshash":"fc5504d055c030711410f441d1741415541d040330150513735d14d417301000010dd0","size":1337359,"data":"","first_seen":"2025-08-31T03:07:42.578617Z","last_seen":"2025-08-31T03:07:42.578617Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-22T16:27:01.543689Z","times_seen":820410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-22T16:27:01.543689Z","times_seen":820410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-22T16:27:01.543689Z","times_seen":820410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"unlock-worldlibertyfinancial.xyz/","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab1ac4cf0f484cc9f859c0a7983353e0","sha1":"2da142b1135bd10cdbed4a7353e4483acc30ebe9","sha256":"50e878a18b2b5be7071dc7c10297381bcfcb55f17c27760ee857af9e31133324","sha512":"9e2901fe2c4505797cbc7d3853280cb3450188bd0cba66ffe5c8055687578c849b31a74c6b56881bb07c195217e9604a88ba6995a4275419ca076424ebe88b0a","ssdeep":"","tlshash":"73d0a72677ee14a8129bb031154e2705212180024002870d7a1c92359fe0e2708259e3","size":210,"data":"","first_seen":"2023-03-07T01:03:09Z","last_seen":"2026-08-20T03:48:57.592908Z","times_seen":382551,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-22T16:27:01.543689Z","times_seen":820410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-22T16:27:01.543689Z","times_seen":820410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-22T16:27:01.543689Z","times_seen":820410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-22T16:27:01.543689Z","times_seen":820410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3ffd318209ead9520d9172ccbf25e245","sha1":"2f5c8bd197c8219005d9f1b020f69614be709e40","sha256":"b1df335ea60a3fae2b428ec88a08579dfc5821c9228aa00ad5adfe734afb68c6","sha512":"3c81981dff900052cefe6e96bd7f704bf010de56180274f8467db4b559a3051cd4847dedc6efba769d941f509fc7008d1c25836789f9ed167800bcde5c9df900","ssdeep":"3:N/BKL1XLT0e:eL13H","tlshash":"805504f0554030701414d441d3741c15741d441570150513715d04d41f301004010dd1","size":1337359,"data":"","first_seen":"2025-08-31T03:07:42.582404Z","last_seen":"2025-08-31T03:07:42.582404Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"unlock-worldlibertyfinancial.xyz/","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"34df99ef0602560c811e58e4711c99e3","sha1":"88dea8841635da3e1130ce19e3718ceb17a95a35","sha256":"18a52fd2cc16c86bcba28796b0e231144f219cc87e049c41d9d378b880a42fba","sha512":"df8104390e5066c45a916d84fbfe2f754d6a94cf429dd6cf62e207193f298db51f17567e50c87bc2842e2a0888ed75fc564066ec863dfcbf9b4362b9bcc8a7bc","ssdeep":"","tlshash":"ebb0929f218316b4179e3a76d02a43667620501244199800fd1ca6948f9195a808bd4d","size":115,"data":"","first_seen":"2025-04-28T14:01:07.115316Z","last_seen":"2026-08-18T21:41:13.95564Z","times_seen":141416,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"aa61309607355de27888aa47c8323ebc","sha1":"f6a32d83e47856bd2264cc1c70172e70c7537b06","sha256":"d21c36bad63ffd0e830fa331ceb979fde3dc88324605c3149ebd49d1cc20cb43","sha512":"5700f16206efecd04ab3579e6655a5faf91a0f620b125ae5ccbbfa72b4025c6f492c1901fa4adde65176c3c6de0abb108c7b696c24cd2f96e1db0ae9399304bd","ssdeep":"3:N/BKL1XLT09:eL13A","tlshash":"d25504d05d4034703411dc11d155141d541d141130350f13715d04d4173051001105d0","size":1337359,"data":"","first_seen":"2025-08-31T03:07:42.58626Z","last_seen":"2025-08-31T03:07:42.58626Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a5c9cd37aacdd2255598f8512b9351c2","sha1":"c67f055b1ba0c4a20e97e705331d31b50d82953c","sha256":"722b7ab9f1cef2ff126415a33ec919489f367d08c306c32e1d45c0fb75bacc69","sha512":"2669dc0b2ef66581c94ee243ddc2bf873704d2ea7379f159fe57d58e0fc7aace8ccf2a75f802e852284718261770059ff50c7334ad8e054832e608636163a232","ssdeep":"3:N/BKL1XLT0T:eL132","tlshash":"335504f0554034741c10d441d375541dd41d040130150513715f04d517701000010dd1","size":1337359,"data":"","first_seen":"2025-08-31T03:07:42.588382Z","last_seen":"2025-08-31T03:07:42.588382Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=977950dcaea00b06\u0026lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a5adb5db426a900aa712fe1abb4c6c0","sha1":"c04798e6863f9b9add2addfca1d7deba91236f4f","sha256":"113b21584f8d695ad22535f733942b62529920998eda37febf73b58feffff22b","sha512":"eb6779d27d11ccf5c28dfb28f670af4fdedf0af099df289a4430a049f00f8f70f7ebd33f2884b6288eff229d8d595e31b82e8a52a5a21c7b177f05bea2f38ef0","ssdeep":"3072:XsTgte7lblgq4/YVy/hcMjDkoDp8fpglkSwrf07P90:i7BlgqUjDhDpeglkNrfMP90","tlshash":"d9d3f9ce35cabaa1231674a4002739cbb27f6cc8e038584dad51d4f4b8a5759b5f68fc","size":142121,"data":"","first_seen":"2025-08-31T03:07:42.565823Z","last_seen":"2025-08-31T03:07:42.565823Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-22T16:27:01.543689Z","times_seen":820410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-22T16:27:01.543689Z","times_seen":820410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8230b04e185c2a68586ad54ea978036a","sha1":"361ac0f9b83c567fdcc7e3e92ebdd1c4f6eb02b2","sha256":"eab674ef11232413e8956551310c42a561e698f87e451b1e709af97659b864f8","sha512":"7f538a3531a0dca9b8670f4088ed5029d0830b46bf57adcbd74562e9a4992ace2214590ff7d73c92d8b1bcd5d343071d6e66c8f22579717adcae9a15bded6ad5","ssdeep":"3:N/BKL1XLT0V:eL13o","tlshash":"6c5504d0554030701410d413d1541415541d040130350d13735d54f4173010100115d0","size":1337359,"data":"","first_seen":"2025-08-31T03:07:42.591832Z","last_seen":"2025-08-31T03:07:42.591832Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"617d3dbce14ee4cd153ac78fdba0b29d","sha1":"385c38fb44c14719adf8d81aefc0dab9f0bf5593","sha256":"0e08b78a4629aa927a7cc2cb8c83b333718353fec0d41738cb54e891f7297f48","sha512":"f6854131742773d2b83868f8dd2f54376d098e21172cbed5df211812b717b0011b2abe82673f6820b7cf620154558cc2e06199f2c4cbf4206111a680b2c29235","ssdeep":"3:N/BKL1XLT0Pn:eL13Wn","tlshash":"c25504d055c030f01411f5c3d17534155d1d040530150d13715d04d437341000010dd0","size":1337359,"data":"","first_seen":"2025-08-31T03:07:42.593945Z","last_seen":"2025-08-31T03:07:42.593945Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-22T16:27:01.543689Z","times_seen":820410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c01a31d0d29a17004ef92f4254f2ee0a","sha1":"2db00efd6f26a494d985b55015f5547740a03536","sha256":"6847f02881829b6c001f732dceb97b84218db833706d7095adae0c08426819d1","sha512":"651ab3ee64eaa30e3279c85ee57f22b2226894816e3c471ed523cf1d157f3a65fc78a34626d2b5c1918fbe1ae75c5d1b5dcc666b37f53d7a0d2b00b43cb7a268","ssdeep":"3:N/BKL1XLT0Rn:eL13An","tlshash":"545504f0554030711c10d441d1f41455541d040130170713737f04f517301000010dd0","size":1337359,"data":"","first_seen":"2025-08-31T03:07:42.595281Z","last_seen":"2025-08-31T03:07:42.595281Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-22T16:27:01.543689Z","times_seen":820410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d2568c76c36223163cb0e8dee7f67c13","sha1":"c171d8c394c8515473e5d3ad7435e740aa002a84","sha256":"0d26ce324d4318fb0d7ba7d895de8dbf1e4b261b482e0037c6fb9246d870baa3","sha512":"e2a40682be46d5edf9bf03512a01a70b4a0950add50ad8c5d4f029541bb43025f68ba170a31fc10ff563c5432cfd953d063fe9c20ec6b486260ba2549d02464c","ssdeep":"3:N/BKL1XLT0LV:eL13QV","tlshash":"115504d055c430701410dc11d354141dd41d041330350d13715d04d4373410400105f0","size":1337359,"data":"","first_seen":"2025-08-31T03:07:42.596494Z","last_seen":"2025-08-31T03:07:42.596494Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-22T16:27:01.543689Z","times_seen":820410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-22T16:27:01.543689Z","times_seen":820410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7fac5e3ff28376d8c1b89b8b58bb95dc","sha1":"de1a23776323e64ee2cdde6583993357441ae3fc","sha256":"a629a4ae0a6e1751eb0faafefa04d5cff870941f37b097f29a176e970dd06981","sha512":"a5ce5f76e9ca840b77644628233ecbd823ddaa7da068905ba9012291111a7b4b03570a8ab37f42f873835ff7745d12631494b923ff087f78bedce085f8c78388","ssdeep":"3:N/BKL1XLT0gR:eL137R","tlshash":"a75504d0555030f13410d413d3541415541d141370350d17715d04d417305000010dd0","size":1337359,"data":"","first_seen":"2025-08-31T03:07:42.599031Z","last_seen":"2025-08-31T03:07:42.599031Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"49d515b98ccae9634aff66a4ca77af98","sha1":"bfa5462a4f47c2350dcd0b3000e9cb54bec63c21","sha256":"4ca696d2fb66b44648a8fd55bc9eeaa6958dd9e523c4a740365823c30d4fc087","sha512":"856b855e0662da94dc3d314080976df11b5cb203d5ac498bacd9d201013e82258ee66ba1c3bb948e0ea71dd319345d9988be765daa3a276f8571e1787a38cc39","ssdeep":"768:XC6BRV2fM4lLa+rnhPLy6PuR8u5jUjRFPlBMqfspV6q11AY13kep+ORWqxIrm3LW:J2E4lLa+rnhT/oj2P6V6GNI","tlshash":"8f231b583256793227e980e1617ba74373257939e94ccc50d423c86536bcecad233fba","size":48995,"data":"","first_seen":"2025-08-15T11:12:03.097811Z","last_seen":"2025-09-08T12:15:40.897517Z","times_seen":20901,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-22T16:27:01.543689Z","times_seen":820410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"99de159d4b7a1b6d5c25fd3d1f187bf8","sha1":"a3921e05faa96ffada9018ff51373ac2f9f020fa","sha256":"5bacd13b169ceac39323f7fb516789906dea4a88ef407c9b22a60ce598a6a7eb","sha512":"212a7678d6e7f6266232bb375cd7286c736eedd89c483faad6e6cf6b8fe952b2fa5013d6b6113b095415d0c3794466ecaf703ae8b80bc1fc128c75e268c126a1","ssdeep":"","tlshash":"47111fccffb4706a03056ca518ae022546aef9c3298a17d44648c1c8fe34b1dc01fb99","size":1031,"data":"","first_seen":"2025-08-31T03:07:42.601291Z","last_seen":"2025-08-31T03:26:13.06563Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2c64823e884b3de97ed99250708ce4cd","sha1":"d57df1d3da03d5ec079542a8762150b332da15b3","sha256":"b47d50c6261428a0f91ad6d8d45ad74a54976079a29fabddc1433c10e4488e74","sha512":"b5f675baed8efe467c4f0ac03c5edfb1de9a558fe4ee1a0ca5342aafc7ee9e774505d547d608ef9a47f01ff6578ac1583711d66253c71d49e42adabf27fba9d6","ssdeep":"3:N/BKL1XLT00X:eL13D","tlshash":"c05504d0554130701450d431d1541c15551d040130350d13735d14fc173010000107d0","size":1337359,"data":"","first_seen":"2025-08-31T03:07:42.604683Z","last_seen":"2025-08-31T03:07:42.604683Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a84295d2359a3deefcacb898d1c9117c","sha1":"4fcd665d9fb7b847d48b1555444aa188c066eac2","sha256":"e765c8e5162f701278194c5f3ab65511a4feac5d3ee8d58d47cb3ba3f44a5229","sha512":"bb74a45ed632be1b0b29521c79fa445b565217f386891a054f44dd208c436aa4434944f97563b3d6f378a52a6e0bbdad39fd8f50969f2c5e1bfbe41bc0f305af","ssdeep":"","tlshash":"8961098fe16ce267b6a4375ce403a3416d7512cee108a1b0f386c40e3989ddbc7d8e94","size":3185,"data":"","first_seen":"2025-08-31T03:07:42.607233Z","last_seen":"2025-08-31T03:07:42.607233Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-22T16:27:01.543689Z","times_seen":820410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1f60ef1759db9c33347ee2428223147b","sha1":"4a653ffe155b1b6d8183261956c272792b755815","sha256":"0062ee12027e23725559248cad1b2833c864d23d4156987e7753d2cd17997740","sha512":"9e56ec92e99869fae7991c14233e4cb5a5af827c8f2da9ac8d8f831a8cbff31e8f0d646b094f312b56031c93598fa5bcf50d5c05ef0bcf7fbaac6e97ddbcfabb","ssdeep":"3:N/BKL1XLT0GR:eL13RR","tlshash":"d05504d055c034f05410d451d1541415541d141130351d13715d04f4573010000105f0","size":1337359,"data":"","first_seen":"2025-08-31T03:07:42.609835Z","last_seen":"2025-08-31T03:07:42.609835Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-22T16:27:01.543689Z","times_seen":820410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2bafd5625e859f6bb3e3a9bbe3c50f5f","sha1":"8ed8e5894f4a6faf69e18f6f2d3a2dae69b6db06","sha256":"9d8a10e8d49f4c68cc0207a233305589372da6108ca7bf713fee2db807857364","sha512":"8710c023fb937e7220dbc54ccca2766d268c19f911b1b4c4425695a412f9010fdc5deea5338abdc76d07cffe2910e19022a5847a4cc2430126de3161bc0c2e10","ssdeep":"3:N/BKL1XLT0z:eL13+","tlshash":"0e5504d0554030701c10d4c3d1773c157c1f040131150553715d04d4373c1000111dd0","size":1337359,"data":"","first_seen":"2025-08-31T03:07:42.612802Z","last_seen":"2025-08-31T03:07:42.612802Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a7e1d5f4963074422d5c19cd1cad35a3","sha1":"6fefb950d6c890e6c94a838d6bc8b9283bc492d2","sha256":"8ed2f55612b2ba10eea0ba234cb58d8071a50a068063ef242b4bcd4c906fef4c","sha512":"68aef0ce11274cb73844d91d8d81320e8fa4151214298db1b8ecf1421fc526f9cf974418d9d75b9c12255bfa3d880193c9f7e7ad1ebeed0c4a77da74496e26c1","ssdeep":"3:N/BKL1XLT0lR:eL13GR","tlshash":"605504d5554030705d50d443d1741415541d040135150713717d04d417301000010dd0","size":1337359,"data":"","first_seen":"2025-08-31T03:07:42.616024Z","last_seen":"2025-08-31T03:07:42.616024Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"505660bacceff3f51819d7d56629fb18","sha1":"f26d1b8d2e64f78c43ff6822c758edbdf8d69669","sha256":"66f06170d48d5a4d1244b246f0dc30c2dc4892fcfc3c493754fee8a78224c8f8","sha512":"e10a6af709d66305269e144469debda1bc730b25a46b3ff4c3971a093bddf33f6af93e2968927f016b6756f5a712e1f0574599ccd20149c6bcec28a7fa09bdfc","ssdeep":"3:N/BKL1XLT0E:eL13x","tlshash":"e45504d0d5c430701530d501d3543415541d0c0330554513715f04d517303004010dd0","size":1337359,"data":"","first_seen":"2025-08-31T03:07:42.620754Z","last_seen":"2025-08-31T03:07:42.620754Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-22T16:27:01.543689Z","times_seen":820410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-22T16:27:01.543689Z","times_seen":820410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"44d01b3ebe06d40c452ca75fdfa74e75","sha1":"adc1c685e539c6dce80d371b7ce285b74c980ae6","sha256":"57b3875a386a620eca74768a61a47ac42e10ba246c3e610879444867527e0cc4","sha512":"0ea2ef1dfd2461411034af2dd8f40ed5a38530c93820c19aeddd0d7b2d6978ba3da6ca7e0bb94b08035d4657b82435469c1a3d079b836adef2a04094605ba4ae","ssdeep":"3:N/BKL1XLT0Y:eL13B","tlshash":"535504d0554030701410d411d15d14155c1d04413c350d33715d04d4173030000105f0","size":1337359,"data":"","first_seen":"2025-08-31T03:07:42.622986Z","last_seen":"2025-08-31T03:07:42.622986Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7f29eb28ee4c679eda3748a9922374ae","sha1":"5bf8e544d9f288a50e5192aaac1f002e93cdabd8","sha256":"1d4814c4c1e0855f095180574b2a0dbc23b89cabd0a0ef680991b41b70d48e8d","sha512":"c15a1fd00081698c24009195c7f34b9c060190c9c20ab2c83e8c806a8753e5db2e7f076cbd5600ffa7c9660c1a8e4a3d93522678c1939be45d8fcb60b0d54eae","ssdeep":"3:N/BKL1XLT0K:eL13v","tlshash":"2b5504d0554430f01410d501d1545415541d050130150d13715d04fd173034140105d0","size":1337359,"data":"","first_seen":"2025-08-31T03:07:42.625373Z","last_seen":"2025-08-31T03:07:42.625373Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-22T16:27:01.543689Z","times_seen":820410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"unlock-worldlibertyfinancial.xyz/","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"56df91490fa1984fa82b297dcb23c22d","sha1":"2050f127b73f50d21eb9b0a2a3f2aea7d4372ba9","sha256":"275407540ae2d5516300e4027ce994e1c97f958d464e137d0fff116d7acf0f24","sha512":"537ac565ea049803015a3b15881913d8179eafc11f95ac99dfe0ee842ac3d496ea3c6e1c167274357b7443e32ea9efab72400b95798479c5a5c81c9aabc88e8b","ssdeep":"","tlshash":"bbe0dfbbbb192e3906efa67771aee74a3676c091acc05560092ccc940b3fec4d03a1d4","size":375,"data":"","first_seen":"2023-03-07T01:03:09Z","last_seen":"2026-08-22T16:17:26.599656Z","times_seen":575876,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"08582a55d557fb22e996fcb4a2ed5fb2","sha1":"996e84062c485e431e1c443f553f0216a6edaff4","sha256":"77ee36bd20b8f1878c39318646a861e34c393a62c5f0721bea1c9baecc425136","sha512":"4eccc4865f211fc9c5f92e4b37f96eb84d30858b5b276c677d5ac29a6942b9c99cf1d5394e489dbd72786d3c405802fc70b3f547e013c13427ceca126de5ae13","ssdeep":"3:N/BKL1XLT03:eL13G","tlshash":"b95504d0554030701410dc11d1541455545d140130350d13715d04d4173010100135d0","size":1337359,"data":"","first_seen":"2025-08-31T03:07:42.628605Z","last_seen":"2025-08-31T03:07:42.628605Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"efaee73d97d8ff384c536f145f115b73","sha1":"7133b71d983c892317b0863c2f179a903ac54634","sha256":"cb2ac1a95336fa061b75e3d9edf5871e42acfacfa33996292c6e2ae05d235f70","sha512":"204ce9b33a4007718103db4062e26d294f3f3feb66e8b5ecd7687fb5de5077600e7497f63c49662df53dc29979b6f180389a9a843d735f380bffddf02ec604fc","ssdeep":"3:N/BKL1XLT0T:eL13m","tlshash":"fe5504f0554030f01510d411d1541415541f140330350d13715d05d517305100130dd0","size":1337359,"data":"","first_seen":"2025-08-31T03:07:42.633883Z","last_seen":"2025-08-31T03:07:42.633883Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6a0842548de1a3798661dd999a6d53be","sha1":"4b0472b86f119290d61f30165bb9a2e401f1571d","sha256":"95590149f075e22f8add8e8eabaf46f0c3860793c3273922cfa7101a94862860","sha512":"6394e58d6d8a1abd8d0eaf5b1e22e085fa7d96e9e33b7dcaecbdafe894a6dcbe3a835320c6c82fcddc8bc4a3f7ef6d5debeedb91327867126c3c9865e2fa4fcf","ssdeep":"3:N/BKL1XLT04n:eL135n","tlshash":"e55504d0554030701410d411d1541415551d440170350d13735d54f4173010000105f0","size":1337359,"data":"","first_seen":"2025-08-31T03:07:42.637488Z","last_seen":"2025-08-31T03:07:42.637488Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d65eb9f6471521ec272254a59637e0a3","sha1":"24064b5b963cba94962b815fc7f5257fc41ef5a7","sha256":"42e093662da4a6c96a2724ea677b68be2967fc6d4f5db2c2921c696b1b30abd3","sha512":"b98ae728d5f2057a2af1a434eba416896c2999159900924bec515a5d6eb2548c22709f7caec056863c71d75498fd343d6e2a5c8270547ca25475d7162a3b1cc9","ssdeep":"3:N/BKL1XLT0nn:eL13K","tlshash":"8f5504d0554030701410d445f3747437541d440170150713715d04d517701000011dd0","size":1337359,"data":"","first_seen":"2025-08-31T03:07:42.63938Z","last_seen":"2025-08-31T03:07:42.63938Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"unlock-worldlibertyfinancial.xyz/","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"16f6161217e242dffadf4241d174abcc","sha1":"304832d02caf7b8a45ea29c321993d7eba48be67","sha256":"390eefa5af21228aaab4bb7eb68043b2468a645b3c861aaba17b226cc8c05d95","sha512":"886e6c321c801fa26a1363e65eb9ddd6f15617044d57f2b458d235cb396119dbc35e216178258e47ed6a73ad9a6f558e12605621bb3bae8e463c56ae6f9f6d18","ssdeep":"","tlshash":"869004534011730005710337175555403335501310314c0437cdc1153f51f57cf05340","size":46,"data":"","first_seen":"2025-03-04T09:24:28.966015Z","last_seen":"2026-08-20T03:48:57.594456Z","times_seen":246332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6934d9d33cd2d0c005994e7d96d2e0d9","sha1":"96d89030c1473585f16ec7a52050b410e44dd332","sha256":"08c9b52f61fadf1eff6fb89169f1735fbae7bb583b23cb119d0e1a0151bac952","sha512":"64ff1127cfca45f7ab820ffa481a3af55570ab2d7b1b7e9d3c0309bd3b6783f6b8d10c8eb2224bc517613f82372722a443dc221398cd2e5b24594ebef1bf4359","ssdeep":"","tlshash":"cd1100000000000000000000000000000000000000000000300c000003000000000000","size":1000,"data":"","first_seen":"2025-03-02T18:12:34.22932Z","last_seen":"2026-06-07T08:07:43.117448Z","times_seen":143894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-22T16:27:01.543689Z","times_seen":820410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8b72d92c7882df22b5d3a96ac40b8954","sha1":"bfa34345b02073b06d7967ccefa76a84e70ac9dc","sha256":"18cebe18676fda3ca4aa4bca11eedd9041861b89b0c714376b0b2ab1c57b9321","sha512":"254a2615e2ebc6cfbe929abfa29881a4993cc6fd9d856919eb341ff090304f7cca4c47eeefdd4018c6b51724a7f90272e334fde84f8f94f1ccd917518aa7b4c2","ssdeep":"3:N/BKL1XLT0D:eL13a","tlshash":"8b5504d05d4030701410dc41d1741515d41d440130170513735f04d517301000510dd0","size":1337359,"data":"","first_seen":"2025-08-31T03:07:42.64251Z","last_seen":"2025-08-31T03:07:42.64251Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-22T16:27:01.543689Z","times_seen":820410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-22T16:27:01.543689Z","times_seen":820410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","size":39,"data":"","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-22T16:26:17.553812Z","times_seen":1041114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://unlock-worldlibertyfinancial.xyz/","date":"2025-08-31T03:07:07.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"GET /turnstile/v0/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 31 Aug 2025 03:07:07 GMT\r\ncontent-length: 0\r\ncf-ray: 977950dbbdb056cb-OSL\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public\r\ncross-origin-resource-policy: cross-origin\r\nlocation: /turnstile/v0/b/4710d66e8fda/api.js\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48995,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T16:26:50.255427Z","times_seen":18038150,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":34,"dns":19,"connect":1,"send":0,"wait":11,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","date":"2025-08-31T03:07:07.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 Aug 2025 03:07:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 86\r\ncf-ray: 977950dd3ec50b06-OSL\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced","md5":"70c202196187ab3c11b4e094c20c6de1","sha1":"9c52b959e74aee9d79cbc9f35d1f9f65a3b8c863","sha256":"6255b9231d09ebe6aa1ac19ba46bdd81f3df58989c9ef2e11d6cd6e2e7b21643","sha512":"7e6168e40cce79239fc00a05381e1e95ca3534905d3fc1467973927f317b7f12b6f3e76960d5202c40046618b51e0895082e22338b1b9971038fa0ba158117e4","ssdeep":"","tlshash":"4ea022f3b2203c3eeb2a2333022e8030f83020b803828e0c000eec332a20208c0ca2c2","first_seen":"2025-05-13T14:11:45.873663Z","last_seen":"2026-04-03T11:40:49.866694Z","times_seen":265776,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unlock-worldlibertyfinancial.xyz/favicon.ico","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://unlock-worldlibertyfinancial.xyz/","date":"2025-08-31T03:07:07.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unlock-worldlibertyfinancial.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 00:31:11 GMT","end":"Wed, 26 Nov 2025 01:29:54 GMT"},"fingerprint":{"sha1":"52:45:82:B0:B6:64:C0:98:6A:DD:B4:EB:F3:79:05:06:39:2F:37:69","sha256":"65:B3:C2:F2:A1:0B:8C:64:3F:9D:36:6C:93:6C:D1:02:85:D1:42:AC:63:AB:92:D0:4B:03:4A:78:EA:4C:68:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: unlock-worldlibertyfinancial.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 31 Aug 2025 03:07:07 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://unlock-worldlibertyfinancial.xyz/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vGVxQo8T0tUXLOcQ%2FfJxLIoD44gHmyYelnocOYkAcu%2FwVl8HaOHRVZHFVkMlZkXGG0mLE0cxlga0WUpv3TGaayFImxkBHRBbkkQvolTiMc7wFXMQkKjGFFky%2BCYMbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 977950deee05b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T16:26:50.255427Z","times_seen":18038150,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"unlock-worldlibertyfinancial.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unlock-worldlibertyfinancial.xyz/favicon.ico","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://unlock-worldlibertyfinancial.xyz/","date":"2025-08-31T03:07:08.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unlock-worldlibertyfinancial.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 00:31:11 GMT","end":"Wed, 26 Nov 2025 01:29:54 GMT"},"fingerprint":{"sha1":"52:45:82:B0:B6:64:C0:98:6A:DD:B4:EB:F3:79:05:06:39:2F:37:69","sha256":"65:B3:C2:F2:A1:0B:8C:64:3F:9D:36:6C:93:6C:D1:02:85:D1:42:AC:63:AB:92:D0:4B:03:4A:78:EA:4C:68:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: unlock-worldlibertyfinancial.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 31 Aug 2025 03:07:08 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://unlock-worldlibertyfinancial.xyz/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DT94HNZUHfd83x%2F5rNygbT0YilSm1MYXhzs4ucNDvrsfuNAuB0VOKj%2Fzy3sqWtki2u7JXTQsO%2FACjRXp0DAMY3gbBB%2ByWBkJD9I7cm9XEJBNTZGf6Sv1OJs6yqF8vA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 977950df6e0db517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T16:26:50.255427Z","times_seen":18038150,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"unlock-worldlibertyfinancial.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/124439541:1756607854:X9jPDvvesJ-f6cWSLLWnqdavR3KY9D2u8qTNUQL9FrI/977950dcaea00b06/EQvz3zTsZqPw6WYJ8pGYw77e.lJeCbdK.lvCLZEPr5E-1756609627-1.2.1.1-apogGRBvJu7xIGd6qGAq9CpG2TMgPQGPVg1QPzgrMpAQif8bfrrAwEk9LiSoQHR7","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","date":"2025-08-31T03:07:08.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/124439541:1756607854:X9jPDvvesJ-f6cWSLLWnqdavR3KY9D2u8qTNUQL9FrI/977950dcaea00b06/EQvz3zTsZqPw6WYJ8pGYw77e.lJeCbdK.lvCLZEPr5E-1756609627-1.2.1.1-apogGRBvJu7xIGd6qGAq9CpG2TMgPQGPVg1QPzgrMpAQif8bfrrAwEk9LiSoQHR7 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/\r\ncf-chl: EQvz3zTsZqPw6WYJ8pGYw77e.lJeCbdK.lvCLZEPr5E-1756609627-1.2.1.1-apogGRBvJu7xIGd6qGAq9CpG2TMgPQGPVg1QPzgrMpAQif8bfrrAwEk9LiSoQHR7\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3351\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 Aug 2025 03:07:08 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: br\r\ncf-chl-gen: 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$STlD1dZuQ0zpD9BUgkvwrw==\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 977950dfefa10b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":290236,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0003675c93288ff44c847ec715d4cead","sha1":"e58b1f5213f249b0fc60ee823b3d5f23be275ddc","sha256":"a5392a926c5fc85c8500b435724fd4b6921560199a5c38f97cef59fb738f13e6","sha512":"5d3c716832a93021833b13797cab4d5165c524341a0f26fce1dfcc2df8f993f685a5993e73af1933259996ee73b39272713b32830d01d9054a17bcb6165d91ab","ssdeep":"6144:hhcH+0Gq/GwT3VbCnTJND+TE7QKWgVGuVtwut0K3PTWOsSe:XcH+0GqDT3V2nF/NnfWJ","tlshash":"bc5412ff782b3b5b885946bf82705e620d818ec31432d4d56fde15c3406ec94be649ad","first_seen":"2025-08-31T03:07:42.543828Z","last_seen":"2025-08-31T03:07:42.543828Z","times_seen":1,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/977950dcaea00b06/1756609628167/uNoVvDH1271QH63","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","date":"2025-08-31T03:07:14.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/d/977950dcaea00b06/1756609628167/uNoVvDH1271QH63 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 Aug 2025 03:07:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 268\r\ncf-ray: 977951097c8f0b06-OSL\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":268,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 68 x 39, 8-bit/color RGBA, non-interlaced","md5":"fb6d28200824552ca348bd3c10989908","sha1":"4760bedf10efcd6d65f8d1d3f63dc8a415f17d16","sha256":"6d50b7fce394a62328c1dc97d5888e972a1afc519ff4466b636cdbb6c95869ae","sha512":"eea4d5c233d5ebee24d3322d16dee7489d05ee61a548033367aa4211509cc7113d380bda8545e223657d7017f5c24a78f9e679fb4b96ac7319ce8069a0b6a09b","ssdeep":"","tlshash":"5bd0128e1594e0b97fad8ee51109f94f04e001694b08b9aec3688b70a2f8640cb9b0c2","first_seen":"2025-05-27T23:05:08.44067Z","last_seen":"2026-04-03T05:58:01.176624Z","times_seen":130,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"unlock-worldlibertyfinancial.xyz/","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-31T03:07:07.306Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: unlock-worldlibertyfinancial.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Sun, 31 Aug 2025 03:07:07 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReferrer-Policy: same-origin\r\nX-Frame-Options: SAMEORIGIN\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q6TvUiEgDXiqzPOT0cfhtf9F94StIGwmn7A1HeqO7OeQcwn1nI7oIur4L%2FK9LH0xUFJyI0%2F213R%2BSIL%2FJGU5lTELouUrjmzsP3mfeyRAEIPqYLKCx5O5kEz7ZhEqsQ%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: 977950daaa1d712e-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4983,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"3f2fba2b0bcb2f4f091beaf3a572c799","sha1":"d68df38744272a51be16c1081b84a703f827daaf","sha256":"139f259765a731f6a33eb51925c9e6657e8297250c2a0b24cc852eb28b6fe530","sha512":"e67be0affb32c20e13fd62770fe023374f6b5ff2ff8e8cbfc3c2c790841c7a232cb015b2437c07b74c00d9932614b70b0059bf91f1d2d411cfbe53273b0ae91d","ssdeep":"96:fjFj7jOjEHDK/D5DMFGzLeiO/t8GwlqZNeBuh7RLlvaQxvbzM:fjFj7jOjEjK/VounOV+qZyuh71lCejzM","tlshash":"a7a19572f9bd107f20d39172a1bdb70a79a5c143cb9a08903abcc2751f8ef55aa131c5","first_seen":"2025-08-31T03:07:42.550499Z","last_seen":"2025-08-31T03:07:42.550499Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"unlock-worldlibertyfinancial.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"unlock-worldlibertyfinancial.xyz/cdn-cgi/styles/cf.errors.css","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://unlock-worldlibertyfinancial.xyz/","date":"2025-08-31T03:07:07.442Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/styles/cf.errors.css HTTP/1.1\r\nHost: unlock-worldlibertyfinancial.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://unlock-worldlibertyfinancial.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 31 Aug 2025 03:07:07 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XNUqqLg5BzBR8tmR3iHEJ5mdibxool9E4aCBuipCqGpJ65Bp9Ftv9ClJ5wg%2BagpI7%2FnLriwFDeDw3u2aLfzXEhsIF2xnAOcX6ulU0t5BpnBYSidZirufZGfKCIUQvQ%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: 977950db7a5a712e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24051,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (24050)","md5":"5e8c69a459a691b5d1b9be442332c87d","sha1":"f24dd1ad7c9080575d92a9a9a2c42620725ef836","sha256":"84e3c77025ace5af143972b4a40fc834dcdfd4e449d4b36a57e62326f16b3091","sha512":"6db74b262d717916de0b0b600eead2cc6a10e52a9e26d701fae761fcbc931f35f251553669a92be3b524f380f32e62ac6ad572bea23c78965228ce9efb92ed42","ssdeep":"192:VuR/6okgTQwq23gGM8lUR9YRGQ2BwoX6zp+1+nDT1FvxKSI7/UsV7MSE6XZ2dKzk:JwV+oUcoQJpdf1dxKSI7/Ue7ZX2qk","tlshash":"86b21323e5f5381a2516a13ca08a92dc69356073f7f30e9eb985d06cd78dd791f226c3","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T16:17:26.572572Z","times_seen":573123,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"unlock-worldlibertyfinancial.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unlock-worldlibertyfinancial.xyz/favicon.ico","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://unlock-worldlibertyfinancial.xyz/","date":"2025-08-31T03:07:07.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unlock-worldlibertyfinancial.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 00:31:11 GMT","end":"Wed, 26 Nov 2025 01:29:54 GMT"},"fingerprint":{"sha1":"52:45:82:B0:B6:64:C0:98:6A:DD:B4:EB:F3:79:05:06:39:2F:37:69","sha256":"65:B3:C2:F2:A1:0B:8C:64:3F:9D:36:6C:93:6C:D1:02:85:D1:42:AC:63:AB:92:D0:4B:03:4A:78:EA:4C:68:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: unlock-worldlibertyfinancial.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 31 Aug 2025 03:07:07 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://unlock-worldlibertyfinancial.xyz/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VXzmt9oIl1vKq3izwWdH9eyyBiZCaVh5gVGGiIsXVfYpynsUST80%2B5aCWWWHfWt7Th6YTTBVOMAh6kI8kIl7PaeWt%2BQpGyffUwCUTiMundoQ1mLlDnuwLj5Fc%2BCgOA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 977950de3dfdb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T16:26:50.255427Z","times_seen":18038150,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"unlock-worldlibertyfinancial.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unlock-worldlibertyfinancial.xyz/favicon.ico","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://unlock-worldlibertyfinancial.xyz/","date":"2025-08-31T03:07:07.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unlock-worldlibertyfinancial.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 00:31:11 GMT","end":"Wed, 26 Nov 2025 01:29:54 GMT"},"fingerprint":{"sha1":"52:45:82:B0:B6:64:C0:98:6A:DD:B4:EB:F3:79:05:06:39:2F:37:69","sha256":"65:B3:C2:F2:A1:0B:8C:64:3F:9D:36:6C:93:6C:D1:02:85:D1:42:AC:63:AB:92:D0:4B:03:4A:78:EA:4C:68:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: unlock-worldlibertyfinancial.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 31 Aug 2025 03:07:07 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://unlock-worldlibertyfinancial.xyz/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EOMt5Mcbw5I%2FaIn2y6kHa2M%2B42Kpv2IsKbitOfaLO0fKIJtYjPFH8uJkpXlq7N4ZOECp8ggzPGFccwmp63JS5LGLzhgHU8%2FaE3abye773sT9mZPwbALDfIMTvFm48w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 977950de7e00b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T16:26:50.255427Z","times_seen":18038150,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"unlock-worldlibertyfinancial.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unlock-worldlibertyfinancial.xyz/favicon.ico","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://unlock-worldlibertyfinancial.xyz/","date":"2025-08-31T03:07:07.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unlock-worldlibertyfinancial.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 00:31:11 GMT","end":"Wed, 26 Nov 2025 01:29:54 GMT"},"fingerprint":{"sha1":"52:45:82:B0:B6:64:C0:98:6A:DD:B4:EB:F3:79:05:06:39:2F:37:69","sha256":"65:B3:C2:F2:A1:0B:8C:64:3F:9D:36:6C:93:6C:D1:02:85:D1:42:AC:63:AB:92:D0:4B:03:4A:78:EA:4C:68:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: unlock-worldlibertyfinancial.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 31 Aug 2025 03:07:07 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://unlock-worldlibertyfinancial.xyz/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6gZ66XlWsPBZOtjyP3QcHpLALv17ponabYaS8Gv5dWg28l5GmP%2FKcddzTWeDYnENFnWiZ8AE2BWlBxF64%2F6rP7z2J1sOdJ36DA9pqa7zo2yq3LudQpS2PvDXPynPaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 977950de9e02b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T16:26:50.255427Z","times_seen":18038150,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"unlock-worldlibertyfinancial.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unlock-worldlibertyfinancial.xyz/favicon.ico","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://unlock-worldlibertyfinancial.xyz/","date":"2025-08-31T03:07:08.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unlock-worldlibertyfinancial.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 00:31:11 GMT","end":"Wed, 26 Nov 2025 01:29:54 GMT"},"fingerprint":{"sha1":"52:45:82:B0:B6:64:C0:98:6A:DD:B4:EB:F3:79:05:06:39:2F:37:69","sha256":"65:B3:C2:F2:A1:0B:8C:64:3F:9D:36:6C:93:6C:D1:02:85:D1:42:AC:63:AB:92:D0:4B:03:4A:78:EA:4C:68:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: unlock-worldlibertyfinancial.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 31 Aug 2025 03:07:08 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://unlock-worldlibertyfinancial.xyz/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P%2BbLP5jbyNVBiDy%2BQDEeSmKqqGJIUxGNGhz8YAcxe9Vq%2ByLv2wN3AWyqGVqLI7s8qej6B6LyqvraDFLUxTM33qpxFsN4yqr6iEFZMpPeuysJm6vThcnYiB1tIpmnPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 977950dfbe15b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T16:26:50.255427Z","times_seen":18038150,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"unlock-worldlibertyfinancial.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unlock-worldlibertyfinancial.xyz/favicon.ico","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://unlock-worldlibertyfinancial.xyz/","date":"2025-08-31T03:07:07.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unlock-worldlibertyfinancial.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 00:31:11 GMT","end":"Wed, 26 Nov 2025 01:29:54 GMT"},"fingerprint":{"sha1":"52:45:82:B0:B6:64:C0:98:6A:DD:B4:EB:F3:79:05:06:39:2F:37:69","sha256":"65:B3:C2:F2:A1:0B:8C:64:3F:9D:36:6C:93:6C:D1:02:85:D1:42:AC:63:AB:92:D0:4B:03:4A:78:EA:4C:68:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: unlock-worldlibertyfinancial.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 31 Aug 2025 03:07:07 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://unlock-worldlibertyfinancial.xyz/favicon.ico\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A6Jz36CNwZeV%2FN1MDelxbDLPAdDIQGEV7nb6Ir4rwr1b9Vp3sN0AKeev0KMDR%2Ft%2F1PbwT5VpGBQ%2B9wMZckPb%2BPT27j1i2j%2B0QUbnLhZJ4BiKfyckTdgsN5cO6uh3Hg%3D%3D\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 977950ddc9365697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T16:26:50.255427Z","times_seen":18038150,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"unlock-worldlibertyfinancial.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"unlock-worldlibertyfinancial.xyz/favicon.ico","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://unlock-worldlibertyfinancial.xyz/","date":"2025-08-31T03:07:07.599Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: unlock-worldlibertyfinancial.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://unlock-worldlibertyfinancial.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 31 Aug 2025 03:07:07 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nCross-Origin-Resource-Policy: cross-origin\r\nLocation: https://unlock-worldlibertyfinancial.xyz/favicon.ico\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nz0agbpHYHGtQnNDLfKtuptaCEEhnVNZhlKkevaUsUAj7N%2F8ne97bZjGj506tcUEj7L%2BWw%2BiaOFXMdh%2FxAR7mBXUcbanroQPtfIND7bUzL1v5JQaACC2pDys7vIn2w%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 977950dc7ac7712e-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T16:26:50.255427Z","times_seen":18038150,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"unlock-worldlibertyfinancial.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unlock-worldlibertyfinancial.xyz/favicon.ico","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://unlock-worldlibertyfinancial.xyz/","date":"2025-08-31T03:07:07.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unlock-worldlibertyfinancial.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 00:31:11 GMT","end":"Wed, 26 Nov 2025 01:29:54 GMT"},"fingerprint":{"sha1":"52:45:82:B0:B6:64:C0:98:6A:DD:B4:EB:F3:79:05:06:39:2F:37:69","sha256":"65:B3:C2:F2:A1:0B:8C:64:3F:9D:36:6C:93:6C:D1:02:85:D1:42:AC:63:AB:92:D0:4B:03:4A:78:EA:4C:68:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: unlock-worldlibertyfinancial.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 31 Aug 2025 03:07:07 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://unlock-worldlibertyfinancial.xyz/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3DGfzaspBn2SeyArz2YGSQvFRRwa7nmnHYFW2ZnqXD39Prta1qXIwhsfG8XGy6ynsMAlpAh7IxYQ6DnSpbs%2FifZxgicM7NeYpxfQPhdTkS%2Fiu4TPeDvdc1vqPmc8xg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 977950de1dfcb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T16:26:50.255427Z","times_seen":18038150,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"unlock-worldlibertyfinancial.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unlock-worldlibertyfinancial.xyz/favicon.ico","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://unlock-worldlibertyfinancial.xyz/","date":"2025-08-31T03:07:07.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unlock-worldlibertyfinancial.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 00:31:11 GMT","end":"Wed, 26 Nov 2025 01:29:54 GMT"},"fingerprint":{"sha1":"52:45:82:B0:B6:64:C0:98:6A:DD:B4:EB:F3:79:05:06:39:2F:37:69","sha256":"65:B3:C2:F2:A1:0B:8C:64:3F:9D:36:6C:93:6C:D1:02:85:D1:42:AC:63:AB:92:D0:4B:03:4A:78:EA:4C:68:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: unlock-worldlibertyfinancial.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 31 Aug 2025 03:07:07 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://unlock-worldlibertyfinancial.xyz/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2BZK75qvhR9KuPWrWDxQ%2BptPDAzZ3BNyKMhaDl%2BuFSdRJeaUgeWm7FQixSedLIeJPsM0I7h9qLEgjES9pOm1BqEVNfqny6S1eWjLdYtwCD%2FbNroyPEv6hQ1sYwn5fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 977950de4dfeb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T16:26:50.255427Z","times_seen":18038150,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"unlock-worldlibertyfinancial.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unlock-worldlibertyfinancial.xyz/","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-31T03:07:07.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unlock-worldlibertyfinancial.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 00:31:11 GMT","end":"Wed, 26 Nov 2025 01:29:54 GMT"},"fingerprint":{"sha1":"52:45:82:B0:B6:64:C0:98:6A:DD:B4:EB:F3:79:05:06:39:2F:37:69","sha256":"65:B3:C2:F2:A1:0B:8C:64:3F:9D:36:6C:93:6C:D1:02:85:D1:42:AC:63:AB:92:D0:4B:03:4A:78:EA:4C:68:E9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: unlock-worldlibertyfinancial.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 31 Aug 2025 03:07:07 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e0Pg3%2BcrHuksYrOd78EWPW4u64CgXloBio7%2BITBSnUQuurtDcPbE6nAEVMACLvZnYqs9j5pUKZcVx%2Fg%2FFYjXBGytNwgfDPhSjMaomZd0cI6WB0N3wnb5Yy3GTx8w3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 977950da084756a4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4982,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"fc49b95580435f9cac47e93a9c8cc451","sha1":"25ba0cea31f44f32c8d3b85d825844397affe77f","sha256":"619f1291fb26392b5fe22caee0eef96ec2c86ebf85a298efcc33b5f90a0dc13a","sha512":"9d27a6179389c1cf39d540dc5cf8ee4f5544bc82f44550de68ebd672442d9ca0d5904998e830ba9d4d31fc2d2f8507e7d19b5213d0a2bafbd20bf7732e43c492","ssdeep":"96:fjFj7jOjEHDK/D5DMFGzLeiO/t8GESnlqZNeBu27RLlvaQxvbzM:fjFj7jOjEjK/VounOV0SlqZyu271lCek","tlshash":"93a18472f9bd117f20d3917261bda70a39a4c143cb9a09903abcc2751f8af55aa132c5","first_seen":"2025-08-31T03:07:42.556055Z","last_seen":"2025-08-31T03:07:42.556055Z","times_seen":1,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":164,"dns":143,"connect":1,"send":0,"wait":6,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"unlock-worldlibertyfinancial.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://unlock-worldlibertyfinancial.xyz/","date":"2025-08-31T03:07:07.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/ HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 Aug 2025 03:07:07 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-0q0aD0JtDVOLAA1N' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 977950dcaea00b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26983,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (26983), with no line terminators","md5":"f5a715a8f481264036e8fb78abbd2554","sha1":"8365d1b093e9c3295ce3df2bcdf9e153a12259c8","sha256":"265b8ce9adb8378259b50051a7c177d379f0ce2d780740594738ba751e01c4ff","sha512":"55f1d6028db24f729b3e01ba4f7de02be790641584e1340a4f215459888c350f5502ad19b6277a1c7117cb9787d171d1ddfa28011da37c8f5042bfec5ddcc502","ssdeep":"384:QH6U+qdB83E29aJC6tHzSk1b2xdLVSmda3mDI9FBzCxTJA9Cx2:MdGrkHzlJUdLV9da3m8OBJ+Cs","tlshash":"0fc2b8038a101b7e7453872cf3d1b5c9a338ba026f5ab1b7f15452a58f4d69f2b53b0a","first_seen":"2025-08-31T03:07:42.559144Z","last_seen":"2025-08-31T03:07:42.559144Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unlock-worldlibertyfinancial.xyz/favicon.ico","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://unlock-worldlibertyfinancial.xyz/","date":"2025-08-31T03:07:08.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unlock-worldlibertyfinancial.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 00:31:11 GMT","end":"Wed, 26 Nov 2025 01:29:54 GMT"},"fingerprint":{"sha1":"52:45:82:B0:B6:64:C0:98:6A:DD:B4:EB:F3:79:05:06:39:2F:37:69","sha256":"65:B3:C2:F2:A1:0B:8C:64:3F:9D:36:6C:93:6C:D1:02:85:D1:42:AC:63:AB:92:D0:4B:03:4A:78:EA:4C:68:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: unlock-worldlibertyfinancial.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 31 Aug 2025 03:07:08 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://unlock-worldlibertyfinancial.xyz/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UR1Krmww08rIOrkEUe%2FBKbP71GbW04gW7Vbvs5C0T%2FSLESkSwveAj9J4uWUyLFl4PIJiz62yvWPY3WeH2q9BscPql9TM7Slx8Bw3cnSP%2FX1SzfPp8qkmB4VbZRFucQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 977950dfae13b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T16:26:50.255427Z","times_seen":18038150,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"unlock-worldlibertyfinancial.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unlock-worldlibertyfinancial.xyz/favicon.ico","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://unlock-worldlibertyfinancial.xyz/","date":"2025-08-31T03:07:08.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unlock-worldlibertyfinancial.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 00:31:11 GMT","end":"Wed, 26 Nov 2025 01:29:54 GMT"},"fingerprint":{"sha1":"52:45:82:B0:B6:64:C0:98:6A:DD:B4:EB:F3:79:05:06:39:2F:37:69","sha256":"65:B3:C2:F2:A1:0B:8C:64:3F:9D:36:6C:93:6C:D1:02:85:D1:42:AC:63:AB:92:D0:4B:03:4A:78:EA:4C:68:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: unlock-worldlibertyfinancial.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 31 Aug 2025 03:07:08 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://unlock-worldlibertyfinancial.xyz/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Xc%2B417SAFgGfvfjuGCMS6ZNRZYRyHtoW4VXeBDt7s7fE6nlEqVz5IG5dVFjUKLIjFI80Zz2Csb0HqEnQjXK5nAEcWn8kK%2BcMWByjHzOwe8mux66RUfvvksIKlTeMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 977950e00e19b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T16:26:50.255427Z","times_seen":18038150,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"unlock-worldlibertyfinancial.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/124439541:1756607854:X9jPDvvesJ-f6cWSLLWnqdavR3KY9D2u8qTNUQL9FrI/977950dcaea00b06/EQvz3zTsZqPw6WYJ8pGYw77e.lJeCbdK.lvCLZEPr5E-1756609627-1.2.1.1-apogGRBvJu7xIGd6qGAq9CpG2TMgPQGPVg1QPzgrMpAQif8bfrrAwEk9LiSoQHR7","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","date":"2025-08-31T03:07:22.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/124439541:1756607854:X9jPDvvesJ-f6cWSLLWnqdavR3KY9D2u8qTNUQL9FrI/977950dcaea00b06/EQvz3zTsZqPw6WYJ8pGYw77e.lJeCbdK.lvCLZEPr5E-1756609627-1.2.1.1-apogGRBvJu7xIGd6qGAq9CpG2TMgPQGPVg1QPzgrMpAQif8bfrrAwEk9LiSoQHR7 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/\r\ncf-chl: EQvz3zTsZqPw6WYJ8pGYw77e.lJeCbdK.lvCLZEPr5E-1756609627-1.2.1.1-apogGRBvJu7xIGd6qGAq9CpG2TMgPQGPVg1QPzgrMpAQif8bfrrAwEk9LiSoQHR7\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 43575\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 Aug 2025 03:07:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\ncf-chl-out: 79FsDU1+sU8+cdFkdI1QwVDhEhbGv4RFH2gU81RCYj2DEvEmnljNR2K9Hj5oN39vZ4PBFEASuoppYVRkRp8IUQ==$mP6bcgHHR9LlTxje6Ii3NQ==\r\ncf-chl-out-s: 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$1ji/GUZwmlX40QpkxpSfWA==\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 97795139cc390b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5024,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (5024), with no line terminators","md5":"cdb7751141a60b730ca14db1477fbf74","sha1":"88cfb80e644880d4325ad032485eabe8da0aad42","sha256":"fc05ef1afe7a60776b41befe92af21d13cfa984750a791c53e4a671da5264b20","sha512":"851c76ff9ebb90df77e22a1ecf59343cb6afd838608d12f6ac97491982b107621ddbb0e3ba55b3bd11de09e86f37c53a78eebf9e509da982df34e84eb7e65236","ssdeep":"96:15R+w9OV8dhXOS+oJJlqBCdcllBbw8ULzY3pq1s+nE/YW/r:Uw9OudhXJ+oJ5delBs8ULzY5KEn","tlshash":"94a17c4422e9a555df76e3c60f22c043de578ffdce2269088b49550af04e2a824e9d86","first_seen":"2025-08-31T03:07:42.561889Z","last_seen":"2025-08-31T03:07:42.561889Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=977950dcaea00b06\u0026lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","date":"2025-08-31T03:07:07.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=977950dcaea00b06\u0026lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 Aug 2025 03:07:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 977950dd5ed20b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142121,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1a5adb5db426a900aa712fe1abb4c6c0","sha1":"c04798e6863f9b9add2addfca1d7deba91236f4f","sha256":"113b21584f8d695ad22535f733942b62529920998eda37febf73b58feffff22b","sha512":"eb6779d27d11ccf5c28dfb28f670af4fdedf0af099df289a4430a049f00f8f70f7ebd33f2884b6288eff229d8d595e31b82e8a52a5a21c7b177f05bea2f38ef0","ssdeep":"3072:XsTgte7lblgq4/YVy/hcMjDkoDp8fpglkSwrf07P90:i7BlgqUjDhDpeglkNrfMP90","tlshash":"d9d3f9ce35cabaa1231674a4002739cbb27f6cc8e038584dad51d4f4b8a5759b5f68fc","first_seen":"2025-08-31T03:07:42.565823Z","last_seen":"2025-08-31T03:07:42.565823Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unlock-worldlibertyfinancial.xyz/favicon.ico","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://unlock-worldlibertyfinancial.xyz/","date":"2025-08-31T03:07:07.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unlock-worldlibertyfinancial.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 00:31:11 GMT","end":"Wed, 26 Nov 2025 01:29:54 GMT"},"fingerprint":{"sha1":"52:45:82:B0:B6:64:C0:98:6A:DD:B4:EB:F3:79:05:06:39:2F:37:69","sha256":"65:B3:C2:F2:A1:0B:8C:64:3F:9D:36:6C:93:6C:D1:02:85:D1:42:AC:63:AB:92:D0:4B:03:4A:78:EA:4C:68:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: unlock-worldlibertyfinancial.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 31 Aug 2025 03:07:07 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://unlock-worldlibertyfinancial.xyz/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AfhxwN97HuPPRuGB3WzUqvvTiJhfCrYQWIY2Dz4fvZfY7GZjbdWBGvs9%2FuYsZIksTgJyhgZBgi0r9cCpaHrOKDr2s2g2LrsUD7qcEP9%2FBbyPaPY3itw5Rbpa%2F2r6OQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 977950de6dffb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T16:26:50.255427Z","times_seen":18038150,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"unlock-worldlibertyfinancial.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unlock-worldlibertyfinancial.xyz/favicon.ico","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://unlock-worldlibertyfinancial.xyz/","date":"2025-08-31T03:07:08.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unlock-worldlibertyfinancial.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 00:31:11 GMT","end":"Wed, 26 Nov 2025 01:29:54 GMT"},"fingerprint":{"sha1":"52:45:82:B0:B6:64:C0:98:6A:DD:B4:EB:F3:79:05:06:39:2F:37:69","sha256":"65:B3:C2:F2:A1:0B:8C:64:3F:9D:36:6C:93:6C:D1:02:85:D1:42:AC:63:AB:92:D0:4B:03:4A:78:EA:4C:68:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: unlock-worldlibertyfinancial.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 31 Aug 2025 03:07:08 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://unlock-worldlibertyfinancial.xyz/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qPk4KCo38xmk%2FsJr%2FRVFT5%2BLf2aF%2FU7qtJQ9vpCA1IBA0zST3Ai0sxsu%2BZDkHEuQ8%2BddyoDs5WYWRL0etKBw7r93UrwbyUGxrgaUoC07jKpZmpXwr7bNc70gx0BSXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 977950df4e0ab517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T16:26:50.255427Z","times_seen":18038150,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"unlock-worldlibertyfinancial.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unlock-worldlibertyfinancial.xyz/favicon.ico","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://unlock-worldlibertyfinancial.xyz/","date":"2025-08-31T03:07:08.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unlock-worldlibertyfinancial.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 00:31:11 GMT","end":"Wed, 26 Nov 2025 01:29:54 GMT"},"fingerprint":{"sha1":"52:45:82:B0:B6:64:C0:98:6A:DD:B4:EB:F3:79:05:06:39:2F:37:69","sha256":"65:B3:C2:F2:A1:0B:8C:64:3F:9D:36:6C:93:6C:D1:02:85:D1:42:AC:63:AB:92:D0:4B:03:4A:78:EA:4C:68:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: unlock-worldlibertyfinancial.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 31 Aug 2025 03:07:08 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://unlock-worldlibertyfinancial.xyz/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o2GAEthvw7uWGflqqyA%2FNTsryo4gdqpKL3qd1YsOuuG4sZ0ZR4%2FmDMM9sn%2BJIc7ZogcQBda9G3SnuIwxPNORByn6jCZm7rNrkQ%2BCv29O8VfashTN%2B11T37rBYs4iXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 977950df7e10b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T16:26:50.255427Z","times_seen":18038150,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"unlock-worldlibertyfinancial.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unlock-worldlibertyfinancial.xyz/favicon.ico","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://unlock-worldlibertyfinancial.xyz/","date":"2025-08-31T03:07:08.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unlock-worldlibertyfinancial.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 00:31:11 GMT","end":"Wed, 26 Nov 2025 01:29:54 GMT"},"fingerprint":{"sha1":"52:45:82:B0:B6:64:C0:98:6A:DD:B4:EB:F3:79:05:06:39:2F:37:69","sha256":"65:B3:C2:F2:A1:0B:8C:64:3F:9D:36:6C:93:6C:D1:02:85:D1:42:AC:63:AB:92:D0:4B:03:4A:78:EA:4C:68:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: unlock-worldlibertyfinancial.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 31 Aug 2025 03:07:08 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://unlock-worldlibertyfinancial.xyz/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=muRZg3onxTGYhOn5sUCu5cR2%2FIayeXmRozDkyCoeFKgse4dk%2BinGah%2Fzo8J6yQVytcPAt5jXnkZnEJ054X%2FznrahNvnPx6A77kYreYniSMDqEzqaN87l%2Fk0jhK6yIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 977950df8e12b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T16:26:50.255427Z","times_seen":18038150,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"unlock-worldlibertyfinancial.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unlock-worldlibertyfinancial.xyz/favicon.ico","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://unlock-worldlibertyfinancial.xyz/","date":"2025-08-31T03:07:08.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unlock-worldlibertyfinancial.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 00:31:11 GMT","end":"Wed, 26 Nov 2025 01:29:54 GMT"},"fingerprint":{"sha1":"52:45:82:B0:B6:64:C0:98:6A:DD:B4:EB:F3:79:05:06:39:2F:37:69","sha256":"65:B3:C2:F2:A1:0B:8C:64:3F:9D:36:6C:93:6C:D1:02:85:D1:42:AC:63:AB:92:D0:4B:03:4A:78:EA:4C:68:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: unlock-worldlibertyfinancial.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 31 Aug 2025 03:07:08 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://unlock-worldlibertyfinancial.xyz/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lo1FYbvuq%2Fnx2Ygg5RIAko%2B4OXBtJWnOzf54sAE9OEsYKKjMrIecD3l%2FlEJRfnfaMa1gsCuoBEpkHFjTregD5D8vEd94MpVO5EJiaAXQY6z5O5GXNGgz2HJvQkiOHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 977950dfce16b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T16:26:50.255427Z","times_seen":18038150,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"unlock-worldlibertyfinancial.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unlock-worldlibertyfinancial.xyz/favicon.ico","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://unlock-worldlibertyfinancial.xyz/","date":"2025-08-31T03:07:07.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unlock-worldlibertyfinancial.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 00:31:11 GMT","end":"Wed, 26 Nov 2025 01:29:54 GMT"},"fingerprint":{"sha1":"52:45:82:B0:B6:64:C0:98:6A:DD:B4:EB:F3:79:05:06:39:2F:37:69","sha256":"65:B3:C2:F2:A1:0B:8C:64:3F:9D:36:6C:93:6C:D1:02:85:D1:42:AC:63:AB:92:D0:4B:03:4A:78:EA:4C:68:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: unlock-worldlibertyfinancial.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 31 Aug 2025 03:07:07 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://unlock-worldlibertyfinancial.xyz/favicon.ico\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=659dEOtuo%2FpKXuu%2FrN1u9X5BoNesFjTBbPsGeYNhi6INQbTfxFggZPPrMe9nLrXbC%2FsSmSrOvFIp3LgRDIxcOrdG2m2hJr5c0sU5QjZowTqFp%2FflFRiAi1IhCXrKCQ%3D%3D\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 977950dd89225697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T16:26:50.255427Z","times_seen":18038150,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":2,"connect":4,"send":0,"wait":10,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"unlock-worldlibertyfinancial.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"unlock-worldlibertyfinancial.xyz/cdn-cgi/images/icon-exclamation.png?1376755637","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://unlock-worldlibertyfinancial.xyz/","date":"2025-08-31T03:07:07.476Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1\r\nHost: unlock-worldlibertyfinancial.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://unlock-worldlibertyfinancial.xyz/cdn-cgi/styles/cf.errors.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 31 Aug 2025 03:07:07 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dfPzbBXQmuCS7A9BZU8aA3yS9utQSEKZZxDlsBSLNYOPxtqTw4T8%2F4vUuQ3qHNbJF%2FUIT2HdzxxgfShuqioj5MW7wE%2BFIOH3%2BFyvTzZvk%2BHwJ4479oGtmwNHuePUzg%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 977950dbba6f712e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":452,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit colormap, non-interlaced","md5":"c33de66281e933259772399d10a6afe8","sha1":"b9f9d500f8814381451011d4dcf59cd2d90ad94f","sha256":"f1591a5221136c49438642155691ae6c68e25b7241f3d7ebe975b09a77662016","sha512":"5834fb9d66f550e6cecfe484b7b6a14f3fca795405dece8e652bd69ad917b94b6bbdcdf7639161b9c07f0d33eabd3e79580446b5867219f72f4fc43fd43b98c3","ssdeep":"","tlshash":"14f05c45c595e9f5a90330586311ca15ab7701c6276726c9d3854032a456482ca97f86","first_seen":"2023-04-12T19:44:04Z","last_seen":"2026-08-22T16:17:26.573756Z","times_seen":423091,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"unlock-worldlibertyfinancial.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/4710d66e8fda/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://unlock-worldlibertyfinancial.xyz/","date":"2025-08-31T03:07:07.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"GET /turnstile/v0/b/4710d66e8fda/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 Aug 2025 03:07:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Thu, 14 Aug 2025 15:17:42 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 977950dbfe7c0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48995,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (48994)","md5":"49d515b98ccae9634aff66a4ca77af98","sha1":"bfa5462a4f47c2350dcd0b3000e9cb54bec63c21","sha256":"4ca696d2fb66b44648a8fd55bc9eeaa6958dd9e523c4a740365823c30d4fc087","sha512":"856b855e0662da94dc3d314080976df11b5cb203d5ac498bacd9d201013e82258ee66ba1c3bb948e0ea71dd319345d9988be765daa3a276f8571e1787a38cc39","ssdeep":"768:XC6BRV2fM4lLa+rnhPLy6PuR8u5jUjRFPlBMqfspV6q11AY13kep+ORWqxIrm3LW:J2E4lLa+rnhT/oj2P6V6GNI","tlshash":"8f231b583256793227e980e1617ba74373257939e94ccc50d423c86536bcecad233fba","first_seen":"2025-08-15T11:12:03.097811Z","last_seen":"2025-09-08T12:15:40.897517Z","times_seen":20901,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unlock-worldlibertyfinancial.xyz/favicon.ico","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://unlock-worldlibertyfinancial.xyz/","date":"2025-08-31T03:07:07.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unlock-worldlibertyfinancial.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 00:31:11 GMT","end":"Wed, 26 Nov 2025 01:29:54 GMT"},"fingerprint":{"sha1":"52:45:82:B0:B6:64:C0:98:6A:DD:B4:EB:F3:79:05:06:39:2F:37:69","sha256":"65:B3:C2:F2:A1:0B:8C:64:3F:9D:36:6C:93:6C:D1:02:85:D1:42:AC:63:AB:92:D0:4B:03:4A:78:EA:4C:68:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: unlock-worldlibertyfinancial.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 31 Aug 2025 03:07:07 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://unlock-worldlibertyfinancial.xyz/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tI7BIcFDDw6fniTAnPwAloYzXj9p92Kcv7eGg7Wkao6B0Og8VpDntKYOgEmjJG%2Bzv%2BjDBmT0jFlMKbVvksJjr4mn9GtOp4BYvDoTmp4HVwrbo4EqZKcKmhfwuJUmJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 977950ddedfab517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T16:26:50.255427Z","times_seen":18038150,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"unlock-worldlibertyfinancial.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unlock-worldlibertyfinancial.xyz/favicon.ico","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://unlock-worldlibertyfinancial.xyz/","date":"2025-08-31T03:07:07.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unlock-worldlibertyfinancial.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 00:31:11 GMT","end":"Wed, 26 Nov 2025 01:29:54 GMT"},"fingerprint":{"sha1":"52:45:82:B0:B6:64:C0:98:6A:DD:B4:EB:F3:79:05:06:39:2F:37:69","sha256":"65:B3:C2:F2:A1:0B:8C:64:3F:9D:36:6C:93:6C:D1:02:85:D1:42:AC:63:AB:92:D0:4B:03:4A:78:EA:4C:68:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: unlock-worldlibertyfinancial.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 31 Aug 2025 03:07:07 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://unlock-worldlibertyfinancial.xyz/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z6wgzptrxmOYbD2XYjitU9TJJ5k9dGD6Sl2f6Lk14aKpRQtqnKjF2hBWN1Uutp9%2FmF9ejeu3UDoaedGJ8ed5pjnZRj0BJhsFlWLHY34y2%2BOGi1qW9lBjVRpa5Ek6Kg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 977950debe03b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T16:26:50.255427Z","times_seen":18038150,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"unlock-worldlibertyfinancial.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unlock-worldlibertyfinancial.xyz/favicon.ico","fqdn":"unlock-worldlibertyfinancial.xyz","domain":"unlock-worldlibertyfinancial.xyz","tld":"xyz"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://unlock-worldlibertyfinancial.xyz/","date":"2025-08-31T03:07:08.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unlock-worldlibertyfinancial.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 00:31:11 GMT","end":"Wed, 26 Nov 2025 01:29:54 GMT"},"fingerprint":{"sha1":"52:45:82:B0:B6:64:C0:98:6A:DD:B4:EB:F3:79:05:06:39:2F:37:69","sha256":"65:B3:C2:F2:A1:0B:8C:64:3F:9D:36:6C:93:6C:D1:02:85:D1:42:AC:63:AB:92:D0:4B:03:4A:78:EA:4C:68:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: unlock-worldlibertyfinancial.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 31 Aug 2025 03:07:08 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://unlock-worldlibertyfinancial.xyz/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Q4y%2FmtkbunABdF72C%2BasURh3rkxU8LWvpD7zf%2FS1SYfEqJ9YpvEMqT0cET3syoZREouO%2FTOCbRezmALl7qm0zsREP9O0pZRiryVlmtEO1RelT7JaA8bQFCuZUHbUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 977950df0e07b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T16:26:50.255427Z","times_seen":18038150,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"unlock-worldlibertyfinancial.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/124439541:1756607854:X9jPDvvesJ-f6cWSLLWnqdavR3KY9D2u8qTNUQL9FrI/977950dcaea00b06/EQvz3zTsZqPw6WYJ8pGYw77e.lJeCbdK.lvCLZEPr5E-1756609627-1.2.1.1-apogGRBvJu7xIGd6qGAq9CpG2TMgPQGPVg1QPzgrMpAQif8bfrrAwEk9LiSoQHR7","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","date":"2025-08-31T03:07:15.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 18:43:17 GMT","end":"Sun, 23 Nov 2025 19:43:11 GMT"},"fingerprint":{"sha1":"E6:D7:22:96:F5:75:38:F4:31:98:86:D2:9F:14:0C:18:3E:EA:F1:7A","sha256":"8C:19:99:03:18:5F:A0:C5:46:F9:CE:6C:A5:40:91:3A:C6:83:68:6F:EE:9B:6D:71:DF:32:C6:91:6D:55:64:6C"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/124439541:1756607854:X9jPDvvesJ-f6cWSLLWnqdavR3KY9D2u8qTNUQL9FrI/977950dcaea00b06/EQvz3zTsZqPw6WYJ8pGYw77e.lJeCbdK.lvCLZEPr5E-1756609627-1.2.1.1-apogGRBvJu7xIGd6qGAq9CpG2TMgPQGPVg1QPzgrMpAQif8bfrrAwEk9LiSoQHR7 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/u8gmj/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/\r\ncf-chl: EQvz3zTsZqPw6WYJ8pGYw77e.lJeCbdK.lvCLZEPr5E-1756609627-1.2.1.1-apogGRBvJu7xIGd6qGAq9CpG2TMgPQGPVg1QPzgrMpAQif8bfrrAwEk9LiSoQHR7\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 34135\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 Aug 2025 03:07:15 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: br\r\ncf-chl-gen: +4ykKnxMeCtJUaolzssGm2OGZq3PYYS0C0NbvKN9VZkcP7tySHM100RvxYNtT/IN$oYq6JDMgH4tu0Z5k9SL5/g==\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9779510d2e050b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29528,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (29528), with no line terminators","md5":"bc1919107cc17719df27d888763094ae","sha1":"7acc4e1431423266d7a9a6cef6928503bf8ff480","sha256":"dc4acca8f78c35daeaff5bef7659b19f7b171eb2e51fac64f85ccfd28b02f665","sha512":"95ce9eda7646b3c72552ba008a20d09103ff9682278cb4ca920c655a3c75e8f57dbbfab736df7d536cd4704e3e93e5dde77ff8d2fb4008e86580ef1926d102ff","ssdeep":"768:RI9UhkGhTYAqUMVvDYWpJ0sMuvWR8b/Q6l:RI6i2EAnKE8JjWR8b/QO","tlshash":"d3d2e1a73df51bbbc88ad675c4b77409aad9d9b10801d4fe9478240872efcbc0572536","first_seen":"2025-08-31T03:07:42.573866Z","last_seen":"2025-08-31T03:07:42.573866Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}