{"report_id":"f9e84972-7c46-4f53-b90b-91df4fcb67aa","version":6,"status":"done","tags":[],"date":"2026-01-24T20:33:30Z","url":{"schema":"https","addr":"criteria.wct-token.live/","fqdn":"criteria.wct-token.live","domain":"wct-token.live","tld":"live"},"ip":{"addr":"104.21.26.116","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"criteria.wct-token.live/","fqdn":"criteria.wct-token.live","domain":"wct-token.live","tld":"live"},"title":"Unlock Web3 Potential with Walletconnect Airdrop WC Today!","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T20:45:54.215879Z","times_seen":17892639,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"criteria.wct-token.live/","fqdn":"criteria.wct-token.live","domain":"wct-token.live","tld":"live"},"ip":{"addr":"104.21.26.116","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T20:33:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"criteria.wct-token.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"criteria.wct-token.live","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-24T15:05:43.643267Z","last_seen":"2026-01-24T15:05:43.643267Z","alert_count":16,"request_count":16,"received_data":6862857,"sent_data":7378,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"criteria.wct-token.live/","fqdn":"criteria.wct-token.live","domain":"wct-token.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b01b6dc58e0b2c901b7e33b79d00f393","sha1":"d83f3c5896b38284eb18309d6bfefdb8c35bb0e9","sha256":"387c5bd4e227f738fe8daae4744335da53436a8488acf0868a1ec23c84ef4d7c","sha512":"c7c9baf4ba59a98416543f06a5a197f5bc6ed62d60fd93eb9d2330015fc695440e8cd5fa6b56e3ec49c18a70362875e05d1c426bf224cbcc7a057b4922388e10","ssdeep":"1536:I6dr8BKeVS2HwILWWbQI1hdps4V1p/M2ySnKy:5dABKeV3HISnKy","tlshash":"04b383d96907c4d98e0621ded473e909e4684e23cdacf0a7e92cdec1752df6284871bb","size":112867,"data":"","first_seen":"2026-01-24T20:33:32.238212Z","last_seen":"2026-01-24T20:33:32.238212Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"criteria.wct-token.live/c23008c8-fa44-43f0-a33d-34b143e549ec","fqdn":"criteria.wct-token.live","domain":"wct-token.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a9115ce54654b9d957bae131a12d4c7","sha1":"5993e123a8e96bb624384eb4f1a298450da9bc7f","sha256":"0d1220d221a432c931c772d3570f23d12f8a9c386923bd5f7b9f84cdeebede0a","sha512":"563c939b7f62dce579d3543667d2bc9530cd2a4a9b18c20bde51553fab2be17c3060be10d291bdf8b558bca152813107c79b93a75b29c1bb5e163638154b4170","ssdeep":"6144:vkWGpw3PDyy3hEcZQCw6BSn5NGCkx5h07Cw6wBmCZ7zUkhaIqF3oIEzFXDU476rR:cBwnhLZQCwkSnv1kx07Cw6wBmCZ7zUku","tlshash":"3574cfdd96d6b7bff3ee3283942b0b0573ed505bf216210d4a4afaa4302f654a0db458","size":358540,"data":"","first_seen":"2025-08-05T21:15:33.992845Z","last_seen":"2026-06-26T23:42:12.202089Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"criteria.wct-token.live/ovtjhsl2z9.php","fqdn":"criteria.wct-token.live","domain":"wct-token.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3ccbf820082f25eee3ffb2f6aa10b65","sha1":"05ff3f2c50584d39f6a55b74e71c9b7cce3f8837","sha256":"eabc12aa841b5e96532660c0882c2e880ac9968928ae6dd5ce7ebb8cc588241b","sha512":"cee4e43d946b9b7f22947522e67465a90771f04cadcdebb21cd5ffc61880c2ae868d6db1483d344431e02e5d73d58d539ec26047578fb34424f15d47eb22fe3f","ssdeep":"1536:0YpaBZm7MeqbWBRIEAaAaM4WbQI1hdps4Vvp/Wonn6Jb9:LpaBZmIDcixayn699","tlshash":"c8b385da2807c4d98e1521ced477ec09e0684963cdacf0a7ea2cddc6751df6684872bb","size":117476,"data":"","first_seen":"2026-01-24T20:33:32.22234Z","last_seen":"2026-01-24T20:33:32.22234Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"criteria.wct-token.live/","fqdn":"criteria.wct-token.live","domain":"wct-token.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T20:33:06.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wct-token.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 07:12:58 GMT","end":"Sat, 28 Mar 2026 08:12:51 GMT"},"fingerprint":{"sha1":"B1:C3:6E:34:F7:42:4E:07:44:5D:A3:D2:11:42:31:8A:14:8A:D0:1D","sha256":"E7:81:C9:9A:6D:66:95:30:1D:30:18:01:05:F3:56:10:06:14:22:8E:9D:CF:0D:6F:BB:C7:CB:66:43:DF:D9:D6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: criteria.wct-token.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 20:33:06 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 23 Jan 2026 07:06:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bMtjAZMu1JJc%2B22TQsOx6G99pLV6jCISUxVXWo2ckX1VSia8L0sXuCaXBC1lVLQXYmaWtHSVd6zV826CBnXuNlioOb%2BnzyvpNHc29cCcenU8tS7UlA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c324dd0384c712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125322,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12976)","md5":"75b6adc0aa5ca0e66736d209286b33ed","sha1":"1c62643739cef87556cad613749fcaa223c58b86","sha256":"81d99778b3c8cd42c7673ac643f8b6279f8d7f9ab673dd12c46a09530ab07f9a","sha512":"8aefcbcd959e87b1d4386aad483936bc1f978090cefa663be73efade69743255cdb23c1fe5ddb6f4b5072a535e56af1075f7668538a5a2f9e4f546444cb7c0e0","ssdeep":"1536:HKWZRx/c64Jysq7vcxDQ8tc4KDXs1+HPllYkoExWQrjDwkFNGH:HKWZcxUec48XUExprjDwkFNo","tlshash":"56c38542fd45853b7a2781af67c5ee4d61a07003dc62fa48b2fc80818fc7ebb5ab6554","first_seen":"2026-01-24T15:05:47.632673Z","last_seen":"2026-01-24T20:33:32.214151Z","times_seen":2,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":41,"dns":27,"connect":1,"send":0,"wait":76,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"criteria.wct-token.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"criteria.wct-token.live/5260f533b8cac6ba.css","fqdn":"criteria.wct-token.live","domain":"wct-token.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://criteria.wct-token.live/","date":"2026-01-24T20:33:06.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wct-token.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 07:12:58 GMT","end":"Sat, 28 Mar 2026 08:12:51 GMT"},"fingerprint":{"sha1":"B1:C3:6E:34:F7:42:4E:07:44:5D:A3:D2:11:42:31:8A:14:8A:D0:1D","sha256":"E7:81:C9:9A:6D:66:95:30:1D:30:18:01:05:F3:56:10:06:14:22:8E:9D:CF:0D:6F:BB:C7:CB:66:43:DF:D9:D6"}}},"request":{"raw":"GET /5260f533b8cac6ba.css HTTP/1.1\r\nHost: criteria.wct-token.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://criteria.wct-token.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:33:06 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Dec 2025 09:55:59 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A5O%2Bk73ewazxUlcoZuZf%2BICD9rh5wuTZ3GxIfYR%2F%2BxihnMoQVfPSP2mXjiBsxzwMM%2B0SSgawtwYupic2M2Gmaokenf68vbpiyP4WxWbB1yY%2FQVP0VG29\"}]}\r\netag: W/\"6950feaf-c1\"\r\ncontent-encoding: br\r\ncf-ray: 9c324dd1dda2dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"411c18ba4eac800b67df715e702248f9","sha1":"ab1f3d7204a5ebe6fa0b49ca5d301a6ec5ad149b","sha256":"3c9f21461def2dca7b6b699f87c65828e6dbd543a0d4b3c3b463c6f8187f143b","sha512":"d2a861f02d5db04a93d1da81129e3229e94a599400700874a05f8b09e21b92aa9b2a4cfc3fb784629a9944583b38a26b2eda1c8e4486019756d3de7393a5ee78","ssdeep":"","tlshash":"d3c0c92564c2c429b85389b834f48749d87d880695469f79246fb4e9510a1d6486b065","first_seen":"2024-09-30T13:44:36Z","last_seen":"2026-03-28T14:45:14.004276Z","times_seen":12,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"criteria.wct-token.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"criteria.wct-token.live/index2.css","fqdn":"criteria.wct-token.live","domain":"wct-token.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://criteria.wct-token.live/","date":"2026-01-24T20:33:06.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wct-token.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 07:12:58 GMT","end":"Sat, 28 Mar 2026 08:12:51 GMT"},"fingerprint":{"sha1":"B1:C3:6E:34:F7:42:4E:07:44:5D:A3:D2:11:42:31:8A:14:8A:D0:1D","sha256":"E7:81:C9:9A:6D:66:95:30:1D:30:18:01:05:F3:56:10:06:14:22:8E:9D:CF:0D:6F:BB:C7:CB:66:43:DF:D9:D6"}}},"request":{"raw":"GET /index2.css HTTP/1.1\r\nHost: criteria.wct-token.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://criteria.wct-token.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:33:06 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Dec 2025 09:56:00 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ua9T8IkBVGh6bND%2Bnij3fCTGUh%2FBPiRuz%2BbYBQ%2FpokxZC%2F3em5QHD%2Bvm6%2BcxBu5WqHSTdRCaQLLBm7ts%2BJCEZK7QzrV%2BZCYHVlidr03Xr1%2Fj1iUrK0gA\"}]}\r\netag: W/\"6950feb0-118d\"\r\ncontent-encoding: br\r\ncf-ray: 9c324dd1edc5dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4493,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4324)","md5":"840e37c73f9e722c6ab8d1ce3499e667","sha1":"1fbbf0de21b8177de3070a5d6aa69bbc72bd28b0","sha256":"c93e0060f6f137aa5793cf226c4b6bcbfb0202443ec269b06d5183d40654e9d2","sha512":"2eb0abc1ed16248cdeebd68fbbc0abacc66ba79c7ec5c0255b1f06a3540e7d44c37b6094359565b45aa35f5ac03cd314b7f65f1278965eecd5916c96905b5594","ssdeep":"48:M5HZHYbfpufP13BQGU8zZP/zhBsscbFi4HBSHMZje6+nYHrURUACTitMCJns:k1rTFP/tALYJLt4","tlshash":"4f913049a10ec57f3913c1a5d1949ee846d486c3ce021ebbf16130bedacb294e576bac","first_seen":"2026-01-10T00:08:21.714305Z","last_seen":"2026-01-24T20:33:32.218277Z","times_seen":3,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"criteria.wct-token.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"criteria.wct-token.live/wc-logo.svg","fqdn":"criteria.wct-token.live","domain":"wct-token.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://criteria.wct-token.live/","date":"2026-01-24T20:33:06.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wct-token.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 07:12:58 GMT","end":"Sat, 28 Mar 2026 08:12:51 GMT"},"fingerprint":{"sha1":"B1:C3:6E:34:F7:42:4E:07:44:5D:A3:D2:11:42:31:8A:14:8A:D0:1D","sha256":"E7:81:C9:9A:6D:66:95:30:1D:30:18:01:05:F3:56:10:06:14:22:8E:9D:CF:0D:6F:BB:C7:CB:66:43:DF:D9:D6"}}},"request":{"raw":"GET /wc-logo.svg HTTP/1.1\r\nHost: criteria.wct-token.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://criteria.wct-token.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:33:06 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Dec 2025 09:56:00 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zhvg2eo3SLT0apPAW5HK7Akw9Gw7fbjt4lLdXTcncLUmobqYT0VGt2WBk3bVIAKUXuU8qkNOAv6GQDjHu8JQoaLD4bw3FLV0aJwHc7L6i4%2BfUtWm2l5E\"}]}\r\netag: W/\"6950feb0-2a65\"\r\ncontent-encoding: br\r\ncf-ray: 9c324dd1edd3dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10853,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a0429d5335e5bd3ef9650afcb7c1d5d1","sha1":"4032c6ff216e83ae20104c4cc2d4e41d1f5e2c99","sha256":"5c6a47b9ebb30ea34c2026269f26ce0cf70ec717ecd44bdc4a0fdff2f81406b7","sha512":"cab3d3e41c72f2b677701bb5b769bc407e8d0641268b225adeabf71c4be3bb5a783ac63ac105ee0dc6d1ce3e841a4bbfc149d511df52742f3092d5f6085550d8","ssdeep":"192:fLxBjPEJ79F2FzDy6PnWKFKRv2REdrKKRv2REdrKKRv2REdrKKRv2REdrKKRv2Ra:zTy6zDyeWCGeRrGeRrGeRrGeRrGeRa","tlshash":"5522a9c6df6ca25476b32d66e85b70cc35af40bd5a0c86137c38e118b4d2d9c425bce9","first_seen":"2026-01-10T00:08:21.735693Z","last_seen":"2026-01-24T20:33:32.219709Z","times_seen":3,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"criteria.wct-token.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"criteria.wct-token.live/css2-2.css","fqdn":"criteria.wct-token.live","domain":"wct-token.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://criteria.wct-token.live/","date":"2026-01-24T20:33:06.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wct-token.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 07:12:58 GMT","end":"Sat, 28 Mar 2026 08:12:51 GMT"},"fingerprint":{"sha1":"B1:C3:6E:34:F7:42:4E:07:44:5D:A3:D2:11:42:31:8A:14:8A:D0:1D","sha256":"E7:81:C9:9A:6D:66:95:30:1D:30:18:01:05:F3:56:10:06:14:22:8E:9D:CF:0D:6F:BB:C7:CB:66:43:DF:D9:D6"}}},"request":{"raw":"GET /css2-2.css HTTP/1.1\r\nHost: criteria.wct-token.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://criteria.wct-token.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:33:06 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Dec 2025 09:55:59 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hkEUAKzgPlpJx0SQJ2XFjkQXVLJg1e2tt89KDATGTuLUBGcBOo9YLqts706xsQRsLCXWUHllQFuUhwexDDCmHnaTcAvPOSMLFk83PrXALDtsqtIEmlrr\"}]}\r\netag: W/\"6950feaf-1dcc\"\r\ncontent-encoding: br\r\ncf-ray: 9c324dd1edcadfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7628,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a945690afba190bdf35bdbc8dca91152","sha1":"d93d79ba5c4ff541fb62d683c5d6b488b9f53ba8","sha256":"e3588f89e8f3d36d7befdcd1ad777d37963acce98132704f84f1d7ab2d5e1b4b","sha512":"72a22e14d311d595ee72e60b3ae2692c0cf6745594fab8f6f60c522f0f91a227d67e0dbbbc34e4fdfae78e152a29498981398ad2f56e511e7abe26664268a393","ssdeep":"192:9/NAPt34yaDD/OnIt3/ha8G/rKht3iIall/E5yt3RPaGc:JwSfyGKVm","tlshash":"ebf14490046b9400eb872cd277cf7f376d9da148a045c9795ffd1898acded2613a1b4d","first_seen":"2024-12-17T11:31:53.647668Z","last_seen":"2026-08-14T17:25:53.35646Z","times_seen":634,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"criteria.wct-token.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"criteria.wct-token.live/ovtjhsl2z9.php","fqdn":"criteria.wct-token.live","domain":"wct-token.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://criteria.wct-token.live/","date":"2026-01-24T20:33:06.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wct-token.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 07:12:58 GMT","end":"Sat, 28 Mar 2026 08:12:51 GMT"},"fingerprint":{"sha1":"B1:C3:6E:34:F7:42:4E:07:44:5D:A3:D2:11:42:31:8A:14:8A:D0:1D","sha256":"E7:81:C9:9A:6D:66:95:30:1D:30:18:01:05:F3:56:10:06:14:22:8E:9D:CF:0D:6F:BB:C7:CB:66:43:DF:D9:D6"}}},"request":{"raw":"GET /ovtjhsl2z9.php HTTP/1.1\r\nHost: criteria.wct-token.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://criteria.wct-token.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:33:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=3600\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tydqCbXcc1qWL6p6OCtgY0nHoYGHMqu2uKx%2FCi5re13YVPWfPZsIVjOcttw9MAIQOZiolQbzIWZOziwkXabYnkKT0FPSOvNeYY5jpLSsWJtb13feChm%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c324dd1dd8bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117476,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b3ccbf820082f25eee3ffb2f6aa10b65","sha1":"05ff3f2c50584d39f6a55b74e71c9b7cce3f8837","sha256":"eabc12aa841b5e96532660c0882c2e880ac9968928ae6dd5ce7ebb8cc588241b","sha512":"cee4e43d946b9b7f22947522e67465a90771f04cadcdebb21cd5ffc61880c2ae868d6db1483d344431e02e5d73d58d539ec26047578fb34424f15d47eb22fe3f","ssdeep":"1536:0YpaBZm7MeqbWBRIEAaAaM4WbQI1hdps4Vvp/Wonn6Jb9:LpaBZmIDcixayn699","tlshash":"c8b385da2807c4d98e1521ced477ec09e0684963cdacf0a7ea2cddc6751df6684872bb","first_seen":"2026-01-24T20:33:32.22234Z","last_seen":"2026-01-24T20:33:32.22234Z","times_seen":1,"resource_available":true,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":592,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"criteria.wct-token.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"criteria.wct-token.live/favicon.ico","fqdn":"criteria.wct-token.live","domain":"wct-token.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://criteria.wct-token.live/","date":"2026-01-24T20:33:07.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wct-token.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 07:12:58 GMT","end":"Sat, 28 Mar 2026 08:12:51 GMT"},"fingerprint":{"sha1":"B1:C3:6E:34:F7:42:4E:07:44:5D:A3:D2:11:42:31:8A:14:8A:D0:1D","sha256":"E7:81:C9:9A:6D:66:95:30:1D:30:18:01:05:F3:56:10:06:14:22:8E:9D:CF:0D:6F:BB:C7:CB:66:43:DF:D9:D6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: criteria.wct-token.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://criteria.wct-token.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:33:07 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Dec 2025 09:56:00 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=55%2BjRQWWPgy2Mej4LSdSAYwgXTr4CzQ%2F7YBd48j0D2VHvud0sCZDN5lCiG0dlszKs6wO2s9fgraJzxE8YKWp1hf8CiqkR2d%2BEaH2Coi18VbCXTfSKWEE\"}]}\r\netag: W/\"6950feb0-1a856\"\r\ncontent-encoding: br\r\ncf-ray: 9c324dd76bbddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108630,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"cd1b88373adad3f59fd6b6cd69a2db77","sha1":"08d60e57879d442a466221260c9904470b836e4d","sha256":"917f37ac2647df69b7a2c23de2e013ef21b0182c7f2fec20807f6e835e117540","sha512":"2e3693a808aafbe8810721e131e09ec8690ad587355f79cdd4e416ea6c1029c65bad34497a5aae194492b7d0f7dcb5108abfe4937804208a46416afe08a2f847","ssdeep":"384:mV9RxVsrTGgq53PofidDPL0GCMylHfyNttqjS+hm3eSfenZVWkPM4T:mVz/eqrdDwGLqHqYwHeZoeM4T","tlshash":"1eb37fe93202b851e0254d3cdf14f96947f8ac653d2b8f07e6e1f39f2a72b56a790148","first_seen":"2023-04-05T17:37:17Z","last_seen":"2026-07-25T07:14:43.652466Z","times_seen":233,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"criteria.wct-token.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"criteria.wct-token.live/profiles-header.webm","fqdn":"criteria.wct-token.live","domain":"wct-token.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://criteria.wct-token.live/","date":"2026-01-24T20:33:07.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wct-token.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 07:12:58 GMT","end":"Sat, 28 Mar 2026 08:12:51 GMT"},"fingerprint":{"sha1":"B1:C3:6E:34:F7:42:4E:07:44:5D:A3:D2:11:42:31:8A:14:8A:D0:1D","sha256":"E7:81:C9:9A:6D:66:95:30:1D:30:18:01:05:F3:56:10:06:14:22:8E:9D:CF:0D:6F:BB:C7:CB:66:43:DF:D9:D6"}}},"request":{"raw":"GET /profiles-header.webm HTTP/1.1\r\nHost: criteria.wct-token.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://criteria.wct-token.live/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 24 Jan 2026 20:33:07 GMT\r\ncontent-type: video/webm\r\ncontent-length: 277263\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Dec 2025 09:56:00 GMT\r\npriority: u=4,i=?0\r\netag: \"6950feb0-43b0f\"\r\ncontent-range: bytes 0-277262/277263\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SZhc6YcIVRFLxPGlHB%2Bfx9knvtzVUNc53Akyf9w3PGvJ5kkLS%2BqUizn%2BleNLt9UOE5q0z%2F9%2Bv45x7uwL1lLxeDeR4Si22ws%2BM6tPZLrXcUtG12ba0xYC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c324dd77bd9dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":277263,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"23b8a99fb309842600d77403a3d807bc","sha1":"471b917eb70de608ecba19a455db45420fbb06be","sha256":"0e82a12412071a03b999877ac11f12d247960af6f871e3bff41c982efbea3dc4","sha512":"10a93fd856cf09a7fe25ff4a9924d0b487ae728ce56924bedbb1da3b34357fa004661526939bfcfa3e4ec8a6509b9d84896d7b91d25a77e7c420279dd65018d7","ssdeep":"6144:U7RBHXAd/PbiMf1ziGQq+STE9GoDJ815XCMcHW3Q:U7ng/P3VT8LDJ81Z4yQ","tlshash":"984412d195c79990c9ce2536eb663a639e1c85de0ca0951fc3bba146cd0af1cc01e6eb","first_seen":"2024-10-04T11:00:04.625755Z","last_seen":"2026-01-24T20:33:32.226206Z","times_seen":7,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"criteria.wct-token.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"criteria.wct-token.live/ovtjhsl2z9.php?m=2948811","fqdn":"criteria.wct-token.live","domain":"wct-token.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://criteria.wct-token.live/","date":"2026-01-24T20:33:07.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wct-token.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 07:12:58 GMT","end":"Sat, 28 Mar 2026 08:12:51 GMT"},"fingerprint":{"sha1":"B1:C3:6E:34:F7:42:4E:07:44:5D:A3:D2:11:42:31:8A:14:8A:D0:1D","sha256":"E7:81:C9:9A:6D:66:95:30:1D:30:18:01:05:F3:56:10:06:14:22:8E:9D:CF:0D:6F:BB:C7:CB:66:43:DF:D9:D6"}}},"request":{"raw":"GET /ovtjhsl2z9.php?m=2948811 HTTP/1.1\r\nHost: criteria.wct-token.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://criteria.wct-token.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:33:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=300\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WCvSJnczfgsH5%2F%2FAi4wM8VQ7ioD%2FoBABvJSatqUsrzCN0392PVF6ikNAt3mOMmsZXyNz5Rygotco%2Bweu3IrnCg00ktlCcVLw6Jz5iPcKQiX9todzOOB7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c324dd83da4dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6002843,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3f6df08ee2f47c4b992656b9c5de4b6d","sha1":"be933143568fca13b5aa55c4b5e797a457c948fa","sha256":"468f71f206a4210cdce2b42c539a6f71b02a707a6f759d167ba7e1d094ad8db2","sha512":"2e730f81949bd13b7bf41a938036e573036b34e72c67366e07b3e96926a3481544da43c58a2be8b7597203f9f00352c9bfe15a495b9c51050f42b5c82c527238","ssdeep":"24576:JoFgvzhdP5ZGNGzJiQL8M+EHOOBAL8eejKVLK9L:Jom9R5ZZNibFpgTeejKVO9L","tlshash":"e02512c77059d0d36d1966b9b2d16eceacca046eaeea877c36d4dc1830f84710a6cbd1","first_seen":"2026-01-24T20:33:32.227184Z","last_seen":"2026-01-24T20:33:32.227184Z","times_seen":1,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":180,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"criteria.wct-token.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"criteria.wct-token.live/6b6344be316e2c16.css","fqdn":"criteria.wct-token.live","domain":"wct-token.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://criteria.wct-token.live/","date":"2026-01-24T20:33:06.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wct-token.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 07:12:58 GMT","end":"Sat, 28 Mar 2026 08:12:51 GMT"},"fingerprint":{"sha1":"B1:C3:6E:34:F7:42:4E:07:44:5D:A3:D2:11:42:31:8A:14:8A:D0:1D","sha256":"E7:81:C9:9A:6D:66:95:30:1D:30:18:01:05:F3:56:10:06:14:22:8E:9D:CF:0D:6F:BB:C7:CB:66:43:DF:D9:D6"}}},"request":{"raw":"GET /6b6344be316e2c16.css HTTP/1.1\r\nHost: criteria.wct-token.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://criteria.wct-token.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:33:06 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Dec 2025 09:55:59 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TgsLAwYHUCLaLZBMVRtJRdgAYNAxjfye988ZgDTFI1BH64XMsCN100ohHnV0Ug74VAPZkOV%2FRm%2Bp8MIS4MOcNRgeFfwrhoN%2BtiEz8Zsc5jyPt5kXJ%2Fas\"}]}\r\netag: W/\"6950feaf-9767\"\r\ncontent-encoding: br\r\ncf-ray: 9c324dd1dd94dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38759,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (37529)","md5":"ce2ecb401df1d7160a95e99ee50f0f3d","sha1":"9aeba6f7229d0629fecc9f7f01888430bef3c1ab","sha256":"4a4df16733f290d2eaa2326ed3dda660d9755e85fd812002df3c1cfeca27ef2b","sha512":"c77918b2b2e56fe975f54785815d65fb0aa3f69a80f504622b013142930f45d44c4137ab4ee75589797454fb634b7240b9ec40330f000e53fc2268477a4523d6","ssdeep":"384:WIxDHxEfJKcVc2vQ7F8GPR0z22FqG6QkoZNUrUlcTS+KE2H++5rhovuZ60fVbWNj:nHky2o7F8GPR0zNZNUruE2P5rh+w1Y","tlshash":"4103d52ebb29a13ead2788f2939cb6ac7015f0c0dd2654e99e8361059dcb7f71d83354","first_seen":"2025-06-22T21:53:03.49045Z","last_seen":"2026-01-24T20:33:32.229567Z","times_seen":4,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"criteria.wct-token.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"criteria.wct-token.live/css2.css","fqdn":"criteria.wct-token.live","domain":"wct-token.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://criteria.wct-token.live/","date":"2026-01-24T20:33:06.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wct-token.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 07:12:58 GMT","end":"Sat, 28 Mar 2026 08:12:51 GMT"},"fingerprint":{"sha1":"B1:C3:6E:34:F7:42:4E:07:44:5D:A3:D2:11:42:31:8A:14:8A:D0:1D","sha256":"E7:81:C9:9A:6D:66:95:30:1D:30:18:01:05:F3:56:10:06:14:22:8E:9D:CF:0D:6F:BB:C7:CB:66:43:DF:D9:D6"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: criteria.wct-token.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://criteria.wct-token.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:33:06 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Dec 2025 09:56:00 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VoRcVHLkuQxgrhkMaFCQKcu8O%2BGigwwSYUqKbJJale3rRou%2Bt1MncDNnrttw44xZBjjdwtvu9vM%2Bc26R8wQhOvEyPEKHDW7OeKZ1KTBwLhPz777VjT90\"}]}\r\netag: W/\"6950feb0-7260\"\r\ncontent-encoding: br\r\ncf-ray: 9c324dd1edb5dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29280,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"1242c4ffc9a0e62aadb09c77168f3f5f","sha1":"a189bfd4143983dc91fc553737a01b0ec58b23eb","sha256":"9477d130f40d8929ac596ea1521d046b6f6a3dabe6b9a3fac5169c89eff3496c","sha512":"28777cea95f39d96a592965caf82fb98c4d94cc164deb5a1076b6833be9b2510960f9bb5afeb3f6d9de0ce39cf4a394561d41ecad388d41d39586a96ffa1a038","ssdeep":"384:JwSfZVhjEGPMQjkGzM+xwqY44nfqY4bT9qY4d:jAbTWlm","tlshash":"72d2e990042b9000eb872ce233ce7f36ee5da2407045d9396ffd1a5aadceda553a475d","first_seen":"2025-06-22T21:53:03.50886Z","last_seen":"2026-06-08T11:11:05.324459Z","times_seen":5,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"criteria.wct-token.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"criteria.wct-token.live/css2-1.css","fqdn":"criteria.wct-token.live","domain":"wct-token.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://criteria.wct-token.live/","date":"2026-01-24T20:33:06.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wct-token.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 07:12:58 GMT","end":"Sat, 28 Mar 2026 08:12:51 GMT"},"fingerprint":{"sha1":"B1:C3:6E:34:F7:42:4E:07:44:5D:A3:D2:11:42:31:8A:14:8A:D0:1D","sha256":"E7:81:C9:9A:6D:66:95:30:1D:30:18:01:05:F3:56:10:06:14:22:8E:9D:CF:0D:6F:BB:C7:CB:66:43:DF:D9:D6"}}},"request":{"raw":"GET /css2-1.css HTTP/1.1\r\nHost: criteria.wct-token.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://criteria.wct-token.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:33:06 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Dec 2025 09:55:59 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u0QQE75sx6xUuJtTGvZZV%2F3PyDUispgBhue9RbT0OkB5wvBNfipfnYOMho6nrYByJRzAp9xJF%2BjPsumcFWrmQjUH1K2f9twE9bXaPyxWV4Iw7oxUFsUt\"}]}\r\netag: W/\"6950feaf-11be\"\r\ncontent-encoding: br\r\ncf-ray: 9c324dd1edb8dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4542,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"27142dff91b369f5b38f2305a1019ac1","sha1":"769c227f481dc22b18a0973bf33ef03a0c47b0b3","sha256":"7d67c4ebb73c938ca33cfbfd5c7f22d5ea56bcbfb70fa011b88a16a2292003b4","sha512":"774cb72f934f0786387c51c22d970f8d0dfdc1d07d7cfcad09fb362ca67f351bca89444d0f0715716a82dff34ebf0ac9291ddeb72ef7b307042b75b91bb97b59","ssdeep":"96:AOO1a/wOO1afFZOhOO1aLOO1ayJc+udOO1adNtOOEa/wOOEafFZOhOOEaLOOEayk:F/VOywaf3/oOT9ama/BOW0ajc","tlshash":"ea917380046a9000eb872cd533cf7f329d9db1427095c9392ffe0968bcdad6523a4b6d","first_seen":"2025-06-22T21:53:03.473013Z","last_seen":"2026-03-28T20:34:54.200737Z","times_seen":15,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"criteria.wct-token.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"criteria.wct-token.live/index_1.html","fqdn":"criteria.wct-token.live","domain":"wct-token.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://criteria.wct-token.live/","date":"2026-01-24T20:33:07.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wct-token.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 07:12:58 GMT","end":"Sat, 28 Mar 2026 08:12:51 GMT"},"fingerprint":{"sha1":"B1:C3:6E:34:F7:42:4E:07:44:5D:A3:D2:11:42:31:8A:14:8A:D0:1D","sha256":"E7:81:C9:9A:6D:66:95:30:1D:30:18:01:05:F3:56:10:06:14:22:8E:9D:CF:0D:6F:BB:C7:CB:66:43:DF:D9:D6"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: criteria.wct-token.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://criteria.wct-token.live/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:33:07 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Dec 2025 09:56:00 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GCCmQRV8QrImI8eElpsDugHb1oRO%2Bk4cXifw%2BMSf8t4ZQcZpWHji2I%2F%2BAtR%2FBD3Fe7fwcGBExG1hdqHRiXTca4Q67SBNI57qwxpiiSgx%2BV5zg%2Fog88TN\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c324dd6ea4ddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":681,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"309ce3c19c03a8040f7e46e763be6f32","sha1":"a0d3baf3848a0db159c182f0d696ce891685e9f5","sha256":"62f6400d489abe05810348e4ca8b91f865bdb0ee119244dae8dad7f9f992269b","sha512":"7ec4cd1ae3e5834b72201037cfff6bd5698545d1b04909dfc352590f2b5c6008805a64bea6173e94918ada304b76ebcf62f285825f45457dd0f152e3382e0600","ssdeep":"","tlshash":"8a01478fca4ed10f1a4351a0ba88740dd2ce7b99a91c16f87d0c819eb9e867cc408a48","first_seen":"2025-06-22T21:53:03.496568Z","last_seen":"2026-01-24T20:33:32.233703Z","times_seen":4,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"criteria.wct-token.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"criteria.wct-token.live/favicon.ico","fqdn":"criteria.wct-token.live","domain":"wct-token.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://criteria.wct-token.live/","date":"2026-01-24T20:33:08.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wct-token.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 07:12:58 GMT","end":"Sat, 28 Mar 2026 08:12:51 GMT"},"fingerprint":{"sha1":"B1:C3:6E:34:F7:42:4E:07:44:5D:A3:D2:11:42:31:8A:14:8A:D0:1D","sha256":"E7:81:C9:9A:6D:66:95:30:1D:30:18:01:05:F3:56:10:06:14:22:8E:9D:CF:0D:6F:BB:C7:CB:66:43:DF:D9:D6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: criteria.wct-token.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://criteria.wct-token.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:33:08 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Dec 2025 09:56:00 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gNB%2BWsUnLA1FY6bkKarPyH5TWPs3CluJ0Js1Fgd%2FCY5lmbMgYQ%2FHbvCidcauiED4rqCcAjq1qhDRJMfmoZoXim7jyOL5VNjIbgx%2B%2BzXSRoVDZ7TeQ3Jv\"}]}\r\netag: W/\"6950feb0-1a856\"\r\ncontent-encoding: br\r\ncf-ray: 9c324dd91fa7dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108630,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"cd1b88373adad3f59fd6b6cd69a2db77","sha1":"08d60e57879d442a466221260c9904470b836e4d","sha256":"917f37ac2647df69b7a2c23de2e013ef21b0182c7f2fec20807f6e835e117540","sha512":"2e3693a808aafbe8810721e131e09ec8690ad587355f79cdd4e416ea6c1029c65bad34497a5aae194492b7d0f7dcb5108abfe4937804208a46416afe08a2f847","ssdeep":"384:mV9RxVsrTGgq53PofidDPL0GCMylHfyNttqjS+hm3eSfenZVWkPM4T:mVz/eqrdDwGLqHqYwHeZoeM4T","tlshash":"1eb37fe93202b851e0254d3cdf14f96947f8ac653d2b8f07e6e1f39f2a72b56a790148","first_seen":"2023-04-05T17:37:17Z","last_seen":"2026-07-25T07:14:43.652466Z","times_seen":233,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"criteria.wct-token.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"criteria.wct-token.live/css2-3.css","fqdn":"criteria.wct-token.live","domain":"wct-token.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://criteria.wct-token.live/","date":"2026-01-24T20:33:06.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wct-token.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 07:12:58 GMT","end":"Sat, 28 Mar 2026 08:12:51 GMT"},"fingerprint":{"sha1":"B1:C3:6E:34:F7:42:4E:07:44:5D:A3:D2:11:42:31:8A:14:8A:D0:1D","sha256":"E7:81:C9:9A:6D:66:95:30:1D:30:18:01:05:F3:56:10:06:14:22:8E:9D:CF:0D:6F:BB:C7:CB:66:43:DF:D9:D6"}}},"request":{"raw":"GET /css2-3.css HTTP/1.1\r\nHost: criteria.wct-token.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://criteria.wct-token.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:33:06 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Dec 2025 09:55:59 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CHoTOsftD1bqNc6DZIzJMNcxn34hAWuFDqOWMMJt%2BPzya3ltQauN%2BlPitjADCaKz%2B8Zfh9Tk%2Fyj9haqLDoLZpWdotKZkTBQ25%2BbhVhgR%2BEffZXGwwSkb\"}]}\r\netag: W/\"6950feaf-1ce8\"\r\ncontent-encoding: br\r\ncf-ray: 9c324dd1dda4dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7400,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f27e1a24fe3566b196257992c95ced22","sha1":"b8f83935ad217a4406e2960c0b0c53d4e03e9ed9","sha256":"153f3560eb20a3064582c454759e9ca583494a31daa57b800561eecf2030bc9d","sha512":"30dc5565b0078a02c7f3ad08abd22f268cb08a70aa660e83ab9c14ad7bdd3c5685750d154033cd5b0a0b68a0bab87345ea3655708dd9aab43a5e805355ca25a2","ssdeep":"192:9eNAPt34y2DmeOnIt3/h28jerKht3iI2lceE5yt3RP2G/:IwGfWGOVZ","tlshash":"94e15590046b9000eb876cd277cf7f366d5db5486085ca795ffd1898acded2223a4b4e","first_seen":"2024-05-08T19:16:48Z","last_seen":"2026-08-12T04:09:57.803203Z","times_seen":71,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"criteria.wct-token.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"criteria.wct-token.live/X.svg","fqdn":"criteria.wct-token.live","domain":"wct-token.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://criteria.wct-token.live/","date":"2026-01-24T20:33:07.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wct-token.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 07:12:58 GMT","end":"Sat, 28 Mar 2026 08:12:51 GMT"},"fingerprint":{"sha1":"B1:C3:6E:34:F7:42:4E:07:44:5D:A3:D2:11:42:31:8A:14:8A:D0:1D","sha256":"E7:81:C9:9A:6D:66:95:30:1D:30:18:01:05:F3:56:10:06:14:22:8E:9D:CF:0D:6F:BB:C7:CB:66:43:DF:D9:D6"}}},"request":{"raw":"GET /X.svg HTTP/1.1\r\nHost: criteria.wct-token.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://criteria.wct-token.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:33:07 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Dec 2025 09:56:01 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ykcTxrKTnaO7iYFMfG0QXRi%2BCVz21cPa6ciw7004SHQYQFmSH0yqOseSyfnLFULw3qfqVAZB1VOjAGoX2xliDGaSoeiH0V%2FYgcfjYeGmjV63%2FKlms4CZ\"}]}\r\netag: W/\"6950feb1-1eac\"\r\ncontent-encoding: br\r\ncf-ray: 9c324dd77bdddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7852,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ae54af06cdc56de72a1925174f623179","sha1":"82171204aeda4e7532e307ce7ede266bb1f03540","sha256":"addf317077367702af2de3491e224127613e6d264bb63137e5625ea21678736d","sha512":"268c40da7b838098e4c7a09d4747cca96068ee06c951f22567eb09dbaf0b18fb78c17eb71fb0bf4bbeb628a75c576cea23252e28556238e17b438390e6a8379e","ssdeep":"192:uSu1KRv2REdrKKRv2REdrKKRv2REdrKKRv2REdrKKRv2REdr5:uSsGeRrGeRrGeRrGeRrGeRk","tlshash":"b7f15485df6cb224b6722426e4aa70cd31af407e5a0c99237d28f118b4e5d59037fced","first_seen":"2026-01-10T00:08:21.73107Z","last_seen":"2026-01-24T20:33:32.236706Z","times_seen":3,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"criteria.wct-token.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}