{"report_id":"015a7904-cf7f-427b-b745-0e86ed29ed7d","version":6,"status":"done","tags":[],"date":"2025-10-26T01:28:53Z","url":{"schema":"http","addr":"cryptobubblesmap.com/","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":0,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"cryptobubblesmap.com/","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"title":"Crypto Bubbles Map"},"submit":{"url":{"schema":"http","addr":"cryptobubblesmap.com/","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":0,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-30T01:28:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"cryptobubblesmap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"cryptobubblesmap.com","ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2025-05-05","domain_rank":0,"first_seen":"2025-08-16T02:52:03.730935Z","last_seen":"2025-09-08T08:23:44.34834Z","alert_count":21,"request_count":21,"received_data":2545378,"sent_data":11826,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress.com","description":"WordPress.com is a platform for self-publishing that is popular for blogging and other works.","website":"https://wordpress.com","common_platform_enumeration":"","icon":"WordPress.svg","categories":["PaaS"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Gutenberg","description":"Gutenberg is the development plugin in which new features for the WordPress Block Editor are tested.","website":"https://github.com/WordPress/gutenberg","common_platform_enumeration":"","icon":"Gutenberg.png","categories":["WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Elementor:3.32.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Contact Form 7:6.1.2","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Jetpack","description":"Jetpack is a popular WordPress plugin created by Automattic, the people behind WordPress.com.","website":"https://jetpack.com","common_platform_enumeration":"","icon":"Jetpack.svg","categories":["WordPress plugins"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2025-10-19T22:22:39.496173Z","alert_count":0,"request_count":8,"received_data":12083,"sent_data":3678,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts-api.wp.com","ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":166248,"first_seen":"2022-11-28T22:42:34Z","last_seen":"2025-10-20T01:28:10.84754Z","alert_count":0,"request_count":1,"received_data":46196,"sent_data":563,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"i0.wp.com","ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":841,"first_seen":"2013-09-17T06:14:42Z","last_seen":"2025-10-19T22:45:50.454806Z","alert_count":0,"request_count":4,"received_data":24750,"sent_data":2046,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s0.wp.com","ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":56327,"first_seen":"2017-01-30T05:08:18Z","last_seen":"2025-10-19T23:35:34.240905Z","alert_count":0,"request_count":1,"received_data":14372,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pixel.wp.com","ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":22824,"first_seen":"2017-01-30T05:31:40Z","last_seen":"2025-10-19T22:32:18.961104Z","alert_count":0,"request_count":1,"received_data":251,"sent_data":592,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"stats.wp.com","ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":22660,"first_seen":"2017-01-30T05:06:59Z","last_seen":"2025-10-19T22:32:18.931935Z","alert_count":0,"request_count":1,"received_data":4265,"sent_data":417,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-includes/js/wp-emoji-release.min.js?ver=6.8.3","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","size":19251,"data":"","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-04-06T05:06:18.003558Z","times_seen":196065,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-includes/js/jquery/jquery-migrate.min.js?m=1686289764","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-06T05:11:39.813655Z","times_seen":642369,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-06T05:11:39.633896Z","times_seen":689466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?m=1759204044","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-04-06T05:02:14.401853Z","times_seen":149602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/_static/??-eJyVj9EOgjAMRX/IgcSAvBi/pcKAwrbiWkT+3qGExBgTeGlz057e27FX6AozlJrjlmO0UGs2BKUuI4suavkwfq9YYHJ++jNt74P209Ki392CnGgnsTTaBuJGDKr3FAOzllmTsHjo51ur2M6zwaL71O3QGjt6gw4eu1jusFcGXacqKgZWFT43s8ELaxCk7XZhgqBYQtJJMZb6Bn5X3kasSbnBfV+Gz4TsglztJTmnx1OW5XnyAvvv2j0=","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c87bb44f90bbd01e58428d9700ef5f5e","sha1":"f916fa21d4389ad19de6147fe40dd00c6d8ec22a","sha256":"1951c877d20539be363d2bac05d6007b99d810079022e7e39927132377662473","sha512":"8ebc4cc97375721f87d8dd0936456ac3c2dd71c1a58877ce2e4aaca7c9c509974ef5be9d7088d419bdb9083b2d26f329b9cf8c81f42949565437ccbd55a58391","ssdeep":"3072:P0JadtIP4Nn9SgLeT3pIlNieePiil7smkUmkEy7gbY:AadtIP4Nn9wT3sNieePii+mkUmkEy7","tlshash":"3ef3194ab200367241df61e6513b850fb37bb56da60680acb59dc4ee287cc4d21a7fbd","size":160971,"data":"","first_seen":"2025-09-08T08:23:45.822194Z","last_seen":"2025-10-26T01:28:57.448269Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b761baedd671f34c28733d1eabdbbc85","sha1":"b9c07204aef73999fdb3c41542f82e1c7842fc33","sha256":"430f9f6042e5a751b0be42f5e59e8cb8628db20281cf589770a09e42492817cb","sha512":"f49b6ab4d06b2112f302600db5ce2914cc9da0f8ae86ea556c2a72d5a1380192831d3c4546782e1587a4555ccfdf7eaf43186f7b3ffa300ac159a39c9d44035b","ssdeep":"","tlshash":"3d61989a3775348b32b614d16a3f4e07fb7258261a88d034cabae7541cb1463d37ae4a","size":3417,"data":"","first_seen":"2025-10-26T01:28:57.4742Z","last_seen":"2025-10-26T01:28:57.4742Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-content/plugins/gutenberg/build/i18n/index.min.js?ver=bd5a2533e717a1043151","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b881a27f5df55b26514f877aa92b2b6","sha1":"10f03cc0d811a70b2f0fc6c224c9522732a36e6e","sha256":"f173fd421b26d6877143a9120fd91f86cd07e4deaa36b9fb2e04dec261ab3462","sha512":"559c082357c4397a05ae4369eb5456322aa0ec344a67dfc0f7151d68864421f68dd69d7977f2ebe51fb392ca0c43e681c544316b9377c24254ee89111f407b29","ssdeep":"192:OmXa4ttaHGqCXRDzqiLtj1zFHLBr/6ULVu3SH9Li9FPZr7KpmSvSNK:OmXLLRDzqKRZB1pVsSH9Li9FPZr7KQYx","tlshash":"5102d5dc30de702423a615e5482fb501f23bee6571e9ace0ea82d8517db45c960b3bf6","size":8831,"data":"","first_seen":"2024-11-11T08:18:14.975693Z","last_seen":"2026-04-06T05:17:55.549748Z","times_seen":4729,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"843e6e7a569d4293ad65db19e6f697dc","sha1":"2c4236fc43e3677b87320d1116655a92306ee7e7","sha256":"8e7eb6a51b61cccbea5302fef375ffef36dd599a6a0f06e8fefc3fa2f3c08cb0","sha512":"13846152d929aa213cd70b1b5991b6c13c64820612e91410b9b1be089e7d353c46b64404cec124bf592070f05c6c2595db248ac2919634932de7e593b0d1e26b","ssdeep":"","tlshash":"b4d0221000c9188292e053e45e7894f282ee73998844c2cbebefe4bd4bd2410117f202","size":200,"data":"","first_seen":"2025-09-08T08:23:45.837966Z","last_seen":"2025-10-26T01:28:57.475119Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"02d7d8402b7ddb8e6fe47f2a35071e8d","sha1":"174b5a8fe0ecdfa989fbf40f3ecd51f1d0117693","sha256":"8a96c1a0a8b1c2a8eab8adfa21634b7f2c4226f6bc5322df1ab7efc4f1f1af7f","sha512":"aafd7e64bba6934b73597de06bf30303d6bce9ea9e981102d881c52e8543d6ce7b5310694c6b230635e66557019cdf79b99bfed422f3397d892f5ff754500e8e","ssdeep":"","tlshash":"c5b01285308728818099e260ab62fc01499215cf064ecd4429d8df64afa2480f4c231f","size":94,"data":"","first_seen":"2023-11-08T00:42:21Z","last_seen":"2026-04-06T04:43:12.616605Z","times_seen":132232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9db6058884962122608c505273af53b5","sha1":"ebf2b41d844734e209751ce637d85f68b76bfccc","sha256":"78aaa485d4fed31f88d1e49ed751c19181ad7e1dd3c2c374cffd80a91acca2df","sha512":"a53308f6bcea15ab5407797483b83effb25c2c216adc4924e258f97fff8553c908500b43095396b4b06b70a1eecf009178e02f954cb41023bf10b8be0ad6dc83","ssdeep":"192:2/HPVa7gtRi9LJ+8DKy/rxGGJPu+EqEmeW9eYio+NuBBuZJfCwPidFOM/xsDbnSa:6VLmLJXDKyT0eREqEjrum3fXtDG4rZ","tlshash":"d1b294252ef31435c0a3157c578a72182e79f58b7acb9d1e3e2cc1c48f82865d8b6f64","size":24399,"data":"","first_seen":"2025-09-08T08:23:45.839307Z","last_seen":"2025-10-26T01:28:57.477184Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.2","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-04-06T05:02:14.404212Z","times_seen":156076,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-content/plugins/jetpack/_inc/build/carousel/jetpack-carousel.min.js?m=1756132798","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"60a882154a13c6115b74d49e686cc04f","sha1":"fe397974701758c9fbbff768ea52063c7a071129","sha256":"3b2d28647d34bed64a5deedfb72535c6c84358f89c168336dae77c6d37a184f6","sha512":"93f677cf5b6b6fbf451935d190f15ee57d0e17b15b0c5fe8145d1558877c43215f20e5dbf98744b5ad02cd8d7f3e61196957c5e9548fdd5ea01c3f7f8e48477e","ssdeep":"768:c/dGkz186E2bYHiyxgJ/jJrsLdpKV1XPRB9QxSvWGldsJfRWdfO18vL:c/F86NIGUJJWdD","tlshash":"22b2f9b8724021718dd703ea988f9681716c2f66c807c450e5bff45e2eb8e971265fee","size":24700,"data":"","first_seen":"2025-08-26T06:21:10.223934Z","last_seen":"2026-04-05T09:12:23.632088Z","times_seen":726,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s0.wp.com/wp-content/js/bilmur.min.js?m=202543","fqdn":"s0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6938250860c5d52a33ce05da12b2c3ab","sha1":"f356adbd496bc9259f1826eec0c274f55829a017","sha256":"738850d41abc37f80f87bedf655faf096d3c789f3a0d54d00ef28f04d2fc5e0d","sha512":"4f20d3cff626a1c28145f08b81f147d4cc08bc52c764cbae0497863df22052d5517730f48a2f172003cec9f17ebdc2e8c16e25ee4f23813ef02eda7ba6bc7f07","ssdeep":"384:gIUFa8xXeKmROq3y81T6uOMTmaMs9TTvf9W4k:kRcKq1vOPatjhk","tlshash":"9a52c6edf681307613d3a1b2517f160b723b6b915c899088912eebd12c7c9ce526bf9c","size":13777,"data":"","first_seen":"2025-09-10T15:06:06.720245Z","last_seen":"2026-01-04T08:21:24.577223Z","times_seen":4459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e434b0b4f43ec7216073eed1f3ffb51","sha1":"8d8a4ab1ed63889095bdf38ba646319b639feabc","sha256":"dd0ec57abf154d52c161fae92db6014f042417d9660679097ae55287041ec52e","sha512":"20978b9f1afc586c91351ef67791224fb5469004a1ebb5af608a05f643103a358e605d2c54cdba2174bc35c266ec963690d5d1fc3f80a045f4c33fc5f67b9ab7","ssdeep":"","tlshash":"6d110cf3b3dd907fbaae6d66193402cd6a1c90735c100a5bfeac3575cc8042538b1d40","size":922,"data":"","first_seen":"2024-04-08T18:49:14Z","last_seen":"2026-04-06T05:12:21.220963Z","times_seen":176852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa1f7032b4539f6b180d8f16bf297cac","sha1":"7a44b914f97e56a981a424ee57a8e33adbdf031c","sha256":"57be934bf0bae02bdc61d757f1ebbcbc071bd022a750d33200f62c67d6a7a4d9","sha512":"9d797e0fc3cfd99fe0be9ce365cb168a55788c551ea06c4c1de9c986d1bf46d28fa64b570167c1feb1de37e20a2d692f18c1a853d5fbb3aee0747884e6b25896","ssdeep":"","tlshash":"d9c08055c9d07c4614e5d2a5137c5125b76111074f1b5f56374d814c2fd5038e4353ce","size":183,"data":"","first_seen":"2025-09-08T08:23:45.840955Z","last_seen":"2025-10-26T01:28:57.478874Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.wp.com/e-202543.js","fqdn":"stats.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1e85b83d13876fefcf2d873fde8da3e","sha1":"09d271f2a7dd17e66a19fcbfca887734d951ed2f","sha256":"2abd616c43c16e7a2d01f1f1c761d6c12acf4b2ed9a9a411289ee3bb5a681ffe","sha512":"a1ab2e32190702e46c440606a45e51dd073168fa11828683764aef077fb2b495343bd91ee784974244c37d0a52a8225d1a6359ffe0ddf0ec6971aeb7c50e3ec8","ssdeep":"","tlshash":"6b71646536c5f0381af630a5235f630af5ba8b7a7d4a9044c37cd4b07c79e8b9412f9a","size":3812,"data":"","first_seen":"2025-06-09T00:15:30.881783Z","last_seen":"2026-04-06T05:02:14.454872Z","times_seen":45521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f9660a5bfea70a1fdb9abb585db7f8a","sha1":"014817157206c4ba5dac4b884d5942fdcceca9c5","sha256":"8450134ff9656430c55b73f0e9eb2a939df99aacd3ebb9089dc54f2c56232d9e","sha512":"1e0b341ffc8ed0e845e033816020974415d491a8b52ef2d54db6996820495409414b358445193ed3dda7af53f9efa3e6d2a8f95081dbd57f8fbe37721f2e842d","ssdeep":"","tlshash":"6f11ce1fd4a2b5a0437bc399f68b6d30e6ee7266900aefaad6cdcc250cc0105434710e","size":993,"data":"","first_seen":"2025-09-08T08:23:45.841931Z","last_seen":"2025-10-26T01:28:57.479799Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js?m=1760977193","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f83f9f56851a309bb6d7f379756af62","sha1":"f89a32128813f53c8a1d2dd7f42a2fc14064b912","sha256":"5d36a8c2ca17364f3d85cbae5d3f4866e3c4f8e27ae133a803d3276f6a47e0a5","sha512":"5fcd8858fff027d53ae7449d87de45823df728bb528f0e370eec2086d92f08844e41bfa792a2887ea569be24cf3b630b0501ab3e986dc450164f06b926ab8e2c","ssdeep":"1536:4zmszbHN/eY/jMhDlraYnWkvoPQsA+VvsvGNW5BLCQxPmnG4RaviizVk3PeQdQhw:4zPN/eY/Ynf9sZo7Pmnhb06PmnG9xJ","tlshash":"9bd3f94eb340352542dbf17a926f160e7237a51ca607806cb96ad8ea6db8c4d3037f7d","size":137522,"data":"","first_seen":"2025-05-27T21:53:16.076259Z","last_seen":"2026-04-06T04:50:39.419215Z","times_seen":14215,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2e04eabd0fc7917b253ead9042182cb","sha1":"a72733c8595d40add5750bcd6219824d9bb813ed","sha256":"568cfc24d278276c1d27148a9fbf4cbc2831769514644dd03cf8f94676152a6a","sha512":"937d5d16672780f0ca7f936b9646d88f742b7780afa3c592256ed3f6db17e6f6f5c72ae6d570aec291b75d68c95ef80faed762e767032b9d6d6e7347d3ba022f","ssdeep":"","tlshash":"aab024c0140c5dc1c30d000337f753457f510440cc5447c0f707403c01f3c50555400d","size":125,"data":"","first_seen":"2025-09-08T08:23:45.842994Z","last_seen":"2025-10-26T01:28:57.480688Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6bf824b81c35c42a2b02a67709350723","sha1":"01e3dabd424ea57e1eff12d1a53b13139b689932","sha256":"1848283503d4387ea539410bff6554ca0132a3665cee51acdf851ee6438852ad","sha512":"3ff92fe7323eeb67fefd50a6e524457a5035b777456fc2fc035c58891733fc7a0f00d589a51b00a56456ae561f5ac196c630f9ed15cbdde15bdf0471eb18318e","ssdeep":"","tlshash":"7de02b62476dd8bec5b0bf79327c9c7155d41817412c4f420b0afe6c7d7e17644a3101","size":313,"data":"","first_seen":"2025-10-26T01:28:57.481669Z","last_seen":"2025-10-26T01:28:57.481669Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6d6a5a0ad9459b3070af4dfc26fa2b5","sha1":"19aff685c727b5f8e953f7502d24fb375b21432b","sha256":"bc6001b94ae6af6d1bc8cc31ee2c7252a963ea6bf87cd922baaad041571fb5e7","sha512":"69800896fd482c4d3a570727d6d79ce90fe8b69812f96a66f919c3d57e182b69895c757f6b187b4b8c9cf084d8b2191609e10ba410c55db1da53a3e0445d20d4","ssdeep":"","tlshash":"9a31503d5189876172a3f6d12ecc53b17af923565a409f0e9fad987c43c0f04642a30e","size":1553,"data":"","first_seen":"2025-10-26T01:28:57.482673Z","last_seen":"2025-10-26T01:28:57.482673Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-content/plugins/gutenberg/build/hooks/index.min.js?m=1728466210","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"30ee631cdc8010fb8b08eb0b4adda6c4","sha1":"5a801386b99514906d6ad64b094c4c2cc087f841","sha256":"a751e5eaf162f1ffd88318bd3156b6fa5f6cd8fec6885d0d840d1af7dfa7795d","sha512":"6022ef8dbf8dccecb44eb0724db0dc6069b76d5252a7321d92fe9092ef1f145386953c13baae3e2a404b9ffabc2df2ae5f5dce60382d6da0b98a02aabf33916d","ssdeep":"96:LmK40IdSs6qDE/3sWfs/EBVlU/RT9TXlUBsBMlBmCgF5g5:iK40IdS/Yg371BV09TXxq7W5A","tlshash":"c4a163c47993b570e223b417f0bb04d5757aabb5742880c5a24dc4902db3dcee0a7a3e","size":4730,"data":"","first_seen":"2024-10-11T20:05:20Z","last_seen":"2026-04-06T05:17:55.602899Z","times_seen":4906,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script.js?ver=3.7.4","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"94d041d462db321cdb888066586f2068","sha1":"717d2f9da7fb9f9e2bf2058a8177a0344f8a8647","sha256":"b8166c5475df6a64ab2456e95f64564164ed697d258e8bfed8cebca40efd6fa5","sha512":"9a320fbc1dbeda1700f54140f814a285d1cdadf947f927db7e1d70a686d15fc74d69530bd13ab7cf9c3a2009791f2ac8f358cd9f748b1c2995eb9712b68dc574","ssdeep":"","tlshash":"6590041c144cf04505775114543773047733745031411043111d71400c1cd351307404","size":40,"data":"","first_seen":"2023-03-07T01:10:33Z","last_seen":"2026-04-06T04:50:39.407968Z","times_seen":25116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 12:47:17 GMT","end":"Fri, 05 Dec 2025 12:47:16 GMT"},"fingerprint":{"sha1":"81:20:30:FB:30:76:16:71:AC:ED:11:4B:4E:9E:14:5C:A1:C9:60:93","sha256":"C9:C5:8E:49:AA:49:64:CE:7D:22:B0:09:80:79:75:0A:FB:C3:9B:14:CE:D5:21:DF:12:33:8D:7D:DB:A5:3F:A2"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: cryptobubblesmap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Mon, 28 Aug 2023 17:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64ecd5ef-15601\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ncontent-encoding: br\r\nx-ac: 24.arn _atomic_ams HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=6.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-06T05:11:39.633896Z","times_seen":689466,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"cryptobubblesmap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?m=1759204044","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 12:47:17 GMT","end":"Fri, 05 Dec 2025 12:47:16 GMT"},"fingerprint":{"sha1":"81:20:30:FB:30:76:16:71:AC:ED:11:4B:4E:9E:14:5C:A1:C9:60:93","sha256":"C9:C5:8E:49:AA:49:64:CE:7D:22:B0:09:80:79:75:0A:FB:C3:9B:14:CE:D5:21:DF:12:33:8D:7D:DB:A5:3F:A2"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?m=1759204044 HTTP/1.1\r\nHost: cryptobubblesmap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 30 Sep 2025 03:47:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68db52cc-30e0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ncontent-encoding: br\r\nx-ac: 31.arn _atomic_ams HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12512,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-04-06T05:02:14.401853Z","times_seen":149602,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"cryptobubblesmap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/_static/??-eJyVj9EOgjAMRX/IgcSAvBi/pcKAwrbiWkT+3qGExBgTeGlz057e27FX6AozlJrjlmO0UGs2BKUuI4suavkwfq9YYHJ++jNt74P209Ki392CnGgnsTTaBuJGDKr3FAOzllmTsHjo51ur2M6zwaL71O3QGjt6gw4eu1jusFcGXacqKgZWFT43s8ELaxCk7XZhgqBYQtJJMZb6Bn5X3kasSbnBfV+Gz4TsglztJTmnx1OW5XnyAvvv2j0=","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 12:47:17 GMT","end":"Fri, 05 Dec 2025 12:47:16 GMT"},"fingerprint":{"sha1":"81:20:30:FB:30:76:16:71:AC:ED:11:4B:4E:9E:14:5C:A1:C9:60:93","sha256":"C9:C5:8E:49:AA:49:64:CE:7D:22:B0:09:80:79:75:0A:FB:C3:9B:14:CE:D5:21:DF:12:33:8D:7D:DB:A5:3F:A2"}}},"request":{"raw":"GET /_static/??-eJyVj9EOgjAMRX/IgcSAvBi/pcKAwrbiWkT+3qGExBgTeGlz057e27FX6AozlJrjlmO0UGs2BKUuI4suavkwfq9YYHJ++jNt74P209Ki392CnGgnsTTaBuJGDKr3FAOzllmTsHjo51ur2M6zwaL71O3QGjt6gw4eu1jusFcGXacqKgZWFT43s8ELaxCk7XZhgqBYQtJJMZb6Bn5X3kasSbnBfV+Gz4TsglztJTmnx1OW5XnyAvvv2j0= HTTP/1.1\r\nHost: cryptobubblesmap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-hacker: Want root?  Visit join.a8c.com and mention this header.\r\nhost-header: WordPress.com\r\nlast-modified: Thu, 19 Jun 2025 21:01:21 GMT\r\nx-page-optimize: uncached\r\ncache-control: max-age=31536000\r\netag: W/\"c87bb44f90bbd01e58428d9700ef5f5e\"\r\ncontent-encoding: br\r\nx-ac: 18.arn _atomic_ams HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=3.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress.com","description":"WordPress.com is a platform for self-publishing that is popular for blogging and other works.","website":"https://wordpress.com","common_platform_enumeration":"","icon":"WordPress.svg","categories":["PaaS"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":160971,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33809), with CRLF, LF line terminators","md5":"c87bb44f90bbd01e58428d9700ef5f5e","sha1":"f916fa21d4389ad19de6147fe40dd00c6d8ec22a","sha256":"1951c877d20539be363d2bac05d6007b99d810079022e7e39927132377662473","sha512":"8ebc4cc97375721f87d8dd0936456ac3c2dd71c1a58877ce2e4aaca7c9c509974ef5be9d7088d419bdb9083b2d26f329b9cf8c81f42949565437ccbd55a58391","ssdeep":"3072:P0JadtIP4Nn9SgLeT3pIlNieePiil7smkUmkEy7gbY:AadtIP4Nn9wT3sNieePii+mkUmkEy7","tlshash":"3ef3194ab200367241df61e6513b850fb37bb56da60680acb59dc4ee287cc4d21a7fbd","first_seen":"2025-09-08T08:23:45.822194Z","last_seen":"2025-10-26T01:28:57.448269Z","times_seen":2,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"cryptobubblesmap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-content/fonts/open-sans/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 12:47:17 GMT","end":"Fri, 05 Dec 2025 12:47:16 GMT"},"fingerprint":{"sha1":"81:20:30:FB:30:76:16:71:AC:ED:11:4B:4E:9E:14:5C:A1:C9:60:93","sha256":"C9:C5:8E:49:AA:49:64:CE:7D:22:B0:09:80:79:75:0A:FB:C3:9B:14:CE:D5:21:DF:12:33:8D:7D:DB:A5:3F:A2"}}},"request":{"raw":"GET /wp-content/fonts/open-sans/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: cryptobubblesmap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:31 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 48320\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Wed, 17 Sep 2025 13:45:59 GMT\r\netag: \"68cabb97-bcc0\"\r\nexpires: Mon, 26 Oct 2026 01:28:30 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\nx-ac: 25.arn _atomic_ams MISS\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=322.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48320,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-06T05:12:07.391122Z","times_seen":200681,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":331,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"cryptobubblesmap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-content/fonts/poppins/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 12:47:17 GMT","end":"Fri, 05 Dec 2025 12:47:16 GMT"},"fingerprint":{"sha1":"81:20:30:FB:30:76:16:71:AC:ED:11:4B:4E:9E:14:5C:A1:C9:60:93","sha256":"C9:C5:8E:49:AA:49:64:CE:7D:22:B0:09:80:79:75:0A:FB:C3:9B:14:CE:D5:21:DF:12:33:8D:7D:DB:A5:3F:A2"}}},"request":{"raw":"GET /wp-content/fonts/poppins/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: cryptobubblesmap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 7748\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Wed, 17 Sep 2025 13:45:58 GMT\r\netag: \"68cabb96-1e44\"\r\nexpires: Mon, 26 Oct 2026 01:28:30 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\nx-ac: 11.arn _atomic_ams MISS\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=154.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7748,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-06T05:07:25.403425Z","times_seen":193865,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":163,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"cryptobubblesmap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-content/themes/bosa-pro/assets/font-awesome/webfonts/fa-solid-900.woff2","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 12:47:17 GMT","end":"Fri, 05 Dec 2025 12:47:16 GMT"},"fingerprint":{"sha1":"81:20:30:FB:30:76:16:71:AC:ED:11:4B:4E:9E:14:5C:A1:C9:60:93","sha256":"C9:C5:8E:49:AA:49:64:CE:7D:22:B0:09:80:79:75:0A:FB:C3:9B:14:CE:D5:21:DF:12:33:8D:7D:DB:A5:3F:A2"}}},"request":{"raw":"GET /wp-content/themes/bosa-pro/assets/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cryptobubblesmap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/_static/??-eJydkt1uwyAMhV9olFWTFvVi2rMQ4mZuzI+waZS3H0mmKquSrtkN0gE+nwN2H5UNXsCLjpRb9KzbXGQNqdV1Rmp0TcF2irBOJg2aZSA4WOaXfi8qX+A2UTJDyKLahM1vD/SWcgOsL6wdNGiASplCLkUsOCRF0Bo7HBz6P+lyttRL5j7aqI0VdQ7JqUrfSpbrc1S+J6eXsq4DGxVT0IYZZNRBWJKJE3pTa94bFZjQdvP6JDGFHO97c/2fkVrt2wZ3LsfK9MDBweRtiHbYTv8yDg0/Az2cxQtINOUNLjS5tEgTdsCPkZ9Z4A6lDK2A7rFpx1joUZYR53213vzd1RJwDJ7xOgX7dB/H6v31VFXH09s3N/diOQ==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:31 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 156496\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Thu, 19 Jun 2025 21:01:21 GMT\r\netag: \"68547aa1-26350\"\r\nexpires: Mon, 26 Oct 2026 01:28:30 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\nx-ac: 10.arn _atomic_ams HIT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=506.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156496,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-04-06T05:09:19.335934Z","times_seen":33133,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"cryptobubblesmap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/16.0.1/svg/1f50d.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 19:44:40 GMT","end":"Tue, 25 Nov 2025 19:44:39 GMT"},"fingerprint":{"sha1":"1F:8D:28:3F:BE:E3:7F:80:0F:AA:45:06:98:87:1D:E9:CA:E1:11:4F","sha256":"AD:CC:CD:64:B6:6F:C9:5B:27:CA:75:DA:4D:1D:57:41:30:6E:12:A2:0D:2E:E8:69:49:40:DD:EE:56:9E:7F:9E"}}},"request":{"raw":"GET /images/core/emoji/16.0.1/svg/1f50d.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:31 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 460\r\nlast-modified: Tue, 27 May 2025 09:57:55 GMT\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 32\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=19.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":460,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ddeb2a90dd32867b77e22b1eccf5fa55","sha1":"4d82637afe3e2c9db1b4de57deff09c321d9bcc0","sha256":"426d4db7bb4ca89f374e8c1b85807741e44b26a8d1691517f670256125624134","sha512":"03629e066255c2882b4a2b03d2a013646427e88cdc2c70cd42e18990cfdf24f2bb55cacc8e9fcef6e501fca34d088270c0a614b05ba88c78b8a96249a464ff83","ssdeep":"","tlshash":"4af05cd2f038facf4cc48566d59ef4f5b5b6b0bcd30406dc70868818aa46bfb6451970","first_seen":"2023-05-23T14:24:05Z","last_seen":"2026-04-05T22:37:03.750978Z","times_seen":3131,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":49,"dns":0,"connect":7,"send":0,"wait":27,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/16.0.1/svg/1f4c8.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 19:44:40 GMT","end":"Tue, 25 Nov 2025 19:44:39 GMT"},"fingerprint":{"sha1":"1F:8D:28:3F:BE:E3:7F:80:0F:AA:45:06:98:87:1D:E9:CA:E1:11:4F","sha256":"AD:CC:CD:64:B6:6F:C9:5B:27:CA:75:DA:4D:1D:57:41:30:6E:12:A2:0D:2E:E8:69:49:40:DD:EE:56:9E:7F:9E"}}},"request":{"raw":"GET /images/core/emoji/16.0.1/svg/1f4c8.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 26 May 2025 13:07:39 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 32\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":993,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3bfe17056153e8a390c99fe243e0a649","sha1":"c2d2846e1d2976364397f5b8d74b2bf3d3ac22da","sha256":"a8825c811f91f376b19ffcc0ddf9aab79c0009ce4cc4a680fe6e81c8eaf469a5","sha512":"e397b5cbdca8a300e04ed82f0095054be899fbf31253e7c68d102fa86c8f41957b2a71b36434daece8feaa52266b8939aa9ea8bc2e39214097a4e421eaabf8d2","ssdeep":"","tlshash":"df1198d2032cf5d3444dcb94be1c3bde70eb726936c41895f1195218129bbcc3942c09","first_seen":"2023-04-17T23:00:22Z","last_seen":"2026-04-05T22:43:18.445892Z","times_seen":618,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":44,"dns":1,"connect":10,"send":0,"wait":17,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-api.wp.com/css?family=Open+Sans%3A300%2C400%2C400i%2C600%2C700%2C800%7CPoppins%3A300%2C400%2C400i%2C500%2C600%2C700%2C800%2C900\u0026display=swap\u0026ver=6.8.3","fqdn":"fonts-api.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 19:44:58 GMT","end":"Sat, 03 Jan 2026 19:44:57 GMT"},"fingerprint":{"sha1":"E9:63:7F:0C:6E:C3:A6:C6:27:94:43:17:2D:51:5E:E2:3E:DA:FB:16","sha256":"7A:94:BE:74:03:C4:90:D6:E8:ED:98:EB:0F:DC:60:BE:D8:2A:DF:82:3F:DC:85:70:4F:C1:10:52:E4:F5:75:81"}}},"request":{"raw":"GET /css?family=Open+Sans%3A300%2C400%2C400i%2C600%2C700%2C800%7CPoppins%3A300%2C400%2C400i%2C500%2C600%2C700%2C800%2C900\u0026display=swap\u0026ver=6.8.3 HTTP/1.1\r\nHost: fonts-api.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding, Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: BYPASS arn 25\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=BYPASS;dur=27.0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45456,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"ef9286fd1ac69a901114e7a691d74ff4","sha1":"84419fbb27bfa56fd0eec8cdea3991e255ffcd0e","sha256":"2299550ca2a74ec357799afa7ac3a7f5f14d66ac6cf87b468c75f62bd8726745","sha512":"204b33ac6113601a1041b90b2abae639dc80cf43953cfec0362a7997fa0b83e3e68a116f631c832f16ebc109ce582e5a5ab3d80a96a81f91aa57dd5f1ab1625c","ssdeep":"384:+ZOQvs8kv3oqY49dNQwSqY4t17qY4YHFqY4NceqY41ZnqY4Cg+T:rweGQ//tdSkbN","tlshash":"3a134ea1042b245097431cd233ce7e35ee0f92557044d1b96bfd4aaaeedbd68a37132e","first_seen":"2025-10-26T01:28:57.452671Z","last_seen":"2026-03-16T22:25:30.822501Z","times_seen":5,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":33,"dns":2,"connect":7,"send":0,"wait":36,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-content/plugins/gutenberg/build/hooks/index.min.js?m=1728466210","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 12:47:17 GMT","end":"Fri, 05 Dec 2025 12:47:16 GMT"},"fingerprint":{"sha1":"81:20:30:FB:30:76:16:71:AC:ED:11:4B:4E:9E:14:5C:A1:C9:60:93","sha256":"C9:C5:8E:49:AA:49:64:CE:7D:22:B0:09:80:79:75:0A:FB:C3:9B:14:CE:D5:21:DF:12:33:8D:7D:DB:A5:3F:A2"}}},"request":{"raw":"GET /wp-content/plugins/gutenberg/build/hooks/index.min.js?m=1728466210 HTTP/1.1\r\nHost: cryptobubblesmap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Wed, 09 Oct 2024 09:30:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67064d22-127a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ncontent-encoding: br\r\nx-ac: 18.arn _atomic_ams HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=3.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4730,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4692)","md5":"30ee631cdc8010fb8b08eb0b4adda6c4","sha1":"5a801386b99514906d6ad64b094c4c2cc087f841","sha256":"a751e5eaf162f1ffd88318bd3156b6fa5f6cd8fec6885d0d840d1af7dfa7795d","sha512":"6022ef8dbf8dccecb44eb0724db0dc6069b76d5252a7321d92fe9092ef1f145386953c13baae3e2a404b9ffabc2df2ae5f5dce60382d6da0b98a02aabf33916d","ssdeep":"96:LmK40IdSs6qDE/3sWfs/EBVlU/RT9TXlUBsBMlBmCgF5g5:iK40IdS/Yg371BV09TXxq7W5A","tlshash":"c4a163c47993b570e223b417f0bb04d5757aabb5742880c5a24dc4902db3dcee0a7a3e","first_seen":"2024-10-11T20:05:20Z","last_seen":"2026-04-06T05:17:55.602899Z","times_seen":4906,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"cryptobubblesmap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/_static/??-eJx1jMsKgCAQAH8oW0SiOkSfErYtYT5xFX8/OnjsOsNMSwJjKBQKJFdvExgeKkmjhcMEhNNFtAzcTKI8IvPQ/gsfr+qIAXWOlcl1ITr4Brvf5DypWalVLi9FAC9E","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 12:47:17 GMT","end":"Fri, 05 Dec 2025 12:47:16 GMT"},"fingerprint":{"sha1":"81:20:30:FB:30:76:16:71:AC:ED:11:4B:4E:9E:14:5C:A1:C9:60:93","sha256":"C9:C5:8E:49:AA:49:64:CE:7D:22:B0:09:80:79:75:0A:FB:C3:9B:14:CE:D5:21:DF:12:33:8D:7D:DB:A5:3F:A2"}}},"request":{"raw":"GET /_static/??-eJx1jMsKgCAQAH8oW0SiOkSfErYtYT5xFX8/OnjsOsNMSwJjKBQKJFdvExgeKkmjhcMEhNNFtAzcTKI8IvPQ/gsfr+qIAXWOlcl1ITr4Brvf5DypWalVLi9FAC9E HTTP/1.1\r\nHost: cryptobubblesmap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: text/css;charset=utf-8\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-hacker: Want root?  Visit join.a8c.com and mention this header.\r\nhost-header: WordPress.com\r\nlast-modified: Mon, 28 Jul 2025 20:18:38 GMT\r\nx-page-optimize: uncached\r\ncache-control: max-age=31536000\r\netag: W/\"50941dd58bc466124936b8a84b80439a\"\r\ncontent-encoding: br\r\nx-ac: 18.arn _atomic_ams HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=2.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress.com","description":"WordPress.com is a platform for self-publishing that is popular for blogging and other works.","website":"https://wordpress.com","common_platform_enumeration":"","icon":"WordPress.svg","categories":["PaaS"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38223,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (15974)","md5":"50941dd58bc466124936b8a84b80439a","sha1":"2e3a6f5d43b45a637afaffb1eb1afc11b880d0c7","sha256":"4054aa759228dfa8fd06de0673450d4307563861d0f3dde16271c7554fe8e102","sha512":"0f0eba051ca534d5d74a0d1e5dc78539be1d99bb0df74bfe901a3316f584b88bf2bf4e171c6915a1b43ee0a28dd243ac2a7596f09403dafe1815a786d0161ea7","ssdeep":"768:PbAJTLDEJD8Ke28Xe5AyrTXQV5kTFTgTjf8f:TDJD8KMAAynO5k58Mf","tlshash":"46038401f3818467da270f281e65dbb8ba6c1d804e474e5eb1e77d5cc7a56b8022ef9c","first_seen":"2025-08-04T12:07:25.545764Z","last_seen":"2026-03-30T02:14:12.032219Z","times_seen":253,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"cryptobubblesmap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script.js?ver=3.7.4","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 12:47:17 GMT","end":"Fri, 05 Dec 2025 12:47:16 GMT"},"fingerprint":{"sha1":"81:20:30:FB:30:76:16:71:AC:ED:11:4B:4E:9E:14:5C:A1:C9:60:93","sha256":"C9:C5:8E:49:AA:49:64:CE:7D:22:B0:09:80:79:75:0A:FB:C3:9B:14:CE:D5:21:DF:12:33:8D:7D:DB:A5:3F:A2"}}},"request":{"raw":"GET /wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script.js?ver=3.7.4 HTTP/1.1\r\nHost: cryptobubblesmap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 40\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Mon, 20 Oct 2025 16:19:53 GMT\r\netag: \"68f66129-28\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\nx-ac: 18.arn _atomic_ams HIT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=4.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"94d041d462db321cdb888066586f2068","sha1":"717d2f9da7fb9f9e2bf2058a8177a0344f8a8647","sha256":"b8166c5475df6a64ab2456e95f64564164ed697d258e8bfed8cebca40efd6fa5","sha512":"9a320fbc1dbeda1700f54140f814a285d1cdadf947f927db7e1d70a686d15fc74d69530bd13ab7cf9c3a2009791f2ac8f358cd9f748b1c2995eb9712b68dc574","ssdeep":"","tlshash":"6590041c144cf04505775114543773047733745031411043111d71400c1cd351307404","first_seen":"2023-03-07T01:10:33Z","last_seen":"2026-04-06T04:50:39.407968Z","times_seen":25116,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"cryptobubblesmap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/16.0.1/svg/1f4b0.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 19:44:40 GMT","end":"Tue, 25 Nov 2025 19:44:39 GMT"},"fingerprint":{"sha1":"1F:8D:28:3F:BE:E3:7F:80:0F:AA:45:06:98:87:1D:E9:CA:E1:11:4F","sha256":"AD:CC:CD:64:B6:6F:C9:5B:27:CA:75:DA:4D:1D:57:41:30:6E:12:A2:0D:2E:E8:69:49:40:DD:EE:56:9E:7F:9E"}}},"request":{"raw":"GET /images/core/emoji/16.0.1/svg/1f4b0.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 26 May 2025 13:07:39 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 32\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1314,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6c42ea9f3e233d9110e04dcd87db55da","sha1":"5f37ed0a81327de49993e83998af7ccf27736192","sha256":"100ecea07468a02c810a78e200b9e7e874d508e859d3106aa19260bebc46c88b","sha512":"47ac546a40a623952f4d1eef69a5023085159f1604effa5e370c4264609e1f14e9eade406d16fc0cf488bac08f7de1b274ce9c86e25fc019fe7b8a778c099e89","ssdeep":"","tlshash":"d52150c58730a18c44c3ccadff2d2bdda30ca98592200aa192a9cc683047dcdfa06c64","first_seen":"2023-05-17T21:55:19Z","last_seen":"2026-04-06T04:34:41.762621Z","times_seen":2464,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/cryptobubblesmap.com/wp-content/uploads/2025/06/Crpyto-Bubbles-Map.png?fit=32%2C32\u0026ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:31.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 19:44:58 GMT","end":"Sat, 03 Jan 2026 19:44:57 GMT"},"fingerprint":{"sha1":"E9:63:7F:0C:6E:C3:A6:C6:27:94:43:17:2D:51:5E:E2:3E:DA:FB:16","sha256":"7A:94:BE:74:03:C4:90:D6:E8:ED:98:EB:0F:DC:60:BE:D8:2A:DF:82:3F:DC:85:70:4F:C1:10:52:E4:F5:75:81"}}},"request":{"raw":"GET /cryptobubblesmap.com/wp-content/uploads/2025/06/Crpyto-Bubbles-Map.png?fit=32%2C32\u0026ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 714\r\nlast-modified: Tue, 16 Sep 2025 17:33:40 GMT\r\nexpires: Fri, 17 Sep 2027 05:33:40 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://cryptobubblesmap.com/wp-content/uploads/2025/06/Crpyto-Bubbles-Map.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"637a4fdf7d5a5998\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 13\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=2.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":714,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"781de96ff535ef3bac5528379f421f94","sha1":"db7c989029159f0424d43fe342b688907f47c4ae","sha256":"fd20275da1b7cf3b6d07a6931446753a460270a30d55ea630e27e25d36406362","sha512":"528b6e8066c998d083cd5339a81caff265077051bd2bf2e0332b0e3f538da7526f77b86088c57b930fc678722da69c028e21af8e399e9662c1e07144a7b4145b","ssdeep":"","tlshash":"5a0115268f17f51b0f9b95347cb40e00025e343d9491ab3a0919c5c5351811d55afdc2","first_seen":"2025-09-08T08:23:45.83597Z","last_seen":"2025-10-26T01:28:57.45593Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/cryptobubblesmap.com/wp-content/uploads/2025/06/Crpyto-Bubbles-Map.png?w=500\u0026ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 19:44:58 GMT","end":"Sat, 03 Jan 2026 19:44:57 GMT"},"fingerprint":{"sha1":"E9:63:7F:0C:6E:C3:A6:C6:27:94:43:17:2D:51:5E:E2:3E:DA:FB:16","sha256":"7A:94:BE:74:03:C4:90:D6:E8:ED:98:EB:0F:DC:60:BE:D8:2A:DF:82:3F:DC:85:70:4F:C1:10:52:E4:F5:75:81"}}},"request":{"raw":"GET /cryptobubblesmap.com/wp-content/uploads/2025/06/Crpyto-Bubbles-Map.png?w=500\u0026ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8080\r\nlast-modified: Wed, 15 Oct 2025 08:13:59 GMT\r\nexpires: Fri, 15 Oct 2027 20:13:59 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://cryptobubblesmap.com/wp-content/uploads/2025/06/Crpyto-Bubbles-Map.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"43e355aaff753abc\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 23\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8080,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bdc3477cbcc4ec58ff67ff9a078d4c1c","sha1":"a989a58d545a41b54032cf6d448ff8b5a744aef3","sha256":"3163dcd59e8dea2b366b542d9f41de4dbecd4a3b05f7fafaec993c43513de8b7","sha512":"c4ede76f3f169b64460c3eb12e536d234cfd1752f9f11763a1cc99b22a6a4c23063788e780ec24d445f4247a07b97212a78a5e7c65f425f15cd3baf14e71025a","ssdeep":"192:KqKaRQEwH59n7MPRZ6ouu8MnE+/HCGUFiJdj8RTTHiZ:sYwHIPjUuFnE8Os8RTC","tlshash":"b4f18fc6417f02934f0ffc8536a9bfc5bb222811b0d1d0e5b62548fd19c5aa38e16f16","first_seen":"2025-09-08T08:23:45.819491Z","last_seen":"2025-10-26T01:28:57.456882Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s0.wp.com/wp-content/js/bilmur.min.js?m=202543","fqdn":"s0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 19:44:58 GMT","end":"Sat, 03 Jan 2026 19:44:57 GMT"},"fingerprint":{"sha1":"E9:63:7F:0C:6E:C3:A6:C6:27:94:43:17:2D:51:5E:E2:3E:DA:FB:16","sha256":"7A:94:BE:74:03:C4:90:D6:E8:ED:98:EB:0F:DC:60:BE:D8:2A:DF:82:3F:DC:85:70:4F:C1:10:52:E4:F5:75:81"}}},"request":{"raw":"GET /wp-content/js/bilmur.min.js?m=202543 HTTP/1.1\r\nHost: s0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Sep 2025 11:03:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c15b0d-35d1\"\r\ncontent-encoding: br\r\nexpires: Tue, 20 Oct 2026 00:00:01 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 29.arn _dca MISS\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 25\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=122.0, a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13777,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13776)","md5":"6938250860c5d52a33ce05da12b2c3ab","sha1":"f356adbd496bc9259f1826eec0c274f55829a017","sha256":"738850d41abc37f80f87bedf655faf096d3c789f3a0d54d00ef28f04d2fc5e0d","sha512":"4f20d3cff626a1c28145f08b81f147d4cc08bc52c764cbae0497863df22052d5517730f48a2f172003cec9f17ebdc2e8c16e25ee4f23813ef02eda7ba6bc7f07","ssdeep":"384:gIUFa8xXeKmROq3y81T6uOMTmaMs9TTvf9W4k:kRcKq1vOPatjhk","tlshash":"9a52c6edf681307613d3a1b2517f160b723b6b915c899088912eebd12c7c9ce526bf9c","first_seen":"2025-09-10T15:06:06.720245Z","last_seen":"2026-01-04T08:21:24.577223Z","times_seen":4459,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":46,"dns":0,"connect":14,"send":0,"wait":9,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js?m=1760977193","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 12:47:17 GMT","end":"Fri, 05 Dec 2025 12:47:16 GMT"},"fingerprint":{"sha1":"81:20:30:FB:30:76:16:71:AC:ED:11:4B:4E:9E:14:5C:A1:C9:60:93","sha256":"C9:C5:8E:49:AA:49:64:CE:7D:22:B0:09:80:79:75:0A:FB:C3:9B:14:CE:D5:21:DF:12:33:8D:7D:DB:A5:3F:A2"}}},"request":{"raw":"GET /wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js?m=1760977193 HTTP/1.1\r\nHost: cryptobubblesmap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Mon, 20 Oct 2025 16:19:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f66129-21932\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ncontent-encoding: br\r\nx-ac: 13.arn _atomic_ams HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=2.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":137522,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41852)","md5":"7f83f9f56851a309bb6d7f379756af62","sha1":"f89a32128813f53c8a1d2dd7f42a2fc14064b912","sha256":"5d36a8c2ca17364f3d85cbae5d3f4866e3c4f8e27ae133a803d3276f6a47e0a5","sha512":"5fcd8858fff027d53ae7449d87de45823df728bb528f0e370eec2086d92f08844e41bfa792a2887ea569be24cf3b630b0501ab3e986dc450164f06b926ab8e2c","ssdeep":"1536:4zmszbHN/eY/jMhDlraYnWkvoPQsA+VvsvGNW5BLCQxPmnG4RaviizVk3PeQdQhw:4zPN/eY/Ynf9sZo7Pmnhb06PmnG9xJ","tlshash":"9bd3f94eb340352542dbf17a926f160e7237a51ca607806cb96ad8ea6db8c4d3037f7d","first_seen":"2025-05-27T21:53:16.076259Z","last_seen":"2026-04-06T04:50:39.419215Z","times_seen":14215,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"cryptobubblesmap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-includes/js/wp-emoji-release.min.js?ver=6.8.3","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 12:47:17 GMT","end":"Fri, 05 Dec 2025 12:47:16 GMT"},"fingerprint":{"sha1":"81:20:30:FB:30:76:16:71:AC:ED:11:4B:4E:9E:14:5C:A1:C9:60:93","sha256":"C9:C5:8E:49:AA:49:64:CE:7D:22:B0:09:80:79:75:0A:FB:C3:9B:14:CE:D5:21:DF:12:33:8D:7D:DB:A5:3F:A2"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8.3 HTTP/1.1\r\nHost: cryptobubblesmap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Wed, 18 Jun 2025 01:53:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68521c1d-4b33\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ncontent-encoding: br\r\nx-ac: 19.arn _atomic_ams HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=2.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19251,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16277)","md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-04-06T05:06:18.003558Z","times_seen":196065,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"cryptobubblesmap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/16.0.1/svg/1f4ca.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 19:44:40 GMT","end":"Tue, 25 Nov 2025 19:44:39 GMT"},"fingerprint":{"sha1":"1F:8D:28:3F:BE:E3:7F:80:0F:AA:45:06:98:87:1D:E9:CA:E1:11:4F","sha256":"AD:CC:CD:64:B6:6F:C9:5B:27:CA:75:DA:4D:1D:57:41:30:6E:12:A2:0D:2E:E8:69:49:40:DD:EE:56:9E:7F:9E"}}},"request":{"raw":"GET /images/core/emoji/16.0.1/svg/1f4ca.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 27 May 2025 09:57:55 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 32\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":872,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7b4003ce2786fcf382c6b1ba5ac08f24","sha1":"d9f3686ce16cb5bceccf65c77ae2ab0e274c07e7","sha256":"0d2b3df370bc26eeaba561ec30a4360b71558bd669f86fb1d1db286fe1a0ea39","sha512":"90415f2f31875a612d0384bd1651a8ec2b5debaecf7ab1d0d3cca549354dc39c52ae8b81482c1f7a58eb7d39f52eddb36849f60c31747589ba50f302b88f5a06","ssdeep":"","tlshash":"e01190e5833cf8d34809db981dcd27ef61d7726572c81899b108551cb5eeede3893405","first_seen":"2023-07-05T16:46:09Z","last_seen":"2026-04-06T03:12:09.710838Z","times_seen":736,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":44,"dns":3,"connect":13,"send":0,"wait":13,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-content/plugins/gutenberg/build/i18n/index.min.js?ver=bd5a2533e717a1043151","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 12:47:17 GMT","end":"Fri, 05 Dec 2025 12:47:16 GMT"},"fingerprint":{"sha1":"81:20:30:FB:30:76:16:71:AC:ED:11:4B:4E:9E:14:5C:A1:C9:60:93","sha256":"C9:C5:8E:49:AA:49:64:CE:7D:22:B0:09:80:79:75:0A:FB:C3:9B:14:CE:D5:21:DF:12:33:8D:7D:DB:A5:3F:A2"}}},"request":{"raw":"GET /wp-content/plugins/gutenberg/build/i18n/index.min.js?ver=bd5a2533e717a1043151 HTTP/1.1\r\nHost: cryptobubblesmap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Wed, 23 Oct 2024 12:30:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6718ec60-227f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ncontent-encoding: br\r\nx-ac: 31.arn _atomic_ams HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=4.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8831,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"6b881a27f5df55b26514f877aa92b2b6","sha1":"10f03cc0d811a70b2f0fc6c224c9522732a36e6e","sha256":"f173fd421b26d6877143a9120fd91f86cd07e4deaa36b9fb2e04dec261ab3462","sha512":"559c082357c4397a05ae4369eb5456322aa0ec344a67dfc0f7151d68864421f68dd69d7977f2ebe51fb392ca0c43e681c544316b9377c24254ee89111f407b29","ssdeep":"192:OmXa4ttaHGqCXRDzqiLtj1zFHLBr/6ULVu3SH9Li9FPZr7KpmSvSNK:OmXLLRDzqKRZB1pVsSH9Li9FPZr7KQYx","tlshash":"5102d5dc30de702423a615e5482fb501f23bee6571e9ace0ea82d8517db45c960b3bf6","first_seen":"2024-11-11T08:18:14.975693Z","last_seen":"2026-04-06T05:17:55.549748Z","times_seen":4729,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"cryptobubblesmap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-content/themes/bosa-pro/assets/images/preloader1.gif","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 12:47:17 GMT","end":"Fri, 05 Dec 2025 12:47:16 GMT"},"fingerprint":{"sha1":"81:20:30:FB:30:76:16:71:AC:ED:11:4B:4E:9E:14:5C:A1:C9:60:93","sha256":"C9:C5:8E:49:AA:49:64:CE:7D:22:B0:09:80:79:75:0A:FB:C3:9B:14:CE:D5:21:DF:12:33:8D:7D:DB:A5:3F:A2"}}},"request":{"raw":"GET /wp-content/themes/bosa-pro/assets/images/preloader1.gif HTTP/1.1\r\nHost: cryptobubblesmap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: image/gif\r\ncontent-length: 63296\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Thu, 19 Jun 2025 21:01:21 GMT\r\netag: \"68547aa1-f740\"\r\nexpires: Sat, 17 Oct 2026 04:39:09 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\nx-ac: 30.arn _atomic_ams HIT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=3.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63296,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"8dcded3fdd091aa5b246b71d2530bfe1","sha1":"2ee3df6e0a4fe97be6b130073f1ff9ebd8c59776","sha256":"a6b39aa2e4c386e851a3a62c5c2a146bdf011130b7fbf760b9fdd93cbc8354ba","sha512":"4a3b71fc52ee82b5da57a0354c8ac8916ca4b62ca31f85cc305008bd46f4c5e3e35cc8e87a45ea3020d28692309a5f63386c9aa5b681bb80fcb8f3d845e158c8","ssdeep":"768:Q3o0NisotC3fFlqWIPnjLlrxht8qW1bj1Fy7NBZWKDMfiSCwGOnqHD/sexsNI3ds:304sTFlsFrR8zDyBRM6/X3VTvhX7231","tlshash":"dc53e124b419a281fea6c9b4844eec76c743ec1a099c0b1ef7d4769e9f1532e7e45e01","first_seen":"2023-05-06T12:19:56Z","last_seen":"2026-04-05T01:46:08.083329Z","times_seen":1513,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"cryptobubblesmap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-content/plugins/jetpack/_inc/build/carousel/jetpack-carousel.min.js?m=1756132798","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 12:47:17 GMT","end":"Fri, 05 Dec 2025 12:47:16 GMT"},"fingerprint":{"sha1":"81:20:30:FB:30:76:16:71:AC:ED:11:4B:4E:9E:14:5C:A1:C9:60:93","sha256":"C9:C5:8E:49:AA:49:64:CE:7D:22:B0:09:80:79:75:0A:FB:C3:9B:14:CE:D5:21:DF:12:33:8D:7D:DB:A5:3F:A2"}}},"request":{"raw":"GET /wp-content/plugins/jetpack/_inc/build/carousel/jetpack-carousel.min.js?m=1756132798 HTTP/1.1\r\nHost: cryptobubblesmap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Mon, 25 Aug 2025 14:39:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ac75be-607c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ncontent-encoding: br\r\nx-ac: 30.arn _atomic_ams HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=2.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24700,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24700), with no line terminators","md5":"60a882154a13c6115b74d49e686cc04f","sha1":"fe397974701758c9fbbff768ea52063c7a071129","sha256":"3b2d28647d34bed64a5deedfb72535c6c84358f89c168336dae77c6d37a184f6","sha512":"93f677cf5b6b6fbf451935d190f15ee57d0e17b15b0c5fe8145d1558877c43215f20e5dbf98744b5ad02cd8d7f3e61196957c5e9548fdd5ea01c3f7f8e48477e","ssdeep":"768:c/dGkz186E2bYHiyxgJ/jJrsLdpKV1XPRB9QxSvWGldsJfRWdfO18vL:c/F86NIGUJJWdD","tlshash":"22b2f9b8724021718dd703ea988f9681716c2f66c807c450e5bff45e2eb8e971265fee","first_seen":"2025-08-26T06:21:10.223934Z","last_seen":"2026-04-05T09:12:23.632088Z","times_seen":726,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"cryptobubblesmap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-content/themes/bosa-pro/assets/font-awesome/webfonts/fa-solid-900.woff2","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 12:47:17 GMT","end":"Fri, 05 Dec 2025 12:47:16 GMT"},"fingerprint":{"sha1":"81:20:30:FB:30:76:16:71:AC:ED:11:4B:4E:9E:14:5C:A1:C9:60:93","sha256":"C9:C5:8E:49:AA:49:64:CE:7D:22:B0:09:80:79:75:0A:FB:C3:9B:14:CE:D5:21:DF:12:33:8D:7D:DB:A5:3F:A2"}}},"request":{"raw":"GET /wp-content/themes/bosa-pro/assets/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cryptobubblesmap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/_static/??-eJydkt1uwyAMhV9olFWTFvVi2rMQ4mZuzI+waZS3H0mmKquSrtkN0gE+nwN2H5UNXsCLjpRb9KzbXGQNqdV1Rmp0TcF2irBOJg2aZSA4WOaXfi8qX+A2UTJDyKLahM1vD/SWcgOsL6wdNGiASplCLkUsOCRF0Bo7HBz6P+lyttRL5j7aqI0VdQ7JqUrfSpbrc1S+J6eXsq4DGxVT0IYZZNRBWJKJE3pTa94bFZjQdvP6JDGFHO97c/2fkVrt2wZ3LsfK9MDBweRtiHbYTv8yDg0/Az2cxQtINOUNLjS5tEgTdsCPkZ9Z4A6lDK2A7rFpx1joUZYR53213vzd1RJwDJ7xOgX7dB/H6v31VFXH09s3N/diOQ==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:31 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 156496\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Thu, 19 Jun 2025 21:01:21 GMT\r\netag: \"68547aa1-26350\"\r\nexpires: Mon, 26 Oct 2026 01:28:30 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\nx-ac: 10.arn _atomic_ams MISS\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=545.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156496,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-04-06T05:09:19.335934Z","times_seen":33133,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":565,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"cryptobubblesmap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-26T01:28:30.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 12:47:17 GMT","end":"Fri, 05 Dec 2025 12:47:16 GMT"},"fingerprint":{"sha1":"81:20:30:FB:30:76:16:71:AC:ED:11:4B:4E:9E:14:5C:A1:C9:60:93","sha256":"C9:C5:8E:49:AA:49:64:CE:7D:22:B0:09:80:79:75:0A:FB:C3:9B:14:CE:D5:21:DF:12:33:8D:7D:DB:A5:3F:A2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cryptobubblesmap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=31536000\r\nx-hacker: Want root?  Visit join.a8c.com and mention this header.\r\nhost-header: WordPress.com\r\nvary: Accept-Encoding, accept, content-type, cookie\r\nlink: \u003chttps://cryptobubblesmap.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://cryptobubblesmap.com/wp-json/wp/v2/pages/11\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://wp.me/PgwIaf-b\u003e; rel=shortlink\r\ncontent-encoding: br\r\nx-ac: 14.arn _atomic_ams STALE\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=STALE;dur=3.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gutenberg","description":"Gutenberg is the development plugin in which new features for the WordPress Block Editor are tested.","website":"https://github.com/WordPress/gutenberg","common_platform_enumeration":"","icon":"Gutenberg.png","categories":["WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Elementor:3.32.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress.com","description":"WordPress.com is a platform for self-publishing that is popular for blogging and other works.","website":"https://wordpress.com","common_platform_enumeration":"","icon":"WordPress.svg","categories":["PaaS"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Contact Form 7:6.1.2","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Jetpack","description":"Jetpack is a popular WordPress plugin created by Automattic, the people behind WordPress.com.","website":"https://jetpack.com","common_platform_enumeration":"","icon":"Jetpack.svg","categories":["WordPress plugins"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":293232,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (37089), with CRLF, LF line terminators","md5":"2b9d8f4d70086bf40ca8e03f9b810192","sha1":"3c98ff518ccffb8cc1b749b8142e62261b3b3cfc","sha256":"e6562b15a0b6c19b077b966b0e40cc3ce9daad435c47ccc6f86a36456a4b8e84","sha512":"ed02af91a51c115529b6688982cb431be2b5926943633bfc7847eecd652494e5128f951820f3413ede5214c65871fe2d0429fb26cd53db88901870163fd78364","ssdeep":"3072:0QpUa54Q8PpHfPpHfPpHo/ccSVYZTZvzjgUCkR7:f8PpHfPpHfPpHo/cnu","tlshash":"ee540890909731106763465af7c9bd21bf6eb312e44446e4bbfe860e4fcac54a7b231e","first_seen":"2025-10-26T01:28:57.461543Z","last_seen":"2025-10-26T01:28:57.461543Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":29,"dns":2,"connect":7,"send":0,"wait":10,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"cryptobubblesmap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/_static/??-eJydkt1uwyAMhV9olFWTFvVi2rMQ4mZuzI+waZS3H0mmKquSrtkN0gE+nwN2H5UNXsCLjpRb9KzbXGQNqdV1Rmp0TcF2irBOJg2aZSA4WOaXfi8qX+A2UTJDyKLahM1vD/SWcgOsL6wdNGiASplCLkUsOCRF0Bo7HBz6P+lyttRL5j7aqI0VdQ7JqUrfSpbrc1S+J6eXsq4DGxVT0IYZZNRBWJKJE3pTa94bFZjQdvP6JDGFHO97c/2fkVrt2wZ3LsfK9MDBweRtiHbYTv8yDg0/Az2cxQtINOUNLjS5tEgTdsCPkZ9Z4A6lDK2A7rFpx1joUZYR53213vzd1RJwDJ7xOgX7dB/H6v31VFXH09s3N/diOQ==","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 12:47:17 GMT","end":"Fri, 05 Dec 2025 12:47:16 GMT"},"fingerprint":{"sha1":"81:20:30:FB:30:76:16:71:AC:ED:11:4B:4E:9E:14:5C:A1:C9:60:93","sha256":"C9:C5:8E:49:AA:49:64:CE:7D:22:B0:09:80:79:75:0A:FB:C3:9B:14:CE:D5:21:DF:12:33:8D:7D:DB:A5:3F:A2"}}},"request":{"raw":"GET /_static/??-eJydkt1uwyAMhV9olFWTFvVi2rMQ4mZuzI+waZS3H0mmKquSrtkN0gE+nwN2H5UNXsCLjpRb9KzbXGQNqdV1Rmp0TcF2irBOJg2aZSA4WOaXfi8qX+A2UTJDyKLahM1vD/SWcgOsL6wdNGiASplCLkUsOCRF0Bo7HBz6P+lyttRL5j7aqI0VdQ7JqUrfSpbrc1S+J6eXsq4DGxVT0IYZZNRBWJKJE3pTa94bFZjQdvP6JDGFHO97c/2fkVrt2wZ3LsfK9MDBweRtiHbYTv8yDg0/Az2cxQtINOUNLjS5tEgTdsCPkZ9Z4A6lDK2A7rFpx1joUZYR53213vzd1RJwDJ7xOgX7dB/H6v31VFXH09s3N/diOQ== HTTP/1.1\r\nHost: cryptobubblesmap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: text/css;charset=utf-8\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-hacker: Want root?  Visit join.a8c.com and mention this header.\r\nhost-header: WordPress.com\r\nlast-modified: Mon, 20 Oct 2025 16:19:53 GMT\r\nx-page-optimize: uncached\r\ncache-control: max-age=31536000\r\netag: W/\"8c1c1b5adbb6fba3c9cb77bf9ff5d1b1\"\r\ncontent-encoding: br\r\nx-ac: 18.arn _atomic_ams HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=3.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress.com","description":"WordPress.com is a platform for self-publishing that is popular for blogging and other works.","website":"https://wordpress.com","common_platform_enumeration":"","icon":"WordPress.svg","categories":["PaaS"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1230746,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b3a3ddf0b7932a97627c5a2413fdb1d0","sha1":"ae6e1bc46b1e19d2e4aa382a4544af3d099d73eb","sha256":"e5252b0972472e298424a9188063babebc90c9930aac3b653eb05e2fec693775","sha512":"5fd25582515ae648c2a87de8da8c4385aaebbe49b94b03c4443adc7a5f0df72950ba297174f4760ceb64abc8c4579e3d65877527b86a21c47e6cbd7e93c79900","ssdeep":"24576:xiQg5Mmjx+qehFP0xODck2jNPJ9JVg+kyR:xiQg5Mmjx+qehFP0xLy+XR","tlshash":"4325fa929da021c4323bc60a9bc8b7786339d213d5524ee9f593d41c8bcdad825e7b0f","first_seen":"2025-10-26T01:28:57.46265Z","last_seen":"2025-10-26T01:28:57.46265Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"cryptobubblesmap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/cryptobubblesmap.com/wp-content/uploads/2025/06/Crpyto-Bubbles-Map.png?fit=500%2C500\u0026ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 19:44:58 GMT","end":"Sat, 03 Jan 2026 19:44:57 GMT"},"fingerprint":{"sha1":"E9:63:7F:0C:6E:C3:A6:C6:27:94:43:17:2D:51:5E:E2:3E:DA:FB:16","sha256":"7A:94:BE:74:03:C4:90:D6:E8:ED:98:EB:0F:DC:60:BE:D8:2A:DF:82:3F:DC:85:70:4F:C1:10:52:E4:F5:75:81"}}},"request":{"raw":"GET /cryptobubblesmap.com/wp-content/uploads/2025/06/Crpyto-Bubbles-Map.png?fit=500%2C500\u0026ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8080\r\nlast-modified: Mon, 23 Jun 2025 11:54:30 GMT\r\nexpires: Wed, 23 Jun 2027 23:54:30 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://cryptobubblesmap.com/wp-content/uploads/2025/06/Crpyto-Bubbles-Map.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"fc6e54d42e0ad0e6\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 23\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8080,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bdc3477cbcc4ec58ff67ff9a078d4c1c","sha1":"a989a58d545a41b54032cf6d448ff8b5a744aef3","sha256":"3163dcd59e8dea2b366b542d9f41de4dbecd4a3b05f7fafaec993c43513de8b7","sha512":"c4ede76f3f169b64460c3eb12e536d234cfd1752f9f11763a1cc99b22a6a4c23063788e780ec24d445f4247a07b97212a78a5e7c65f425f15cd3baf14e71025a","ssdeep":"192:KqKaRQEwH59n7MPRZ6ouu8MnE+/HCGUFiJdj8RTTHiZ:sYwHIPjUuFnE8Os8RTC","tlshash":"b4f18fc6417f02934f0ffc8536a9bfc5bb222811b0d1d0e5b62548fd19c5aa38e16f16","first_seen":"2025-09-08T08:23:45.819491Z","last_seen":"2025-10-26T01:28:57.456882Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":28,"dns":0,"connect":9,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-content/fonts/poppins/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 12:47:17 GMT","end":"Fri, 05 Dec 2025 12:47:16 GMT"},"fingerprint":{"sha1":"81:20:30:FB:30:76:16:71:AC:ED:11:4B:4E:9E:14:5C:A1:C9:60:93","sha256":"C9:C5:8E:49:AA:49:64:CE:7D:22:B0:09:80:79:75:0A:FB:C3:9B:14:CE:D5:21:DF:12:33:8D:7D:DB:A5:3F:A2"}}},"request":{"raw":"GET /wp-content/fonts/poppins/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: cryptobubblesmap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:31 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 7884\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Wed, 17 Sep 2025 13:45:58 GMT\r\netag: \"68cabb96-1ecc\"\r\nexpires: Mon, 26 Oct 2026 01:28:30 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\nx-ac: 14.arn _atomic_ams MISS\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=208.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7884,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-04-06T05:03:30.796095Z","times_seen":296729,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":217,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"cryptobubblesmap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixel.wp.com/g.gif?v=ext\u0026blog=244217643\u0026post=11\u0026tz=-4\u0026srv=cryptobubblesmap.com\u0026hp=atomic\u0026ac=2\u0026amp=0\u0026j=1%3A15.2-a.5\u0026host=cryptobubblesmap.com\u0026ref=\u0026fcp=678\u0026rand=0.17699411368373485","fqdn":"pixel.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 19:44:58 GMT","end":"Sat, 03 Jan 2026 19:44:57 GMT"},"fingerprint":{"sha1":"E9:63:7F:0C:6E:C3:A6:C6:27:94:43:17:2D:51:5E:E2:3E:DA:FB:16","sha256":"7A:94:BE:74:03:C4:90:D6:E8:ED:98:EB:0F:DC:60:BE:D8:2A:DF:82:3F:DC:85:70:4F:C1:10:52:E4:F5:75:81"}}},"request":{"raw":"GET /g.gif?v=ext\u0026blog=244217643\u0026post=11\u0026tz=-4\u0026srv=cryptobubblesmap.com\u0026hp=atomic\u0026ac=2\u0026amp=0\u0026j=1%3A15.2-a.5\u0026host=cryptobubblesmap.com\u0026ref=\u0026fcp=678\u0026rand=0.17699411368373485 HTTP/1.1\r\nHost: pixel.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: image/gif\r\ncontent-length: 50\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 6 x 5","md5":"e4d673a55c5656f19ef81563fb10884c","sha1":"1f2d8ed221d39329251ad3a6ff1edb20b7219443","sha256":"f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1","sha512":"e0b03411282a979cf772f700d9e5634b0c25c612e380ad33c0d59059b1b479d027016d5beb148403ef185430db35f5faed362f36ce2c8ecad0e6d8e30cea97b4","ssdeep":"","tlshash":"69900201f9a08180c1206535091a035c62049256490443062255751c5d546650616254","first_seen":"2023-04-05T23:53:38Z","last_seen":"2026-04-06T05:02:14.394496Z","times_seen":78820,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-includes/js/jquery/jquery-migrate.min.js?m=1686289764","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 12:47:17 GMT","end":"Fri, 05 Dec 2025 12:47:16 GMT"},"fingerprint":{"sha1":"81:20:30:FB:30:76:16:71:AC:ED:11:4B:4E:9E:14:5C:A1:C9:60:93","sha256":"C9:C5:8E:49:AA:49:64:CE:7D:22:B0:09:80:79:75:0A:FB:C3:9B:14:CE:D5:21:DF:12:33:8D:7D:DB:A5:3F:A2"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?m=1686289764 HTTP/1.1\r\nHost: cryptobubblesmap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6482bd64-3509\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ncontent-encoding: br\r\nx-ac: 24.arn _atomic_ams HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=5.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-06T05:11:39.813655Z","times_seen":642369,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"cryptobubblesmap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/16.0.1/svg/1f4c9.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 19:44:40 GMT","end":"Tue, 25 Nov 2025 19:44:39 GMT"},"fingerprint":{"sha1":"1F:8D:28:3F:BE:E3:7F:80:0F:AA:45:06:98:87:1D:E9:CA:E1:11:4F","sha256":"AD:CC:CD:64:B6:6F:C9:5B:27:CA:75:DA:4D:1D:57:41:30:6E:12:A2:0D:2E:E8:69:49:40:DD:EE:56:9E:7F:9E"}}},"request":{"raw":"GET /images/core/emoji/16.0.1/svg/1f4c9.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 26 May 2025 13:07:39 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 32\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":990,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd7e45533e2f2008d8ba36ebed18c712","sha1":"b793d0e210e99c9b3c1b2d08b41e404bb0da0d6a","sha256":"8f3e1ed0c50094e78b87910e5652f2d456d17e3a62b1fa049d9db4989c957f65","sha512":"7a9ec0f1bab757cdd92cb75469ed6fd751c8009b8c4e240f2f8d8bae907ddaf26fbf0ae589b7e4f0975dadfaf0e0735f11fac85ba7bf47210b8ef52928504ae1","ssdeep":"","tlshash":"5c1125a10378f893894ccba86f5813ee719bf25571d418deb019051822dffdd7942805","first_seen":"2025-04-17T21:05:37.725416Z","last_seen":"2026-04-05T04:50:26.333612Z","times_seen":124,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":44,"dns":3,"connect":15,"send":0,"wait":15,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-content/fonts/open-sans/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 12:47:17 GMT","end":"Fri, 05 Dec 2025 12:47:16 GMT"},"fingerprint":{"sha1":"81:20:30:FB:30:76:16:71:AC:ED:11:4B:4E:9E:14:5C:A1:C9:60:93","sha256":"C9:C5:8E:49:AA:49:64:CE:7D:22:B0:09:80:79:75:0A:FB:C3:9B:14:CE:D5:21:DF:12:33:8D:7D:DB:A5:3F:A2"}}},"request":{"raw":"GET /wp-content/fonts/open-sans/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: cryptobubblesmap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:31 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 48320\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Wed, 17 Sep 2025 13:45:59 GMT\r\netag: \"68cabb97-bcc0\"\r\nexpires: Mon, 26 Oct 2026 01:28:30 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\nx-ac: 25.arn _atomic_ams HIT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=304.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48320,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-06T05:12:07.391122Z","times_seen":200681,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"cryptobubblesmap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/16.0.1/svg/26a1.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 19:44:40 GMT","end":"Tue, 25 Nov 2025 19:44:39 GMT"},"fingerprint":{"sha1":"1F:8D:28:3F:BE:E3:7F:80:0F:AA:45:06:98:87:1D:E9:CA:E1:11:4F","sha256":"AD:CC:CD:64:B6:6F:C9:5B:27:CA:75:DA:4D:1D:57:41:30:6E:12:A2:0D:2E:E8:69:49:40:DD:EE:56:9E:7F:9E"}}},"request":{"raw":"GET /images/core/emoji/16.0.1/svg/26a1.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 451\r\nlast-modified: Mon, 19 May 2025 11:40:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 32\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":451,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bcca43b1c7aa91d47f62962ce2422ae1","sha1":"6bd13c3ba629e5f79d9ddf15cc79b7dc34729638","sha256":"d3a6d0c18f6887f771aa3cd51db375e7a9588e1af63801cc100cd9bcc5bccaac","sha512":"17ca2fa881ffffb8be0e67b1d689c6e977df3ba079a4c36f8607b824763ae3c9e1f7d6791230ea71a4128d6826693c95f2b55a3297686a7b7c7939ea139bb596","ssdeep":"","tlshash":"07f0236163fd6658dacdc53cfba194c0f05ab0de01b9888897c69710127ff09b710411","first_seen":"2023-05-15T16:34:06Z","last_seen":"2026-04-06T04:59:13.994381Z","times_seen":1934,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":48,"dns":0,"connect":9,"send":0,"wait":22,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/16.0.1/svg/1f451.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 19:44:40 GMT","end":"Tue, 25 Nov 2025 19:44:39 GMT"},"fingerprint":{"sha1":"1F:8D:28:3F:BE:E3:7F:80:0F:AA:45:06:98:87:1D:E9:CA:E1:11:4F","sha256":"AD:CC:CD:64:B6:6F:C9:5B:27:CA:75:DA:4D:1D:57:41:30:6E:12:A2:0D:2E:E8:69:49:40:DD:EE:56:9E:7F:9E"}}},"request":{"raw":"GET /images/core/emoji/16.0.1/svg/1f451.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 26 May 2025 13:07:39 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 32\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1311,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"98fe9cdec2bf8ded782a7bf1e302b664","sha1":"c3e9e36269cdd7663a437584cc54097e979c2818","sha256":"3916390d4395ed16641c0e23d5e5a1bef9de6ce71b02c3941c0ee6f2d899c806","sha512":"39e167704c59e7b5c1c97ce9ff20cf47ce09e01d4730218f2f1ccded5de4ae45547e2701eac36c4983298880d5c4917064a30995df0ac75e1697afba8d2491ce","ssdeep":"","tlshash":"922134a9313cf8468d0a86f853cff489609ab14e4b93674e30998c21b5267abe005ba1","first_seen":"2023-04-07T23:46:38Z","last_seen":"2026-04-05T13:39:45.22757Z","times_seen":270,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":48,"dns":1,"connect":8,"send":0,"wait":20,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptobubblesmap.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.2","fqdn":"cryptobubblesmap.com","domain":"cryptobubblesmap.com","tld":"com"},"ip":{"addr":"192.0.78.161","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 12:47:17 GMT","end":"Fri, 05 Dec 2025 12:47:16 GMT"},"fingerprint":{"sha1":"81:20:30:FB:30:76:16:71:AC:ED:11:4B:4E:9E:14:5C:A1:C9:60:93","sha256":"C9:C5:8E:49:AA:49:64:CE:7D:22:B0:09:80:79:75:0A:FB:C3:9B:14:CE:D5:21:DF:12:33:8D:7D:DB:A5:3F:A2"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.2 HTTP/1.1\r\nHost: cryptobubblesmap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 30 Sep 2025 03:47:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68db52cc-348c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ncontent-encoding: br\r\nx-ac: 35.arn _atomic_ams HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=3.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13452,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-04-06T05:02:14.404212Z","times_seen":156076,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"cryptobubblesmap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stats.wp.com/e-202543.js","fqdn":"stats.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 19:44:58 GMT","end":"Sat, 03 Jan 2026 19:44:57 GMT"},"fingerprint":{"sha1":"E9:63:7F:0C:6E:C3:A6:C6:27:94:43:17:2D:51:5E:E2:3E:DA:FB:16","sha256":"7A:94:BE:74:03:C4:90:D6:E8:ED:98:EB:0F:DC:60:BE:D8:2A:DF:82:3F:DC:85:70:4F:C1:10:52:E4:F5:75:81"}}},"request":{"raw":"GET /e-202543.js HTTP/1.1\r\nHost: stats.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/7134-1748959715126.2634\r\na8c-edge-cache: cache\r\ncontent-encoding: br\r\nexpires: Mon, 19 Oct 2026 19:16:03 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nx-nc: HIT arn\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3812,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3812), with no line terminators","md5":"b1e85b83d13876fefcf2d873fde8da3e","sha1":"09d271f2a7dd17e66a19fcbfca887734d951ed2f","sha256":"2abd616c43c16e7a2d01f1f1c761d6c12acf4b2ed9a9a411289ee3bb5a681ffe","sha512":"a1ab2e32190702e46c440606a45e51dd073168fa11828683764aef077fb2b495343bd91ee784974244c37d0a52a8225d1a6359ffe0ddf0ec6971aeb7c50e3ec8","ssdeep":"","tlshash":"6b71646536c5f0381af630a5235f630af5ba8b7a7d4a9044c37cd4b07c79e8b9412f9a","first_seen":"2025-06-09T00:15:30.881783Z","last_seen":"2026-04-06T05:02:14.454872Z","times_seen":45521,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":44,"dns":7,"connect":14,"send":0,"wait":7,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/16.0.1/svg/23f0.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:30.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 19:44:40 GMT","end":"Tue, 25 Nov 2025 19:44:39 GMT"},"fingerprint":{"sha1":"1F:8D:28:3F:BE:E3:7F:80:0F:AA:45:06:98:87:1D:E9:CA:E1:11:4F","sha256":"AD:CC:CD:64:B6:6F:C9:5B:27:CA:75:DA:4D:1D:57:41:30:6E:12:A2:0D:2E:E8:69:49:40:DD:EE:56:9E:7F:9E"}}},"request":{"raw":"GET /images/core/emoji/16.0.1/svg/23f0.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 26 May 2025 14:09:55 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 32\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1479,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"630f5938948131784285d97d57a3e8a0","sha1":"69d9e77895782347e90dc2c1c5bc34b147a2f8d8","sha256":"9261f80678e69407d7626915cbff3020581891e16c039fc7aa207228a21b2832","sha512":"ede08b3faf37188c9480a973b866a133a57fe8134463291755b906a04a140f0c43b4a54b648d74931806a47da7cccfc8902296b153a3309b5c3101c8a1a71b91","ssdeep":"","tlshash":"873115c62f3471fc44cacfb98f39f8a821dab4bc1f928884a199dd1d10cbd6ab541e00","first_seen":"2023-05-31T11:12:19Z","last_seen":"2026-04-06T05:39:07.143711Z","times_seen":691,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/cryptobubblesmap.com/wp-content/uploads/2025/06/Crpyto-Bubbles-Map.png?fit=192%2C192\u0026ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptobubblesmap.com/","date":"2025-10-26T01:28:31.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 19:44:58 GMT","end":"Sat, 03 Jan 2026 19:44:57 GMT"},"fingerprint":{"sha1":"E9:63:7F:0C:6E:C3:A6:C6:27:94:43:17:2D:51:5E:E2:3E:DA:FB:16","sha256":"7A:94:BE:74:03:C4:90:D6:E8:ED:98:EB:0F:DC:60:BE:D8:2A:DF:82:3F:DC:85:70:4F:C1:10:52:E4:F5:75:81"}}},"request":{"raw":"GET /cryptobubblesmap.com/wp-content/uploads/2025/06/Crpyto-Bubbles-Map.png?fit=192%2C192\u0026ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptobubblesmap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 01:28:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5322\r\nlast-modified: Wed, 08 Oct 2025 15:25:32 GMT\r\nexpires: Sat, 09 Oct 2027 03:25:32 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://cryptobubblesmap.com/wp-content/uploads/2025/06/Crpyto-Bubbles-Map.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"3dd654a8332c4efa\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: MISS arn 13\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=24.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5322,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f5bf4f49f65ee1920e64632e9666abed","sha1":"d23ed8147d03fbb36a68dada804c981ce8f48142","sha256":"1667d68dae44efb86a58fb166095cf23e9e18f581bacd36c5244742225f08b98","sha512":"3acf5832fa8a162a0c8d2f3a88adae6fb580c66d54770af7ba90356294f9998f5e621dc8f0f4d58827cdffb32d0ca12e1a60a569cc0c4bbc5c8133cf4230a271","ssdeep":"96:bMJXEMk/RRZYpih7j8jgUaNOmoBxEc+t1xPL0btFBgR3T0xoduB8ROkUXZsqKw:YpKUuyg5c5XuL0bNwTW8EkUXZRKw","tlshash":"acb18d11e944a4e4638a1d2fb8b0e9d759c266db08352951e34decc152919f8b319d0e","first_seen":"2025-09-08T08:23:45.827326Z","last_seen":"2025-10-26T01:28:57.473122Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}