{"report_id":"07805d98-c780-475b-b1b5-a279d77a1537","version":6,"status":"done","tags":[],"date":"2026-04-22T22:03:02Z","url":{"schema":"https","addr":"bicielettrica.shop/_/","fqdn":"bicielettrica.shop","domain":"bicielettrica.shop","tld":"shop"},"ip":{"addr":"93.186.249.90","port":0,"asn":31034,"as":"Aruba S.p.A.","country":"Italy","country_code":"IT"},"final":{"url":{"schema":"https","addr":"bicielettrica.shop/_/","fqdn":"bicielettrica.shop","domain":"bicielettrica.shop","tld":"shop"},"title":"Security Check","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bicielettrica.shop/_/","fqdn":"bicielettrica.shop","domain":"bicielettrica.shop","tld":"shop"},"ip":{"addr":"93.186.249.90","port":0,"asn":31034,"as":"Aruba S.p.A.","country":"Italy","country_code":"IT"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-27T22:03:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-22","alert":"Hunting_JS_WebAssembly","trigger":"hcaptcha.com/1/api.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-22","alert":"Hunting_JS_WebAssembly","trigger":"newassets.hcaptcha.com/captcha/v1/7d7b8b396198c8eb285d18bbc376e49a41bb440a/static/hcaptcha.html#frame=checkbox\u0026id=0tulahhjgejs\u0026host=bicielettrica.shop\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=338af34c-7bcb-4c7c-900b-acbec73d7d43\u0026theme=light\u0026origin=https%3A%2F%2Fbicielettrica.shop","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-22","alert":"Hunting_JS_WebAssembly","trigger":"newassets.hcaptcha.com/captcha/v1/7d7b8b396198c8eb285d18bbc376e49a41bb440a/static/hcaptcha.html#frame=challenge\u0026id=0tulahhjgejs\u0026host=bicielettrica.shop\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=338af34c-7bcb-4c7c-900b-acbec73d7d43\u0026theme=light\u0026origin=https%3A%2F%2Fbicielettrica.shop","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-22","alert":"Hunting_JS_WebAssembly","trigger":"newassets.hcaptcha.com/c/608aad5179420c705eec42fb9cc5400dcd50c11207eea1a4b009e24b87e67e81/hsw.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"bicielettrica.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"bicielettrica.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"bicielettrica.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"bicielettrica.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"bicielettrica.shop","ip":{"addr":"93.186.249.90","port":443,"asn":31034,"as":"Aruba S.p.A.","country":"Italy","country_code":"IT"},"domain_registered":"2016-12-30","domain_rank":0,"first_seen":"2025-06-13T13:13:03.13369Z","last_seen":"2025-06-23T06:47:28.495717Z","alert_count":8,"request_count":2,"received_data":130687,"sent_data":894,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"hCaptcha:1","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-04-19T22:33:42.593215Z","alert_count":0,"request_count":2,"received_data":206056,"sent_data":864,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"hcaptcha.com","ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":3135,"first_seen":"2018-04-03T03:49:29Z","last_seen":"2026-04-16T01:11:44.46224Z","alert_count":1,"request_count":1,"received_data":303011,"sent_data":374,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"newassets.hcaptcha.com","ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":29228,"first_seen":"2021-03-22T10:55:22Z","last_seen":"2026-04-22T15:38:41.899242Z","alert_count":3,"request_count":3,"received_data":2065781,"sent_data":1686,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"4a450ceaeef1.w.hcaptcha.com","ip":{"addr":"104.18.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":2050,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"d61458f2fb1a.w.hcaptcha.com","ip":{"addr":"104.18.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":0,"first_seen":"2026-04-22T22:03:04.85724Z","last_seen":"2026-04-22T22:03:04.857241Z","alert_count":0,"request_count":1,"received_data":2050,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"api.hcaptcha.com","ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":28177,"first_seen":"2021-07-31T14:27:15Z","last_seen":"2026-04-22T17:20:23.978331Z","alert_count":0,"request_count":1,"received_data":1699,"sent_data":651,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c488dfb263f9261ec7fa732d12ac575","sha1":"e36ceaf062fcee08808c7f0c4e6c62cf1c9d7c6d","sha256":"f7767d78cc1781742c354ab7f3921e38349a14e10fd1dfe362a724b42a1bb3bd","sha512":"11ff6eaeaee2cad9ce0881b422e9ddd834b94cf55ecdbc0ad519be51a808dd9abb2af2ad4e5dc352e02aef08e2d25a77fcbaaed9641faf5c113478d9a77e2f46","ssdeep":"48:6liBhci5elvfEszmjHm/AGRyq8dKtDDVD84LU0dBjI8o007UkZ2xQF8Q1QiQBQB1:6l4T8v8sziHGRyT34LDrAUkDCab","tlshash":"e9d1db7df0416c334926241925bfca45bb2001273d97b424bb6c821eef6ce6f86b66cd","size":6687,"data":"","first_seen":"2026-02-10T18:47:35.971096Z","last_seen":"2026-04-22T22:03:09.265377Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hcaptcha.com/1/api.js","fqdn":"hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"59e9eef52c9429acf00e5fa44b450ac6","sha1":"a4218295731f36734e59bbb4c72c41e4b4ecfffd","sha256":"a097030e59d76e659e0c8d6ee8f36b248ef9931f5667ae9626f3626d42730e48","sha512":"287fce98b507f11f051d79a1f202db0283f2b176616d3ed6dced925674ef9ceb81ecd368219e82fb6534a84d482a5d7d4c313748aaa71fa0a4a5e41b0efcc74f","ssdeep":"6144:mwwQc0xUiA2KuDqpqKZMxqx46LFyDzMi3a/x:qhu1MF","tlshash":"9954727b9320d76f13a511d541ee025f13eaca1b242d5089f776a8dfd87caca8039b2d","size":302929,"data":"","first_seen":"2026-04-22T22:03:09.267735Z","last_seen":"2026-04-22T22:03:09.267735Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-22","alert":"Hunting_JS_WebAssembly","trigger":"hcaptcha.com/1/api.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"bicielettrica.shop/_/","fqdn":"bicielettrica.shop","domain":"bicielettrica.shop","tld":"shop"},"ip":{"addr":"93.186.249.90","port":443,"asn":31034,"as":"Aruba S.p.A.","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd0bb50e0797ef46385dcdfcab9c98dd","sha1":"5426c948add24d785dccb3dd6d9f16d0064644cc","sha256":"0978e83073067bfd43c59f120d225e45fd1e21d50d8d0298aee816c63084981e","sha512":"3970028304ffb137fd8bfeb33abb9ccec006fef2bec45a0f880d1300c547911290d4b19acd6f17e62133d07dd882c73e7b491672c488e2499130c8dda9a6513f","ssdeep":"","tlshash":"a8411089b4d351909ac3322957cb4108b27e9723152c8c64bc0d53647f68f2e7afbee8","size":2023,"data":"","first_seen":"2026-04-22T22:03:09.269397Z","last_seen":"2026-04-22T22:03:09.269397Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/7d7b8b396198c8eb285d18bbc376e49a41bb440a/static/hcaptcha.html#frame=checkbox\u0026id=0tulahhjgejs\u0026host=bicielettrica.shop\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=338af34c-7bcb-4c7c-900b-acbec73d7d43\u0026theme=light\u0026origin=https%3A%2F%2Fbicielettrica.shop","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"007a42973b8c02e0c5e29961b00181be","sha1":"6fa4a42fdbfe0ac231026197547969141284296c","sha256":"b7aded6dbc7c4bc2a484250ebff01f1f963395da8de033f6d022568c058a4cf4","sha512":"aa4423dabafa82358150acdc1f6b5733479a53f0f8dbeac53b2f1ad5bc6b41003ac51312858e54a7bac669c656547d1a1bf18ddb5bcc4faa11440b49bc589388","ssdeep":"6144:+wGKG2DmaxfGdqQQ2KV+AoMOHsB6iFoaGe19z55qAs68O9L:wbDaxkMOm6ice1FF","tlshash":"11c4d8aba310a32f43d652d5419e060f53b6d52a641e409cf775e8efa87c98e503af3c","size":568969,"data":"","first_seen":"2026-04-20T19:19:43.838435Z","last_seen":"2026-04-23T10:51:58.520463Z","times_seen":516,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-22","alert":"Hunting_JS_WebAssembly","trigger":"newassets.hcaptcha.com/captcha/v1/7d7b8b396198c8eb285d18bbc376e49a41bb440a/static/hcaptcha.html#frame=checkbox\u0026id=0tulahhjgejs\u0026host=bicielettrica.shop\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=338af34c-7bcb-4c7c-900b-acbec73d7d43\u0026theme=light\u0026origin=https%3A%2F%2Fbicielettrica.shop","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/7d7b8b396198c8eb285d18bbc376e49a41bb440a/static/hcaptcha.html#frame=challenge\u0026id=0tulahhjgejs\u0026host=bicielettrica.shop\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=338af34c-7bcb-4c7c-900b-acbec73d7d43\u0026theme=light\u0026origin=https%3A%2F%2Fbicielettrica.shop","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"007a42973b8c02e0c5e29961b00181be","sha1":"6fa4a42fdbfe0ac231026197547969141284296c","sha256":"b7aded6dbc7c4bc2a484250ebff01f1f963395da8de033f6d022568c058a4cf4","sha512":"aa4423dabafa82358150acdc1f6b5733479a53f0f8dbeac53b2f1ad5bc6b41003ac51312858e54a7bac669c656547d1a1bf18ddb5bcc4faa11440b49bc589388","ssdeep":"6144:+wGKG2DmaxfGdqQQ2KV+AoMOHsB6iFoaGe19z55qAs68O9L:wbDaxkMOm6ice1FF","tlshash":"11c4d8aba310a32f43d652d5419e060f53b6d52a641e409cf775e8efa87c98e503af3c","size":568969,"data":"","first_seen":"2026-04-20T19:19:43.838435Z","last_seen":"2026-04-23T10:51:58.520463Z","times_seen":516,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-22","alert":"Hunting_JS_WebAssembly","trigger":"newassets.hcaptcha.com/captcha/v1/7d7b8b396198c8eb285d18bbc376e49a41bb440a/static/hcaptcha.html#frame=challenge\u0026id=0tulahhjgejs\u0026host=bicielettrica.shop\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=338af34c-7bcb-4c7c-900b-acbec73d7d43\u0026theme=light\u0026origin=https%3A%2F%2Fbicielettrica.shop","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/c/608aad5179420c705eec42fb9cc5400dcd50c11207eea1a4b009e24b87e67e81/hsw.js","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f86bb29459a591bbc8c0ac2f7419c175","sha1":"6d6c1c5683507ea8c5ac989d2aaea548580f95b3","sha256":"1a4219d8f3ea269f88602d64fe87170ff7f34eea0d3ca3b6d7dd9c2144a6edfb","sha512":"3b22760cd4a95d58cc9b871953fded1722d7bc342600e35c82b1cddeaa48140cabd509d9de3d7f4ac31cf8db16f8b185d968b8db816a6dc4499fa8cf13ce22ed","ssdeep":"12288:1wkhPGvX0bebwg+3l/W2pzpjXjET5AJCNsRK7fnKDhZoSKkO:1wkhPGfjbl+302pzlXjETGJ1RKfKHm","tlshash":"59154bbeab1195a6eeb316ed441b3a036d4888d7c555dee0bf4dc4a3e85007f08da8dc","size":921738,"data":"","first_seen":"2026-04-22T20:27:59.254114Z","last_seen":"2026-04-27T16:20:03.786685Z","times_seen":334,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-22","alert":"Hunting_JS_WebAssembly","trigger":"newassets.hcaptcha.com/c/608aad5179420c705eec42fb9cc5400dcd50c11207eea1a4b009e24b87e67e81/hsw.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b428f3f9f241cccc9022faba1f3e11be","sha1":"9e3500b4bf987ff7abf3dc4103ebbbe9258fc796","sha256":"4ec89a3922d200e893d19369cdee5052783b511da87a0745edb370d4f38798f9","sha512":"16a80a427275b9480ea062fb6e1666ec576389aa1f326961261ee8d688bc279aecc179d2e2239ba4081799701cf7f8cdfbef0d94a911247d6fb48602a33525c5","ssdeep":"","tlshash":"2131369578975c70d8b731bb1fabd24779321883844c9548be4c8e49bfc282883baf20","size":1713,"data":"","first_seen":"2025-02-11T20:48:05.885749Z","last_seen":"2026-06-02T13:49:39.627566Z","times_seen":250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/7d7b8b396198c8eb285d18bbc376e49a41bb440a/static/hcaptcha.html#frame=challenge\u0026id=0tulahhjgejs\u0026host=bicielettrica.shop\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=338af34c-7bcb-4c7c-900b-acbec73d7d43\u0026theme=light\u0026origin=https%3A%2F%2Fbicielettrica.shop","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7df22b1a05fbf93eea23a0f998a5ce5b","sha1":"23687e27df2f3d2753a9206cd4a77c1e04600ffd","sha256":"3165b72c1b09a822a4e395b85adcda0748797e0c56c5ff4433b6ebf3734cbfee","sha512":"6e397541208e52483e633463c6a4412ba8254b2e75a66ae2cb204f3cdfdd96bb0d962d3f967223a470eb577b649826dfe9353c136deb54e2f7b432b8595aa5c6","ssdeep":"","tlshash":"c2a024d454d7d01003fd011410157441f4fcc4731344cd704030c4330f7403103444cd","size":74,"data":"","first_seen":"2025-01-09T03:11:45.291974Z","last_seen":"2026-07-22T08:11:48.641996Z","times_seen":59563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/7d7b8b396198c8eb285d18bbc376e49a41bb440a/static/hcaptcha.html#frame=challenge\u0026id=0tulahhjgejs\u0026host=bicielettrica.shop\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=338af34c-7bcb-4c7c-900b-acbec73d7d43\u0026theme=light\u0026origin=https%3A%2F%2Fbicielettrica.shop","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"57caa2466f228b440d0b002cd5571a7f","sha1":"3ec5e7ab035cff9b9980f5d76725292ed8f2c970","sha256":"2a3a206da015d06d08afe53b6e4c07ef984568def245e68a8a6545425c1242a9","sha512":"4d12fe5650450d9184404db716fdbc00f6f015d7c154e6c389c526e8ce1fb92fcacc1bde969a53bbc528700d2d2b7e680ffcd473c54a185ac3fc7a51958252cd","ssdeep":"","tlshash":"4e9004d570c75400cfd3135c10571cc5547c4c7035444fd44070d5511f55030511545d","size":40,"data":"","first_seen":"2023-04-14T01:04:24Z","last_seen":"2026-07-22T09:37:02.507045Z","times_seen":64184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/7d7b8b396198c8eb285d18bbc376e49a41bb440a/static/hcaptcha.html#frame=challenge\u0026id=0tulahhjgejs\u0026host=bicielettrica.shop\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=338af34c-7bcb-4c7c-900b-acbec73d7d43\u0026theme=light\u0026origin=https%3A%2F%2Fbicielettrica.shop","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"57caa2466f228b440d0b002cd5571a7f","sha1":"3ec5e7ab035cff9b9980f5d76725292ed8f2c970","sha256":"2a3a206da015d06d08afe53b6e4c07ef984568def245e68a8a6545425c1242a9","sha512":"4d12fe5650450d9184404db716fdbc00f6f015d7c154e6c389c526e8ce1fb92fcacc1bde969a53bbc528700d2d2b7e680ffcd473c54a185ac3fc7a51958252cd","ssdeep":"","tlshash":"4e9004d570c75400cfd3135c10571cc5547c4c7035444fd44070d5511f55030511545d","size":40,"data":"","first_seen":"2023-04-14T01:04:24Z","last_seen":"2026-07-22T09:37:02.507045Z","times_seen":64184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bicielettrica.shop/_/","fqdn":"bicielettrica.shop","domain":"bicielettrica.shop","tld":"shop"},"ip":{"addr":"93.186.249.90","port":443,"asn":31034,"as":"Aruba S.p.A.","country":"Italy","country_code":"IT"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-22T22:02:37.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicielettrica.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 18:31:52 GMT","end":"Mon, 01 Jun 2026 18:31:51 GMT"},"fingerprint":{"sha1":"64:5E:D3:8F:F3:AA:37:B0:CD:F7:79:6F:F4:48:10:C8:60:79:6E:93","sha256":"93:F8:A3:DF:69:1E:39:77:02:B4:96:6C:83:32:59:E6:EE:5D:2D:E1:78:D2:16:7D:83:C8:18:5D:A0:4C:EE:0A"}}},"request":{"raw":"GET /_/ HTTP/1.1\r\nHost: bicielettrica.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 22:02:37 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 22 Apr 2026 15:08:49 GMT\r\netag: W/\"69e8e481-4128\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"hCaptcha:1","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}],"data":{"size":16680,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (8972)","md5":"f851c0aba7f1b7a0c33d572978684cf4","sha1":"64d4e4892528407b43cca370c2f25d0e37a771e5","sha256":"bf2f3acb8e053e05d028cb54060930f33e249a6b1b60ab4b44ac50a04c1be741","sha512":"b8270d1a0bde3cde88888d453e08f42f77dcdc21f6f60ea5597c5b07c8ad5e75e47fa01a3b80e50a96549872e4305b707bb4005da6b96b8999aa691c16abcd50","ssdeep":"384:Z9u6DrJ07AXTDJWQOpIDnorMdPJPicP2P+ELPrP6p6ySW+zIR9S:Z9u8ryEXBWbIDnoWPJPRP2PvPrP9ySd1","tlshash":"1972d5c24d6b1e108fa261293acd84c5146e9b8b60444c9e774ed3c88fcf959d6da3cc","first_seen":"2026-04-22T22:03:09.250034Z","last_seen":"2026-04-22T22:03:09.250034Z","times_seen":1,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":219,"dns":145,"connect":35,"send":0,"wait":38,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"bicielettrica.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"bicielettrica.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"bicielettrica.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"bicielettrica.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bicielettrica.shop/_/","date":"2026-04-22T22:02:37.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 22:02:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18752\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6421d693-4940\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 105644\r\nexpires: Mon, 12 Apr 2027 22:02:38 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FoNcPqomLyu8w2fUE7fSt8%2BzlRdp66TRMab4UREcyk9MFqK%2FP5jo1paif53YkqX8qWp2euuZnl149fwfxvrf6dgy5edMrRuf7a%2BOUndmjIMc7s4apm4K3amtjJbG9q5%2B4IxVL3Di\"}]}\r\ncf-ray: 9f07e9f38b8fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102025,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-07-22T09:30:08.933087Z","times_seen":56891,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":25,"dns":1,"connect":1,"send":0,"wait":6,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bicielettrica.shop/_/","date":"2026-04-22T22:02:37.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 22:02:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18752\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6421d693-4940\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 105644\r\nexpires: Mon, 12 Apr 2027 22:02:38 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WVHVTf4WXaKf3xJC77nzxY360JVg%2FkenQU7txRbQMMZkEnyL2ku8BXvC%2BggPt%2Bva41Tujchw4Y5GOP5NBPZ8hcQDG47Cu5oOiuOtf8H1Lqxtw%2BYuvTIShIGZub%2FQ79alqah0fVT4\"}]}\r\ncf-ray: 9f07e9f38ba9c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102025,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-07-22T09:30:08.933087Z","times_seen":56891,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":26,"dns":1,"connect":4,"send":0,"wait":5,"receive":1,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hcaptcha.com/1/api.js","fqdn":"hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bicielettrica.shop/_/","date":"2026-04-22T22:02:37.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 12:59:45 GMT","end":"Wed, 15 Jul 2026 13:59:35 GMT"},"fingerprint":{"sha1":"1A:17:71:B4:A7:56:E0:C7:E0:08:40:3D:30:3E:F4:45:5E:CB:A0:CA","sha256":"DE:6B:98:3D:B5:A9:F9:8A:4A:87:9F:FF:50:79:0D:65:9A:00:06:CB:C9:53:19:C2:79:5E:6C:3C:B5:7B:45:D4"}}},"request":{"raw":"GET /1/api.js HTTP/1.1\r\nHost: hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 22:02:38 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9f07e9f388350afa-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: max-age=300\r\netag: W/\"422510dbd36d9c351111594c97d9f38e\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nset-cookie: __cf_bm=MZyt6bHLm53zkN61pzUcljCi2wT_GUw_PJ0MNwVlK18-1776895358.0063121-1.0.1.1-qLRUVCBwGyEfLvDQRPaAo7nZbZChq7Y55VBOO1_y.yvv4b2uBCTe5yluevskLM1fQ78P0Mto6bWvs9WqSPsG281nSTJd4qnd2mPVeOHuD4giK7iPW8YQhs2yitAKRofV; HttpOnly; Secure; Path=/; Domain=hcaptcha.com; Expires=Wed, 22 Apr 2026 22:32:38 GMT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":302175,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41132)","md5":"dbe0c1dfd33a057a52db69d70d537540","sha1":"75101faacee383d9d921a71d10d4ca9f1f187668","sha256":"3504eae6a3698eadb7db92bf7f557ddf85c52b27f3b193169dcb0a146fa337dc","sha512":"9a2032d1d58db988d6d680ba411bc602cc2b8bd5913a38c5819cb2e3401ddc25ba6eb21b5fdbdc3cd580ac01582d992c63e3fc10d02df644f3267b39aa48d151","ssdeep":"6144:mwwQc0BUiA2KuDqpqKVYxqx46LFyDzMi3a/x:qpu9MF","tlshash":"6954727b9320d76f13a5119541ee025f13faca1b242d5089f776a8dfd87caca8039b2d","first_seen":"2026-04-20T19:19:43.828147Z","last_seen":"2026-04-23T10:51:58.496551Z","times_seen":572,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":25,"dns":4,"connect":4,"send":0,"wait":19,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-22","alert":"Hunting_JS_WebAssembly","trigger":"hcaptcha.com/1/api.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/7d7b8b396198c8eb285d18bbc376e49a41bb440a/static/hcaptcha.html#frame=checkbox\u0026id=0tulahhjgejs\u0026host=bicielettrica.shop\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=338af34c-7bcb-4c7c-900b-acbec73d7d43\u0026theme=light\u0026origin=https%3A%2F%2Fbicielettrica.shop","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bicielettrica.shop/_/","date":"2026-04-22T22:02:38.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 22:41:27 GMT","end":"Sun, 19 Jul 2026 23:41:18 GMT"},"fingerprint":{"sha1":"A5:DA:F6:D2:9B:57:33:49:04:E8:A4:AD:23:13:29:12:19:50:D2:87","sha256":"B0:B6:91:DB:EB:DC:7A:D2:A3:ED:02:71:0C:54:BF:BE:29:4B:66:39:65:84:43:53:0D:B1:BE:57:D0:D7:7F:C9"}}},"request":{"raw":"GET /captcha/v1/7d7b8b396198c8eb285d18bbc376e49a41bb440a/static/hcaptcha.html HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 22:02:38 GMT\r\ncontent-type: text/html\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: max-age=3600\r\nset-cookie: __cf_bm=DGWj270Q1qHNjpQ0I9D31suGXIFjKqJNjKpocj6rHHQ-1776895358.2399626-1.0.1.1-srVnyr_z0He_1ZYHmleBJcSEIRV9WuxC48YTJ_HapyGdgoFi9pdKGxx_b7cSRbDjNA2kKaUzGTauMi7TIuMH0WTJjSrGVz.YiIG5D7gLohX_BwGKQCPCF_9uHEYdsgy4; HttpOnly; Secure; Path=/; Domain=hcaptcha.com; Expires=Wed, 22 Apr 2026 22:32:38 GMT\r\ncontent-security-policy: report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4\u0026sentry_environment=prod\u0026sentry_release=csp1;\r\nvary: Accept-Encoding, Origin\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-ray: 9f07e9f4fc3456c6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":570720,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39407)","md5":"bf1c1c51beefcccfb211a7c17ff039cc","sha1":"1a1647af6964adfd8928c887bc6c939d16b6bd46","sha256":"f0d0a120f02cb92f2b6ade0fdf3bbd8340b8e50a4ba0c4c6a2952a1aec1aafcc","sha512":"a926908339da650ee3069ee2805cf6328abe313c6972eafa5053368bdf50c5cdf9724760c21bf95504e6737f4bd0050aad2bf529ec2827a19db0b6563d2a7769","ssdeep":"6144:awGKG2DmaxfGdqQQ2KV+AoMOHsB6iFoaGe19z55qAs68O96:MbDaxkMOm6ice1F0","tlshash":"70c4d8aba310a32f43d652d5419e060f53b6d52a641e409cf775e8efa87c98e503af3c","first_seen":"2026-04-20T19:19:43.72372Z","last_seen":"2026-04-23T10:51:58.486646Z","times_seen":517,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":27,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-22","alert":"Hunting_JS_WebAssembly","trigger":"newassets.hcaptcha.com/captcha/v1/7d7b8b396198c8eb285d18bbc376e49a41bb440a/static/hcaptcha.html#frame=checkbox\u0026id=0tulahhjgejs\u0026host=bicielettrica.shop\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=338af34c-7bcb-4c7c-900b-acbec73d7d43\u0026theme=light\u0026origin=https%3A%2F%2Fbicielettrica.shop","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"4a450ceaeef1.w.hcaptcha.com/logo.png","fqdn":"4a450ceaeef1.w.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.18.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://newassets.hcaptcha.com/captcha/v1/7d7b8b396198c8eb285d18bbc376e49a41bb440a/static/hcaptcha.html#frame=checkbox\u0026id=0tulahhjgejs\u0026host=bicielettrica.shop\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=338af34c-7bcb-4c7c-900b-acbec73d7d43\u0026theme=light\u0026origin=https%3A%2F%2Fbicielettrica.shop","date":"2026-04-22T22:02:38.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w.hcaptcha.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 19:49:57 GMT","end":"Tue, 21 Jul 2026 19:49:56 GMT"},"fingerprint":{"sha1":"64:AD:9D:DC:BD:6A:2D:78:31:2B:FB:17:5E:90:F9:8B:56:7F:30:B0","sha256":"0F:39:64:BC:26:87:96:7E:87:03:B8:57:53:D3:A1:B7:D8:FC:AC:9F:CE:37:EA:F7:EF:CC:97:90:C1:04:8E:27"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: 4a450ceaeef1.w.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://newassets.hcaptcha.com/\r\nOrigin: https://newassets.hcaptcha.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 22 Apr 2026 22:02:38 GMT\r\nContent-Type: image/png\r\nContent-Length: 1412\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=86400\r\nLast-Modified: Tue, 22 Oct 2020 18:30:00 GMT\r\nVary: Host\r\nTiming-Allow-Origin: *\r\nset-cookie: __cf_bm=PhXBAa3Iy9vf_5I3WID22Zo5pavIcVfpz5.X5sD5uPM-1776895358.5747223-1.0.1.1-W4cbewGI3jLJw0ykN9KCaIvrpiePS5UAjPUGpag.OskaA77dq.xTAtu.50fZ9b6JMHKOkbwd8bk_ttjX2hizAAT7dt1Y5ESFgmaeyHWXN2xeFTO22Eksq.gM93a.vD31; HttpOnly; Secure; Path=/; Domain=w.hcaptcha.com; Expires=Wed, 22 Apr 2026 22:32:38 GMT\r\nServer: cloudflare\r\nCF-RAY: 9f07e9f71d484c11-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1412,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced","md5":"78b41beeebd802a10a4a553434790756","sha1":"32492e1a00791f27c85e19aef7ba06f942ab514e","sha256":"5304f6304b810992dc8f906fe7e9f98feeb36b8356efd27ea2e871223c5f15e5","sha512":"ea67e115882c218389102ade46d0abf950e12b0061eb230cb6268d9158e0b461a3f773283a18baac32ae142b8c0e86eeb22b35d8457afa4045260f3c16ffa4fd","ssdeep":"","tlshash":"002101501b702161c1cb47329dd21e06f9b68843add9de0bf78c9c761f44ac5749f389","first_seen":"2025-11-14T20:20:17.054105Z","last_seen":"2026-05-20T12:22:50.297767Z","times_seen":43212,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":17,"dns":5,"connect":1,"send":0,"wait":5,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/c/608aad5179420c705eec42fb9cc5400dcd50c11207eea1a4b009e24b87e67e81/hsw.js","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://newassets.hcaptcha.com/captcha/v1/7d7b8b396198c8eb285d18bbc376e49a41bb440a/static/hcaptcha.html#frame=challenge\u0026id=0tulahhjgejs\u0026host=bicielettrica.shop\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=338af34c-7bcb-4c7c-900b-acbec73d7d43\u0026theme=light\u0026origin=https%3A%2F%2Fbicielettrica.shop","date":"2026-04-22T22:02:38.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 22:41:27 GMT","end":"Sun, 19 Jul 2026 23:41:18 GMT"},"fingerprint":{"sha1":"A5:DA:F6:D2:9B:57:33:49:04:E8:A4:AD:23:13:29:12:19:50:D2:87","sha256":"B0:B6:91:DB:EB:DC:7A:D2:A3:ED:02:71:0C:54:BF:BE:29:4B:66:39:65:84:43:53:0D:B1:BE:57:D0:D7:7F:C9"}}},"request":{"raw":"GET /c/608aad5179420c705eec42fb9cc5400dcd50c11207eea1a4b009e24b87e67e81/hsw.js HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://newassets.hcaptcha.com/captcha/v1/7d7b8b396198c8eb285d18bbc376e49a41bb440a/static/hcaptcha.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 22:02:38 GMT\r\ncontent-type: application/javascript\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: max-age=3024000\r\nset-cookie: __cf_bm=JfuQ4XIPB4aRw5.LYlyH.M10sMTtwji54D5KbPRh7s8-1776895358.8312016-1.0.1.1-UXDQBVQfcE.VzdQwJSWDaPiQ6aNyjU91CpIrlmV2UAq9.yVQ7KqwOs85xmvHar25NyWXlTjm9f82lob.jGYaxFrXcn7rNBdW4pvqxkSJnmng0mi5M3dRYkkNwkLTGP3k; HttpOnly; Secure; Path=/; Domain=hcaptcha.com; Expires=Wed, 22 Apr 2026 22:32:38 GMT\r\ncontent-encoding: gzip\r\netag: W/\"f86bb29459a591bbc8c0ac2f7419c175\"\r\nvary: Accept-Encoding, Origin\r\npriority: u=3,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9f07e9f8bbd85697-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":921738,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65395)","md5":"f86bb29459a591bbc8c0ac2f7419c175","sha1":"6d6c1c5683507ea8c5ac989d2aaea548580f95b3","sha256":"1a4219d8f3ea269f88602d64fe87170ff7f34eea0d3ca3b6d7dd9c2144a6edfb","sha512":"3b22760cd4a95d58cc9b871953fded1722d7bc342600e35c82b1cddeaa48140cabd509d9de3d7f4ac31cf8db16f8b185d968b8db816a6dc4499fa8cf13ce22ed","ssdeep":"12288:1wkhPGvX0bebwg+3l/W2pzpjXjET5AJCNsRK7fnKDhZoSKkO:1wkhPGfjbl+302pzlXjETGJ1RKfKHm","tlshash":"59154bbeab1195a6eeb316ed441b3a036d4888d7c555dee0bf4dc4a3e85007f08da8dc","first_seen":"2026-04-22T20:27:59.254114Z","last_seen":"2026-04-27T16:20:03.786685Z","times_seen":334,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-22","alert":"Hunting_JS_WebAssembly","trigger":"newassets.hcaptcha.com/c/608aad5179420c705eec42fb9cc5400dcd50c11207eea1a4b009e24b87e67e81/hsw.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"bicielettrica.shop/favicon.ico","fqdn":"bicielettrica.shop","domain":"bicielettrica.shop","tld":"shop"},"ip":{"addr":"93.186.249.90","port":443,"asn":31034,"as":"Aruba S.p.A.","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bicielettrica.shop/_/","date":"2026-04-22T22:02:38.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicielettrica.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 18:31:52 GMT","end":"Mon, 01 Jun 2026 18:31:51 GMT"},"fingerprint":{"sha1":"64:5E:D3:8F:F3:AA:37:B0:CD:F7:79:6F:F4:48:10:C8:60:79:6E:93","sha256":"93:F8:A3:DF:69:1E:39:77:02:B4:96:6C:83:32:59:E6:EE:5D:2D:E1:78:D2:16:7D:83:C8:18:5D:A0:4C:EE:0A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bicielettrica.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 22:02:38 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 113459\r\nlast-modified: Wed, 29 May 2024 12:14:56 GMT\r\netag: \"66571c40-1bb33\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":113459,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 7 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"1db747255c64a30f9236e9d929e986ca","sha1":"384023452346aa087d40c93c23ca2f5e32ff1b1f","sha256":"88baf40feb43463a8f6aa6543e88bdbe33f0db9a317486e786eee1e5c76a9544","sha512":"05d654610ebf0c5de4ce828923c63e21d3164f4aebcec5db2415be23bd6965a50f5506ec8772c4624fae266944a9cc596947d3c061f0f9602633103238c64267","ssdeep":"768:Beca3V/m1M2m2PXSoJTNpZXPOV2pzkkqCU63:BlGRQM2m2HJh/GVszkkFU","tlshash":"e9b34b608cdd9970ebe7a633506aca391132fde76bf081db57f870a836712d80138e61","first_seen":"2023-04-11T05:22:11Z","last_seen":"2026-07-22T00:43:28.346251Z","times_seen":8685,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"bicielettrica.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"bicielettrica.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"bicielettrica.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"bicielettrica.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/7d7b8b396198c8eb285d18bbc376e49a41bb440a/static/hcaptcha.html#frame=challenge\u0026id=0tulahhjgejs\u0026host=bicielettrica.shop\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=338af34c-7bcb-4c7c-900b-acbec73d7d43\u0026theme=light\u0026origin=https%3A%2F%2Fbicielettrica.shop","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bicielettrica.shop/_/","date":"2026-04-22T22:02:38.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 22:41:27 GMT","end":"Sun, 19 Jul 2026 23:41:18 GMT"},"fingerprint":{"sha1":"A5:DA:F6:D2:9B:57:33:49:04:E8:A4:AD:23:13:29:12:19:50:D2:87","sha256":"B0:B6:91:DB:EB:DC:7A:D2:A3:ED:02:71:0C:54:BF:BE:29:4B:66:39:65:84:43:53:0D:B1:BE:57:D0:D7:7F:C9"}}},"request":{"raw":"GET /captcha/v1/7d7b8b396198c8eb285d18bbc376e49a41bb440a/static/hcaptcha.html HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 22:02:38 GMT\r\ncontent-type: text/html\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: max-age=3600\r\nset-cookie: __cf_bm=_eMkHqfG4PuiemImNuhwAw0oNQ_mtjSxu2cHAwHtYy4-1776895358.2356286-1.0.1.1-sZ1pOL8OiMplJu7JdkIhdqECdH1bDsrinMU6Wxlwp4.jPBko72tUqALEpl0.yjrdP3ya8TkLFlxOA.gtl6M3CY5sTg31Gt8vSwrmUz1GYHeiea3d8r.V8Na4MTD_LCiB; HttpOnly; Secure; Path=/; Domain=hcaptcha.com; Expires=Wed, 22 Apr 2026 22:32:38 GMT\r\ncontent-security-policy: report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4\u0026sentry_environment=prod\u0026sentry_release=csp1;\r\nvary: Accept-Encoding, Origin\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-ray: 9f07e9f4fc3156c6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":570720,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39407)","md5":"bf1c1c51beefcccfb211a7c17ff039cc","sha1":"1a1647af6964adfd8928c887bc6c939d16b6bd46","sha256":"f0d0a120f02cb92f2b6ade0fdf3bbd8340b8e50a4ba0c4c6a2952a1aec1aafcc","sha512":"a926908339da650ee3069ee2805cf6328abe313c6972eafa5053368bdf50c5cdf9724760c21bf95504e6737f4bd0050aad2bf529ec2827a19db0b6563d2a7769","ssdeep":"6144:awGKG2DmaxfGdqQQ2KV+AoMOHsB6iFoaGe19z55qAs68O96:MbDaxkMOm6ice1F0","tlshash":"70c4d8aba310a32f43d652d5419e060f53b6d52a641e409cf775e8efa87c98e503af3c","first_seen":"2026-04-20T19:19:43.72372Z","last_seen":"2026-04-23T10:51:58.486646Z","times_seen":517,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":22,"dns":3,"connect":1,"send":0,"wait":27,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-22","alert":"Hunting_JS_WebAssembly","trigger":"newassets.hcaptcha.com/captcha/v1/7d7b8b396198c8eb285d18bbc376e49a41bb440a/static/hcaptcha.html#frame=challenge\u0026id=0tulahhjgejs\u0026host=bicielettrica.shop\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=338af34c-7bcb-4c7c-900b-acbec73d7d43\u0026theme=light\u0026origin=https%3A%2F%2Fbicielettrica.shop","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"d61458f2fb1a.w.hcaptcha.com/logo.png","fqdn":"d61458f2fb1a.w.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.18.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://newassets.hcaptcha.com/captcha/v1/7d7b8b396198c8eb285d18bbc376e49a41bb440a/static/hcaptcha.html#frame=challenge\u0026id=0tulahhjgejs\u0026host=bicielettrica.shop\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=338af34c-7bcb-4c7c-900b-acbec73d7d43\u0026theme=light\u0026origin=https%3A%2F%2Fbicielettrica.shop","date":"2026-04-22T22:02:38.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w.hcaptcha.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 19:49:57 GMT","end":"Tue, 21 Jul 2026 19:49:56 GMT"},"fingerprint":{"sha1":"64:AD:9D:DC:BD:6A:2D:78:31:2B:FB:17:5E:90:F9:8B:56:7F:30:B0","sha256":"0F:39:64:BC:26:87:96:7E:87:03:B8:57:53:D3:A1:B7:D8:FC:AC:9F:CE:37:EA:F7:EF:CC:97:90:C1:04:8E:27"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: d61458f2fb1a.w.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://newassets.hcaptcha.com/\r\nOrigin: https://newassets.hcaptcha.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 22 Apr 2026 22:02:38 GMT\r\nContent-Type: image/png\r\nContent-Length: 1412\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=86400\r\nLast-Modified: Tue, 22 Oct 2020 18:30:00 GMT\r\nVary: Host\r\nTiming-Allow-Origin: *\r\nset-cookie: __cf_bm=qr7w_QXlsLzfai_CyQhnagrOqB0MIyR6nbWrkdTdaFw-1776895358.6839643-1.0.1.1-38PTuI7e7mGb7ex79Tt6DZ2qkEG0zZgmy.4NTEWusO4uK6dnajZ4hFIrKHAqOxhhmQyvgS100Gr6ArFonPgMqv70kZgDwgdurBvdMiQXMHpcQBW1LK96D3A2ssz4Bskc; HttpOnly; Secure; Path=/; Domain=w.hcaptcha.com; Expires=Wed, 22 Apr 2026 22:32:38 GMT\r\nServer: cloudflare\r\nCF-RAY: 9f07e9f7ce743181-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1412,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced","md5":"78b41beeebd802a10a4a553434790756","sha1":"32492e1a00791f27c85e19aef7ba06f942ab514e","sha256":"5304f6304b810992dc8f906fe7e9f98feeb36b8356efd27ea2e871223c5f15e5","sha512":"ea67e115882c218389102ade46d0abf950e12b0061eb230cb6268d9158e0b461a3f773283a18baac32ae142b8c0e86eeb22b35d8457afa4045260f3c16ffa4fd","ssdeep":"","tlshash":"002101501b702161c1cb47329dd21e06f9b68843add9de0bf78c9c761f44ac5749f389","first_seen":"2025-11-14T20:20:17.054105Z","last_seen":"2026-05-20T12:22:50.297767Z","times_seen":43212,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":17,"dns":4,"connect":1,"send":0,"wait":6,"receive":3,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.hcaptcha.com/checksiteconfig?v=7d7b8b396198c8eb285d18bbc376e49a41bb440a\u0026host=bicielettrica.shop\u0026sitekey=338af34c-7bcb-4c7c-900b-acbec73d7d43\u0026sc=1\u0026swa=1\u0026spst=0","fqdn":"api.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://newassets.hcaptcha.com/captcha/v1/7d7b8b396198c8eb285d18bbc376e49a41bb440a/static/hcaptcha.html#frame=challenge\u0026id=0tulahhjgejs\u0026host=bicielettrica.shop\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=338af34c-7bcb-4c7c-900b-acbec73d7d43\u0026theme=light\u0026origin=https%3A%2F%2Fbicielettrica.shop","date":"2026-04-22T22:02:38.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 22:41:27 GMT","end":"Sun, 19 Jul 2026 23:41:18 GMT"},"fingerprint":{"sha1":"A5:DA:F6:D2:9B:57:33:49:04:E8:A4:AD:23:13:29:12:19:50:D2:87","sha256":"B0:B6:91:DB:EB:DC:7A:D2:A3:ED:02:71:0C:54:BF:BE:29:4B:66:39:65:84:43:53:0D:B1:BE:57:D0:D7:7F:C9"}}},"request":{"raw":"POST /checksiteconfig?v=7d7b8b396198c8eb285d18bbc376e49a41bb440a\u0026host=bicielettrica.shop\u0026sitekey=338af34c-7bcb-4c7c-900b-acbec73d7d43\u0026sc=1\u0026swa=1\u0026spst=0 HTTP/1.1\r\nHost: api.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://newassets.hcaptcha.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://newassets.hcaptcha.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 22:02:38 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://newassets.hcaptcha.com\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=RZowd0KBEvBisI3pHJesVdoSFazAj2F3TRor6uAm9p0-1776895358.786377-1.0.1.1-AJdMOcRDyEuI1v11YEjiKCl15uirVwdFBjeuTNLfZgOXhLEJgY.n4CUYcy.yPrr5l27FYRgq_AVS21otMi8_WumSBr91RQwbUhw.5J7.8jhRD0dSQsgsrVvXrOAT4Nwx; HttpOnly; Secure; Path=/; Domain=hcaptcha.com; Expires=Wed, 22 Apr 2026 22:32:38 GMT\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f07e9f86ba75697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":781,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1479773d139bb37c1d122e706a47a761","sha1":"b1718d80c2b1018026f7edd75b3cd253489ec183","sha256":"c2a2b3153e7e8d335a20c4af98aaa49685a0a6a7b81d251f0c1740721d8c7d54","sha512":"f540d9f34fc7a52a8ac49c26136fb7b2e1c48a8d5eb8c5db12d4e865f0e9eaff639aa8319305f28ce709ae1c860663c6331a5e021a2a7630ff3b03e3fa36ac9f","ssdeep":"","tlshash":"6101ba13430c7a2d991331052ced2f671d1291af82c5bc3004dde6dec6b2446d9204fd","first_seen":"2026-04-22T22:03:09.263604Z","last_seen":"2026-04-22T22:03:09.263604Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}