{"report_id":"1da537b9-2e69-4caa-836a-618b44589b82","version":6,"status":"done","tags":["scam","fraud","crypto"],"date":"2026-02-15T00:54:23Z","url":{"schema":"http","addr":"90biem.org","fqdn":"90biem.org","domain":"90biem.org","tld":"org"},"ip":{"addr":"68.65.122.221","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"90biem.org/","fqdn":"90biem.org","domain":"90biem.org","tld":"org"},"title":"75biem","dom":{"size":43677,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (23000)","md5":"a5bceb37c638624b0ddb8ccf8b813263","sha1":"60a95ee5b59cb5922fe80dbb5a7c19f2227c3050","sha256":"7c6ebebdb4deac302116ca2a40ca2d1653b42dd4692ce9991d8c9f6d7ff3d659","sha512":"4051f8cb500357307b2ed974c4021e5ef6e80fb0a7f42ee98fdec41f81fad79fb4319225a941568b296ae4a9a7ac26aca5dbf357298e99836b0fae8e50e4b695","ssdeep":"384:7B72InJaq+ROOyC7AN3Mu/XsTeUxxuWDybNOzbg3vFYC9tN0/XmPiXbZt6Yh:752+UJi/c839YC+/Xmyj6Yh","tlshash":"b01351b14980107aa93f83577a81fa08b7d0454bde762e4bf4bed24a8fc7f4e4621275","dom_hash":"domhashb9a679073933276aa84279ee5d533675","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"90biem.org","fqdn":"90biem.org","domain":"90biem.org","tld":"org"},"ip":{"addr":"68.65.122.221","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-22T00:54:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null},{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"summary":[{"fqdn":"min-api.cryptocompare.com","ip":{"addr":"20.4.130.154","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"domain_registered":"2013-11-03","domain_rank":433733,"first_seen":"2017-01-31T12:53:23Z","last_seen":"2026-02-14T04:58:39.948009Z","alert_count":0,"request_count":1,"received_data":747,"sent_data":507,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"unix.claims","ip":{"addr":"172.67.153.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":111814,"sent_data":1988,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":3,"received_data":85761,"sent_data":1596,"comment":"","tags":null,"fingerprints":null},{"fqdn":"90biem.org","ip":{"addr":"68.65.122.221","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"2026-02-07","domain_rank":0,"first_seen":"2026-02-15T00:54:27.308459Z","last_seen":"2026-02-15T00:54:27.308459Z","alert_count":9,"request_count":9,"received_data":6603299,"sent_data":3844,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":2,"received_data":39903,"sent_data":1115,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"remodelingmds.com","ip":{"addr":"198.54.115.163","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":12,"received_data":1131702,"sent_data":5357,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"remodelingmds.com/src/js/vendor/sal.min.js","fqdn":"remodelingmds.com","domain":"remodelingmds.com","tld":"com"},"ip":{"addr":"198.54.115.163","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ccaa01be41cd256ce3680a13561d02c","sha1":"c5a429f9b1df7453283c5153679fef59388f0ae0","sha256":"54fe795bd33cb2adbe8b14472028b19fe8e803defa79378a393133b09a72fd43","sha512":"3db18646d3c183f712d0274e156fec5670957ee6d6a3f5f8af49c0b9f52e53ef6d9f1390d51ce5eadf62b8c24b4f783655b50ea6d2c766e32599876015a7419b","ssdeep":"","tlshash":"2e5193417514beef09e350b2813f424bf3312da65865602097b0afed0c684eb4666f7b","size":3025,"data":"","first_seen":"2023-03-11T13:40:57Z","last_seen":"2026-07-23T19:27:11.738965Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remodelingmds.com/src/js/vendor/bootstrap.min.js","fqdn":"remodelingmds.com","domain":"remodelingmds.com","tld":"com"},"ip":{"addr":"198.54.115.163","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81efb3173c49fba4c8597d90ca5e7a13","sha1":"a3dc0fd5f510c866f104bf8a9b8f63531743156f","sha256":"cfc06b3d082c267fb913ec9f21ff8aac5b577c15ba745b0c50e8c5bc1262a9ef","sha512":"12992984accd264bdc292eeb0670b0644f00796e5142f497970deff5f736c04b06a262d6bb718aad873e1e6640cccba8daf5b6cc21df81779335a93e620e78c8","ssdeep":"1536:8Oh2DUSRGOgl+7Q1+HKWd75fMbW9aoTSMnS3s7P:8vXdZ9aoh3","tlshash":"6473e9493214b87309de45b78037470bf23659a8b14a402c79bcadde2a7dc8672b7f78","size":77396,"data":"","first_seen":"2025-06-20T01:35:12.306897Z","last_seen":"2026-07-11T07:53:52.927908Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remodelingmds.com/src/js/main.js","fqdn":"remodelingmds.com","domain":"remodelingmds.com","tld":"com"},"ip":{"addr":"198.54.115.163","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ac2fac9e604d308739ae92c1c1d3516","sha1":"f6ae4a7c623547e3172c5a986f42bb1754239be0","sha256":"9635eed3e285fb4b16bdd2b253d4af836c0cec245f6d993643dcb1d6b01f2eba","sha512":"cf79dcf6ad1545b6b65f4e76140a9971d851ad1f222167c6259cea6db35fd378bab80347a3dee85967476b938de4a548b1f374ff6032dd61795d94d274262359","ssdeep":"192:A7cXItzhvii+viiPKu0XD8D/XDmuHiVuHiFuHilOhPytkk6T5r5U5llr/fpeHDIy:AwZhK29qllrpsceRIViAdCD","tlshash":"d5c2fd0ab8b52076007b607e9e7fd205275b51175e4ebe20bc9c22840f9912d7af67fe","size":26606,"data":"","first_seen":"2025-10-19T02:23:19.495858Z","last_seen":"2026-02-15T00:58:02.727412Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"90biem.org/assets/w-modal.js","fqdn":"90biem.org","domain":"90biem.org","tld":"org"},"ip":{"addr":"68.65.122.221","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","size":37639,"data":"","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-07-22T10:17:07.414629Z","times_seen":200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"90biem.org/assets/modules.js","fqdn":"90biem.org","domain":"90biem.org","tld":"org"},"ip":{"addr":"68.65.122.221","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd7888c17d986b6122e6a9397cf907d6","sha1":"b4d8de352083413f9352fdb221525c81540a6a0a","sha256":"e531262f2af00276370279551348f4949a9d28b26af6be5f9a64cc496ac0b78a","sha512":"79f4a147849ba685e56a07f91c574d9970c5cb743ef6081fd2b4760e8656f760b92ead577d55004ab46158599d8c7cf554c3d53304070bf47b2ae97a2c944854","ssdeep":"49152:BC0EJoL7vMPaypp3JZ4CQmB0Rcj206bYF2Xi/Mf4hPGnN9EYtwkak9CGglx:Mmy3zQkA6mEwtwyjax","tlshash":"ff567dd073a0b0a5439752d0442bd005f339a82a644c449ff6efe8e76fa9e899537f39","size":6101525,"data":"","first_seen":"2025-05-16T16:12:44.565992Z","last_seen":"2026-07-13T05:36:53.122386Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remodelingmds.com/src/js/vendor/jquery.js","fqdn":"remodelingmds.com","domain":"remodelingmds.com","tld":"com"},"ip":{"addr":"198.54.115.163","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6efd601e1b1b6a9ba8965f4ddb7ec18a","sha1":"8deeafca9e3e291a999169a5f912c363f4caa6f2","sha256":"4de46c4583be520c0b52f18beb63653578d0750617d00b5de6ea052d2d024256","sha512":"4795094c2f6e869713e5447fd53abb6f2ee85a8a27d8ad0764cd2f171c73d99ceff9c3f903a88274ac38ec1ead638a4968c601e2622e7bd7301532f4a839f587","ssdeep":"1536:fZie6Gh3tDJoPbxYrEUcuQSS7oWNrgLZ3wE1A+bBjRfDc3VZ+AxBbcIKC9w:2Qk2DcP7w1C9w","tlshash":"42830addb2c6b06247a770be40bf550bf1361999280d8450f129d8e9bc74a8e827bf7d","size":84749,"data":"","first_seen":"2025-10-08T02:55:26.046345Z","last_seen":"2026-07-11T07:53:52.808582Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remodelingmds.com/src/js/vendor/jquery-ui.js","fqdn":"remodelingmds.com","domain":"remodelingmds.com","tld":"com"},"ip":{"addr":"198.54.115.163","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"861360aeab50671a02f1d28798553279","sha1":"6384ac34ff714421d1832ee7b3113fd9e1a63a2a","sha256":"3bed408215680f57de1fcf7f21ceb0735ce79d4b2f10542c036691f333946a27","sha512":"fd3a184bd35307a2ec75ad7d38c0879b827793ef0e458d72972735581e1fba418b6bf9040c1c11926284e4c36c3f003234ee1b197d8c7e1c71a73bd1ecf8227f","ssdeep":"384:Bpqtx0I52IBdBs8lksudYeYFF4E/5xEOrDNHjVw1aQhPmDHhW0Eedhjb:uj2IhdX4E/5xZrpDxfb","tlshash":"b4b2d589b24a7a0316e7a230503f654be33356dc9409849cb478dadd6d2de09b1bbf7c","size":24019,"data":"","first_seen":"2023-03-08T14:23:03Z","last_seen":"2026-07-24T02:03:29.757304Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"90biem.org/assets/w-loader.js","fqdn":"90biem.org","domain":"90biem.org","tld":"org"},"ip":{"addr":"68.65.122.221","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","size":41716,"data":"","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-07-22T10:17:07.499165Z","times_seen":393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remodelingmds.com/src/js/vendor/slick.js","fqdn":"remodelingmds.com","domain":"remodelingmds.com","tld":"com"},"ip":{"addr":"198.54.115.163","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"42b51c2012476a9edfedc55b043ece04","sha1":"669fad2f08989a3a02751e2d9e206d2586708d9a","sha256":"b8380ee0b956cd4547a4b58c7ff0853a6ec0d919875bf2f3c60dbad67855c627","sha512":"d3db7724099f0885e62fc07d7c0fcb6be1098ce50d77b8011274ef0bf600df95a557d34105f5393c363ae395ac4eb4188d7fe4a7e420b5a803425719fc45541b","ssdeep":"768:4js48qMmOTb/sLi9dBwzlO7Axk4LlZtxtJjwM0UYCQCRhApD4rmoDRihPN:WIL1wzlAArl1CN","tlshash":"9013a309d204276289d771e12105c50db3fbbb3cba22c1a434c9e3eb64ad84996d7ff6","size":42481,"data":"","first_seen":"2023-03-11T13:40:57Z","last_seen":"2026-07-24T15:18:30.024765Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"90biem.org/assets/main.js","fqdn":"90biem.org","domain":"90biem.org","tld":"org"},"ip":{"addr":"68.65.122.221","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"97df8967fabd81fab8aa79edc4cd7768","sha1":"f7efafdca7572adf1d922a8be580531c5e497815","sha256":"e427c8725cf8f80d93233a7eafafd701969f7966d671d0079e233fcfb7ccc78d","sha512":"f968e2ed10cb32914dc76aa0a9e864aa5fc19ccbb69d969291a79d016339b924742b7d1e5aea9c5647acb17b1b05739c588ed432df83d5670a7559c4aadbcf2f","ssdeep":"3072:bZW4l+Bdrg2qwOX8HFrS9FQR7IrL6OEXJUiEp:bQBdrg2NHFrAFOm","tlshash":"2544b65865fb543c809b346d595b61007834f287b0ccddb53abc8921afcdda4cae2bad","size":262668,"data":"","first_seen":"2026-02-15T00:54:34.582212Z","last_seen":"2026-02-15T00:58:02.732303Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"90biem.org/assets/main.js","fqdn":"90biem.org","domain":"90biem.org","tld":"org"},"ip":{"addr":"68.65.122.221","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:01.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"90biem.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 08 Feb 2026 00:00:00 GMT","end":"Mon, 08 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"00:FA:CC:80:7D:DF:23:68:7D:FD:1E:42:27:11:4B:44:D5:81:AA:B4","sha256":"A8:D1:76:12:C4:E8:34:EC:35:70:7E:CE:8F:E2:74:AD:EC:63:9C:9E:82:02:03:04:7C:E3:E3:CB:1B:3F:8B:0A"}}},"request":{"raw":"GET /assets/main.js HTTP/1.1\r\nHost: 90biem.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://90biem.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 30 Sep 2025 11:08:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 34194\r\ndate: Sun, 15 Feb 2026 00:54:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":263474,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (4614)","md5":"97df8967fabd81fab8aa79edc4cd7768","sha1":"f7efafdca7572adf1d922a8be580531c5e497815","sha256":"e427c8725cf8f80d93233a7eafafd701969f7966d671d0079e233fcfb7ccc78d","sha512":"f968e2ed10cb32914dc76aa0a9e864aa5fc19ccbb69d969291a79d016339b924742b7d1e5aea9c5647acb17b1b05739c588ed432df83d5670a7559c4aadbcf2f","ssdeep":"3072:bZW4l+Bdrg2qwOX8HFrS9FQR7IrL6OEXJUiEp:bQBdrg2NHFrAFOm","tlshash":"2544b65865fb543c809b346d595b61007834f287b0ccddb53abc8921afcdda4cae2bad","first_seen":"2026-02-15T00:54:34.582212Z","last_seen":"2026-02-15T00:58:02.732303Z","times_seen":3,"resource_available":true,"data":null}},"time_used":828,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":827,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Urbanist:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:02.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Urbanist:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remodelingmds.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\ncontent-security-policy-report-only: script-src 'unsafe-inline';report-uri https://csp.withgoogle.com/csp/script-inclusions/bcfae741e379a885f2ab2cf83ebe6d32\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 15 Feb 2026 00:54:02 GMT\r\ndate: Sun, 15 Feb 2026 00:54:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13657,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2fafd36f763f19a749dbd9747b4b6a7c","sha1":"4e102fc4a71d83b4b693c4c19be0f185ef6e07e5","sha256":"3c96a6ea2c8a45cc40d828453969b631fed02a346c141830698c2bc1a91e3537","sha512":"23b5d81c4297a4aca73b276a9e288053cb773d3a6c2f8d8835f911596796785789a7aea476e96864e3909d04c472ead55aa813e9fcec909e3ce6f279adee911d","ssdeep":"192:G37y7p37yXiy7piyXly7plyXky7pkyXPy7pPyX2y7p2yXpy7ppyXIy7pIyu7yUcE:G3i38BTUGDdGg1XIaX0ME","tlshash":"ba52ad91496ba590ebd30dc222d97d33df0fa250a4459d34bbfe28d8fc66c2a53a171c","first_seen":"2026-01-12T02:10:23.625352Z","last_seen":"2026-02-15T00:58:02.723617Z","times_seen":6,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":97,"dns":27,"connect":7,"send":0,"wait":20,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remodelingmds.com/src/fonts/icomoone9eb.ttf?3qm5q8","fqdn":"remodelingmds.com","domain":"remodelingmds.com","tld":"com"},"ip":{"addr":"198.54.115.163","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:02.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remodelingmds.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A0:0A:94:62:EE:89:CE:78:C7:5B:EA:B6:17:D3:1F:8D:4D:06:45:C0","sha256":"58:F5:02:25:E6:7B:16:7D:4B:18:2E:98:0A:0A:A8:33:B5:D3:87:59:3D:C9:9E:4B:28:D8:B3:BA:38:91:F6:6D"}}},"request":{"raw":"GET /src/fonts/icomoone9eb.ttf?3qm5q8 HTTP/1.1\r\nHost: remodelingmds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://90biem.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remodelingmds.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 22 Feb 2026 00:54:02 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 03 Jan 2022 09:15:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 34276\r\ndate: Sun, 15 Feb 2026 00:54:02 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":34276,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"83dda618e88dba934c09ded25fe1b13d","sha1":"6d73f325bd2f7437fbbb2393514a4a041be2e726","sha256":"57d14e35858f3a48b287f862543e9c576eb8d3678dec3641b867d9eab315a6a1","sha512":"b237c33bf79841fe4d4a6957a44eee5c0dd6b36a9289a14977632838167eb28514575484a38a9fc9ddf6bc1ff416c9f34292c91ea1894a42f82789c033e1f715","ssdeep":"768:TWG3ZNLfGlP4EdJOGKJ05FbZ6JSbUpxb+sMtzkvzkkkJdN:TWG3ZNLudkzJY6JSQH+Nmkkad","tlshash":"68f25d17975bcf1fd823aaba995565214ef2f432d37fbb86358a0e05c2088e0056c76f","first_seen":"2023-05-28T18:32:28Z","last_seen":"2026-07-24T15:18:30.067008Z","times_seen":28,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"min-api.cryptocompare.com/data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD","fqdn":"min-api.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"20.4.130.154","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:03.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"min-api.cryptocompare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 16:51:02 GMT","end":"Sat, 09 May 2026 16:51:01 GMT"},"fingerprint":{"sha1":"0F:6D:F3:9D:A3:B2:69:AD:D0:53:45:D7:4F:B0:14:DB:D5:02:E7:FB","sha256":"18:DF:3C:73:28:AD:76:02:F3:5C:88:EC:50:60:3B:37:05:36:33:9C:D1:26:9A:21:C7:9D:52:35:B4:0A:2C:92"}}},"request":{"raw":"GET /data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD HTTP/1.1\r\nHost: min-api.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://90biem.org/\r\nOrigin: https://90biem.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 15 Feb 2026 00:54:03 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Security-Policy: frame-ancestors 'none'\r\nAccess-Control-Allow-Origin: https://90biem.org\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type, Cookie, Set-Cookie, Authorization\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: public, max-age=10\r\nX-CryptoCompare-Cache-HIT: false\r\nX-CryptoCompare-Server-Id: cc-api-min-v2-12\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":149,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e838e207235c470ffa6cdc56287f1d05","sha1":"87408c9390324f0b1de37d7dd37e33e21acb5d5b","sha256":"7f61b2397bdb2a7a12432428de046f32d6a8a2972c0b45f648189565b7daf21a","sha512":"7d5b418335ee20e1f390181b323f21354c287bf350ebc038bca95b34aea4557ccfb1f8b7ecac89db56d164133d42de29e65a05c07b1e5c1a3d9605297f80bf04","ssdeep":"","tlshash":"92c04888dddee0a863166ba32ce0f6f5c0058429d7848511a0a14ead88d89ae56ae1a1","first_seen":"2026-02-15T00:54:34.59Z","last_seen":"2026-02-15T00:54:34.59Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":88,"dns":21,"connect":18,"send":0,"wait":45,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remodelingmds.com/src/css/vendor/eduvibe-font.css","fqdn":"remodelingmds.com","domain":"remodelingmds.com","tld":"com"},"ip":{"addr":"198.54.115.163","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:01.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remodelingmds.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A0:0A:94:62:EE:89:CE:78:C7:5B:EA:B6:17:D3:1F:8D:4D:06:45:C0","sha256":"58:F5:02:25:E6:7B:16:7D:4B:18:2E:98:0A:0A:A8:33:B5:D3:87:59:3D:C9:9E:4B:28:D8:B3:BA:38:91:F6:6D"}}},"request":{"raw":"GET /src/css/vendor/eduvibe-font.css HTTP/1.1\r\nHost: remodelingmds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://90biem.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 22 Feb 2026 00:54:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 06 Feb 2022 02:22:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1202\r\ndate: Sun, 15 Feb 2026 00:54:02 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5337,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5337), with no line terminators","md5":"b5cd5f9cc5b4b13df5db39bc59c647c3","sha1":"2e6aa2af614a4a4223702f9d4cbca13b84c1cb77","sha256":"17b9f20402519df8dfdcca8a1dcf2d2693cbe80b647270d34497731e9c25bca3","sha512":"35ab2eb1ea421382e3e19312f1c6cb00d419d096d1898b42fd4e70c323468ba770128ba7a88e218db48efc3d725e06955c171e7b7edcf2e518afd702059966c4","ssdeep":"48:sCF2NlUyGDh0gZ9q2QbKBMerhnERh8MDIDn4jaTuTUwzh2Den7g38ajB7puyHU8W:L2fEeBorhnEJDID4+zen7FaRpnbFJe","tlshash":"2eb1ecf8e27911c97721c842c351b289ed95f2328ef94e13f51f945c2fe26619389bb8","first_seen":"2026-01-12T02:10:23.6108Z","last_seen":"2026-02-15T00:58:02.739059Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1549,"timings":{"blocked":457,"dns":38,"connect":166,"send":0,"wait":626,"receive":0,"ssl":258},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remodelingmds.com/src/js/vendor/sal.min.js","fqdn":"remodelingmds.com","domain":"remodelingmds.com","tld":"com"},"ip":{"addr":"198.54.115.163","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:01.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remodelingmds.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A0:0A:94:62:EE:89:CE:78:C7:5B:EA:B6:17:D3:1F:8D:4D:06:45:C0","sha256":"58:F5:02:25:E6:7B:16:7D:4B:18:2E:98:0A:0A:A8:33:B5:D3:87:59:3D:C9:9E:4B:28:D8:B3:BA:38:91:F6:6D"}}},"request":{"raw":"GET /src/js/vendor/sal.min.js HTTP/1.1\r\nHost: remodelingmds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://90biem.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 03 Jan 2022 09:15:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1174\r\ndate: Sun, 15 Feb 2026 00:54:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3025,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3025), with no line terminators","md5":"1ccaa01be41cd256ce3680a13561d02c","sha1":"c5a429f9b1df7453283c5153679fef59388f0ae0","sha256":"54fe795bd33cb2adbe8b14472028b19fe8e803defa79378a393133b09a72fd43","sha512":"3db18646d3c183f712d0274e156fec5670957ee6d6a3f5f8af49c0b9f52e53ef6d9f1390d51ce5eadf62b8c24b4f783655b50ea6d2c766e32599876015a7419b","ssdeep":"","tlshash":"2e5193417514beef09e350b2813f424bf3312da65865602097b0afed0c684eb4666f7b","first_seen":"2023-03-11T13:40:57Z","last_seen":"2026-07-23T19:27:11.738965Z","times_seen":160,"resource_available":true,"data":null}},"time_used":747,"timings":{"blocked":417,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"90biem.org/assets/w-modal.js","fqdn":"90biem.org","domain":"90biem.org","tld":"org"},"ip":{"addr":"68.65.122.221","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:01.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"90biem.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 08 Feb 2026 00:00:00 GMT","end":"Mon, 08 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"00:FA:CC:80:7D:DF:23:68:7D:FD:1E:42:27:11:4B:44:D5:81:AA:B4","sha256":"A8:D1:76:12:C4:E8:34:EC:35:70:7E:CE:8F:E2:74:AD:EC:63:9C:9E:82:02:03:04:7C:E3:E3:CB:1B:3F:8B:0A"}}},"request":{"raw":"GET /assets/w-modal.js HTTP/1.1\r\nHost: 90biem.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://90biem.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 13 Feb 2024 18:51:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10442\r\ndate: Sun, 15 Feb 2026 00:54:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":37639,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (2304), with CRLF line terminators","md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-07-22T10:17:07.414629Z","times_seen":200,"resource_available":true,"data":null}},"time_used":666,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":666,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026family=Nunito:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:03.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026family=Nunito:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://90biem.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 15 Feb 2026 00:54:03 GMT\r\ndate: Sun, 15 Feb 2026 00:54:03 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24736,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c98488a0e7e032c7dd0338081f4ff8cd","sha1":"e6f277a559e5a1f4f671563b94f8108726967033","sha256":"b3fd86bf7ad0824ddd5f83d983b11464bdef5e2399638740642123195ed4a9fe","sha512":"1313d2b3133f9e610c98209fb3a4da9039e062783597d7fc6badcfc5ef22f3d924228eea9938820bbec7af6b4a7a6ba70f0a960587d3dbc7266855bf281c1f37","ssdeep":"384:vXuM0p2+bb2vbfoMS2kbqBVd2VbhG6c2SbUP5l7QFDPeo:P","tlshash":"79b2ca92001be500ab872cc227cf7e3aed8e61557455c579abfd4cc8acabd631364b1e","first_seen":"2025-09-19T04:34:09.043423Z","last_seen":"2026-07-20T14:57:07.325558Z","times_seen":140,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unix.claims/","fqdn":"unix.claims","domain":"unix.claims","tld":"claims"},"ip":{"addr":"172.67.153.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:04.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unix.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 15:57:23 GMT","end":"Tue, 05 May 2026 16:56:03 GMT"},"fingerprint":{"sha1":"88:3E:E0:CD:11:3F:0F:7E:80:1B:EC:AB:40:9F:C9:19:02:DD:54:F4","sha256":"3D:9A:97:F2:7B:72:25:49:F0:1B:12:CB:7B:A8:CE:B1:61:DA:E2:0C:B9:33:BD:5A:3C:EA:55:3E:6C:A7:FF:A3"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: unix.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://90biem.org/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 487\r\nOrigin: https://90biem.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":487,"data":"v=150725\u0026s=1\u0026r=2d310220117b1a382a7a7c210721023112101a31291f1e7a121e71222a7a7d25291f2b21040b02232a7a7920291f7c210721017d050f0238121f783d2a7b022601213f212c7a7131297a1e31107a24230122383d2c1f303b040b02792b7a1e31107a242301222721051c017c051b013b012579242b7b0620127a1e2e2c00052107220d7b06320d30051c117c060c1931050c113b0125062711101a2e120f0e78111b017e12250e3b2b7a1d3b01262c202a0f30242c0e7120120f1a31121006320122383d2c1f303b040b023f111002782a251e31107a0e23120002242b7b0521072512202a0006242e197575"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 15 Feb 2026 00:54:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b940-Z6Z54r44JsM2mBbTCq+pAD/mQcA\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vIb%2FVEPgoNeyoFY4uPskuTB6gB%2BKgFa%2Fcaxp7Z81QC%2BpL%2FK2yOSIiNmlO6xqNFOkNh55KNfuGGBS5T5lLbCGS%2BtbAN2dmw8leNUl\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ce0d4f45a26120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":47424,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (47424), with no line terminators","md5":"eb192a3f89235ce61785af7e70cc48be","sha1":"67a679e2be3826c3369816d30aafa9003fe641c0","sha256":"dcd050b2526ef33ae5bd78f41282ca19773026875f4a2a55f3a8c7c446e4dc42","sha512":"1c5ea86e977a3006016f83eababf537540a7ea28c33aef908681149710b134a7d9fe7ed5af69704e886a96b38f98f93182c58df0d4643a0e1d820b741a43f5b1","ssdeep":"768:ZpumRVzQRlH59k8IDZ+l0p2fB4sISyXmnUOYr9O4aoZWWDTE4H1ADN/:Zpumr8jFipC9JnUd9Odqvo","tlshash":"c823ce7cf94c35f4821f9b65ba9cedee313b92e2152b50240f0695c23d407d6afe2929","first_seen":"2026-02-15T00:54:34.598765Z","last_seen":"2026-02-15T00:58:02.735886Z","times_seen":3,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remodelingmds.com/src/css/vendor/bootstrap.min.css","fqdn":"remodelingmds.com","domain":"remodelingmds.com","tld":"com"},"ip":{"addr":"198.54.115.163","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:01.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remodelingmds.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A0:0A:94:62:EE:89:CE:78:C7:5B:EA:B6:17:D3:1F:8D:4D:06:45:C0","sha256":"58:F5:02:25:E6:7B:16:7D:4B:18:2E:98:0A:0A:A8:33:B5:D3:87:59:3D:C9:9E:4B:28:D8:B3:BA:38:91:F6:6D"}}},"request":{"raw":"GET /src/css/vendor/bootstrap.min.css HTTP/1.1\r\nHost: remodelingmds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://90biem.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 22 Feb 2026 00:54:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 04 Feb 2022 07:04:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22467\r\ndate: Sun, 15 Feb 2026 00:54:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":212186,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65307)","md5":"4a5e6843541e7a1b6e3cf28684a83ab9","sha1":"78a0c99d477b1d0f637bbf2fe16b6f88dc92affb","sha256":"8bd78c9c03203ec66a8eb8c14723d1c724ee41cb7deb5fbe75d2cd4c612d549a","sha512":"ea9c7d785da0e2e8833d5829cd5bbf2056a24acb0a5baf5f87edaa45746ccf937f6f5d9ecc0e0e3cd9033ed818ffe6721f0bfadc692daca6727f25d7d0d86236","ssdeep":"1536:ra+eQCqqtM9I0sEBpy0cuJF32YCxmTLe3LkVpLMdjY82oUULQLFLx:ra+ektLe3LkVpLMdjY82oUULQLFLx","tlshash":"952441abf4d1221d9513cd0856c177bd6a6fc556e3021bfaa4273f30cb86ac609b3a4d","first_seen":"2025-06-20T01:35:12.262225Z","last_seen":"2026-02-15T00:58:02.728395Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1189,"timings":{"blocked":425,"dns":39,"connect":164,"send":0,"wait":328,"receive":2,"ssl":229},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remodelingmds.com/src/js/vendor/slick.js","fqdn":"remodelingmds.com","domain":"remodelingmds.com","tld":"com"},"ip":{"addr":"198.54.115.163","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:01.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remodelingmds.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A0:0A:94:62:EE:89:CE:78:C7:5B:EA:B6:17:D3:1F:8D:4D:06:45:C0","sha256":"58:F5:02:25:E6:7B:16:7D:4B:18:2E:98:0A:0A:A8:33:B5:D3:87:59:3D:C9:9E:4B:28:D8:B3:BA:38:91:F6:6D"}}},"request":{"raw":"GET /src/js/vendor/slick.js HTTP/1.1\r\nHost: remodelingmds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://90biem.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 03 Jan 2022 09:15:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10009\r\ndate: Sun, 15 Feb 2026 00:54:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42481,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (42481), with no line terminators","md5":"42b51c2012476a9edfedc55b043ece04","sha1":"669fad2f08989a3a02751e2d9e206d2586708d9a","sha256":"b8380ee0b956cd4547a4b58c7ff0853a6ec0d919875bf2f3c60dbad67855c627","sha512":"d3db7724099f0885e62fc07d7c0fcb6be1098ce50d77b8011274ef0bf600df95a557d34105f5393c363ae395ac4eb4188d7fe4a7e420b5a803425719fc45541b","ssdeep":"768:4js48qMmOTb/sLi9dBwzlO7Axk4LlZtxtJjwM0UYCQCRhApD4rmoDRihPN:WIL1wzlAArl1CN","tlshash":"9013a309d204276289d771e12105c50db3fbbb3cba22c1a434c9e3eb64ad84996d7ff6","first_seen":"2023-03-11T13:40:57Z","last_seen":"2026-07-24T15:18:30.024765Z","times_seen":36,"resource_available":true,"data":null}},"time_used":745,"timings":{"blocked":415,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remodelingmds.com/src/js/vendor/jquery-ui.js","fqdn":"remodelingmds.com","domain":"remodelingmds.com","tld":"com"},"ip":{"addr":"198.54.115.163","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:01.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remodelingmds.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A0:0A:94:62:EE:89:CE:78:C7:5B:EA:B6:17:D3:1F:8D:4D:06:45:C0","sha256":"58:F5:02:25:E6:7B:16:7D:4B:18:2E:98:0A:0A:A8:33:B5:D3:87:59:3D:C9:9E:4B:28:D8:B3:BA:38:91:F6:6D"}}},"request":{"raw":"GET /src/js/vendor/jquery-ui.js HTTP/1.1\r\nHost: remodelingmds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://90biem.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 27 Jan 2022 11:58:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6973\r\ndate: Sun, 15 Feb 2026 00:54:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24019,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (23835)","md5":"861360aeab50671a02f1d28798553279","sha1":"6384ac34ff714421d1832ee7b3113fd9e1a63a2a","sha256":"3bed408215680f57de1fcf7f21ceb0735ce79d4b2f10542c036691f333946a27","sha512":"fd3a184bd35307a2ec75ad7d38c0879b827793ef0e458d72972735581e1fba418b6bf9040c1c11926284e4c36c3f003234ee1b197d8c7e1c71a73bd1ecf8227f","ssdeep":"384:Bpqtx0I52IBdBs8lksudYeYFF4E/5xEOrDNHjVw1aQhPmDHhW0Eedhjb:uj2IhdX4E/5xZrpDxfb","tlshash":"b4b2d589b24a7a0316e7a230503f654be33356dc9409849cb478dadd6d2de09b1bbf7c","first_seen":"2023-03-08T14:23:03Z","last_seen":"2026-07-24T02:03:29.757304Z","times_seen":82,"resource_available":true,"data":null}},"time_used":906,"timings":{"blocked":414,"dns":0,"connect":0,"send":0,"wait":491,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/urbanist/v18/L0x-DF02iFML4hGCyMqlbS0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:02.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/urbanist/v18/L0x-DF02iFML4hGCyMqlbS0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://90biem.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27752\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 19:10:19 GMT\r\nexpires: Sat, 13 Feb 2027 19:10:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 107023\r\nlast-modified: Tue, 16 Sep 2025 03:41:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27752,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27752, version 1.0","md5":"aa575f0b65515787deb8a9e80b9abb1a","sha1":"96bc39c48e3b97118eca8b57b319292aebbfb451","sha256":"7981ef90c246352c7c217081b8d9337b9c95e9d17ae126bf56b0d3753d1e5ffb","sha512":"876dda2c000bb8ae53e95076c721de8dc65146b8a626e11c1c8f093d507c2cccea52b97a08aba90b6e76a076e1eee055244a821dbca4b86c5159cdfdb7f92bbf","ssdeep":"768:88zCdKmnhwvjlhxwVhY6aOQfyz6qIzK+F5T/Lj8KB+yEh:mdKwGlsYeQTv+eVE","tlshash":"20c2f2d72ad6f5818948b9fed8e65f0f7344e80b3e78274390055ed3aa048b87ad01e7","first_seen":"2025-05-30T12:51:46.048531Z","last_seen":"2026-07-26T04:45:08.471892Z","times_seen":4456,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":86,"dns":1,"connect":20,"send":0,"wait":21,"receive":21,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remodelingmds.com/src/fonts/icomoone9eb.woff?3qm5q8","fqdn":"remodelingmds.com","domain":"remodelingmds.com","tld":"com"},"ip":{"addr":"198.54.115.163","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:02.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remodelingmds.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A0:0A:94:62:EE:89:CE:78:C7:5B:EA:B6:17:D3:1F:8D:4D:06:45:C0","sha256":"58:F5:02:25:E6:7B:16:7D:4B:18:2E:98:0A:0A:A8:33:B5:D3:87:59:3D:C9:9E:4B:28:D8:B3:BA:38:91:F6:6D"}}},"request":{"raw":"GET /src/fonts/icomoone9eb.woff?3qm5q8 HTTP/1.1\r\nHost: remodelingmds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://90biem.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remodelingmds.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 22 Feb 2026 00:54:02 GMT\r\ncontent-type: font/woff\r\nlast-modified: Mon, 03 Jan 2022 09:15:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 34352\r\ndate: Sun, 15 Feb 2026 00:54:02 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34352,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 34352, version 0.0","md5":"508a167fc6e72e7a8ffc40fe63a2aa79","sha1":"7ff69dbd036a6416ef8bf16c5a4fd21e11822838","sha256":"844bd4ac5ddb011238a2ae34b3c2c1fcd7d64c138b141d3dbac4c472ec7252d0","sha512":"9f824d6b596e937598941fc5d8304550a74d9f1f2b2999922e98548654ecff2a17369e245145ba2d0e411a4cb8e7eb3d4d58b72d24e590cb1f44c6511cd81d47","ssdeep":"768:LEWG3ZNLfGlP4EdJOGKJ05FbZ6JSbUpxb+sMtzkvzkkkJdN:wWG3ZNLudkzJY6JSQH+Nmkkad","tlshash":"6bf25d17874bcf1fd823aaba9d5965624ef2f422d37fbb86358a0d0582088e0056c75f","first_seen":"2026-02-15T00:54:34.610056Z","last_seen":"2026-02-15T00:58:02.733929Z","times_seen":3,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"90biem.org/src/mez-1.png","fqdn":"90biem.org","domain":"90biem.org","tld":"org"},"ip":{"addr":"68.65.122.221","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:01.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"90biem.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 08 Feb 2026 00:00:00 GMT","end":"Mon, 08 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"00:FA:CC:80:7D:DF:23:68:7D:FD:1E:42:27:11:4B:44:D5:81:AA:B4","sha256":"A8:D1:76:12:C4:E8:34:EC:35:70:7E:CE:8F:E2:74:AD:EC:63:9C:9E:82:02:03:04:7C:E3:E3:CB:1B:3F:8B:0A"}}},"request":{"raw":"GET /src/mez-1.png HTTP/1.1\r\nHost: 90biem.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://90biem.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 22 Feb 2026 00:54:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Feb 2024 05:54:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 53505\r\ndate: Sun, 15 Feb 2026 00:54:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":53505,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3840 x 2160, 8-bit colormap, non-interlaced","md5":"62ffdf3ff840889b4c8e2bead8228968","sha1":"7a6f262a0520c88d7577ee1a2e67cc05d2ef132e","sha256":"efa43e167ca9aab5aee60acb9806010836d45c976364518dfc694542368d9aee","sha512":"0e92cac8b5f735fef8a071f3e18f41aec8dd070fd41800879f59faa4b58fb23f33be386b0c7436cbc49c8b07e87089078dc933f5f18984919502c22822b45896","ssdeep":"1536:2DiOn+ntnH1b43O0a+sPTjhEI8V0GaC56+ts:2DiOn+tO3O0a+sPPRi++2","tlshash":"2d33e1680b0dbb84ce7e097165c2370c18944924d677dabf36acf1f5abea19c725d1e0","first_seen":"2026-02-15T00:54:34.612273Z","last_seen":"2026-02-15T00:58:02.722707Z","times_seen":3,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"remodelingmds.com/src/js/vendor/bootstrap.min.js","fqdn":"remodelingmds.com","domain":"remodelingmds.com","tld":"com"},"ip":{"addr":"198.54.115.163","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:01.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remodelingmds.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A0:0A:94:62:EE:89:CE:78:C7:5B:EA:B6:17:D3:1F:8D:4D:06:45:C0","sha256":"58:F5:02:25:E6:7B:16:7D:4B:18:2E:98:0A:0A:A8:33:B5:D3:87:59:3D:C9:9E:4B:28:D8:B3:BA:38:91:F6:6D"}}},"request":{"raw":"GET /src/js/vendor/bootstrap.min.js HTTP/1.1\r\nHost: remodelingmds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://90biem.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 04 Feb 2022 07:04:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21329\r\ndate: Sun, 15 Feb 2026 00:54:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":77396,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"81efb3173c49fba4c8597d90ca5e7a13","sha1":"a3dc0fd5f510c866f104bf8a9b8f63531743156f","sha256":"cfc06b3d082c267fb913ec9f21ff8aac5b577c15ba745b0c50e8c5bc1262a9ef","sha512":"12992984accd264bdc292eeb0670b0644f00796e5142f497970deff5f736c04b06a262d6bb718aad873e1e6640cccba8daf5b6cc21df81779335a93e620e78c8","ssdeep":"1536:8Oh2DUSRGOgl+7Q1+HKWd75fMbW9aoTSMnS3s7P:8vXdZ9aoh3","tlshash":"6473e9493214b87309de45b78037470bf23659a8b14a402c79bcadde2a7dc8672b7f78","first_seen":"2025-06-20T01:35:12.306897Z","last_seen":"2026-07-11T07:53:52.927908Z","times_seen":16,"resource_available":true,"data":null}},"time_used":1344,"timings":{"blocked":420,"dns":35,"connect":167,"send":0,"wait":490,"receive":1,"ssl":221},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remodelingmds.com/src/js/vendor/jquery.js","fqdn":"remodelingmds.com","domain":"remodelingmds.com","tld":"com"},"ip":{"addr":"198.54.115.163","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:01.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remodelingmds.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A0:0A:94:62:EE:89:CE:78:C7:5B:EA:B6:17:D3:1F:8D:4D:06:45:C0","sha256":"58:F5:02:25:E6:7B:16:7D:4B:18:2E:98:0A:0A:A8:33:B5:D3:87:59:3D:C9:9E:4B:28:D8:B3:BA:38:91:F6:6D"}}},"request":{"raw":"GET /src/js/vendor/jquery.js HTTP/1.1\r\nHost: remodelingmds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://90biem.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 03 Jan 2022 09:15:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29080\r\ndate: Sun, 15 Feb 2026 00:54:02 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":84749,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6efd601e1b1b6a9ba8965f4ddb7ec18a","sha1":"8deeafca9e3e291a999169a5f912c363f4caa6f2","sha256":"4de46c4583be520c0b52f18beb63653578d0750617d00b5de6ea052d2d024256","sha512":"4795094c2f6e869713e5447fd53abb6f2ee85a8a27d8ad0764cd2f171c73d99ceff9c3f903a88274ac38ec1ead638a4968c601e2622e7bd7301532f4a839f587","ssdeep":"1536:fZie6Gh3tDJoPbxYrEUcuQSS7oWNrgLZ3wE1A+bBjRfDc3VZ+AxBbcIKC9w:2Qk2DcP7w1C9w","tlshash":"42830addb2c6b06247a770be40bf550bf1361999280d8450f129d8e9bc74a8e827bf7d","first_seen":"2025-10-08T02:55:26.046345Z","last_seen":"2026-07-11T07:53:52.808582Z","times_seen":15,"resource_available":true,"data":null}},"time_used":1542,"timings":{"blocked":451,"dns":36,"connect":166,"send":0,"wait":626,"receive":1,"ssl":253},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remodelingmds.com/src/js/main.js","fqdn":"remodelingmds.com","domain":"remodelingmds.com","tld":"com"},"ip":{"addr":"198.54.115.163","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:01.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remodelingmds.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A0:0A:94:62:EE:89:CE:78:C7:5B:EA:B6:17:D3:1F:8D:4D:06:45:C0","sha256":"58:F5:02:25:E6:7B:16:7D:4B:18:2E:98:0A:0A:A8:33:B5:D3:87:59:3D:C9:9E:4B:28:D8:B3:BA:38:91:F6:6D"}}},"request":{"raw":"GET /src/js/main.js HTTP/1.1\r\nHost: remodelingmds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://90biem.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 08 May 2022 17:31:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3291\r\ndate: Sun, 15 Feb 2026 00:54:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26606,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"4ac2fac9e604d308739ae92c1c1d3516","sha1":"f6ae4a7c623547e3172c5a986f42bb1754239be0","sha256":"9635eed3e285fb4b16bdd2b253d4af836c0cec245f6d993643dcb1d6b01f2eba","sha512":"cf79dcf6ad1545b6b65f4e76140a9971d851ad1f222167c6259cea6db35fd378bab80347a3dee85967476b938de4a548b1f374ff6032dd61795d94d274262359","ssdeep":"192:A7cXItzhvii+viiPKu0XD8D/XDmuHiVuHiFuHilOhPytkk6T5r5U5llr/fpeHDIy:AwZhK29qllrpsceRIViAdCD","tlshash":"d5c2fd0ab8b52076007b607e9e7fd205275b51175e4ebe20bc9c22840f9912d7af67fe","first_seen":"2025-10-19T02:23:19.495858Z","last_seen":"2026-02-15T00:58:02.727412Z","times_seen":5,"resource_available":true,"data":null}},"time_used":906,"timings":{"blocked":414,"dns":0,"connect":0,"send":0,"wait":492,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"90biem.org/","fqdn":"90biem.org","domain":"90biem.org","tld":"org"},"ip":{"addr":"68.65.122.221","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-15T00:54:00.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"90biem.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 08 Feb 2026 00:00:00 GMT","end":"Mon, 08 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"00:FA:CC:80:7D:DF:23:68:7D:FD:1E:42:27:11:4B:44:D5:81:AA:B4","sha256":"A8:D1:76:12:C4:E8:34:EC:35:70:7E:CE:8F:E2:74:AD:EC:63:9C:9E:82:02:03:04:7C:E3:E3:CB:1B:3F:8B:0A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 90biem.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Sat, 07 Feb 2026 14:59:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1230\r\ndate: Sun, 15 Feb 2026 00:54:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":4952,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"214fc433e41ccb5b46090f04d59024c8","sha1":"ee71b5f7bbde5c1565bde7c39bd2538d92c57f53","sha256":"5448fb9b27e95ea7d355f29303dbc0bebf988bc0ce88d44ed4fe11993cd38ef3","sha512":"9c2d7c8b6a90fdad24a586a2c15ff4157d89907d00a7c7f907737ba360975ee63876ce483f1aff555729d7ed508aa448bf451e983f33e81e969ca73ba12b2e01","ssdeep":"96:to1RzpkXQxSu4JDtal8ne1bfvFLVxleHs06YV:t8pkgkJG1xu6YV","tlshash":"faa164638cf9996711031081baf5b60eee91d407c71a8ee8b6fc26911f92fdbcc23558","first_seen":"2026-02-15T00:54:34.622457Z","last_seen":"2026-02-15T00:58:02.725451Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1004,"timings":{"blocked":417,"dns":12,"connect":166,"send":0,"wait":170,"receive":0,"ssl":237},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"remodelingmds.com/src/css/vendor/remixicon.css","fqdn":"remodelingmds.com","domain":"remodelingmds.com","tld":"com"},"ip":{"addr":"198.54.115.163","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:01.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remodelingmds.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A0:0A:94:62:EE:89:CE:78:C7:5B:EA:B6:17:D3:1F:8D:4D:06:45:C0","sha256":"58:F5:02:25:E6:7B:16:7D:4B:18:2E:98:0A:0A:A8:33:B5:D3:87:59:3D:C9:9E:4B:28:D8:B3:BA:38:91:F6:6D"}}},"request":{"raw":"GET /src/css/vendor/remixicon.css HTTP/1.1\r\nHost: remodelingmds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://90biem.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 22 Feb 2026 00:54:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Apr 2022 10:26:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12516\r\ndate: Sun, 15 Feb 2026 00:54:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":96462,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f1ceefac63ab7a100c36f2011563106e","sha1":"afe68c73d56e4ebd3bc25ea7344a02272785b2d6","sha256":"8f9b2a2359e6ab4a8c31ba31dd35590dfab57cd3cba3f262181af3413058923b","sha512":"2bb0f6d91ff13bb6c71edcfca8ad5d83ff8a230cfb15645b9d0a0567847ca303166bbfae30bb71c72dbe27c040cf820345e3656c97e72d7ee0acbd90227d4a4e","ssdeep":"1536:/c+QQP3ILxAju/j/mZjblpU0UvDfFawWgUipUwRET5yZ03fIJ3:13uxF/KPblwRDn3","tlshash":"9693f2ede64e44c13732c886db74b78a60e9fab6c5815c95f85b500deec76a102c4ebc","first_seen":"2026-01-12T02:10:23.691866Z","last_seen":"2026-02-15T00:58:02.721936Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1381,"timings":{"blocked":451,"dns":39,"connect":166,"send":0,"wait":467,"receive":2,"ssl":254},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remodelingmds.com/src/css/style.css","fqdn":"remodelingmds.com","domain":"remodelingmds.com","tld":"com"},"ip":{"addr":"198.54.115.163","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:01.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"remodelingmds.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A0:0A:94:62:EE:89:CE:78:C7:5B:EA:B6:17:D3:1F:8D:4D:06:45:C0","sha256":"58:F5:02:25:E6:7B:16:7D:4B:18:2E:98:0A:0A:A8:33:B5:D3:87:59:3D:C9:9E:4B:28:D8:B3:BA:38:91:F6:6D"}}},"request":{"raw":"GET /src/css/style.css HTTP/1.1\r\nHost: remodelingmds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://90biem.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 22 Feb 2026 00:54:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 14 Jun 2022 08:00:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 55976\r\ndate: Sun, 15 Feb 2026 00:54:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":486982,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (686)","md5":"8f4c47497b1c9288fd548b53df1ce638","sha1":"d0b89048cecdee48ce8bfb3fe49aeef134a236e6","sha256":"2994145f844f9d8debd877ac586f6f7acb76cb5b947e3af55ffe732d7a497cae","sha512":"cabfe4514113479a9393cfaa78ffea73c80dfaef1fcf390bd0404e8b39b8004b18fd3eaeb1d559b0a8e963fc7331782e052b2680243de9aee723cc2fb033506d","ssdeep":"12288:icFw/eNohg4VJA5qBPJHNZiIf2ozRudMOkCe2PnzDXzrZcwaxIDbulcs1POhzRuz:HhzRuz","tlshash":"e7a42497ddf2205d1827e1599eaf22acf6782403d30edeb47a8c3158df886e550eda4c","first_seen":"2026-02-15T00:54:34.626738Z","last_seen":"2026-02-15T00:58:02.742472Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1542,"timings":{"blocked":450,"dns":38,"connect":166,"send":0,"wait":468,"receive":163,"ssl":250},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"90biem.org/src/32179889-1.png","fqdn":"90biem.org","domain":"90biem.org","tld":"org"},"ip":{"addr":"68.65.122.221","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:01.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"90biem.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 08 Feb 2026 00:00:00 GMT","end":"Mon, 08 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"00:FA:CC:80:7D:DF:23:68:7D:FD:1E:42:27:11:4B:44:D5:81:AA:B4","sha256":"A8:D1:76:12:C4:E8:34:EC:35:70:7E:CE:8F:E2:74:AD:EC:63:9C:9E:82:02:03:04:7C:E3:E3:CB:1B:3F:8B:0A"}}},"request":{"raw":"GET /src/32179889-1.png HTTP/1.1\r\nHost: 90biem.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://90biem.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 22 Feb 2026 00:54:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Feb 2024 05:54:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3456\r\ndate: Sun, 15 Feb 2026 00:54:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"1a07c0fb1f4bb644bd6e04a7ce5ab617","sha1":"9a34e3e815bbbc6a93a7b2d1f3010a2753710e52","sha256":"8657dcd58d80b19cd1c6ec57804979cee23744d9780b71b4cb3064f42f557f57","sha512":"4c838c4f1a970d1c8a266afb5437701797dac918a3068c36654fdcebc5166f8f2f16f7ea63c959464c7f1fba5f35098f204088dd0152891b8ac90c7eabd0ff00","ssdeep":"","tlshash":"e8613be5972628af484f2b7be129704c4f501c2c3ea3a5aae40f3b855671d605bc3b27","first_seen":"2026-02-15T00:54:34.628611Z","last_seen":"2026-02-15T00:58:02.730617Z","times_seen":3,"resource_available":false,"data":null}},"time_used":663,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":663,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"90biem.org/favicon.ico","fqdn":"90biem.org","domain":"90biem.org","tld":"org"},"ip":{"addr":"68.65.122.221","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:03.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"90biem.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 08 Feb 2026 00:00:00 GMT","end":"Mon, 08 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"00:FA:CC:80:7D:DF:23:68:7D:FD:1E:42:27:11:4B:44:D5:81:AA:B4","sha256":"A8:D1:76:12:C4:E8:34:EC:35:70:7E:CE:8F:E2:74:AD:EC:63:9C:9E:82:02:03:04:7C:E3:E3:CB:1B:3F:8B:0A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 90biem.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://90biem.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 22 Feb 2026 00:54:03 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Thu, 01 Feb 2024 07:53:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9808\r\ndate: Sun, 15 Feb 2026 00:54:03 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":9808,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, interlaced","md5":"70dd35ab528e10f8a652d429ca2883c4","sha1":"a5be8a5d863f11fa1d6fe8ca83d0cc04d4c5cf28","sha256":"202dd27370bd2ed6a14f46fc9f6a14e749024d89b4fa71695bba0e0dea074be2","sha512":"6fa0a485d90e0f78afd76756073cb2126dbf281fb33786be9ee664f8158dc9e67432f0a36b940b5629a45b73d16a961d74f305251de719dd9b96bf596d3d5438","ssdeep":"192:l44j5MfXMQ5HNaeiw5nYFjkFwOtvSoxiqf+WloGgiIAtlYpaftZhYWyjclip8nmH:0EqHNa0qkZvSoM55G5HEaftyglmH","tlshash":"7512cf17cca6edbcbe9536be300047564f986f5350609bc97351018b42a9a1cbdaee2a","first_seen":"2023-05-09T17:02:23Z","last_seen":"2026-04-08T12:39:52.150516Z","times_seen":56,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"90biem.org/assets/modules.js","fqdn":"90biem.org","domain":"90biem.org","tld":"org"},"ip":{"addr":"68.65.122.221","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:01.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"90biem.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 08 Feb 2026 00:00:00 GMT","end":"Mon, 08 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"00:FA:CC:80:7D:DF:23:68:7D:FD:1E:42:27:11:4B:44:D5:81:AA:B4","sha256":"A8:D1:76:12:C4:E8:34:EC:35:70:7E:CE:8F:E2:74:AD:EC:63:9C:9E:82:02:03:04:7C:E3:E3:CB:1B:3F:8B:0A"}}},"request":{"raw":"GET /assets/modules.js HTTP/1.1\r\nHost: 90biem.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://90biem.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 04 Jan 2025 02:51:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 15 Feb 2026 00:54:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6101536,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"3b213a32f63e7967e9c2a5535806df09","sha1":"2198e24da34b883543f6b2bb3b3e315cfc5452b0","sha256":"1c56392da634c53a1450bcebb75428d63339a9bdc0e7e4602c0b674dbf27696f","sha512":"1a44f17a2865c14c3570dffb931bdcf07e5d8b7670fcb5154d1088d6fd10d4406acab0e00d666528882f9d91abc635f96b139f64a467c540b695c2c69a70f8a3","ssdeep":"12288:BMGk0Eqoh8EYL7qjs30amseucfju2ZAyppl:BZk0EJGEYL7v0F7Payppl","tlshash":"c9254a8473a1f076439725a4543f100af239b86c384d446cf768eceb7da9989963bf39","first_seen":"2025-07-27T10:34:55.50581Z","last_seen":"2026-07-16T06:14:34.078883Z","times_seen":160,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":665,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/urbanist/v18/L0x-DF02iFML4hGCyMqlbS0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:02.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/urbanist/v18/L0x-DF02iFML4hGCyMqlbS0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://90biem.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27752\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 19:10:19 GMT\r\nexpires: Sat, 13 Feb 2027 19:10:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 107023\r\nlast-modified: Tue, 16 Sep 2025 03:41:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27752,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27752, version 1.0","md5":"aa575f0b65515787deb8a9e80b9abb1a","sha1":"96bc39c48e3b97118eca8b57b319292aebbfb451","sha256":"7981ef90c246352c7c217081b8d9337b9c95e9d17ae126bf56b0d3753d1e5ffb","sha512":"876dda2c000bb8ae53e95076c721de8dc65146b8a626e11c1c8f093d507c2cccea52b97a08aba90b6e76a076e1eee055244a821dbca4b86c5159cdfdb7f92bbf","ssdeep":"768:88zCdKmnhwvjlhxwVhY6aOQfyz6qIzK+F5T/Lj8KB+yEh:mdKwGlsYeQTv+eVE","tlshash":"20c2f2d72ad6f5818948b9fed8e65f0f7344e80b3e78274390055ed3aa048b87ad01e7","first_seen":"2025-05-30T12:51:46.048531Z","last_seen":"2026-07-26T04:45:08.471892Z","times_seen":4456,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":137,"dns":0,"connect":22,"send":0,"wait":21,"receive":7,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unix.claims/","fqdn":"unix.claims","domain":"unix.claims","tld":"claims"},"ip":{"addr":"172.67.153.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:03.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unix.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 15:57:23 GMT","end":"Tue, 05 May 2026 16:56:03 GMT"},"fingerprint":{"sha1":"88:3E:E0:CD:11:3F:0F:7E:80:1B:EC:AB:40:9F:C9:19:02:DD:54:F4","sha256":"3D:9A:97:F2:7B:72:25:49:F0:1B:12:CB:7B:A8:CE:B1:61:DA:E2:0C:B9:33:BD:5A:3C:EA:55:3E:6C:A7:FF:A3"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: unix.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://90biem.org/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 471\r\nOrigin: https://90biem.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":471,"data":"v=150725\u0026s=1\u0026r=2d310220117b1a382a7a7c210721023112101a31291f1e7a121e7138120b013b01251a3e2a1f0e382a21017e0122233f112524242a1b7d3e2b252b21040b027b2a7b023a1210022e291f192107257d792a0f3f3b01261e321210022e291f192107257d792a0f3f3b012579242b7b0620127a1e2e2c00052107220d7b06320d30051c117c060c057c05222f3b0125062711101a2e120f0e78111b017e12250e3b2b7a1d3b01262c202a0f30242c0e7120120f1a31121006320122383d2c1f303b040b023f111002782a251e31107a0e23120002242b7b0521072512202a0006242e197575"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 15 Feb 2026 00:54:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"48-3nozKMCw4A05O9BooiwbcaopntI\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3C0KiLk08FluPBt%2BWO%2FNUmalMFxoZv%2FgNT6%2Fza3DNo40JJrC6EuZMLsdtiVZA%2FLiMUC2Mh6CAMnKQM9m6knRq1smkzRIjXC49lL4\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ce0d4f25a68120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"7984d7004830db213e9726f31502910a","sha1":"de7a3328c0b0e00d393bd068a22c1b71aa299ed2","sha256":"8ad420cb440776d3ee228b595af81d3612ff0f15200b526c61f2a3fbbedf77d8","sha512":"0ff778894e515d24770ca777efa4d6dc3023a6ba15452ba1bb01bc9b61e4f52fd0a70d5ef6b003a5150238c2c232298a890287511583149b72cfb0350531f6a9","ssdeep":"","tlshash":"57a0026d280c4026873c27253ddd90b5051257f713c0e0257e8352c01ad078edef5134","first_seen":"2026-02-15T00:54:34.631972Z","last_seen":"2026-02-15T00:54:34.631972Z","times_seen":1,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":59,"dns":41,"connect":1,"send":0,"wait":294,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unix.claims/","fqdn":"unix.claims","domain":"unix.claims","tld":"claims"},"ip":{"addr":"172.67.153.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:04.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unix.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 15:57:23 GMT","end":"Tue, 05 May 2026 16:56:03 GMT"},"fingerprint":{"sha1":"88:3E:E0:CD:11:3F:0F:7E:80:1B:EC:AB:40:9F:C9:19:02:DD:54:F4","sha256":"3D:9A:97:F2:7B:72:25:49:F0:1B:12:CB:7B:A8:CE:B1:61:DA:E2:0C:B9:33:BD:5A:3C:EA:55:3E:6C:A7:FF:A3"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: unix.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://90biem.org/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 559\r\nOrigin: https://90biem.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":559,"data":"v=150725\u0026s=1\u0026r=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"}},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\netag: W/\"28-A0PaEo1LoipcJJoXg99CV9g4eCM\"\r\ndate: Sun, 15 Feb 2026 00:54:05 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JscpIfuKJjQXoZsFNiWsvItxA%2BTydBkNoWP3lHh%2FIFagdoV6fppOu5f2ctn0qdc0lhz0MMvMYCHFI9nmMjActqA8drqDEzbRzjk6\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce0d4f9297b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"36c7a47ce320b0936631f4c5de7c47c0","sha1":"0343da128d4ba22a5c249a1783df4257d8387823","sha256":"f0fac7f7534f0bd59a6b6d783cbbbab2f3bccf6d554ebf407999a7d28a53cfbb","sha512":"126e519c260b15de0bd7038cc909a9adfdce7830e402c8020fef9b2b59984bddebc88cd981dc04157bc1c20501fbcde18194a1049f1d9fcfe926fd7deb856c5c","ssdeep":"","tlshash":"059004353c0c4017451001143c5d40750713d7f101c1d01451c043400350701dd74034","first_seen":"2025-08-13T09:59:32.310568Z","last_seen":"2026-07-13T05:36:53.078785Z","times_seen":14,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":449,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"90biem.org/src/exo-1.png","fqdn":"90biem.org","domain":"90biem.org","tld":"org"},"ip":{"addr":"68.65.122.221","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:01.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"90biem.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 08 Feb 2026 00:00:00 GMT","end":"Mon, 08 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"00:FA:CC:80:7D:DF:23:68:7D:FD:1E:42:27:11:4B:44:D5:81:AA:B4","sha256":"A8:D1:76:12:C4:E8:34:EC:35:70:7E:CE:8F:E2:74:AD:EC:63:9C:9E:82:02:03:04:7C:E3:E3:CB:1B:3F:8B:0A"}}},"request":{"raw":"GET /src/exo-1.png HTTP/1.1\r\nHost: 90biem.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://90biem.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 22 Feb 2026 00:54:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Feb 2024 05:54:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 84512\r\ndate: Sun, 15 Feb 2026 00:54:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":84512,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 1297, 8-bit colormap, non-interlaced","md5":"4964ab2b5bcd45598adef8edf403c3c7","sha1":"e6f86767a5f71440e260c832951cfb8e7b832292","sha256":"7c6fcb209af281cb2f924277a6653ce9867ad6a726557292e38b1cdecc138c69","sha512":"c5c144d03bdd36bfaa84d82fd177bed69515dc2d41b53da6b6fb278c4f2843aeda284b045eb65808cb508fc11940b12c1d2778e6942e90e1468efbbc950c96eb","ssdeep":"1536:jQaUfQ7jgLXHv46M+347iYnFRNyz8HA9UJ:jbUfKgbP4T6wiinN/N","tlshash":"76831232148999f257d0109b8aac58467f8d3d832eb3570bdac7b54c9ef9b2d43533a0","first_seen":"2026-02-15T00:54:34.635593Z","last_seen":"2026-02-15T00:58:02.72648Z","times_seen":3,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"90biem.org/assets/w-loader.js","fqdn":"90biem.org","domain":"90biem.org","tld":"org"},"ip":{"addr":"68.65.122.221","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:01.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"90biem.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 08 Feb 2026 00:00:00 GMT","end":"Mon, 08 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"00:FA:CC:80:7D:DF:23:68:7D:FD:1E:42:27:11:4B:44:D5:81:AA:B4","sha256":"A8:D1:76:12:C4:E8:34:EC:35:70:7E:CE:8F:E2:74:AD:EC:63:9C:9E:82:02:03:04:7C:E3:E3:CB:1B:3F:8B:0A"}}},"request":{"raw":"GET /assets/w-loader.js HTTP/1.1\r\nHost: 90biem.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://90biem.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 30 Oct 2023 09:15:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7163\r\ndate: Sun, 15 Feb 2026 00:54:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41716,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2342), with CRLF line terminators","md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-07-22T10:17:07.499165Z","times_seen":393,"resource_available":true,"data":null}},"time_used":666,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":666,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/urbanist/v18/L0x-DF02iFML4hGCyMqlbS0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:02.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/urbanist/v18/L0x-DF02iFML4hGCyMqlbS0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://90biem.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27752\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 19:10:19 GMT\r\nexpires: Sat, 13 Feb 2027 19:10:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 107023\r\nlast-modified: Tue, 16 Sep 2025 03:41:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27752,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27752, version 1.0","md5":"aa575f0b65515787deb8a9e80b9abb1a","sha1":"96bc39c48e3b97118eca8b57b319292aebbfb451","sha256":"7981ef90c246352c7c217081b8d9337b9c95e9d17ae126bf56b0d3753d1e5ffb","sha512":"876dda2c000bb8ae53e95076c721de8dc65146b8a626e11c1c8f093d507c2cccea52b97a08aba90b6e76a076e1eee055244a821dbca4b86c5159cdfdb7f92bbf","ssdeep":"768:88zCdKmnhwvjlhxwVhY6aOQfyz6qIzK+F5T/Lj8KB+yEh:mdKwGlsYeQTv+eVE","tlshash":"20c2f2d72ad6f5818948b9fed8e65f0f7344e80b3e78274390055ed3aa048b87ad01e7","first_seen":"2025-05-30T12:51:46.048531Z","last_seen":"2026-07-26T04:45:08.471892Z","times_seen":4456,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":97,"dns":1,"connect":20,"send":0,"wait":23,"receive":10,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unix.claims/","fqdn":"unix.claims","domain":"unix.claims","tld":"claims"},"ip":{"addr":"172.67.153.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://90biem.org/","date":"2026-02-15T00:54:04.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unix.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 15:57:23 GMT","end":"Tue, 05 May 2026 16:56:03 GMT"},"fingerprint":{"sha1":"88:3E:E0:CD:11:3F:0F:7E:80:1B:EC:AB:40:9F:C9:19:02:DD:54:F4","sha256":"3D:9A:97:F2:7B:72:25:49:F0:1B:12:CB:7B:A8:CE:B1:61:DA:E2:0C:B9:33:BD:5A:3C:EA:55:3E:6C:A7:FF:A3"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: unix.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://90biem.org/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 487\r\nOrigin: https://90biem.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":487,"data":"v=150725\u0026s=1\u0026r=2d310220117b1a382a7a7c210721023112101a31291f1e7a121e71222a7a7d782b250e222c0b013b01251a3e2a1f0e382a21017e0122233f112524242a1b7d3e2b252b21040b027b2a7b023a1210022e291f192107257d792a0f3f3b01261e321210022e291f19210721013005222f3001213f212a1f1e322b7a0e26121e71782b31017e051c2b7b051c0d3006222f78060c2b3f051b3f21117a20202c0e712311101a2001223825111f3032121b3f212c7a0e3b2a0f1e78107a0e23120002242b7b052107257d792a0f3f3b01260a202b261a3d1210022e111f1a232b251e322b31017e12250e3b2b7a1e71"}},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\netag: W/\"f108-xo8Trkh0otPo6r1aWbDNE9NnfMQ\"\r\ndate: Sun, 15 Feb 2026 00:54:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2BwDDMFYZJlbc2iRg2Au%2BCKgIERbnQtwLDag0w9bLmDFd8AYHgeBu6w06hFyWygMsYWr%2BN8qLujq6nsvcX4kxWnu2dxYiz5C3lCA\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce0d4f7692a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":61704,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (61704), with no line terminators","md5":"44507bfaebcd38207917d12c2a86e16c","sha1":"c68f13ae4874a2d3e8eabd5a59b0cd13d3677cc4","sha256":"2c118fdfca718e0c9ff7372ece457d009a327df36c5243cd93a21f981a93899d","sha512":"3072a04a57c2c22b6ba3f22d75883fb5f41c36618ce9b5a7ae0a1ce5fbef29c528b2428ad678334f16077e58d3194521e3b4b3feae9f8ba17199ab18ad3a8e93","ssdeep":"768:Bt5hgCPKQbtDzct9BBRvTU4vX4k/g/+er5U4w/XO9lbh7bh+er3TIprRB6Kcz3c3:5Q7IK8KPUSg9mdpLvA/Q","tlshash":"3153ab3c3a5a30e4036ee532a684bdbf76174be63d22a4252f8197c256d1bddcde181c","first_seen":"2025-08-13T09:59:32.315516Z","last_seen":"2026-07-13T05:36:53.085023Z","times_seen":14,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":186,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}