{"report_id":"25d3bbde-fd08-4640-b67c-c373e975b12f","version":6,"status":"done","tags":[],"date":"2025-09-07T19:55:27Z","url":{"schema":"http","addr":"rapidexpresscargo.com","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rapidexpresscargo.com/","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"title":"Rapid Express Cargo Logistic, Delivery and Transportation"},"submit":{"url":{"schema":"http","addr":"rapidexpresscargo.com","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-12T19:55:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rapidexpresscargo.com","ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-09-26","domain_rank":0,"first_seen":"2025-09-07T19:55:30.107606Z","last_seen":"2025-09-07T19:55:30.107606Z","alert_count":58,"request_count":58,"received_data":3202987,"sent_data":69338,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Tidio","description":"Tidio is a customer communication product. It provides multi-channel support so users can communicate with customers on the go. Live chat, messenger, or email are all supported.","website":"https://www.tidio.com","common_platform_enumeration":"","icon":"Tidio.svg","categories":["Live chat"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Stellar.js","description":"Stellar.js is a JavaScript library and jQuery plugin specifically designed to deliver parallax scrolling effects for web pages.","website":"https://markdalgleish.com/projects/stellar.js/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]}]},{"fqdn":"code.jivosite.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":232952,"first_seen":"2012-07-22T02:03:39Z","last_seen":"2025-09-03T06:23:23.100574Z","alert_count":0,"request_count":8,"received_data":1367686,"sent_data":3830,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-03T15:11:16.573868Z","alert_count":0,"request_count":5,"received_data":170917,"sent_data":2696,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.tidio.co","ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-06-01","domain_rank":120056,"first_seen":"2014-11-27T09:26:14Z","last_seen":"2025-09-01T23:50:13.681847Z","alert_count":0,"request_count":2,"received_data":1163,"sent_data":886,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"telemetry.jivosite.com","ip":{"addr":"94.139.253.159","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":346139,"first_seen":"2015-07-15T08:41:42Z","last_seen":"2025-09-06T17:52:08.73423Z","alert_count":0,"request_count":1,"received_data":111,"sent_data":475,"comment":"","tags":null,"fingerprints":null},{"fqdn":"node-ya-9.jivosite.com","ip":{"addr":"158.160.17.225","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":1474455,"first_seen":"2023-01-19T04:34:47Z","last_seen":"2025-09-05T13:16:09.660101Z","alert_count":0,"request_count":1,"received_data":624,"sent_data":507,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.google.com","ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2025-09-04T07:47:26.57416Z","alert_count":0,"request_count":4,"received_data":81699,"sent_data":1896,"comment":"","tags":null,"fingerprints":null},{"fqdn":"chart.googleapis.com","ip":{"addr":"142.250.74.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":440653,"first_seen":"2012-06-26T15:14:23Z","last_seen":"2025-09-02T22:05:07.939615Z","alert_count":0,"request_count":1,"received_data":230,"sent_data":481,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-09-03T15:25:59.584642Z","alert_count":0,"request_count":3,"received_data":25255,"sent_data":1630,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.74.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2025-09-03T19:02:02.578505Z","alert_count":0,"request_count":3,"received_data":225144,"sent_data":1729,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-03T15:14:36.780259Z","alert_count":0,"request_count":1,"received_data":22234,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"code.jivosite.com/js/b1f3798/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c212727a7bacb453945e1ab7025234a","sha1":"5ff39073a6077374bb26f1f31b2428b7c0c8bb6f","sha256":"b8f45519424c6fcd31acb1d568c259fcb7297e38246ab98529e31d5d1490dde4","sha512":"8226cbb571eb34c684a6ae6b13056a7b968eb12371a25ea0a05861265b4019b0ec1170d0a2dd4a42495765a2b9e7e6a3c65aa8e86b93ba2920af050de25a058b","ssdeep":"192:2P7mk/7Obf14M6bOIpUTPqZ8Bi9FLeRJK:C7H7ObdFkOIphZ8w9FC7K","tlshash":"fd22d71ee7017f360fa613c3744f7b53b6a480e592646cb5d88c826953b9bca721778c","size":10507,"data":"","first_seen":"2025-08-07T16:51:42.115213Z","last_seen":"2025-10-09T00:19:26.491677Z","times_seen":878,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/contact-form.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25bb7b304b1e5670f12efecc20d5cdf7","sha1":"11eae764f91eb82846c64e6625351d27e428c0f5","sha256":"648a71e7545c79f8aa8dcbfb2aa601894f92c4074c9b507625212deda8fd4738","sha512":"366ed7a98dceb1e04a89f66cca690ea2ca6beb4e9b62e09754449f4c4920b42b98c801d20561674c8e0b9623ac4ccc6dc66779fe4893e63661c56d25aec972d9","ssdeep":"","tlshash":"e431814daefd29a5107372b6a17f22019937c11f6a092d31fe8c00b80f9d75d76a7b64","size":1679,"data":"","first_seen":"2023-03-08T09:19:52Z","last_seen":"2026-07-06T07:58:30.755619Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/waypoints.min.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfe0eedf8da578f4a4c43b05448c51d9","sha1":"812d7071b4e44b1aa5d5ea6c7ce0b79eb9d46520","sha256":"a0fded691aed767f851011cd3185b928619298a21a0fbdad4808a9e88b490833","sha512":"9084433d6201a0aa45efd1c9bf7c413d08192a3871cea3061b637af2cbef21de39c3dbe9fe14d7a11edc0c44588551212c94ee4866ff737f991e07907cb9b41e","ssdeep":"96:uLBvpnG3nnRh+1pRVKmHyjyYfAPiQc954LT4KN/WzdBUVKdBJEdfdpu531v8L7:uPG3nC19KWssPVpX4KN/eU8Ju4e/","tlshash":"3bf1f9c9b4c7b4221befa0b5d43f060bb33a9e4561098064f194e4da3db4a2da567f38","size":8044,"data":"","first_seen":"2023-03-07T01:07:26Z","last_seen":"2026-08-05T14:11:03.500018Z","times_seen":12591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"85654843b51377991b1d88ad7dfc6ff5","sha1":"69ebc041d64d7cc35d45495b2e11a14921fb0dd6","sha256":"c9d221b4769b9e8dabef22c477f7ae0e951684f5386e8660f6d59b1c1f1c8510","sha512":"2b5b6592b3ebe9f2bc265aef9fe13a779690f439179a50751d8c40c3ebba6be0a1897865b8688c38cdeb1ee2d03e410667b01e154b425fb009f084710b4b7326","ssdeep":"","tlshash":"43c04c47b571554a0496f119d387448c7178850b453a4e25365d60ca7fb3f9d174d1ac","size":166,"data":"","first_seen":"2023-03-07T12:27:13Z","last_seen":"2026-05-31T16:51:28.840697Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/bootstrap-datepicker.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"07a4d1f88e9f34025a0edb96772e1279","sha1":"1145806572c76f0caf59c02d5a149b44bbf58117","sha256":"ae347ee42d024b9dac0e2afcd6ecb5cc73f2e2764bcd719ae0d87b46384890e2","sha512":"fb5044b4e5da4a7718296a61d44a94fe3c4334b45eecdaedfa61a1798d5d3a0f3bf24839b358728547864ee4c47794c174d600ba0414cc85dc01373f49a91965","ssdeep":"384:V9f4oaMoFDKFd0YOi6f6S6PTPeAphx+hh1:V9gmoFDZLi3l69P1","tlshash":"025242d9e39d1547927220695c1d12cb563d807bdc068d7fbc6c41e168acf2962acff8","size":13776,"data":"","first_seen":"2023-03-07T13:56:49Z","last_seen":"2026-08-03T18:40:41.432825Z","times_seen":448,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/jquery.stellar.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bc994172518faace00197fb53db9378","sha1":"8c993b2cc971b5979ea23fc7e23c98ef1f009cf7","sha256":"cafdc75783c661554df0c541ff661181b5e09ed440acd98cbb03d5e0a78bdea7","sha512":"ec371116fdf6cad811de7f952117162263fb643aec24484fcc607dfca21475e9ab6018e304dccec0b43f41ea241eb708e076b22c79a0b9061eecfa0eb5cb8ebe","ssdeep":"384:BSIkxG7CM8sMijtx0U0/X9Sbt5ajjkZOsEnjyApgBbb8X2xCigNG7hH:BSMCMrM4tx0U0/5jjkZOsApgBbS2xCi1","tlshash":"73a22388b39c242a56af636f8caf13cc613d64314407857fbcbc65e92d9292e5293d74","size":23282,"data":"","first_seen":"2023-03-07T01:33:45Z","last_seen":"2026-08-01T23:35:52.316198Z","times_seen":758,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b047b65af25387064b20f545cb26a64","sha1":"273ffb99efe9291f45a7c70c9089321a7987e016","sha256":"11f5dcde223c4f2776155c2880cb408f761a440de866371f8f504d3bee15f5e7","sha512":"f4972f97c1a6316f30c7a57bd56cd8762d0e838c1d59ad952971408c66c24ed074f015b9eabff5236c024a985fc971a8c086a49de0dc21ebfcb4226ad4cada35","ssdeep":"24576:wZc+a5aJ0+BdhJ/A9f0e8VTxxgCIvTKIq7ve06AgfKy2oADzlS16:KcwBHJ/A9f0XVtxglDqLe07gfKy2oOzJ","tlshash":"21455bd571d1f4a907e355e9943f2005f23a2c2a7409e064fabcdcc6aa6658e6237f3c","size":1178622,"data":"","first_seen":"2025-09-02T13:01:40.564276Z","last_seen":"2025-09-22T11:52:10.090584Z","times_seen":337,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1756813657","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae59237c24a8c24c38ad74bb77cd928e","sha1":"086f33decfec6cc5c28f0a893beafe6cd07f9c48","sha256":"3778cc815a37d6c1c385cb5d40149b55cef8bf02b9961559dd263d78cb673fe2","sha512":"863f5dcb2c06681d0f8f47526fb4f75b33f9dca70809ce2cc54bd37089344f1b9ed90e5517aecab2e3b6ffd7a733c65aa4c68a2f253e7a31d0a48c7b9c158d59","ssdeep":"24576:zVSwKF6xeB0PjHhTsrDW8d4PhQsidbhESuD1eNqC5oVUUfYu+2fWIMhdbDORI:RS90PjBTsrDWy6hQ3Ftu5eNqC5oyUfY/","tlshash":"b4454ac5b1d1f06502d355e6a03f2009f23a285e7809b064f7bccddbea6659e6263f39","size":1205264,"data":"","first_seen":"2025-09-02T13:01:40.561586Z","last_seen":"2025-09-22T11:52:10.07047Z","times_seen":326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/_/translate_http/_/js/k=translate_http.tr.no.fGEa7yCCyRc.O/am=gMA/d=1/rs=AN8SPfqjUWQth1Pz0pwYMNN4_tuwYgpAdQ/m=el_conf","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ff2905fd34d0565a7d64c93aadbaa8f","sha1":"3c61a6095c668cc5fca4ffd9fcce5aef54b562e8","sha256":"776eedab0fc833ed5ba2d6cace55cc8e1ce307b58d26ea7b0accdc09d603f2aa","sha512":"4d37dc8ecc4db355197ce4fb7eef1bc64b76c25242afe16681383a8d00e2276189da69549fea252b66c2495770804f157a6333c27d0de24419b645ca2aca21c6","ssdeep":"1536:XH5OjtOAhw+mUV2vCHFFyKb4GMVDb26urwRKgumlL1HviEwNWuf:XZViH6Kb426uEN1vijf","tlshash":"f173c8c8b6a674668367f5b5513f000fb23f5899e80c4cacb288d8e16eb5949413bf7d","size":78947,"data":"","first_seen":"2025-09-07T19:03:34.287221Z","last_seen":"2025-09-07T19:58:53.651221Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/scripts.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d09cf601baf021286e3f8e6c232031b8","sha1":"d4e641ed29edc7a48df150e8ec65dbf1ce82d12d","sha256":"b7c3dc18637730cab73a74f68f0225eff4f00c3606ebe97dccebf432f1d08009","sha512":"43eb78ef42baadc46d0182719c51a1531189595ba3e0ad5813776cacd66397b2a4fdef9d4b1343f32594e9e04571ebe5558e4ccd30fba482e2f3e87a18ca9e07","ssdeep":"","tlshash":"4541021bf358b723703f761845bf70c6133f10179a055a15fbbc414a2f9a62e24cae49","size":1883,"data":"","first_seen":"2023-03-08T09:19:52Z","last_seen":"2026-07-06T07:58:30.763078Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/jquery.min.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f03e5a3bf534f4a738bc350631fd05bd","sha1":"37b1db88b57438f1072a8ebc7559c909c9d3a682","sha256":"aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947","sha512":"8eeeaefb86cf5f9d09426814f7b60e1805e644cac3f5ab382c4d393dd0b7ab272c1909a31a57e6d38d5acf207555f097a64a6dd62f60a97093e97bb184126d2a","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"1793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95992,"data":"","first_seen":"2023-03-07T01:02:11Z","last_seen":"2026-08-05T14:39:53.888101Z","times_seen":27267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/bootstrap.min.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09224359ccf8277a46de23c00d2a0b29","sha1":"cc33f3b4abf1ff45edee5dae62a1f3fd0dcc24d4","sha256":"08bdf8113639c5ce697e6eba88ceb1ed3348e82168a0e0dc0a75eca428348bce","sha512":"9d63ed482afe1119a0681c7a49a168ab5e3c67db211d1fcda83bf07a7d99a991f2dea2553aac3978fb0868d81b56ffc384d29a0f599f69001edfddfc61a9b380","ssdeep":"768:r8iUD27UwlNEMl9RqNuCqNjhqg8epm51CoFXflR8Gf3ZsbQ:4875vhqKOvlp3ZsQ","tlshash":"fff29646b23031a107efb1e1525b020a7239696ee906907c78b99af53db9c48717bf3d","size":36822,"data":"","first_seen":"2023-03-08T20:10:42Z","last_seen":"2026-07-18T23:21:06.351954Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/slick.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"faa076ceaf93e2aa236a18ecda59c041","sha1":"ac1be3a3b1fb3fc3007796baa121b4fa1ca39977","sha256":"39edf75244e2496d51974fcf99fcc03ca37d2a837385a1a6ff921f9ce97e7d49","sha512":"acc7201eb6dbfab1ccea61c8b9ad91c6ce4a8038912ac6b01dccd9028461512936e1d7cba1af71acad1cac0431c93fde87eb285302e71d24cef45251421c8eec","ssdeep":"1536:Lu4rWZaGI2RnhibVibro1leYJATAY4sW2AF:Lu4rrGI2RnhibVibro1leYJATOF","tlshash":"a273ec0b55f2131294a731b96bdf8028b3ba91275504ed9dbccc43c5afd45288feabe4","size":79234,"data":"","first_seen":"2023-03-07T13:59:13Z","last_seen":"2026-07-31T11:27:54.432766Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/Y4HI1EoYUv","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9975a9970765d098b3adde6885d4455","sha1":"eab35ae077ba59de6541b2b5da3861552ba7524d","sha256":"bcc6801ea0b31325eddb1e5ac9eb5ce608473055b017bcfc0b7ccd24dc48c201","sha512":"8eb3de5e8019b7ce8b2531862c49e81b1393c53767078003bfa4bd60155ab0e89e23911690a2bc8c3dfb8d89f953033c51598aab553256532e44e93e80bce51d","ssdeep":"384:boUJJkQamum040brANKcB7HMiqJISEeJBz8U08wYWcPY4:6tMwA7B7W98UFWcPY4","tlshash":"c6822b6e7959b97743b208b9606f6209733549ebd404c920a401ea4d7db8edf813fef8","size":18188,"data":"","first_seen":"2025-09-02T13:01:40.545292Z","last_seen":"2025-09-24T07:27:42.649421Z","times_seen":352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#221","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"888a21ab7fc56d220a59dd25a83b18b6","sha1":"3bc9b8d495cf8e016aadf7e2bba091f2bd8b7188","sha256":"18c0d112e350349ca7390bc25c50a5fc92e9dc9b63416147c7e57851d105237e","sha512":"3dd8c3099c3300b3f74ffbe65e93e383d5c31087fb362f08bb241107c1061ef7dc8b61113851723a8588b54465c38056721341402f6a0072adce178ed3daf86e","ssdeep":"","tlshash":"b73147cdbbb7e0554272209a992f860bf17a2577981cd050e555ccd0fc70e9b447de14","size":1713,"data":"","first_seen":"2025-06-11T00:07:11.79824Z","last_seen":"2026-08-05T14:02:57.217057Z","times_seen":37105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"75606a24bd728e5d7d7256fbb679bc26","sha1":"7bfbb31c174ab2a6f4c68c9852c8444c075eab43","sha256":"9932726d2c87611c904eb0b04d822e785cd73f693838aa2cae3fc90a7d8d7746","sha512":"323a9930f67a978713ee419824630ccd74ec99274ead49c8ab87eedc33d5bf4dcc9cd681961483dbef9181b8c884fb7bff7eb579d12e5ac90d194caab6167dc9","ssdeep":"","tlshash":"2ec09247f5b01a4b049ae20ae387488c72bc8509463a4e292791a0ca3eb3f9d070e1a8","size":134,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-25T23:48:49.64661Z","times_seen":3253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/bootstrap-select.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72cf3ba80ac56eaf755bc760dd46924b","sha1":"10aaa874ab08af30a6982e80e097159eb55ef4f1","sha256":"6eadb9f319f0dd5b3fa94e780f0ee531dbada3ce7a190c187131483cece9016a","sha512":"7fbd0a761bb81609c43663e1d3b6c2629c42dc3c77fdadfb219b38f766212bcb049cc5e67faf611475ef232713395bf1909fe74f5427e164ab7e66e949c4f3c6","ssdeep":"768:9kHkK3JV9V0UCAMsl0xVQZc9PfYp10+6Wat1HrRnu/w94:9CJr9soA9Pwp10+6Wat1lu/w94","tlshash":"cc43625a36fb2230817b20aa5e9f5448b135812f5806e9293c5d43c86fd4938b6f7ff6","size":59424,"data":"","first_seen":"2023-03-08T09:19:52Z","last_seen":"2026-07-06T07:58:30.761551Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/jquery.form.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ff23d156a15ac9eba83b6f571abd83f","sha1":"63b1ceaea04590b9611d3ef6dbb588b365be4559","sha256":"14b30a934e36cdfc5301709bf515adc31e060bd7275eb056964cf7d2ed6e7550","sha512":"5ed814a05a01362c292dbb7bd2ee41d8bf1f1dd6fd534ff63b6a1c1699d45e75739beedb068995da687c78fb365ff465940bd88f1db926260bb4d3f7b67a31ce","ssdeep":"768:4hN+wDMgNAWo8/e9z4UA+BtX66+PZ0s8Oa3ij6lOTwIMuliMIzMJVVRFRLRZzYih:cUwDMgNAWo8/e9DBaPZ03FSjCOpliMIG","tlshash":"de03a24a7aeb12a2192334b90bef91497639d0171208dd617d4c53a06fd4db4a2fafe8","size":41095,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-08-05T01:43:00.751017Z","times_seen":941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.fGEa7yCCyRc.O/am=AAAE/d=1/exm=el_conf/ed=1/rs=AN8SPfrK1LZeA_v9rL-uZxIOz5VrazXaIA/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6fb8cacab0931d9ac22daa34ef2973be","sha1":"daf618ad695966f57fe7661865413f7a8e9379a4","sha256":"5aa7d6afdea20d7b012f8e3ab85ff359e8146e7db91ba38e162636f5e54bcfe5","sha512":"a093f0371bf960a86938ded3d66067f5164d0e0876c979afd751b6759de0d265661e76af072169c29f82b9d2c3f1bc3f8906034fc4ed752368aecd6667cc6652","ssdeep":"3072:pFzq9W0rM+oIEcqlYBzwz85CwVvnJNGGVyiuEgUyztlcV0E11T4t:KXoI+0J0FEg","tlshash":"3e24e8d9b39271669363f4a6d17f000ab13b5869f9484dacb28de8e25ef08190177f7c","size":223197,"data":"","first_seen":"2025-09-04T19:47:15.218002Z","last_seen":"2026-06-08T05:21:46.68151Z","times_seen":301,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/jquery.counterup.min.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef36cca760bf1cd76cfcd0e4dc10cef1","sha1":"ef38469f60d58850fe55c4de2ec7e289a2415d71","sha256":"26d40f8ffdf1b9bf286a954c6888a33cda0cd031e802d821fe0c0562e379ae29","sha512":"77c175276932891a30041ffcfe9016b2a525d304843a41b92804e4555e2c95f6e5abd55143a3320d95715a5dad59dfa63e1b826e94c1e0ceee53fc7d165810f5","ssdeep":"","tlshash":"37118cb93a0a298daa80e459f1efb0989176bdbc0c80884b91c558401fa5abc3b5b730","size":1067,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-05T14:28:01.090907Z","times_seen":12997,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/masonry.min.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"85ef736bbfdf0ce0c537caca4c1f29f6","sha1":"b0dc16d9bbe017437e0f116c425c4e20bbd4bc58","sha256":"694749e85b4d7726dc87795b3783f8b0d64513b8eb90a8170e5db9ef2e3f4c19","sha512":"6a234d647e417447aed9fafa95bd727f848287bc533ed798612a95b397f56f344716906dd89c9b8b05b0eca3ff844455c9331c74170992a3b1a175a786769050","ssdeep":"768:f9+z0BFXYKby+HvOqKvVOkYtkdEvWBzigMPI0:fgKbbOlIkdEvPgI","tlshash":"f7d2c54ab70434209247f5b6a2af010f723ba5ade51484bcb299d8fa2db6c4d1137f7d","size":28969,"data":"","first_seen":"2023-03-07T12:57:28Z","last_seen":"2026-07-25T00:11:26.68611Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/jquery.fancybox.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"921e9cb04ad6e2559869ec845c5be39b","sha1":"1cf3d47b5ccb7cb6e9019c64f2a88d03a64853e4","sha256":"6c78ce6b6d1928630b903084ea9d503643f303ba05455860cc7cd17f7687cc65","sha512":"91ee03bd3766b2584c70361ad0ff4729cd2745fd661089c077884d1e6c181b6c2244ac7ed1c94a4cbf74f8101e9d4c54e2af52c55f35586a0675fe12df5e7ac0","ssdeep":"768:I29rFqkxIWVSSy7DkA7DxQPgsvtrJ68ov6iIMdl7YjSg/bEfOKk53tlUgb:IYFqkxIWVShDlDxQE2Al4Efi53Pb","tlshash":"af23a8d0f7ec317bc67620069d1e21ec613ed4329b0244bbbd9c666857c46ec83a5fa9","size":48706,"data":"","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-08-05T05:39:33.713856Z","times_seen":3191,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/jquery.validate.min.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02a4a78977c67935d388e92928e6b735","sha1":"87b58387cd22f3280a081e30470648edceb4e4b0","sha256":"46dc5b21ccb40ed8e13a10b2e62a01648a841672091671f6b03bee034a0d00d4","sha512":"4b100b768f19463bcce2398099017df00a2cecb4e3eb720232578bc75fbc5c351a5af34f7b437dc879b614bf47951b70c02db80880af0b419127c4ad6fc56362","ssdeep":"384:QeOXcp7Lm+dmr9qhk0XuExz9Bcd1Jny+0xC7WpdOC8PGDm9KLNKI9ci9sk:dfXdmr990ekpqJny+UO798NBc8Z","tlshash":"d592b94d7282b04a5b9620f5a45b560ba1f259b8600ce03cb5f8d4d2fdf8fc95167fb8","size":21067,"data":"","first_seen":"2023-04-05T08:37:20Z","last_seen":"2026-08-05T12:03:02.674963Z","times_seen":4547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"4c6e8124647b170cd953b1ca736a4d91","sha1":"a91cdc3268baf04626bdbd1fef2ca846c55f9998","sha256":"8c73c5b0128f68bcbb25b4618d7c981f909a91116e2960fe9d55129408a137d9","sha512":"459058f390c2208f8b784d87de1fff724849157f85da0b92a3c13ac760e29156d9b713ad04a85e7f6190d2c139e83e3c9e9ff87ef5750199f95110fa8d10828c","ssdeep":"","tlshash":"3f5150a2605ca01b4503d5d0f8a23eeef4de0058c77269d07e2c29efdadacbb049715e","size":3010,"data":"","first_seen":"2025-07-30T19:19:55.929911Z","last_seen":"2025-09-30T18:22:21.357577Z","times_seen":2866,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"fc63b0e57edf37735cde59d028c47154","sha1":"15e0dca48d7276c42b0c8547083b378666e6d323","sha256":"f09c8e23173fc897c44477630b717c30b74de522ec0488611c170c56c0db3b97","sha512":"188256c655ee3ad1c0b000fba17635cc57c50417991d2428e45e73be5cc06bb014cf82da1b45f837410e79650dfe884bd5101e44f9213e96962f45567c4795e1","ssdeep":"24576:ihc+a5aJ0+BdhJ/A9f0e8VTxxgCIvTKIq7ve+yYof/72sAozlS1U:IcwBHJ/A9f0XVtxglDqLe+3of/72sPzF","tlshash":"35455bc572d1f4a907e355e9943f2005f23a2c2a7409e064fabcccd66a6658e6277f3c","size":1176814,"data":"","first_seen":"2025-09-02T13:01:40.566162Z","last_seen":"2025-09-22T11:39:04.89742Z","times_seen":296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/images/steps-image2.png","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:05.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/images/steps-image2.png HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 54205\r\ndate: Sun, 07 Sep 2025 19:55:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":54205,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 428 x 260, 8-bit/color RGBA, non-interlaced","md5":"2f0f8fd4f0760f41ff9905b121b38903","sha1":"e7d26e1d1eda72c962705b8799252473f54c3b71","sha256":"3a0cef50fb78a6c4dfdb03cc6bec252e324a0d6b8874b17c279a50acf5efa1a3","sha512":"120a894d2026755b3186df3f32524aa037ca42135115e1aa188a584598336086ecb630afc2233292480798a414af0ec0c19f1facf827b154cc219431a516a74c","ssdeep":"1536:Cc+renBGDhXyR0vUREJUy+BVUil5gHnbixCGrT67Ya:ChreBGpyu2ESxBBsnOxCGra","tlshash":"c433f1457e75b409882b7be8c6f4e3ad9eb89c44b8656f6d8700be09c894f002dec0d6","first_seen":"2024-08-20T14:43:16.065516Z","last_seen":"2026-07-06T07:58:30.767448Z","times_seen":57,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1756813657","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:06.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/bundle.js?rand=1756813657 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 07 Sep 2025 19:55:06 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 284031\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"68b696ac-4557f\"\r\nlast-modified: Tue, 02 Sep 2025 07:03:08 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-09-07T11:50:57+00:00\r\nx-node: m9p-up-gc58\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1205264,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65508), with no line terminators","md5":"656808cafca243dd51952ab46d192728","sha1":"69d2f680c8367728654c55e51683b280f19f1466","sha256":"c0f5bc57fc7e66def1cfc08bcd60645abf72cbd13c9f44deecef85542d36b308","sha512":"73ce8c666fe98fa1c16eae2f88ea89cc2db98fa726e81869acbb03385f013f1be793cafcd558257190461c93ef118c8ab589f873f630dce927dcbdfd3fe67295","ssdeep":"24576:zVSwKF6xeB0PjHhTsrDW8d4PhQsidbhESuD1eNqC5oVUUfYu+2fWIMh:RS90PjBTsrDWy6hQ3Ftu5eNqC5oyUfYF","tlshash":"13254ac5b1c0f4a502d355e6643f2009f23a285e7809b064fbbccddbea5659e6263f39","first_seen":"2025-09-02T13:01:40.559077Z","last_seen":"2025-09-22T11:52:09.7622Z","times_seen":282,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:05.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"92:56:50:82:E4:D4:6F:F6:7B:08:95:2A:7C:4B:F5:6F:25:84:83:94","sha256":"A3:71:9C:57:37:7B:05:4E:9A:BB:BF:7C:17:AC:AB:9F:F1:32:11:03:1E:97:2E:B5:1A:B6:60:D5:7D:87:FF:8E"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rapidexpresscargo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 05 Sep 2025 08:13:09 GMT\r\nexpires: Sat, 05 Sep 2026 08:13:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 214916\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-05T15:01:15.191172Z","times_seen":956110,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":85,"dns":3,"connect":28,"send":0,"wait":25,"receive":10,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/images/image1.jpg","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:05.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/images/image1.jpg HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 200316\r\ndate: Sun, 07 Sep 2025 19:55:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":200316,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1010x621, components 3","md5":"e5c5946930d09a997097780296eb30b1","sha1":"ef86ed14a4eab21ca7b77ebf05f7d97dfd33409f","sha256":"1fa1ef56dcb1be7b2c650aa7d74fca5536d2919441f7fa9e7a0ef88e9a8e59f5","sha512":"4c77de553f85d6f8656244edb7f9cdead8c50acc3b59366dad2993f26d5ad46e6358c6942030e72ab95ff645f108d070179214b8c442c88f0259d2e8de1ef7bc","ssdeep":"6144:Xs34gm10MqKtJINV+N65yeJIZZxWNcdqx8dy:Xs3M1uIaqN65uX68o","tlshash":"7414125072c27fb098e43c3406c3ba7a0b3a46b45ded56bbe952d4d0e5d74ab887b8c1","first_seen":"2023-05-16T23:11:23Z","last_seen":"2026-07-06T07:58:30.735924Z","times_seen":58,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/notification.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:07.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/notification.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Sun, 07 Sep 2025 19:55:07 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5808\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"6899c524-16b0\"\r\nexpires: Thu, 11 Sep 2025 08:21:58 GMT\r\nlast-modified: Mon, 11 Aug 2025 10:25:40 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-08-12T08:21:58+00:00\r\nx-node: m9p-up-gc7\r\ncontent-range: bytes 0-5807/5808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5808,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural","md5":"9aa341af370c4e59155717260ba0f282","sha1":"0c1216ecead8d1409557c843d96202c063f3f252","sha256":"1112436abea08c851302bba4d4e37a27e25e5ec26b20474667a3369d41154bab","sha512":"e6663f8406d859a7ae65e6eb9512ed1e79244b8f5b2119823f80fed99c17dd4a086cc17083f3cd70b6dd990c39b3be80142f303a7c2a9fbb9302147e700fa5cb","ssdeep":"96:XYLRSqytFnbfWnHBaSvgEyZMZuiusJ0jQDrrQNw:IMTnbfGhaSvg/inqc0m","tlshash":"cac1297acc3c146fd81e88b53f3bb0c9421c61803a00d8e61c99bb5bd6b2ba975468d2","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-08-05T03:44:26.278917Z","times_seen":16706,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/storage/app/public/photos/9h13NvpxDrVDmBAZIWGasVwUJHIULAVv5kexFmAm.png","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /storage/app/public/photos/9h13NvpxDrVDmBAZIWGasVwUJHIULAVv5kexFmAm.png HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Sep 2024 16:56:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3472\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3472,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 196 x 214, 8-bit/color RGBA, non-interlaced","md5":"b84deb502c46112a54216e9fea05b42c","sha1":"ee9c3ccf56e3c13f2c453972b8c9ed3d9be5de5f","sha256":"9ec380220c3b0ce8c20831836f54b6493269cc2a18888d908632f2fa5c815b86","sha512":"718bacc33244b83a59a4385b23d27745eb214d3cea947e5ae11a620b29a558b76630463d8b13c4bd454fb50e8bfcdaddb096ca6d95697d33175b3e8e42a359b6","ssdeep":"","tlshash":"ff612dc2f24e9df2442ec526db3ad91e86a208ec1d8a290a4b15c57f4894cdd326c455","first_seen":"2025-09-07T19:55:33.358239Z","last_seen":"2025-09-07T19:58:41.038333Z","times_seen":3,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/images/icon01.png","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/images/icon01.png HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4225\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4225,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced","md5":"9a9f3e65490771d550cbc99785d6fb1d","sha1":"8854a1b6a4c309ef97baef5fee5bcc38495e1fdd","sha256":"ac20cb9c0e7c70761c39d5a3aced64af66c91d16d266543104231a4a35886ced","sha512":"1edd1f0501e3cd04fa7a9e02fcca0e429853b270c73d2aecbe0d0240dde7456de72bc7ab37e4d42f1f5890bf5d95c122876c89a8de743cc7cf241cf803567550","ssdeep":"96:eSeQ/l2zjMUNld8dxPGpW7KHK8sm/ZYbWKJl5VPTf:NDDEIPPGpyaIjVPTf","tlshash":"39916fcd20d2c865d4d5e14274ea9a1fed7e1ed1ce70a83237cace110d8d92a504c7cb","first_seen":"2024-08-20T14:43:16.010395Z","last_seen":"2026-07-06T07:58:30.773565Z","times_seen":62,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/images/logo4.jpg","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/images/logo4.jpg HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24033\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24033,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=141, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=236], baseline, precision 8, 236x141, components 3","md5":"7b2623996addd3070774a17ad65e32e6","sha1":"74a43ff42b9547e97b7c5b36bcafd787df4b81ac","sha256":"a87a8366ba6cb1b1515ce4da5b7764a371cfa910006bd73a4263c2936eecc755","sha512":"dceaeab96ae7e1c0a72636948aded18d9cf24e99a399db23ff285f4fd0e32fd6f974eb444c7b3641291ff77ef6400d4a7295da88453f2105c3a8460d8ba50e63","ssdeep":"384:FrU+imvrJqi/iC+imvrJqyGnSKfvXJReLDhMccd2xE:FrU+iQJ//b+iQJtGbZr","tlshash":"29b27d286baecdf2fcd14478c4d5da8372205e818aaf75ea7c5d288bb7746c3441c293","first_seen":"2024-08-20T14:43:16.051491Z","last_seen":"2026-07-08T17:46:00.986687Z","times_seen":61,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/waypoints.min.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/js/waypoints.min.js HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2461\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8044,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7808)","md5":"dfe0eedf8da578f4a4c43b05448c51d9","sha1":"812d7071b4e44b1aa5d5ea6c7ce0b79eb9d46520","sha256":"a0fded691aed767f851011cd3185b928619298a21a0fbdad4808a9e88b490833","sha512":"9084433d6201a0aa45efd1c9bf7c413d08192a3871cea3061b637af2cbef21de39c3dbe9fe14d7a11edc0c44588551212c94ee4866ff737f991e07907cb9b41e","ssdeep":"96:uLBvpnG3nnRh+1pRVKmHyjyYfAPiQc954LT4KN/WzdBUVKdBJEdfdpu531v8L7:uPG3nC19KWssPVpX4KN/eU8Ju4e/","tlshash":"3bf1f9c9b4c7b4221befa0b5d43f060bb33a9e4561098064f194e4da3db4a2da567f38","first_seen":"2023-03-07T01:07:26Z","last_seen":"2026-08-05T14:11:03.500018Z","times_seen":12591,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/images/banner3.jpg","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:05.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/images/banner3.jpg HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 317031\r\ndate: Sun, 07 Sep 2025 19:55:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":317031,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x581, components 3","md5":"13e00f3886e580dbffc1b5a05dcc3cb7","sha1":"b804d2cd37bc06b4a4479afcf86e01cb6c3ff18d","sha256":"7e32bf0c7e0d656076e5235994b1e7eec91a4ce3ca27d76260c844f9ba249e45","sha512":"36404e7955b5610b3b3280d95d8e4400826cc78b3a83a777fce1e614254c0356d9ff1d92f0437896f6baf96b104a88b4c9f0de0a4edf81db151af6b84fad66d6","ssdeep":"6144:Q/gK2y0pqk+vWTQfVb64D1ntecDszsQXqhSj7tU5T9o7Q9++y0iwWDbVjXnzYJ:2gK2y0pqk+vWkV/Xe7sqqhS/tUtC7eOS","tlshash":"6d6423136f490cd2df869bf8a0c6e384272399bd2174f9db50215cabaf84b21675f0e5","first_seen":"2024-08-20T14:43:16.062209Z","last_seen":"2026-07-06T07:58:30.745577Z","times_seen":54,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/q5rprlud1two3oxjph644qwtu8ascnxk.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:05.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 12:29:06 GMT","end":"Fri, 28 Nov 2025 13:28:55 GMT"},"fingerprint":{"sha1":"A2:90:5C:DB:CA:05:C6:7B:9C:81:43:EA:33:AE:31:CD:30:EC:54:7F","sha256":"82:E0:5B:92:41:BF:B2:48:02:41:F6:5C:D1:0D:DD:E4:34:36:CB:2A:30:77:25:56:FF:54:CF:DF:C4:88:3C:EC"}}},"request":{"raw":"GET /q5rprlud1two3oxjph644qwtu8ascnxk.js HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 07 Sep 2025 19:55:05 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: public, s-maxage=600, max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yoDswdiYaI%2FFS7I9s%2B8DmMZYzSyzrkyNzSO%2BgusiuF%2FwL60FLgdNJkPHIgggnylswj49Td8wcZsHDgOWHbmC5Cb5czFu%2BsC7xNg%3D\"}]}\r\nage: 0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 97b8c3005afcb51e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T15:03:21.171926Z","times_seen":17726475,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telemetry.jivosite.com/w","fqdn":"telemetry.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"94.139.253.159","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:08.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"POST /w HTTP/1.1\r\nHost: telemetry.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 280\r\nOrigin: https://rapidexpresscargo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: JivoTelemetry/0.9.6\r\ndate: Sun, 07 Sep 2025 19:55:08 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T15:03:21.171926Z","times_seen":17726475,"resource_available":true,"data":null}},"time_used":370,"timings":{"blocked":161,"dns":59,"connect":47,"send":0,"wait":49,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/images/icon03.png","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/images/icon03.png HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3493\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3493,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced","md5":"f1cd016a28660394c342d66b402f3c2a","sha1":"58d250f1b4789de2ad2f4d08530464d0887333a3","sha256":"fc8a4d67fb5fc8ec375e244adf86e0bff335c3325875f423fd0eab86883d01e0","sha512":"7980737180fd7513c7cb8e07c0d053ce5ed74584f19d91c2980348b0e3443b6ed044ddbb8ced5a628238d9923eb0b6f70b14f3f4ee3043bba699164ef9df7d8d","ssdeep":"","tlshash":"30715ad5fbd1d2030268c8d719f24427eb2015c56ec0eef2598de81fa9389b17c2a6cc","first_seen":"2024-08-20T14:43:16.020921Z","last_seen":"2026-07-06T07:58:30.766985Z","times_seen":62,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/q5rprlud1two3oxjph644qwtu8ascnxk.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 12:29:06 GMT","end":"Fri, 28 Nov 2025 13:28:55 GMT"},"fingerprint":{"sha1":"A2:90:5C:DB:CA:05:C6:7B:9C:81:43:EA:33:AE:31:CD:30:EC:54:7F","sha256":"82:E0:5B:92:41:BF:B2:48:02:41:F6:5C:D1:0D:DD:E4:34:36:CB:2A:30:77:25:56:FF:54:CF:DF:C4:88:3C:EC"}}},"request":{"raw":"GET /q5rprlud1two3oxjph644qwtu8ascnxk.js HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: public, s-maxage=600, max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jlbD9dPPrlHZhtDWkDtYl37BX6v19VOI6siptzBPhGkR0UgSNpgKDvxkXea34sWV5Tj%2Fu5xSziwQEhgRUKZyoLkH8mB6I9kRHlo%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 97b8c2fafcccb51e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T15:03:21.171926Z","times_seen":17726475,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":203,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/css/style1.css","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/css/style1.css HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 836\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4041,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"6fc74ad480d1ce1725aed54e44fb904c","sha1":"80e0ced78a3e4d9b08b9b6f027fde2652555796f","sha256":"93a0c0da3f8780859d6ed58c87af56bcb5f4ac75f7461b01c9ddafa8ef8e409e","sha512":"ff99bcea09116571bf9076f7ceaa85a266120d5d48217d92a7e377b9fe90f185a75f5785bc0b1472e2ba424c25032b4879ecef769418470899353806289c633c","ssdeep":"","tlshash":"6b819d939ea30546b42fc5583beea768d32ca043d816cf3c379571984f881a8516efc6","first_seen":"2025-04-17T05:23:49.752581Z","last_seen":"2026-07-06T07:58:30.759552Z","times_seen":52,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/bootstrap-datepicker.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/js/bootstrap-datepicker.js HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3728\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13776,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"07a4d1f88e9f34025a0edb96772e1279","sha1":"1145806572c76f0caf59c02d5a149b44bbf58117","sha256":"ae347ee42d024b9dac0e2afcd6ecb5cc73f2e2764bcd719ae0d87b46384890e2","sha512":"fb5044b4e5da4a7718296a61d44a94fe3c4334b45eecdaedfa61a1798d5d3a0f3bf24839b358728547864ee4c47794c174d600ba0414cc85dc01373f49a91965","ssdeep":"384:V9f4oaMoFDKFd0YOi6f6S6PTPeAphx+hh1:V9gmoFDZLi3l69P1","tlshash":"025242d9e39d1547927220695c1d12cb563d807bdc068d7fbc6c41e168acf2962acff8","first_seen":"2023-03-07T13:56:49Z","last_seen":"2026-08-03T18:40:41.432825Z","times_seen":448,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/scripts.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/js/scripts.js HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 748\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1883,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"d09cf601baf021286e3f8e6c232031b8","sha1":"d4e641ed29edc7a48df150e8ec65dbf1ce82d12d","sha256":"b7c3dc18637730cab73a74f68f0225eff4f00c3606ebe97dccebf432f1d08009","sha512":"43eb78ef42baadc46d0182719c51a1531189595ba3e0ad5813776cacd66397b2a4fdef9d4b1343f32594e9e04571ebe5558e4ccd30fba482e2f3e87a18ca9e07","ssdeep":"","tlshash":"4541021bf358b723703f761845bf70c6133f10179a055a15fbbc414a2f9a62e24cae49","first_seen":"2023-03-08T09:19:52Z","last_seen":"2026-07-06T07:58:30.763078Z","times_seen":65,"resource_available":true,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/slick.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/js/slick.js HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13116\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79234,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"faa076ceaf93e2aa236a18ecda59c041","sha1":"ac1be3a3b1fb3fc3007796baa121b4fa1ca39977","sha256":"39edf75244e2496d51974fcf99fcc03ca37d2a837385a1a6ff921f9ce97e7d49","sha512":"acc7201eb6dbfab1ccea61c8b9ad91c6ce4a8038912ac6b01dccd9028461512936e1d7cba1af71acad1cac0431c93fde87eb285302e71d24cef45251421c8eec","ssdeep":"1536:Lu4rWZaGI2RnhibVibro1leYJATAY4sW2AF:Lu4rrGI2RnhibVibro1leYJATOF","tlshash":"a273ec0b55f2131294a731b96bdf8028b3ba91275504ed9dbccc43c5afd45288feabe4","first_seen":"2023-03-07T13:59:13Z","last_seen":"2026-07-31T11:27:54.432766Z","times_seen":208,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/fonts/et-line.woff","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:05.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/fonts/et-line.woff HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/temp/custom/css/et-line-fonts.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:05 GMT\r\ncontent-type: font/woff\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 55220\r\ndate: Sun, 07 Sep 2025 19:55:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":55220,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 55220, version 1.0","md5":"b01ff252761958325faab1535c90c87f","sha1":"d33413e7bc42acc8837cc9030ca45d29c1ccf0c6","sha256":"19d2f43d546ada73dd083f7778aa4a5cac1a8e7a3af56efccae580fce07a5e1c","sha512":"23fa6804a69fdba706d5b918d41dd9feb1b70c6e0b01e4aa4724d4027e1802e7e253301a9f7966d5ee86ac14e00e65c0bb4cb565b7b3173af8d95d9001952945","ssdeep":"1536:YC7RF69D0oLUKheQnEBIoCdDLT4z1cN2CTNr/:YCiooLneQ1oGMz6gCTNb","tlshash":"8e430239225cdc06f13b90f785686024347730be909fe8be8a7d49655227fd6f735681","first_seen":"2023-04-12T04:16:50Z","last_seen":"2026-08-05T07:25:13.157716Z","times_seen":1864,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"node-ya-9.jivosite.com/widget/status/2530417/Y4HI1EoYUv?rnd=0.6292314395128112","fqdn":"node-ya-9.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"158.160.17.225","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:06.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/status/2530417/Y4HI1EoYUv?rnd=0.6292314395128112 HTTP/1.1\r\nHost: node-ya-9.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rapidexpresscargo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://rapidexpresscargo.com\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\ncontent-type: application/json; charset=utf-8\r\npragma: no-cache\r\nserver: foxy/3.5\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\ncontent-length: 80\r\ndate: Sun, 07 Sep 2025 19:55:06 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":80,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9debd8cf4dae5d7556e1918cbfd18798","sha1":"349222e9d7450cdd98875732e57571b1f64c5d17","sha256":"311538992835f8b061cc5309d5f0c6f6fa264d5a9d57a9f23f30ae6b9a96e60c","sha512":"d46733c06040c8b15cccf797e4474eab4728e4f0e14af11ff353407c716d5838f7e50d497c5be6263ef62f1b0d09aa930545a044b2d210e2fb794f8fb7a49493","ssdeep":"","tlshash":"cda01225011250440200c254d587a501012202822191a424d5515000b1ab0a008dd00b","first_seen":"2025-09-07T19:55:33.365315Z","last_seen":"2025-09-07T19:58:41.045054Z","times_seen":2,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":96,"dns":22,"connect":34,"send":0,"wait":33,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/images/banner2.jpg","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:05.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/images/banner2.jpg HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 522683\r\ndate: Sun, 07 Sep 2025 19:55:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":522683,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x581, components 3","md5":"200eebf058d54c1303a63c330880e434","sha1":"c927db36cf62cd1f06e33624f2646c1348699e18","sha256":"d9bc12d947732cc27271b38b365c58541c4d9b95772b446e26641c375d0a87a2","sha512":"3ce5293113fdbae690a59fd97f9ff0f08cde32807220d1a6656d40c0262310f5aad7492f9851d97c307d924794939f51ea03fb2be504e75ea796a47227d979e5","ssdeep":"12288:jlp+WC7WCi4cW0U0GRY4WWbG3sjexQkxBFSyZkL7m:jQ9jcBNKYf3sGlBFrkW","tlshash":"82b42338fcc2c9c39a5e74ff473f7c665f18af1190039e96744b051b229e24946ac9e6","first_seen":"2024-08-20T14:43:16.060573Z","last_seen":"2026-07-08T17:46:01.020332Z","times_seen":55,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/resources/views/home/css/style.css","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /resources/views/home/css/style.css HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 416\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":945,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"9617d03539f7df139bdd968fc902ffa0","sha1":"9c9a1f26f9eadeb526ee3bee28aa678278e72335","sha256":"430dc539f5e62ff0c18eb142a3262d76cb899b495ff12a59caea40f541aa8255","sha512":"724fb1c13196c0443bbae04c79d6162578c285b064dd35b6531fd37e71b8fc87041814fb3050d7301d434ba396fc6300ca1f6530356435a9f79fa98e1aaa89f6","ssdeep":"","tlshash":"1e11dc7f44061abe1210c2e3b060362cc0dfaf1bae427850e1a705aa6ae46c5c93d69e","first_seen":"2025-09-07T19:55:33.367251Z","last_seen":"2025-09-07T19:55:33.367251Z","times_seen":1,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:39:58 GMT","end":"Mon, 10 Nov 2025 08:39:57 GMT"},"fingerprint":{"sha1":"44:CB:8F:8E:D2:9D:AC:A0:56:75:9B:9E:4A:6A:65:EA:CC:43:4C:FD","sha256":"15:86:00:8E:73:47:89:3C:17:39:CA:07:A2:4C:2F:BA:E7:50:94:A6:0F:11:65:AC:23:89:31:7E:16:40:34:D5"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":78947,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1801)","md5":"6ff2905fd34d0565a7d64c93aadbaa8f","sha1":"3c61a6095c668cc5fca4ffd9fcce5aef54b562e8","sha256":"776eedab0fc833ed5ba2d6cace55cc8e1ce307b58d26ea7b0accdc09d603f2aa","sha512":"4d37dc8ecc4db355197ce4fb7eef1bc64b76c25242afe16681383a8d00e2276189da69549fea252b66c2495770804f157a6333c27d0de24419b645ca2aca21c6","ssdeep":"1536:XH5OjtOAhw+mUV2vCHFFyKb4GMVDb26urwRKgumlL1HviEwNWuf:XZViH6Kb426uEN1vijf","tlshash":"f173c8c8b6a674668367f5b5513f000fb23f5899e80c4cacb288d8e16eb5949413bf7d","first_seen":"2025-09-07T19:03:34.287221Z","last_seen":"2025-09-07T19:58:53.651221Z","times_seen":35,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":75,"dns":1,"connect":7,"send":0,"wait":51,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/elementa0d8.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:39:58 GMT","end":"Mon, 10 Nov 2025 08:39:57 GMT"},"fingerprint":{"sha1":"44:CB:8F:8E:D2:9D:AC:A0:56:75:9B:9E:4A:6A:65:EA:CC:43:4C:FD","sha256":"15:86:00:8E:73:47:89:3C:17:39:CA:07:A2:4C:2F:BA:E7:50:94:A6:0F:11:65:AC:23:89:31:7E:16:40:34:D5"}}},"request":{"raw":"GET /translate_a/elementa0d8.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html; charset=UTF-8\r\nreferrer-policy: no-referrer\r\ncontent-length: 1587\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T15:03:21.171926Z","times_seen":17726475,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":55,"dns":1,"connect":8,"send":0,"wait":109,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/images/icon02.png","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/images/icon02.png HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3554\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3554,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced","md5":"d5dc7d9436ddf91e2099ccf36bd0c308","sha1":"6f9debdc8d78bbcd7ad76f30b27577cfd726b0c7","sha256":"6868d6250d4332df2581e118c6cd2f8b350ef204e391857ccb5fde8ed9059729","sha512":"979d3d6870e04c826ae6ef08e1855e6f02dca83a699034434d974923544b3d5658b30cd832dd62c4f3b55685c72879f1fb1cfb963f79ea4b19768970d2056b84","ssdeep":"","tlshash":"e5713b76b4036812b66cc2d676eaa94fad1207c2a4c4ef9a2ccf0db64d19ee147585c8","first_seen":"2024-08-20T14:43:16.046448Z","last_seen":"2026-07-06T07:58:30.761013Z","times_seen":62,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/css/ionicons.css","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/css/ionicons.css HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7630\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57233,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (20240)","md5":"fffff6c0a358ff6f87e55ca318d363b1","sha1":"fceba750660aa99a9d159f629eea5be52d5a4e39","sha256":"1cd4be7be57d9d5846d092aaba15e878429d071a4f096440c43f38958a664526","sha512":"4a28072b50730b16d1a7ba7c09ab5edd7d4bfda863053dfcd22e8412e9ec19daea696bf28167919289d7727c69876f362927e1251043b178a1d513d0e90741ac","ssdeep":"384:W48numrLJrtpbxxYlbDiLq2LEg+KjL5w62s1zIZbyzid:W4wrTxilbOLVLEj+LfJ1kZmzid","tlshash":"f44310f6d71e0ee14e35d480330bab905775b5fda4580c59e00ba88df6cba28e2d29dd","first_seen":"2025-04-17T05:23:49.771246Z","last_seen":"2026-07-06T07:58:30.756692Z","times_seen":55,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chart.googleapis.com/chart?cht=qr\u0026chl=www.themezinho.net\u0026chs=90x90","fqdn":"chart.googleapis.com","domain":"chart.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:06.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"74:C1:9B:D3:5D:65:CE:2E:7C:CC:41:C0:7C:F9:2C:AB:41:A3:EC:AA","sha256":"BC:18:82:63:1D:AE:2A:9D:1A:A3:B1:77:B2:AF:6F:0D:AA:CF:1A:88:5A:51:22:46:A8:66:C8:4F:9C:92:20:32"}}},"request":{"raw":"GET /chart?cht=qr\u0026chl=www.themezinho.net\u0026chs=90x90 HTTP/1.1\r\nHost: chart.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html; charset=UTF-8\r\nreferrer-policy: no-referrer\r\ncontent-length: 1566\r\ndate: Sun, 07 Sep 2025 19:55:06 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T15:03:21.171926Z","times_seen":17726475,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":32,"dns":54,"connect":8,"send":0,"wait":108,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:06.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"92:56:50:82:E4:D4:6F:F6:7B:08:95:2A:7C:4B:F5:6F:25:84:83:94","sha256":"A3:71:9C:57:37:7B:05:4E:9A:BB:BF:7C:17:AC:AB:9F:F1:32:11:03:1E:97:2E:B5:1A:B6:60:D5:7D:87:FF:8E"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.MOhKAPSS1-s.L.F4.O/am=gMA/d=0/rs=AN8SPfoT-dXTdPTRYQlo91QfUWPUz7dIvA/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 05 Sep 2025 09:35:38 GMT\r\nexpires: Sat, 05 Sep 2026 09:35:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 209968\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-08-05T14:02:57.193632Z","times_seen":74055,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/images/icon-appstore.png","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/images/icon-appstore.png HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4961\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4961,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 146 x 53, 8-bit/color RGBA, non-interlaced","md5":"a5007a6f974e0bbef99fffe0f8255c63","sha1":"5a9922179163afa8e55f1ac9922df9c1c0b5bd43","sha256":"ddfafbb59ba0979b026050fdfb07603ab0239980be43f87cb63d8cd30895a02a","sha512":"3abe4371411079e04f31a4e7974c26eed8226592cb3ec0881c5db941823c0c438b8efd98590740e08782404f444eb9047b26e06da25b978a02e1c279b0a92e03","ssdeep":"96:RVSK2QYSWU2AXo7R+SuHGWptAGrjIfUrj5rAwSy51IUZqtnO:mNS+AowS+GWtdXIfUrjNfpqU","tlshash":"eaa17dab363749c7b06ce50640e7062396a1ded099e06cb87feda43106736dd49582ef","first_seen":"2023-05-16T23:11:23Z","last_seen":"2026-07-08T17:46:00.99411Z","times_seen":62,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/jquery.counterup.min.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/js/jquery.counterup.min.js HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 496\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1067,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (917)","md5":"ef36cca760bf1cd76cfcd0e4dc10cef1","sha1":"ef38469f60d58850fe55c4de2ec7e289a2415d71","sha256":"26d40f8ffdf1b9bf286a954c6888a33cda0cd031e802d821fe0c0562e379ae29","sha512":"77c175276932891a30041ffcfe9016b2a525d304843a41b92804e4555e2c95f6e5abd55143a3320d95715a5dad59dfa63e1b826e94c1e0ceee53fc7d165810f5","ssdeep":"","tlshash":"37118cb93a0a298daa80e459f1efb0989176bdbc0c80884b91c558401fa5abc3b5b730","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-05T14:28:01.090907Z","times_seen":12997,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:06.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"92:56:50:82:E4:D4:6F:F6:7B:08:95:2A:7C:4B:F5:6F:25:84:83:94","sha256":"A3:71:9C:57:37:7B:05:4E:9A:BB:BF:7C:17:AC:AB:9F:F1:32:11:03:1E:97:2E:B5:1A:B6:60:D5:7D:87:FF:8E"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Sep 2025 18:17:21 GMT\r\nexpires: Fri, 04 Sep 2026 18:17:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 265065\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-08-05T14:00:26.883197Z","times_seen":56564,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/Y4HI1EoYUv","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/Y4HI1EoYUv HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 07 Sep 2025 19:55:06 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6227\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: br\r\netag: \"68b696ac-1853\"\r\nexpires: Sun, 07 Sep 2025 21:55:06 GMT\r\nlast-modified: Tue, 02 Sep 2025 07:03:08 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9p-up-gc8\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18188,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18188), with no line terminators","md5":"f9975a9970765d098b3adde6885d4455","sha1":"eab35ae077ba59de6541b2b5da3861552ba7524d","sha256":"bcc6801ea0b31325eddb1e5ac9eb5ce608473055b017bcfc0b7ccd24dc48c201","sha512":"8eb3de5e8019b7ce8b2531862c49e81b1393c53767078003bfa4bd60155ab0e89e23911690a2bc8c3dfb8d89f953033c51598aab553256532e44e93e80bce51d","ssdeep":"384:boUJJkQamum040brANKcB7HMiqJISEeJBz8U08wYWcPY4:6tMwA7B7W98UFWcPY4","tlshash":"c6822b6e7959b97743b208b9606f6209733549ebd404c920a401ea4d7db8edf813fef8","first_seen":"2025-09-02T13:01:40.545292Z","last_seen":"2025-09-24T07:27:42.649421Z","times_seen":352,"resource_available":true,"data":null}},"time_used":2601,"timings":{"blocked":1241,"dns":63,"connect":55,"send":0,"wait":84,"receive":1,"ssl":1155},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/images/logo5.jpg","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/images/logo5.jpg HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7891\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7891,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 236x141, components 3","md5":"ebb7c48d1a323f46c1ec22aeb2f3eda8","sha1":"fe8944e2be25e26a5df92e82bad8a3d3537a0607","sha256":"e410c33e2fc3d37fc45a9fb7b7460df2b72b9e362a881dd99b11c6cb59b64389","sha512":"4b0e00b3674e2e98b86cf88f8018ecb342aa558edbe4d1822894018da96372917d6485d8e03c4f5bb6d7e23f9c64c7cf3936ac585e4408a5d49c1894959df48a","ssdeep":"192:9O1G/PROIBNOWYFcJrxvMhqBzuEyfvRnGa:9OoOIBINFeJMIuEyJp","tlshash":"31f14a03a760ac70fbeded703bc3d2132a0f99a5637bdc5650a606cb7661c9e85056e1","first_seen":"2024-08-20T14:43:16.020209Z","last_seen":"2026-07-08T17:46:01.01806Z","times_seen":61,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/images/icon-googleplay.png","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/images/icon-googleplay.png HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4915\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4915,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 146 x 53, 8-bit/color RGBA, non-interlaced","md5":"938f928a026406d9384bb7734857168f","sha1":"1fbd4281a7efa63d6c1611b1cae9ac10bd2efa3b","sha256":"f53ac2d211951ee01a8a2e32bf219020c28bdbb022f7e967f7bb526563fa5414","sha512":"5d85ed24f2dcdf2689b4ca8eaf0944da8e7e61bee3cadf55b0966c00c705f780785b501848753614951d3411e6dbfd6eb1e599624609e3e488390464f06692f7","ssdeep":"96:RVSK2b0Aab7I/e7j7P2CibDPQMGAWz1W83ntI6L1IvYOteUWNrl:m3s7IK75ib7WAWz1W83ntI6L1IleUO5","tlshash":"6ca14ccfb9eb67027a4a528564d376a35c361cc070e25d537ecfca8308740e485b95dd","first_seen":"2023-05-16T23:11:23Z","last_seen":"2026-07-08T17:46:00.987576Z","times_seen":62,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":440,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/images/logo3.jpg","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/images/logo3.jpg HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30699\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30699,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=141, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=236], baseline, precision 8, 236x141, components 3","md5":"95f6cea878e246dbd3494fbe84e771c4","sha1":"59f4c6e8f014915c636647aa9ac281cbdba5430e","sha256":"ab27c2f1d5f63bc3feacdf8ac09983b6802a0000c61fd3f29b830d71f2fdc5b2","sha512":"82532ef145d82529e8477a3bb28c731448fbad7c8541b8c4cf4c98683b5fdcfa62ce1ff75856b0493ba9d830666d9759efc7e1fca35c9ccb0c5d6d202411b820","ssdeep":"768:QrEYyeruR/bYyeru8GK/bMbsygxK66zakzV6MA:z66R668G3bOXku","tlshash":"c4d29d34af9baf23f9d0d1bc44e4c7e2e3236a68a7b35751746c5122b3716d11a4c34a","first_seen":"2024-08-20T14:43:16.023188Z","last_seen":"2026-07-08T17:46:01.021054Z","times_seen":61,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/css/bootstrap-select.css","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/css/bootstrap-select.css HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1350\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6643,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"aebb9fd3530a99ce0ddabafdf3eb8a7a","sha1":"03c9d48b035aa82f15f33450bdf778362221f07c","sha256":"a031409712ab20005498eb00a940ffedc6cbed46727979d7854e5d93c6ea6808","sha512":"4b4a698f4d7e66f03b5cc3becab9bf72ba4e2de7699018b574f91ea44c34205c5e7a522ba25571f00f6586348f57ee8e19e4588bd52769fe837e2605bb913873","ssdeep":"192:hV0L7t8v8yVd5nF7l4pHCSDJcvULuDcLb:r88F7l4pH5DJcU","tlshash":"afd10fed77e20170618981fa34856a53339db002728fc878b7dfa18c5fc618b6a73b56","first_seen":"2023-05-15T03:00:33Z","last_seen":"2026-07-06T07:58:30.75771Z","times_seen":125,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:05.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"92:56:50:82:E4:D4:6F:F6:7B:08:95:2A:7C:4B:F5:6F:25:84:83:94","sha256":"A3:71:9C:57:37:7B:05:4E:9A:BB:BF:7C:17:AC:AB:9F:F1:32:11:03:1E:97:2E:B5:1A:B6:60:D5:7D:87:FF:8E"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rapidexpresscargo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 05 Sep 2025 08:13:09 GMT\r\nexpires: Sat, 05 Sep 2026 08:13:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 214916\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-05T15:01:15.191172Z","times_seen":956110,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":94,"dns":0,"connect":14,"send":0,"wait":14,"receive":18,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/assets/img/bg/06.html","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:05.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/assets/img/bg/06.html HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Sun, 07 Sep 2025 19:55:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2457,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-07-31T06:28:28.104994Z","times_seen":7052,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/jquery.min.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/js/jquery.min.js HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 32389\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":95992,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"f03e5a3bf534f4a738bc350631fd05bd","sha1":"37b1db88b57438f1072a8ebc7559c909c9d3a682","sha256":"aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947","sha512":"8eeeaefb86cf5f9d09426814f7b60e1805e644cac3f5ab382c4d393dd0b7ab272c1909a31a57e6d38d5acf207555f097a64a6dd62f60a97093e97bb184126d2a","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"1793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:02:11Z","last_seen":"2026-08-05T14:39:53.888101Z","times_seen":27267,"resource_available":true,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":255,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/css/style.css","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/css/style.css HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7616\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44391,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (306)","md5":"4858f114d84ac360860ea9a410c65281","sha1":"8b4711038ab758e68993eebb20a68778f85a62a7","sha256":"f69833750f461187bcdf23058ec16df3e9e05823d1db3547bb9723a5befb8fb1","sha512":"30606cc57a9a495e80b74173a5362aa13a4edbffb34c7a9f76815985493339a63a7c786a651b0f52cb3efc050ccc1bb7d77db448579e6b7874d5a37b4c6bbe70","ssdeep":"768:sjjCS0CHYhQ7Q5pdyJyE1kENE2QXk+VqhOT2gNVB7ZHsFcEeBNObQPzlj:sjjCS0CHYhQ7Q5pdyJyE1kENE2QXk+IC","tlshash":"4f136128e192742c75770225bf8297ed717c809bb20b6dad6d7e245ac08e4ef84727e4","first_seen":"2023-05-16T23:11:23Z","last_seen":"2026-07-06T07:58:30.758179Z","times_seen":54,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.fGEa7yCCyRc.O/am=AAAE/d=1/exm=el_conf/ed=1/rs=AN8SPfrK1LZeA_v9rL-uZxIOz5VrazXaIA/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:06.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"74:C1:9B:D3:5D:65:CE:2E:7C:CC:41:C0:7C:F9:2C:AB:41:A3:EC:AA","sha256":"BC:18:82:63:1D:AE:2A:9D:1A:A3:B1:77:B2:AF:6F:0D:AA:CF:1A:88:5A:51:22:46:A8:66:C8:4F:9C:92:20:32"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.fGEa7yCCyRc.O/am=AAAE/d=1/exm=el_conf/ed=1/rs=AN8SPfrK1LZeA_v9rL-uZxIOz5VrazXaIA/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 77118\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Sep 2025 18:34:53 GMT\r\nexpires: Fri, 04 Sep 2026 18:34:53 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 03 Sep 2025 21:14:21 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 264013\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":223197,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2544)","md5":"6fb8cacab0931d9ac22daa34ef2973be","sha1":"daf618ad695966f57fe7661865413f7a8e9379a4","sha256":"5aa7d6afdea20d7b012f8e3ab85ff359e8146e7db91ba38e162636f5e54bcfe5","sha512":"a093f0371bf960a86938ded3d66067f5164d0e0876c979afd751b6759de0d265661e76af072169c29f82b9d2c3f1bc3f8906034fc4ed752368aecd6667cc6652","ssdeep":"3072:pFzq9W0rM+oIEcqlYBzwz85CwVvnJNGGVyiuEgUyztlcV0E11T4t:KXoI+0J0FEg","tlshash":"3e24e8d9b39271669363f4a6d17f000ab13b5869f9484dacb28de8e25ef08190177f7c","first_seen":"2025-09-04T19:47:15.218002Z","last_seen":"2026-06-08T05:21:46.68151Z","times_seen":301,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":60,"dns":4,"connect":21,"send":0,"wait":9,"receive":14,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/script/widget/config/Y4HI1EoYUv","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:06.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /script/widget/config/Y4HI1EoYUv HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rapidexpresscargo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 07 Sep 2025 19:55:06 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 691\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: gzip\r\nexpires: Sun, 07 Sep 2025 21:55:06 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9-up-gc82\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1365,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JSON text data","md5":"49e478850b4e4b3b39b620c7c1a98606","sha1":"bac38c94ad0b4f1fac7ee8da5773f06db590480b","sha256":"fe2c2d7d900381da47408cbe350f3c72de004cf65cfe640ec84168d02f15bc63","sha512":"8266f0cabe380f7051c9eec929905e951c73dabc1889937f84ee32211920d240ac87636259ec96b72e8a8e79e893571dfefbe2d89a00104963c66213cac5e546","ssdeep":"","tlshash":"d22123a24d4c54630985bec7622bae03253c86a6fe810f75db846d3c209b3d9230f24a","first_seen":"2025-09-07T19:55:33.378608Z","last_seen":"2025-09-07T19:58:41.031511Z","times_seen":2,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":128,"dns":1,"connect":60,"send":0,"wait":293,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/jquery.form.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/js/jquery.form.js HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11217\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41095,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"9ff23d156a15ac9eba83b6f571abd83f","sha1":"63b1ceaea04590b9611d3ef6dbb588b365be4559","sha256":"14b30a934e36cdfc5301709bf515adc31e060bd7275eb056964cf7d2ed6e7550","sha512":"5ed814a05a01362c292dbb7bd2ee41d8bf1f1dd6fd534ff63b6a1c1699d45e75739beedb068995da687c78fb365ff465940bd88f1db926260bb4d3f7b67a31ce","ssdeep":"768:4hN+wDMgNAWo8/e9z4UA+BtX66+PZ0s8Oa3ij6lOTwIMuliMIzMJVVRFRLRZzYih:cUwDMgNAWo8/e9DBaPZ03FSjCOpliMIG","tlshash":"de03a24a7aeb12a2192334b90bef91497639d0171208dd617d4c53a06fd4db4a2fafe8","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-08-05T01:43:00.751017Z","times_seen":941,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/css/slick.css","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/css/slick.css HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 480\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1767,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"88b2daf9da57af3ab03fea77577a2fe5","sha1":"439055f9b9d1f5e89f6b52b30d4e4ba232717351","sha256":"893485d48fc8651981b4810fee0d92ebd7fd85baa7f362ad3934a2c652be8dc9","sha512":"8a784d760ec8cdf4801fde07de5e82b61497e09c3ed7385eb2afcdec9674d59c8cbdb1af3a1d9defe8f57ee107039ed331d183257278f12b172a1c788883a405","ssdeep":"","tlshash":"d831285845b38946451681881fd7ca6d2ffff0130c28a198bacd53068fce7e8e9c16b2","first_seen":"2023-04-05T10:17:13Z","last_seen":"2026-08-05T13:02:36.375941Z","times_seen":3858,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:05.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"92:56:50:82:E4:D4:6F:F6:7B:08:95:2A:7C:4B:F5:6F:25:84:83:94","sha256":"A3:71:9C:57:37:7B:05:4E:9A:BB:BF:7C:17:AC:AB:9F:F1:32:11:03:1E:97:2E:B5:1A:B6:60:D5:7D:87:FF:8E"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rapidexpresscargo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 05 Sep 2025 08:13:09 GMT\r\nexpires: Sat, 05 Sep 2026 08:13:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 214916\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-05T15:01:15.191172Z","times_seen":956110,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/resources/views/home/css/bootstrap.min.css","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /resources/views/home/css/bootstrap.min.css HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 416\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 07 Sep 2025 19:55:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":945,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"9617d03539f7df139bdd968fc902ffa0","sha1":"9c9a1f26f9eadeb526ee3bee28aa678278e72335","sha256":"430dc539f5e62ff0c18eb142a3262d76cb899b495ff12a59caea40f541aa8255","sha512":"724fb1c13196c0443bbae04c79d6162578c285b064dd35b6531fd37e71b8fc87041814fb3050d7301d434ba396fc6300ca1f6530356435a9f79fa98e1aaa89f6","ssdeep":"","tlshash":"1e11dc7f44061abe1210c2e3b060362cc0dfaf1bae427850e1a705aa6ae46c5c93d69e","first_seen":"2025-09-07T19:55:33.367251Z","last_seen":"2025-09-07T19:55:33.367251Z","times_seen":1,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/images/testimonial-head2.png","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/images/testimonial-head2.png HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24446\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24446,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 109 x 109, 8-bit/color RGBA, non-interlaced","md5":"9c6b95c54d0d86261d8ab833647dface","sha1":"ffca9cc50a0898622f0d08eb4df7357f99b9a51d","sha256":"75c6e4f0fa745ffb1469800638863015d01fcd58c0ad3edfc3a1c22a9fc8f748","sha512":"a6262e2f9208d1c7f99055528612acf3598670898edb8367cfef897eaef3a14a9d7bacb5cc5ddd0163bb0c07c68e1916ff6138c9d9f13cdbb846884377424bfb","ssdeep":"384:/lq9xAYL84KBiKDtmN34rfPljjGYGwSNzZftmXeWAumv0+mFOxL+9s9EVRiJZmft:tq9xA54Kk3x4jwlwS1ZFs6BvjmFUy6VK","tlshash":"b3b2e0f4e7c8f815345eee0d73cde919afd50870e9e4a034ee5fa0197a311b51861a86","first_seen":"2023-12-20T09:18:57Z","last_seen":"2026-07-08T17:46:01.011879Z","times_seen":60,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/masonry.min.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/js/masonry.min.js HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8278\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28969,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (28833)","md5":"85ef736bbfdf0ce0c537caca4c1f29f6","sha1":"b0dc16d9bbe017437e0f116c425c4e20bbd4bc58","sha256":"694749e85b4d7726dc87795b3783f8b0d64513b8eb90a8170e5db9ef2e3f4c19","sha512":"6a234d647e417447aed9fafa95bd727f848287bc533ed798612a95b397f56f344716906dd89c9b8b05b0eca3ff844455c9331c74170992a3b1a175a786769050","ssdeep":"768:f9+z0BFXYKby+HvOqKvVOkYtkdEvWBzigMPI0:fgKbbOlIkdEvPgI","tlshash":"f7d2c54ab70434209247f5b6a2af010f723ba5ade51484bcb299d8fa2db6c4d1137f7d","first_seen":"2023-03-07T12:57:28Z","last_seen":"2026-07-25T00:11:26.68611Z","times_seen":158,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:500,400,300,700\u0026amp;subset=latin,latin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:05.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"74:C1:9B:D3:5D:65:CE:2E:7C:CC:41:C0:7C:F9:2C:AB:41:A3:EC:AA","sha256":"BC:18:82:63:1D:AE:2A:9D:1A:A3:B1:77:B2:AF:6F:0D:AA:CF:1A:88:5A:51:22:46:A8:66:C8:4F:9C:92:20:32"}}},"request":{"raw":"GET /css?family=Roboto:500,400,300,700\u0026amp;subset=latin,latin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 07 Sep 2025 19:55:05 GMT\r\ndate: Sun, 07 Sep 2025 19:55:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21548,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"4791d8a2829a22ec64e1fd7670293439","sha1":"479d5b7c5251d838e7df450937dd3d3cffecbed3","sha256":"f9999ca6444676034aa54b340341ac128a35b911349bc08bb5aea45faf7ed575","sha512":"1dd9c05602e946866499c56380a289ecb310c1aca11e80fd77d752ac6cb1003c56b1a677cf3cc85743bd17b03fdf83c65b000b84aee9e8db8514594cac1c8c0f","ssdeep":"384:3jfnj+jhjdjySj/qY4ojmjGj3jfajDjwjkjyfj/qY45jLjrjcjfFjYj7j/jyEj/g:3byF5OS/vyqr2/MoOf/i/3gBknTOE/NK","tlshash":"43a21ea10417444097835ce223cebf34fe0f92507142d0b5abfd9b6baddbca652693ad","first_seen":"2025-06-02T17:39:02.962352Z","last_seen":"2026-01-01T04:43:48.838584Z","times_seen":1791,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":53,"dns":1,"connect":7,"send":0,"wait":20,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:06.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"92:56:50:82:E4:D4:6F:F6:7B:08:95:2A:7C:4B:F5:6F:25:84:83:94","sha256":"A3:71:9C:57:37:7B:05:4E:9A:BB:BF:7C:17:AC:AB:9F:F1:32:11:03:1E:97:2E:B5:1A:B6:60:D5:7D:87:FF:8E"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 02 Sep 2025 18:55:19 GMT\r\nexpires: Wed, 02 Sep 2026 18:55:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 435587\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-08-05T14:02:57.206165Z","times_seen":79002,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/img/01.png","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:05.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/img/01.png HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 427800\r\ndate: Sun, 07 Sep 2025 19:55:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":427800,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 457 x 624, 8-bit/color RGBA, non-interlaced","md5":"25dc5642b0ba911b968185d8821ba460","sha1":"fb375046d45789b89267934916a608d52a460f9a","sha256":"9a633b55c20b4567de956003c408d4ab2a16c2b38cd55e1edf81fd2d9caaede6","sha512":"6928fb24ee250137ae1a64019b342d9d67c471bd33b4f10f9b06dffd522abc8bcb958c2d838a365530feef1f091d68bfc7cd9df5ea6b7761d04c26c3c03206d6","ssdeep":"12288:nLzszZPGnDcaz25TwmzGvK+96jL04ySS1:nLcZPyD1z25cKq6jL04ySK","tlshash":"ab942330dd81c911823b3e6eba797d95926fff9b069aa00907427d03f6e7308d549fa1","first_seen":"2025-04-17T05:23:49.787822Z","last_seen":"2026-07-06T07:58:30.754584Z","times_seen":56,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/agent_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:07.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/agent_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Sun, 07 Sep 2025 19:55:07 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 3760\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"6899c524-eb0\"\r\nexpires: Thu, 11 Sep 2025 08:12:15 GMT\r\nlast-modified: Mon, 11 Aug 2025 10:25:40 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-08-12T08:12:15+00:00\r\nx-node: m9p-up-gc8\r\ncontent-range: bytes 0-3759/3760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3760,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"8e9a165c4cb185ffd0b2658fa088e43b","sha1":"195873e5e8bbb2f5ecc32d95f90d6fb75817a649","sha256":"ff81aad05612f90cf97c238f219765884e5cbf49351d8dc96a4a063c598c3f43","sha512":"6ef9fac16ac2835ecb95ab077270293a95a3597fd28fb053b32cfeb6b0a72b52c0ee51b0504a463ac9db1d8a3b2c6c41f113012d6364d16feb8e01821a3221ff","ssdeep":"","tlshash":"c771295c69348528f80b31b89f4b765ac1512c19a8f2ddd4a62818e7377b36a678820e","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-08-05T03:44:26.296197Z","times_seen":16704,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/css/et-line-fonts.css","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/css/et-line-fonts.css HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1540\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7074,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1512)","md5":"75549347f663e5380d18409dd6259982","sha1":"b491327511778957e8505b3b4dea9bd40eba28f8","sha256":"03eb685e0a41eb4ac4f561e56f4fedae8dcf10fd6f94a1384d346cd1a4a1b60f","sha512":"18e6478f44d9a99783b0af05fb322d12be0e96b00b7df8a36da76141e856e30e64ccb9b363251980429e3a8afcbbac8aaef47b8932060dfd2f7058773334960a","ssdeep":"96:G+VDsd9iOV4esZ7sl0jF8v1bYpdetWNSX5KBbZdf7TXvkaZQvwKjY8AzY3Q1Kj//:Lc9i8sZ7sSjB1opDHmi","tlshash":"25e191eced1da9a25780e4d16b417a00df0cb3299ccb2d5bf417b82ca7f2a1494d63d9","first_seen":"2025-04-17T05:23:49.770414Z","last_seen":"2026-07-06T07:58:30.772578Z","times_seen":55,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/images/steps-image3.png","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:05.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/images/steps-image3.png HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 91354\r\ndate: Sun, 07 Sep 2025 19:55:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":91354,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 428 x 260, 8-bit/color RGBA, non-interlaced","md5":"46bc449e051eba0f1457e24dc77bb985","sha1":"f83128277318f4d040fb58195df61d340aa47958","sha256":"8688ed8d0c4b92a65d3b733d6a38ccb2a6b02cbc1446e8533deb9d87f4047b15","sha512":"95290b62e420286d070a0bd357f215597ed4fa7133f73a375ea19e18b898fd0fd240043b7f6bb2471590ade13584fd523936a441fa0baab27f3c06ec6ac825c8","ssdeep":"1536:nBjAKooOMy/y5zGFT2BmJZmtoOXaxfBK9Q8whlz0fwIjtTnO4paFnLYRM+M:B0Ho2q5W2BcZmto8CE91tfwIxLaFnLOq","tlshash":"5193129ee5b6b56750c03f0f2ce6555aeb12b0d7dc0c87d897e0c505a278ca06eb6e83","first_seen":"2024-08-20T14:43:16.064581Z","last_seen":"2026-07-06T07:58:30.744063Z","times_seen":57,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/b1f3798/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:07.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/b1f3798/locale-en-US-json.js HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 07 Sep 2025 19:55:07 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3383\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"68b696ac-d37\"\r\nlast-modified: Tue, 02 Sep 2025 07:03:08 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-09-07T11:52:05+00:00\r\nx-node: m9p-up-gc88\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10509,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10482), with no line terminators","md5":"2c212727a7bacb453945e1ab7025234a","sha1":"5ff39073a6077374bb26f1f31b2428b7c0c8bb6f","sha256":"b8f45519424c6fcd31acb1d568c259fcb7297e38246ab98529e31d5d1490dde4","sha512":"8226cbb571eb34c684a6ae6b13056a7b968eb12371a25ea0a05861265b4019b0ec1170d0a2dd4a42495765a2b9e7e6a3c65aa8e86b93ba2920af050de25a058b","ssdeep":"192:2P7mk/7Obf14M6bOIpUTPqZ8Bi9FLeRJK:C7H7ObdFkOIphZ8w9FC7K","tlshash":"fd22d71ee7017f360fa613c3744f7b53b6a480e592646cb5d88c826953b9bca721778c","first_seen":"2025-08-07T16:51:42.115213Z","last_seen":"2025-10-09T00:19:26.491677Z","times_seen":878,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/images/logo1.jpg","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/images/logo1.jpg HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7248\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7248,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 236x141, components 3","md5":"dc7588124dbb02cdedf607e553de86ff","sha1":"965bfb9238604365604f5938fb26f5bb2053b51f","sha256":"fc857bfe140a4fb2a2f400fa24737f1c429620eeb78b7d98cbf94e02aa497c86","sha512":"7afc6929ba75fb6777acc21e81ef780845d1461399b03e49e1df2083c9ce3fb32a47688aee340a3fbf8f3fad0ac3c9b486688ae9bac0ea53c0cf970159f8db14","ssdeep":"96:9Y2osteUZaw6/wIgUoESqI2RcsvdxgDzdCrRMVXxrhmhMDSkkAJeLzXbB:95eu676Zq5RNvwNWMVBsMhkAQLzLB","tlshash":"58e15922a8124c72f7cacd7133d3c02b1a4f868187fa2d45d47740c3b861eadd9a6dca","first_seen":"2024-08-20T14:43:16.050058Z","last_seen":"2026-07-08T17:46:00.989987Z","times_seen":61,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/jquery.stellar.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/js/jquery.stellar.js HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4537\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23282,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (310)","md5":"6bc994172518faace00197fb53db9378","sha1":"8c993b2cc971b5979ea23fc7e23c98ef1f009cf7","sha256":"cafdc75783c661554df0c541ff661181b5e09ed440acd98cbb03d5e0a78bdea7","sha512":"ec371116fdf6cad811de7f952117162263fb643aec24484fcc607dfca21475e9ab6018e304dccec0b43f41ea241eb708e076b22c79a0b9061eecfa0eb5cb8ebe","ssdeep":"384:BSIkxG7CM8sMijtx0U0/X9Sbt5ajjkZOsEnjyApgBbb8X2xCigNG7hH:BSMCMrM4tx0U0/5jjkZOsApgBbS2xCi1","tlshash":"73a22388b39c242a56af636f8caf13cc613d64314407857fbcbc65e92d9292e5293d74","first_seen":"2023-03-07T01:33:45Z","last_seen":"2026-08-01T23:35:52.316198Z","times_seen":758,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":246,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/images/steps-image1.png","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:05.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/images/steps-image1.png HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 86805\r\ndate: Sun, 07 Sep 2025 19:55:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":86805,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 377 x 229, 8-bit/color RGBA, non-interlaced","md5":"2708a9a1b9cdfdb6fdb9e195e8b301df","sha1":"de1542766a1c07b1944ab1459eba342b7103f61a","sha256":"aea776d560cc70853e69604406d8e30d1bc1efbf07356df8e1ecfb3b8d318534","sha512":"685700f179ff9dbb0c50f116340e101afd68621bfbdfb79348b2b666fcee8b0914a90900e8910b576f4ca830a8014b719f3888704e1a7f5bc32235e4ad73f9d5","ssdeep":"1536:TIUT2hNHATgDi7wUQE/OFf0uGzuR5JCrld2pdLGGA+XR/TO8ZqKXqSM3lbMYl5Lp:TIlhNogDKeEGF3GImxCdLa+9vZTazRP1","tlshash":"4e830296bc9fe621cf24a9a685b0c23b2f07b5ef19b4dd0331d9985c5e18a13942db84","first_seen":"2024-08-20T14:43:16.063889Z","last_seen":"2026-07-06T07:58:30.775376Z","times_seen":57,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/bootstrap-select.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/js/bootstrap-select.js HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12881\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59424,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"72cf3ba80ac56eaf755bc760dd46924b","sha1":"10aaa874ab08af30a6982e80e097159eb55ef4f1","sha256":"6eadb9f319f0dd5b3fa94e780f0ee531dbada3ce7a190c187131483cece9016a","sha512":"7fbd0a761bb81609c43663e1d3b6c2629c42dc3c77fdadfb219b38f766212bcb049cc5e67faf611475ef232713395bf1909fe74f5427e164ab7e66e949c4f3c6","ssdeep":"768:9kHkK3JV9V0UCAMsl0xVQZc9PfYp10+6Wat1HrRnu/w94:9CJr9soA9Pwp10+6Wat1lu/w94","tlshash":"cc43625a36fb2230817b20aa5e9f5448b135812f5806e9293c5d43c86fd4938b6f7ff6","first_seen":"2023-03-08T09:19:52Z","last_seen":"2026-07-06T07:58:30.761551Z","times_seen":95,"resource_available":true,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":255,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/bootstrap.min.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/js/bootstrap.min.js HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9432\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36822,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32040)","md5":"09224359ccf8277a46de23c00d2a0b29","sha1":"cc33f3b4abf1ff45edee5dae62a1f3fd0dcc24d4","sha256":"08bdf8113639c5ce697e6eba88ceb1ed3348e82168a0e0dc0a75eca428348bce","sha512":"9d63ed482afe1119a0681c7a49a168ab5e3c67db211d1fcda83bf07a7d99a991f2dea2553aac3978fb0868d81b56ffc384d29a0f599f69001edfddfc61a9b380","ssdeep":"768:r8iUD27UwlNEMl9RqNuCqNjhqg8epm51CoFXflR8Gf3ZsbQ:4875vhqKOvlp3ZsQ","tlshash":"fff29646b23031a107efb1e1525b020a7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-03-08T20:10:42Z","last_seen":"2026-07-18T23:21:06.351954Z","times_seen":99,"resource_available":true,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":255,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.MOhKAPSS1-s.L.F4.O/am=gMA/d=0/rs=AN8SPfoT-dXTdPTRYQlo91QfUWPUz7dIvA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:05.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"92:56:50:82:E4:D4:6F:F6:7B:08:95:2A:7C:4B:F5:6F:25:84:83:94","sha256":"A3:71:9C:57:37:7B:05:4E:9A:BB:BF:7C:17:AC:AB:9F:F1:32:11:03:1E:97:2E:B5:1A:B6:60:D5:7D:87:FF:8E"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.MOhKAPSS1-s.L.F4.O/am=gMA/d=0/rs=AN8SPfoT-dXTdPTRYQlo91QfUWPUz7dIvA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Sep 2025 19:27:03 GMT\r\nexpires: Fri, 04 Sep 2026 19:27:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 260882\r\nlast-modified: Thu, 22 May 2025 01:09:21 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-07-27T10:36:14.980644Z","times_seen":37906,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":48,"dns":1,"connect":14,"send":0,"wait":15,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20250903","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:06.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:39:58 GMT","end":"Mon, 10 Nov 2025 08:39:57 GMT"},"fingerprint":{"sha1":"44:CB:8F:8E:D2:9D:AC:A0:56:75:9B:9E:4A:6A:65:EA:CC:43:4C:FD","sha256":"15:86:00:8E:73:47:89:3C:17:39:CA:07:A2:4C:2F:BA:E7:50:94:A6:0F:11:65:AC:23:89:31:7E:16:40:34:D5"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20250903 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 07 Sep 2025 19:55:06 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: script-src 'nonce-ulLnhac3vtEU5JmFaylTxw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport\r\ncross-origin-opener-policy: same-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmII0JBiEOLhmHXs-1E2gRdrPr5hVFJKyi-MLylKzCvOSSxJLU4tKkstijcyMDI1sDAw1TMwiy8wAABBBxOP\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=28.SE=e7GkXMVEkkA_7qXoThl6SlEfATx9Eoy8BpkS-gcgZCifhg4wkzie0n2Rq52pCad4fQ7tTPEtOJC3nvSO3XKs-QKdtwc_sSKMYhL1KsthlPfZMsa68_C-U2UetdssbOVQ6c3mp391wqZ-Gkn3qPB2FJtUb7dlcqZraWIYUttivWWBwdlqxa1tsd0L1fgUjIg8Dg4wWqSqDsgh7v6i7oz7F03D2248edryZmcSjDZcvPvj7rTD; expires=Thu, 08-Oct-2026 12:13:24 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T15:03:21.171926Z","times_seen":17726475,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/outgoing_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:07.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/outgoing_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Sun, 07 Sep 2025 19:55:07 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5014\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"6899c524-1396\"\r\nexpires: Wed, 10 Sep 2025 14:05:11 GMT\r\nlast-modified: Mon, 11 Aug 2025 10:25:40 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-08-11T14:05:12+00:00\r\nx-node: m9p-up-gc29\r\ncontent-range: bytes 0-5013/5014\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5014,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"7bf3e4962a5ecf1f8cbcc2ff3428f531","sha1":"f75c694461a643d2e096ae8d0f6c1a9d19602eee","sha256":"d44244617bf21df7a137694fa762d5cab3b82cb9fae8f33de5917977b02b2a11","sha512":"53fb17ca3361636acb0b80107f66810150a8bbed9aa5f878c2b1fb5a23ddf7fd349b30eb082b05efb3c0d08dc5383d30ef15d0ca99ad98d62e0a9a335112ed6a","ssdeep":"96:nKEOyBuK+1D2sMVx9FX7+0YQQinefV/1gr/EaadKXdGdimO1:K2QhGvYinsLE/SUdUime","tlshash":"5da1399616202262f6090cbf124ec2f4e3996f6b39044726b67cd290f46ffa25366983","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-08-05T03:44:26.504392Z","times_seen":16705,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:16.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"74:C1:9B:D3:5D:65:CE:2E:7C:CC:41:C0:7C:F9:2C:AB:41:A3:EC:AA","sha256":"BC:18:82:63:1D:AE:2A:9D:1A:A3:B1:77:B2:AF:6F:0D:AA:CF:1A:88:5A:51:22:46:A8:66:C8:4F:9C:92:20:32"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nReferer: https://rapidexpresscargo.com/\r\nOrigin: https://rapidexpresscargo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://rapidexpresscargo.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Sun, 07 Sep 2025 19:55:16 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T15:03:21.171926Z","times_seen":17726475,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/css/bootstrap-datepicker.css","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/css/bootstrap-datepicker.css HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 951\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4953,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f0f519c66ea65bb3725ab268be978d60","sha1":"d95121446299a0b6a5b06e1d287e6e105a3e355a","sha256":"03ad95964d61ff7b69502b303b9d639aacc99ae34e054e2dfc11a6cd338f5822","sha512":"563504c2eff57a7a61d7c4b073ba552bf5a7d15eecadf9b959d8d6cddc8f217f929fbb1a82115ba820e194c96f641d2576bd2d8a78de592b96d6900bc74c24fe","ssdeep":"96:4lVdvCmyPTapd2l0USSPPxxxx11LLhNixx1ypapd2l0USMdo1:4PdvCmyPkFSPPxxxx11LLDixx1yyFH","tlshash":"e0a1019952d02c1b3633d2987920edfa3f4b558b44c1cb7c35e1b0acab1eec5496d5b2","first_seen":"2023-04-25T12:20:18Z","last_seen":"2026-08-02T20:14:29.38004Z","times_seen":432,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/css/b1f3798/widget.css","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:07.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /css/b1f3798/widget.css HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 07 Sep 2025 19:55:07 GMT\r\ncontent-type: text/css\r\ncontent-length: 18467\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"68b696ac-4823\"\r\nexpires: Fri, 12 Sep 2025 11:50:52 GMT\r\nlast-modified: Tue, 02 Sep 2025 07:03:08 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-09-02T11:50:52+00:00\r\nx-node: m9p-up-gc54\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":113952,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a23bd324db0ecb56b8fa3c51cbf3cfe7","sha1":"827dd021cf3cf57adc3a9312a53b73ff19b75243","sha256":"f89f5684a70c21f2fbe7c209e05800ca9a6b264c5d70d099b415aebafc566c40","sha512":"0dbc9e3656dbf3f00dcee22d44a76a301c88e587b49fb9bcd8cf0247c068dfe7144d089d2bebd3cdb2accd75067a8eca514668c07e55c5027676426c1d20648f","ssdeep":"1536:tL5QTKbyd6o6krhaDu5yg2s28SUpzyV6K6e+9l04TUc69FdPQiiLO1OYD96dcPoQ:OVYM2v","tlshash":"09b3d856ead2e53ce91e542ac9c6aa3ca63dd042cf230daff744e3d047c66e70276905","first_seen":"2025-09-02T13:01:40.554218Z","last_seen":"2025-09-22T11:52:09.958468Z","times_seen":343,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/images/news2.jpg","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/images/news2.jpg HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 31876\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31876,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 380x210, components 3","md5":"1bf1c5371ed31154fca491faa5e02edd","sha1":"1ad54ffee8dbccc76ca7868ecdec6149b6eb7e93","sha256":"be77fd299ce1ec06d0a5b22784b164fe7c1614d65c35e12d3fa7f95d7075f5b6","sha512":"be068f5cc5e9ca3793007637cf6a6a7f8389e4e30706e3dab579cf21fb31575127039252db25013490286cb843e1539be4b0d1050ec107b59b6b90182691ffec","ssdeep":"768:9s7W2A4sRrIJMhCTxYNHKWgKth0j/swM068/7HX7bkyfx0F:9sNRGEaCT6QWgKunM0d3kG0F","tlshash":"c4e2f156d7e37e06f5da7e3d1898ddb205d3cd408f1bd38da148436978bc0a28267686","first_seen":"2024-08-20T14:43:16.02236Z","last_seen":"2026-07-08T17:46:00.975513Z","times_seen":60,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":245,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/images/logo6.jpg","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/images/logo6.jpg HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30470\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30470,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=141, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=236], baseline, precision 8, 236x141, components 3","md5":"c4785ad5ab08f3a78529c350cecffa1f","sha1":"a0a1512277f916ed953850ea78b8c79c39f67f7a","sha256":"01bdc8e033dc77f31c844e95ec87c60df024596cfa3b3f1420bd90fdf8263084","sha512":"e8bdae834ac6b9f1d8323a3ebfff14be036b2753f20d101e1b8e17733609ecc9f7900de2013d0ebfd8dfc84699acc7d307260c05bea0fa73322f5bc0f0a2a3d2","ssdeep":"384:YrvYNg7/M6U/ijYNg7/M6pGnjK4Pn56sHWFOzOPK4/VowEZt:YrvYy7M//gYy7MSG9566WMzWmwEZt","tlshash":"04d28e70bf5aef83f9f1467881e8c7e1b3526b28a7b3114a385c5515bb76ac00d4d34a","first_seen":"2024-08-20T14:43:16.052218Z","last_seen":"2026-07-08T17:46:01.005287Z","times_seen":61,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/css/bootstrap.min.css","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/css/bootstrap.min.css HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18377\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":122559,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65371)","md5":"9b9d87c09c0e00c7dbd7b819959c5fc2","sha1":"c89d14a22098a5acf417e38e64a5fb9db52bba93","sha256":"8c73e31d4ae02a7a5a6d128c9e5b78d842dc8c2c8fa98e74178e8bbfda1bf66d","sha512":"8df866276db3bc97286828cb3e75726f0954d0b6f30030df370a8184afec6ad8b44efafc629cadf70638dfaa390350dcec27c2905b40d7816f8005e01805a216","ssdeep":"768:ayHGxw/jc/QWlJxtQZIuiHlncmzI4I8OAduFKbv2ctm2Bm8JP+eckOvS1Fs:sw/o1wIuiHlncm28lDbzzPux","tlshash":"02c3d7a0f11031ea7323c55a71d0ed872259a153e56a4eb7f22f25d88f886cb1773f1a","first_seen":"2025-04-17T05:23:49.783523Z","last_seen":"2026-07-06T07:58:30.774665Z","times_seen":57,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/fonts/ionicons28b528b5.ttf?v=2.0.0","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:05.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/fonts/ionicons28b528b5.ttf?v=2.0.0 HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/temp/custom/css/ionicons.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:05 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 104496\r\ndate: Sun, 07 Sep 2025 19:55:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":188508,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 14 names, Macintosh","md5":"24712f6c47821394fba7942fbb52c3b2","sha1":"1b0a0de084905946a20300ca8c354865dec46764","sha256":"2ba7f20b1d8990e17a47fe3d88e4c766628aaa2baf1dd30fca0a0db59836f5f9","sha512":"e61d99095429861d335b7f1fa720d63ce3a5e7879aad0c02937b7a8367b8107e4b874637b3fa4f5590f8f3e5a68ad8c37d646e6cb315815af8b962dee1cf2777","ssdeep":"3072:ZevphGNEm96ksZlU9WZEwXnwY3Xv8KLyVT8s+mW0uu2r9FsysMgWU/:ZBEm9Z26kXWb+mN+cpX/","tlshash":"2f048e0bf7cfda4bd125a67e44f69b1319a8d0106e2353dbebce364994e76c40c6a0c9","first_seen":"2023-04-05T10:17:13Z","last_seen":"2026-08-05T08:39:49.009658Z","times_seen":13243,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-07T19:55:03.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; expires=Sun, 07-Sep-2025 21:55:04 GMT; Max-Age=7200; path=/; samesite=lax; secure\nrapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D; expires=Sun, 07-Sep-2025 21:55:04 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-length: 5543\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tidio","description":"Tidio is a customer communication product. It provides multi-channel support so users can communicate with customers on the go. Live chat, messenger, or email are all supported.","website":"https://www.tidio.com","common_platform_enumeration":"","icon":"Tidio.svg","categories":["Live chat"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Stellar.js","description":"Stellar.js is a JavaScript library and jQuery plugin specifically designed to deliver parallax scrolling effects for web pages.","website":"https://markdalgleish.com/projects/stellar.js/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]}],"data":{"size":28451,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (310), with CRLF line terminators","md5":"f10bce6365893f55bbcf4bc1860615cd","sha1":"c5e8c93a10322ec829751c6a31a3cee9c8ce4e3c","sha256":"3e2187a9c118b3622a68b8f89257a2f22e7869d48a70327341bd7064b1d25196","sha512":"2b64ef1635ec3e2035867267e73a8d4630633cf3377fde805886b6a05ff523a5c0e351373c8e838258b7f0c24fd16b4a3f4de091f025da616d9ec429e0740ead","ssdeep":"192:clkCfpy7uOB8YcYrm8bp+GX5g5BI5IZPs6Qu2GbqLQTkfnubmYmw4Dsq7pPIigjr:cSDXcYrm88GXmBl0GOLQsHwapdgDL","tlshash":"ead2da2558d1103641f38688aaa12b5affb2c18bca9e4e5537ed0bcb2ff7d05dd07680","first_seen":"2025-09-07T19:55:33.401698Z","last_seen":"2025-09-07T19:55:33.401698Z","times_seen":1,"resource_available":false,"data":null}},"time_used":873,"timings":{"blocked":314,"dns":112,"connect":97,"send":0,"wait":245,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/css/main.css","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/css/main.css HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 103\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":263,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"7de6c99397aedc3b2c2fc395bcdea0f0","sha1":"7ad6ae651f4682294f6671bcacffcbad2c1f3b30","sha256":"7441eae5addc0cbd5f3a2a9b301025eae51f2804174f11970f54843865add5ab","sha512":"7f5a9851ac2fc4bdd7a0d8f11804caafb261cec88a77541d3695ef4bd846e69ec4a892f6ebde156f8762c90c2e09eb2964874254925faa7bf3b28e495af0ce22","ssdeep":"","tlshash":"c7d06c07cd00334760f28c946209336077f9ad194ef6f0d8017b57340bf8a7aa8b9381","first_seen":"2023-05-16T23:11:23Z","last_seen":"2026-07-06T07:58:30.766007Z","times_seen":66,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/jquery.validate.min.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/js/jquery.validate.min.js HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6108\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21068,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20964)","md5":"02a4a78977c67935d388e92928e6b735","sha1":"87b58387cd22f3280a081e30470648edceb4e4b0","sha256":"46dc5b21ccb40ed8e13a10b2e62a01648a841672091671f6b03bee034a0d00d4","sha512":"4b100b768f19463bcce2398099017df00a2cecb4e3eb720232578bc75fbc5c351a5af34f7b437dc879b614bf47951b70c02db80880af0b419127c4ad6fc56362","ssdeep":"384:QeOXcp7Lm+dmr9qhk0XuExz9Bcd1Jny+0xC7WpdOC8PGDm9KLNKI9ci9sk:dfXdmr990ekpqJny+UO798NBc8Z","tlshash":"d592b94d7282b04a5b9620f5a45b560ba1f259b8600ce03cb5f8d4d2fdf8fc95167fb8","first_seen":"2023-04-05T08:37:20Z","last_seen":"2026-08-05T12:03:02.674963Z","times_seen":4547,"resource_available":true,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":214,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/elementa0d8.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:05.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:39:58 GMT","end":"Mon, 10 Nov 2025 08:39:57 GMT"},"fingerprint":{"sha1":"44:CB:8F:8E:D2:9D:AC:A0:56:75:9B:9E:4A:6A:65:EA:CC:43:4C:FD","sha256":"15:86:00:8E:73:47:89:3C:17:39:CA:07:A2:4C:2F:BA:E7:50:94:A6:0F:11:65:AC:23:89:31:7E:16:40:34:D5"}}},"request":{"raw":"GET /translate_a/elementa0d8.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncontent-type: text/html; charset=UTF-8\r\nreferrer-policy: no-referrer\r\ncontent-length: 1587\r\ndate: Sun, 07 Sep 2025 19:55:05 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T15:03:21.171926Z","times_seen":17726475,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/images/testimonial-head3.png","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/images/testimonial-head3.png HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22985\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22985,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 109 x 109, 8-bit/color RGBA, non-interlaced","md5":"b885947476ccb3f7233bc991ab0949ac","sha1":"e02a42a0ada10e5610a3b9bf314d4ed3e8b3f366","sha256":"97895dc7017c814cd9b49a7ddf42e6e96b39d3932cbe4482498da7750c88ba13","sha512":"af196781e414afb44e82e13aeae2ae9e6ac900cc28ea50e24448e9bd719730a525fbc17736b4534f63272dfb26b279af28c7f1544c3597436223eeff6d7f44fe","ssdeep":"384:Qz3zeoh7w76WAWJoAgIt8Ll6mGvtck/uZqgy2z91EkNCAJ2Xr/MeaiHyOp:w3zeUs6WAsoAgIt9pvmkZgr91EkN32Xh","tlshash":"68a2d07eeba0ce5245af908e6c9385210c2547801b629cd3f897cb3d4e1ccf6646ca9e","first_seen":"2023-12-20T09:18:58Z","last_seen":"2026-07-08T17:46:01.000836Z","times_seen":60,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/images/news1.jpg","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/images/news1.jpg HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26854\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26854,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 380x210, components 3","md5":"5ae8f447b10d1505140d9fa0df744847","sha1":"e7fc81812e770acf71b6048aff5909df879aae44","sha256":"c106f2a0efb3bdc8ec52ce6d0e2d60a2932b2fff647abef1e3e40bee2be64e84","sha512":"2026ca7f04720609ccbcbafd5fe2c6bb98fcb5dda2cc1135f11835671656b145e0ee237b582cb12750dede6a06ac39e91b067d51be29cc63f120cc2c830b679f","ssdeep":"768:9asbJMmcxGe/vZcXYqtxP1FmLqlUl4V/6j2od1:9a4Mmtq2nTPbmLyUl4o1","tlshash":"81c2e176ec234e69d7c6433522b5c476ed0f4ef479d6da08a8c732476ed62138d2842e","first_seen":"2024-08-20T14:43:16.054157Z","last_seen":"2026-07-08T17:46:01.006687Z","times_seen":59,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/jquery.fancybox.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/js/jquery.fancybox.js HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13322\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48706,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"921e9cb04ad6e2559869ec845c5be39b","sha1":"1cf3d47b5ccb7cb6e9019c64f2a88d03a64853e4","sha256":"6c78ce6b6d1928630b903084ea9d503643f303ba05455860cc7cd17f7687cc65","sha512":"91ee03bd3766b2584c70361ad0ff4729cd2745fd661089c077884d1e6c181b6c2244ac7ed1c94a4cbf74f8101e9d4c54e2af52c55f35586a0675fe12df5e7ac0","ssdeep":"768:I29rFqkxIWVSSy7DkA7DxQPgsvtrJ68ov6iIMdl7YjSg/bEfOKk53tlUgb:IYFqkxIWVShDlDxQE2Al4Efi53Pb","tlshash":"af23a8d0f7ec317bc67620069d1e21ec613ed4329b0244bbbd9c666857c46ec83a5fa9","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-08-05T05:39:33.713856Z","times_seen":3191,"resource_available":true,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/images/testimonial-head1.png","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/images/testimonial-head1.png HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25121\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25121,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 109 x 109, 8-bit/color RGBA, non-interlaced","md5":"a79c56d2a05ffa8052f488307ffd0446","sha1":"6fa7df5357c0dbfdf5eb37c8068ce383a7302989","sha256":"38ae7a11a291e120978c533d0ef49fd974dae528741939afa9e51d960e79468a","sha512":"3a077131397a647fd4c6a37dbccc6b00d57f9c203da1b7975018339c82972f8836737ea92795f51980acd0492435fc89fc8b4450acaf24073c930fd810bf241d","ssdeep":"768:6mcuerbimgxjZ3d54lBfcye/Yny6Tjh/opF:6mcuQpkjZc9ssyY9c","tlshash":"75b2e169bc71114b405fc9076cba10ffe464ccd558c064f8a989ccec56bc07aa6d7aa5","first_seen":"2023-12-20T09:18:58Z","last_seen":"2026-07-08T17:46:01.004574Z","times_seen":60,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/images/logo2.jpg","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/images/logo2.jpg HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22878\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22878,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=141, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=236], baseline, precision 8, 236x141, components 3","md5":"c987e8b807fccbff3a1deff01d7d8550","sha1":"2fed68d85feb691bbb85e62f95db9f64216bdb9d","sha256":"fb1eb2c16ac313787aaeefd9aebbe107368d9fc18e4c0a8a2f4d62d482b60032","sha512":"1173efed1810d9a6462e6050b15920cd77c4c52a889bee541909d9f2123ad138e554ddea0aa8d13126525253fdfb40539635f1f4868c85792bdce0cf6ff6c0e7","ssdeep":"384:3rfRXHRKy/i1RXHRKGGnRK8/h8/ewpCHJ2H0VkXnJijR:3rfRF/mRZGF8WWw3F","tlshash":"57a29f65bb0dee83f9d0113b56a4c6ea2312dd4096f326563c2e70267b72f555c2f312","first_seen":"2024-08-20T14:43:16.056284Z","last_seen":"2026-07-08T17:46:00.996148Z","times_seen":61,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/css/jquery.fancybox.css","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/css/jquery.fancybox.css HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1292\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4840,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"471e0fef5b8fb45c966c2d54d2d34ee2","sha1":"28b17eca621caa317f32099dd7655d434c934aee","sha256":"7d03a2bbc7518cfe455ee6f6a322c3f05c2295f0e1dae613be864bbe7b1aca08","sha512":"a17f5262be993bfb583803d65c9de272a704ef559dca6ec2d5cdd8ae6c4f694e974a0c8d53eeeb70c4d76b9d56b0b4df2df462fb19ebc40dfe19a3c989eb9323","ssdeep":"96:GKXaIzQFRhRdrlAWJDo0Oy8Li4cSX2W4LeO2gnTMo:GKQF/7rjyStLNnj","tlshash":"d4a1116b6a503a01643f9e50db6f9a45d63f2486aa0b4efb611cf92883d53e011f3dcc","first_seen":"2023-05-16T23:11:23Z","last_seen":"2026-07-06T07:58:30.739621Z","times_seen":60,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/images/banner1.jpg","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:05.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/images/banner1.jpg HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 174236\r\ndate: Sun, 07 Sep 2025 19:55:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":174236,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x581, components 3","md5":"e480a2a0a8a1a5a9aedf670ced5acf46","sha1":"4de9eaa2955084b030aba0bd5d16ad26c255db06","sha256":"197f05298caf34b554fec3e7c629e8c692c17964b8d5b2912337165c5324991f","sha512":"595e7be327da1c9a17c6db2d6e8ab4686af8aaac15737d4633811c5642ba9d82f99b9eafec7f817a15503dba9e0cd4e6f73c7b3eee3d79c30b3fad3be8b30f0b","ssdeep":"3072:eZOsTJ/nA6HyWNO+mZp5ybdySU015UW97OXW+wQcSurahNNR2LVi4rYmRRMQYd:enTJ/n3HRO+mT5ybdySUnW97OXW+UkNr","tlshash":"56041224e5924d8540adde2347149eaa2af7c1c37150e84b1b2cbbfed29ed88d271f5c","first_seen":"2024-08-20T14:43:16.057932Z","last_seen":"2026-07-08T17:46:00.980693Z","times_seen":55,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/js/contact-form.js","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/js/contact-form.js HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 398\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1679,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"25bb7b304b1e5670f12efecc20d5cdf7","sha1":"11eae764f91eb82846c64e6625351d27e428c0f5","sha256":"648a71e7545c79f8aa8dcbfb2aa601894f92c4074c9b507625212deda8fd4738","sha512":"366ed7a98dceb1e04a89f66cca690ea2ca6beb4e9b62e09754449f4c4920b42b98c801d20561674c8e0b9623ac4ccc6dc66779fe4893e63661c56d25aec972d9","ssdeep":"","tlshash":"e431814daefd29a5107372b6a17f22019937c11f6a092d31fe8c00b80f9d75d76a7b64","first_seen":"2023-03-08T09:19:52Z","last_seen":"2026-07-06T07:58:30.755619Z","times_seen":66,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:05.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"92:56:50:82:E4:D4:6F:F6:7B:08:95:2A:7C:4B:F5:6F:25:84:83:94","sha256":"A3:71:9C:57:37:7B:05:4E:9A:BB:BF:7C:17:AC:AB:9F:F1:32:11:03:1E:97:2E:B5:1A:B6:60:D5:7D:87:FF:8E"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rapidexpresscargo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 05 Sep 2025 08:13:09 GMT\r\nexpires: Sat, 05 Sep 2026 08:13:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 214916\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-05T15:01:15.191172Z","times_seen":956110,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":85,"dns":1,"connect":29,"send":0,"wait":33,"receive":6,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/images/news3.jpg","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/images/news3.jpg HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 37316\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37316,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 380x210, components 3","md5":"6ac1dd8f60d4806efc15793bea249303","sha1":"4f0a92df41462e676c3f66c4271373d373dd88fa","sha256":"72caa04bab9f3b5399712aa819de069423c2e5f6b62cf9e6adc554b49567ad55","sha512":"a21fe5e6276bcf158e498790d12dc6d1d0eed0b828df24bba101caf298e1eaa03806310ab3609342d7b759db3583bae48830b04156442e34070b404612307e29","ssdeep":"768:9Idaq5V3u1/+MjxkPLb1Co4s05NvJsUC8TDLk2MPZntn7gWE/I/JrNz9D+akD+uP:9IdlVS+sGPb4sIJrU2MhxWIBJpDXkD+Y","tlshash":"aff2e15aeae10da199fff5d4819dc9478acb5760ead98419d02a71c22890bc2ccfe9c4","first_seen":"2024-08-20T14:43:16.024776Z","last_seen":"2026-07-08T17:46:01.010152Z","times_seen":58,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":205,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/storage/app/public/photos/nIH4SkUJJuwWoDti5hEFPd0OVRDV1b1gDAMOzK2U.png","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:06.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /storage/app/public/photos/nIH4SkUJJuwWoDti5hEFPd0OVRDV1b1gDAMOzK2U.png HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 13 Oct 2023 07:33:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3472\r\ndate: Sun, 07 Sep 2025 19:55:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3472,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 196 x 214, 8-bit/color RGBA, non-interlaced","md5":"b84deb502c46112a54216e9fea05b42c","sha1":"ee9c3ccf56e3c13f2c453972b8c9ed3d9be5de5f","sha256":"9ec380220c3b0ce8c20831836f54b6493269cc2a18888d908632f2fa5c815b86","sha512":"718bacc33244b83a59a4385b23d27745eb214d3cea947e5ae11a620b29a558b76630463d8b13c4bd454fb50e8bfcdaddb096ca6d95697d33175b3e8e42a359b6","ssdeep":"","tlshash":"ff612dc2f24e9df2442ec526db3ad91e86a208ec1d8a290a4b15c57f4894cdd326c455","first_seen":"2025-09-07T19:55:33.358239Z","last_seen":"2025-09-07T19:58:41.038333Z","times_seen":3,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidexpresscargo.com/temp/custom/css/custom-style.css","fqdn":"rapidexpresscargo.com","domain":"rapidexpresscargo.com","tld":"com"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:04.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidexpresscargo.com.rapidwavehub.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 23:41:56 GMT","end":"Sat, 25 Oct 2025 23:41:55 GMT"},"fingerprint":{"sha1":"AA:4B:3F:21:11:50:00:7F:96:12:01:C8:F1:A4:DB:09:13:7C:81:7E","sha256":"7D:46:6F:F3:4D:3A:09:B2:5C:9F:9D:AE:35:27:D8:0F:76:26:95:C1:80:CF:2F:7F:40:C7:93:0D:04:C7:54:25"}}},"request":{"raw":"GET /temp/custom/css/custom-style.css HTTP/1.1\r\nHost: rapidexpresscargo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidexpresscargo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjZianNFYWVkZHkzVTRuRTkySXVNNGc9PSIsInZhbHVlIjoiK0FpWEcyMnEzbkdQdHl5V3lDRUZ6R1dQVWxWRWJrbnd4WjkzRmFyWGNxNU80dWpUZkZ6ZFVQMW9BUy85dUFuN0xhNE5TWjZIdldjODBkclJzV3A0QU1ReHRwcVNFS2RCbkdLZDVMN2RJUXpWR0g3akVuUEJVL3BjMDRST0NoSU0iLCJtYWMiOiI4ODg1NWQ3OWYyY2Q3OTM3Yzk5M2RhZjBiNTI1NGNkZDZjMjU1YzQ0Mzk3ZThlNDUzY2UwY2I2ZDdmMjQzY2NkIiwidGFnIjoiIn0%3D; rapid_express_cargo_session=eyJpdiI6ImJxVDM5RzFiZm14TVZyV2gxVHVPREE9PSIsInZhbHVlIjoiVjVBS293TFdDQWt5RndGRmlGZ3c3MHJZZ05UVUw4Y0E4UlNGVHQyQW1xYXJKL09Hd0I5aTNCVDVYTUdRcWpIWlQ3TXBxb2xidHdzNVhYNE9mTElwMGF2MlBJaVJGUUR5MFZMRFNDbXJFK2dvY2Erck5QSmd1Zmk2T2pUZFMydTQiLCJtYWMiOiJiNjBmMjBhZTViYjc2MGJkNGUzYTg0ZThiOTZkMzk5OTgwZjhhODE3YzM0ODY3YzRhODljNzZiYTFkMDZkYTllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:55:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Sep 2023 11:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 224\r\ndate: Sun, 07 Sep 2025 19:55:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":550,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"51110467d04e1701e3b186cbe678251c","sha1":"223afcfb3b84c053f0e8d286e5d49402a21e6271","sha256":"900b1e2001834f38c1e352ced21834621329bc66fdacb32f06f385fd99e08694","sha512":"6feb5309d33c66ffb7001745f2a86a3a40f99d143bd4fa29ea58d823c3ab6c21717a12cbabfaaecc12cbb3aae964f356ba69257552c65b28d39cbbc0ef9cad9f","ssdeep":"","tlshash":"14f04699a680413310374f0e6073ba35b62be1334601b6393d90d72422ca9f988a2787","first_seen":"2025-04-17T05:23:49.774305Z","last_seen":"2026-07-08T17:46:01.003885Z","times_seen":58,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"rapidexpresscargo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rapidexpresscargo.com/","date":"2025-09-07T19:55:16.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"74:C1:9B:D3:5D:65:CE:2E:7C:CC:41:C0:7C:F9:2C:AB:41:A3:EC:AA","sha256":"BC:18:82:63:1D:AE:2A:9D:1A:A3:B1:77:B2:AF:6F:0D:AA:CF:1A:88:5A:51:22:46:A8:66:C8:4F:9C:92:20:32"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rapidexpresscargo.com/\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1184\r\nOrigin: https://rapidexpresscargo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://rapidexpresscargo.com\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Sun, 07 Sep 2025 19:55:16 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-08-05T15:04:42.237041Z","times_seen":584839,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}