{"report_id":"51fbd172-b6ee-440a-a220-2b5d76508f5d","version":0,"status":"done","tags":[],"date":"2026-09-18T20:41:18Z","url":{"schema":"http","addr":"ralcar.live/","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ralcar.live/","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"title":"СТО Варшава. Русскоязычный автосервис в Варшаве RalCar","dom":{"size":356716,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (60895)","md5":"2bcb22b7d928125ab6e482f9765155bb","sha1":"3779c574fde7a2966ab19191cdff6cb44c109f5d","sha256":"ee084645c559af4accd48c193a034f83911760bf2ae44908d2912f3b30ece97e","sha512":"a7dde51008ddcb30d80f10166d975be336c1d0a9f968df676fd2d6f34f2afb87062e2023b2f1d37d6fa3addd6a1c2eb2db3336d7c21accb70f646f5c3665fa91","ssdeep":"6144:lkZgwh1nAukdDO3Xyr5Ir5eh0dT9/sF0x0H8Vl8DHj8F6hOQrgmt8vyOSscAgRc0:WZgwh1nAukdDO3Xyr5Ir5eh0dT9/sF0I","tlshash":"6574e8bb90a6001a03238b9592cc7b1cad25d03fd9a38ad97354594ec7d2fe6139b35f","dom_hash":"domhash6648b57daa0e990356e49b2c6b461f30","first_seen":"2026-09-18T20:41:37.294446Z","last_seen":"2026-09-18T20:41:37.294446Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ralcar.live/","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-23T20:41:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ralcar.live","ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-18T20:32:34.263867Z","last_seen":"2026-09-18T20:32:34.263868Z","alert_count":170,"request_count":34,"received_data":824387,"sent_data":20257,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"C3.js","description":"D3 based reusable chart library","website":"https://c3js.org/","common_platform_enumeration":"","icon":"C3.js.png","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"EWWW Image Optimizer","description":"EWWW Image Optimizer is an image optimisation WordPress plugin designed to improve the performance of your website.","website":"https://github.com/nosilver4u/ewww-image-optimizer","common_platform_enumeration":"","icon":"EWWW Image Optimizer.png","categories":["WordPress plugins","Performance"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress:7.1.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-09-13T23:01:27.934223Z","alert_count":0,"request_count":3,"received_data":20195,"sent_data":1797,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-13T23:16:40.429603Z","alert_count":0,"request_count":2,"received_data":122757,"sent_data":996,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":10596,"sent_data":533,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-09-13T23:34:00.595824Z","alert_count":0,"request_count":3,"received_data":933966,"sent_data":1668,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":7,"received_data":231422,"sent_data":3913,"comment":"","tags":null,"fingerprints":null},{"fqdn":"monitor.fraudblocker.com","ip":{"addr":"34.96.65.117","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2004-01-10","domain_rank":384972,"first_seen":"2019-05-08T12:38:04Z","last_seen":"2026-09-18T20:32:36.041567Z","alert_count":0,"request_count":5,"received_data":68657,"sent_data":4055,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"ralcar.pl","ip":{"addr":"146.59.71.167","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"domain_registered":"2024-08-05","domain_rank":0,"first_seen":"2026-09-18T20:32:34.267521Z","last_seen":"2026-09-18T20:32:34.267521Z","alert_count":0,"request_count":5,"received_data":10484,"sent_data":2637,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ralcar.live/wp-includes/js/dist/hooks.min.js","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5107,"data":"","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-09-19T05:18:24.008266Z","times_seen":10979,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-includes/js/dist/i18n.min.js","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2f655e068f223e5da12d436aac88d38","sha1":"003146f39636a30ac250b0f043d61bcc01117b17","sha256":"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9","sha512":"c3fa9c3955bbe3b74e30755c4c551204aa1a034f8d48c8ab2747eca57466409ac0dfbdfc76a7a3554ea64cdbd730bf3cae3c1270382e66df24afc8b8ed48bf38","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMs:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSn","tlshash":"f6c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","size":5791,"data":"","first_seen":"2026-08-19T23:17:42.197722Z","last_seen":"2026-09-19T05:26:30.910402Z","times_seen":10818,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ea203e93c5295bc8e92d4f3537990b0","sha1":"09ce9eaf9366dcaf25c8b48b639596686977473a","sha256":"7befdc90a6785d4372a8402049f82cba6a6bd2a27c46bb53e34e75cfeed3538e","sha512":"043f1881ae4b2bd9d128985a1fcc4f0f9f35aa422ec29f01bfa6aa871127a4f49f3fa9999135a4dbb3c79e3dcc76988b585fbde9d9ea60b99105f870eb0d708f","ssdeep":"","tlshash":"9d01b1372e11783a416599bef33ff324a4722053041098e6ecbecc989ab4bd102d59d4","size":773,"data":"","first_seen":"2026-09-18T20:32:45.529585Z","last_seen":"2026-09-18T20:41:37.372781Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fac9419e0a4c4b45ec150e400a959d8c","sha1":"79ece6c0cdc5a7cad103ccd6e32aef80793211a6","sha256":"24426f449db0a1effc9a2118370b418d5de8b9fc11076a115baec2ff5250fffe","sha512":"2dbfa5289fe1b4811bb8fe4e409f229859ba27c753f1737c5e25c4b403bdded8e7d2aa11cae71cb1d49bd0d613e9bc15601ac2b0d14ef71fa75e08c4aa7ae296","ssdeep":"12288:CiPDodYZjHqv8FNaieyWjeKizB+JgK9RP9RzGhBXDAZY:nDod1Wv/z4JgK9R/zpZY","tlshash":"dc053be9b445b6f54322f5f1606b6418a33e9826d84c081f7199d9f06eb4c0eb07beb7","size":846252,"data":"","first_seen":"2026-09-14T19:29:34.285397Z","last_seen":"2026-09-19T05:28:52.734498Z","times_seen":1757,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4ca0e2519e767986abdd22300b37eaa","sha1":"256b01ceae3f355505d3e7f32cca280890727000","sha256":"ce00833471c516ebc69065c118953985873695ef6575a3991b7d33bc46d1dd94","sha512":"63a7bb5bb90e1b691a1d24d98f3097cb36b11dadee6a957e19cd55086d0eebba0fd7dbdcdf4a72e02e9585a621db54b0b785aaed2aa825fbf19f891761439acb","ssdeep":"","tlshash":"31f08248b80a1d308b6b12e735ef7104587672a4b6ff85f808f3016c1da5b6a6367e8c","size":512,"data":"","first_seen":"2026-09-18T20:32:45.53484Z","last_seen":"2026-09-18T20:41:37.37387Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"32b162b75fef3633afc95facf3cfa6fa","sha1":"841bce20747a7d419f11236c029e374dcd0c373b","sha256":"c9b26e5005978069d8c5b2403e543b0be1dacf09e0f61d9c187a4d750c853741","sha512":"56e1d49c732489307ef393c3ef48262fca0b501d43e860026106c846e1a20594228b7d8a3ebf6b93bc19ea169f462ef4a85f1c506981a396729417efe58d6a41","ssdeep":"","tlshash":"5d11d496711a5935658b417a32baf328b823311a48061452cdbec85c9dd85f2c667c4d","size":928,"data":"","first_seen":"2026-09-18T20:32:45.52554Z","last_seen":"2026-09-18T20:41:37.374606Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,ZG9jdW1lbnQuYWRkRXZlbnRMaXN0ZW5lcignRE9NQ29udGVudExvYWRlZCcsZnVuY3Rpb24oKXtkb2N1bWVudC5xdWVyeVNlbGVjdG9yQWxsKCcuY29udGFjdHMnKS5mb3JFYWNoKGZ1bmN0aW9uKHNlY3Rpb24pe3ZhciBidXR0b25zPUFycmF5LnByb3RvdHlwZS5zbGljZS5jYWxsKHNlY3Rpb24ucXVlcnlTZWxlY3RvckFsbCgnLmNvbnRhY3RzX190b2dnbGVyLWJ0bicpKTt2YXIgYmxvY2tzPUFycmF5LnByb3RvdHlwZS5zbGljZS5jYWxsKHNlY3Rpb24ucXVlcnlTZWxlY3RvckFsbCgnLmNvbnRhY3RzLWJsb2NrJykpO2lmKCFidXR0b25zLmxlbmd0aHx8IWJsb2Nrcy5sZW5ndGgpcmV0dXJuO2J1dHRvbnMuZm9yRWFjaChmdW5jdGlvbihidG4saWR4KXtidG4uYWRkRXZlbnRMaXN0ZW5lcignY2xpY2snLGZ1bmN0aW9uKGUpe2UucHJldmVudERlZmF1bHQoKTtidXR0b25zLmZvckVhY2goZnVuY3Rpb24oYil7Yi5jbGFzc0xpc3QucmVtb3ZlKCdfYWN0aXZlJyk7fSk7YmxvY2tzLmZvckVhY2goZnVuY3Rpb24oYil7Yi5jbGFzc0xpc3QucmVtb3ZlKCdfYWN0aXZlJyk7fSk7YnRuLmNsYXNzTGlzdC5hZGQoJ19hY3RpdmUnKTtpZihibG9ja3NbaWR4XSlibG9ja3NbaWR4XS5jbGFzc0xpc3QuYWRkKCdfYWN0aXZlJyk7fSk7fSk7fSk7fSk7","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"feeff9a1a9c4a6f4b7c8b85b4b324cc8","sha1":"fc63deae7db3ad20d7bf72cd5ec354e93f983f21","sha256":"8ee5e966153faab5808171fed75be8737e86271b050cd7012b08468e73b45bcf","sha512":"3d8ed7722fb94e7c8ed82a6dd50994f193cf6a2849a2ee7f09612bce7328e82b525519eb8bc3990d96a3a192def1a2038ab83e92fdad227512889457cda5ec14","ssdeep":"","tlshash":"89f09e69b938357701e32b76e58b2ac4773ac48d84c001c56570c8c50ef45844c676df","size":645,"data":"","first_seen":"2026-09-18T20:32:45.532277Z","last_seen":"2026-09-18T20:41:37.375352Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/cache/autoptimize/js/autoptimize_single_472e6a5ff510c3a429d8f572ac157744.js","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1586d2c400e55b09d851df6c7313f22e","sha1":"b0aa44b7320f863286b5e48682a979cffa76baea","sha256":"27581d659686b23b1d98063c3f09dd928e110cc9b6364a6a806bb348c4803c72","sha512":"1044d6d009826a53d4993bb69ae25aefafdd98839e8f157da2e2499f4bc93995fa83287ba5b4feed7c6841c4e8aed3220e44d7de3f33cf21f825012eca6e0ae9","ssdeep":"","tlshash":"f761de58360037679aeba5d6861f431ba27cd33b9220b479b0f08bdc0550d71d5fb66b","size":3348,"data":"","first_seen":"2024-11-02T09:25:34.447088Z","last_seen":"2026-09-18T20:41:37.359978Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=6Le1KGgtAAAAAAnhTiISMdUH_TicFHtgl-9JCukY\u0026ver=3.0","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e9508f0a8c480f49f0064188d3f1307","sha1":"ff8a97314e38103d121ff960ebea50b4e5790c01","sha256":"20cc319b0710f11848eb12925b05d3614d0bf07a7936b170ea6d8158c215eabd","sha512":"ec9b1763d39f43712f2d4a9b5effccf2e8cdbe332a4a886c3aed5d64f5e171fea2b60e3f5830a95b739a4267b6b4972d98a6d027d2790c589740b7f32d845214","ssdeep":"","tlshash":"8e1165730604a0354b3209d4e1fecbb1e842b01cf14c85e8a921cec51e7adc7ce016c4","size":1010,"data":"","first_seen":"2026-09-18T20:32:45.505598Z","last_seen":"2026-09-18T20:41:37.351517Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"357bfdff13eee21fb4220c58136df9e2","sha1":"095015dc040e0a161b9a7d9cf05ce86a3f507315","sha256":"30bdfe1c8165b2129eda3e894a9b27ea3d84712032b59866e41bd8ccab0561e6","sha512":"3135e9b9cfa31a852c6029c7b2eeb961a138931e4080d5f57f89e4c12af57a1fc7dffc4a97b996b1e12d046b25f9011a1868e7c6d990a156c3c51267c26562e5","ssdeep":"","tlshash":"002115f8714161ef56f5595d972ba984f33b05e1bc1bd440c40a0c5c1f15f43a42668e","size":1256,"data":"","first_seen":"2026-09-18T20:32:45.533572Z","last_seen":"2026-09-18T20:41:37.376169Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/cache/autoptimize/js/autoptimize_single_31794ef61bec31d91c37be16e3565297.js","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ce7f0ffbda1ed0d4c82d64eb2417b16","sha1":"b0573d35da726e05574d95f101fa3244614572c0","sha256":"1637efcaab6ff5e847464c3243ff6e789c0ffbe095c8c94792c5e2f6c801497a","sha512":"77e1d18ceadaf08c5d9e17d9041491260ac6b582dfef1f5cfaa8226a149e382cda0b03981116f70d1871504028674d73c2a6d229389e451c85411e8723b56bb6","ssdeep":"96:rjsoA34slDdIyJtSaydxC7jvrmYvF8acv9xtFrFwa0s/uJrCr9:soAtzDUdxKrmsYv9lZwa0sGJrCx","tlshash":"40d1c729336075ba019f64bf39af57c47a3265818a42d044e9f8c85a0f78c4276b7e3f","size":6427,"data":"","first_seen":"2026-09-18T20:32:45.482362Z","last_seen":"2026-09-18T20:41:37.360745Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/cache/autoptimize/js/autoptimize_single_ec0187677793456f98473f49d9e9b95f.js","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec0187677793456f98473f49d9e9b95f","sha1":"8c55e0f4a29865e871f3d54be8d480a0665891d9","sha256":"df0ec8330290d184b1084527076cb87d41b33ba706ff5ab579d761f0cb6a744b","sha512":"84b468de22634404405e52cda2844d626b4d47054739971d677f0e63fd683dcca100550419b945391236846df54b65fb43ee4d6e7f7692eb0d414584e2594108","ssdeep":"","tlshash":"9811e1305a3031740967ca6182eb53e1be31e461f0a3898159fc4e141f7ced598b3d86","size":934,"data":"","first_seen":"2023-03-07T12:57:48Z","last_seen":"2026-09-19T05:50:53.655613Z","times_seen":114455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8f2e6137e1e2d8cbb9b0f33a54d9f0d","sha1":"0a696b667e42412f70d0e09cfeeb5849e570d792","sha256":"14a96880edaf7545122bf3594d4963e2e26cd6b810e3cc1a6eebb7fb04aecc62","sha512":"a7eeb3a970a3b9257adedd2fbab2c489bc8aef71ab10c1b103f4f40c93afc383e7478ff24ff0a66d082f649fb9259b27bc665b242fa78f742f38105f860a9f32","ssdeep":"","tlshash":"3211906475b50db5d85ef43eb4dec32a2859fc1691072404dcfc28196924dc873b0f29","size":924,"data":"","first_seen":"2026-09-18T20:32:45.528232Z","last_seen":"2026-09-18T20:41:37.376914Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"monitor.fraudblocker.com/fbt.js?sid=jSRVZBREtmdhqmo8MyPFa","fqdn":"monitor.fraudblocker.com","domain":"fraudblocker.com","tld":"com"},"ip":{"addr":"34.96.65.117","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0a1952d9edcc1ef5b89533ee55b1cbc","sha1":"2c0b839f21aa364abb0f24d361a4749637d0be3b","sha256":"ce2cea9175d1e1dce41f70eb70c76cac61beb90f055d07f0dafccfd99f105253","sha512":"54dbaa062045cfcb9953f4876514e6773c9a69db87f9c38387bda8827837ddc415faafc67cd3a08c58ead96fbdbcf3ed38cff058713536d25b1cc90c349c31f9","ssdeep":"1536:qJ108MY74yvVajjmNMJflCr17WhKo7zYghrxu:qn0RYsyv2FlCr1qrPltxu","tlshash":"71536becb3d3b23c13a7a56dd63f6000793b2d11a9084461e5a6d6813cb8d875137fba","size":64726,"data":"","first_seen":"2026-08-14T09:40:47.377936Z","last_seen":"2026-09-18T20:41:37.309885Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/themes/extraweb_theme/js/jquery.min.js","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-09-19T05:44:34.765465Z","times_seen":145314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHdwY2Y3PXsiYXBpIjp7InJvb3QiOiJodHRwczpcL1wvcmFsY2FyLnBsXC93cC1qc29uXC8iLCJuYW1lc3BhY2UiOiJjb250YWN0LWZvcm0tN1wvdjEifX07","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f62ea703537a714cd13a76c9284672a","sha1":"2e68bfb93c12f78d375a13b742c678a9e3936e40","sha256":"73a7369b83f4cea319ea39a9ae4eb581336f340edc836a74d5fc2e1633736601","sha512":"cf65dacc65e0ed791dd49635c2670028c860e388d6fd97acd42521bcae971e068c6d090c04d3948bc7a6c6e7e11a0c825c35afaf289ffbdd6b6485b26030c4df","ssdeep":"","tlshash":"47b0126d5642aa0528a9d3d8070c32303250a4174c177307d74c01444b58168c405086","size":93,"data":"","first_seen":"2026-09-18T20:32:45.527121Z","last_seen":"2026-09-18T20:41:37.377555Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@fancyapps/ui@4.0/dist/fancybox.umd.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ce18f9ca64e6fdcac07ec7e97dac4c7","sha1":"603af3e02f381a658f135eb80f4eef78cc7e750d","sha256":"d1a7f655b0b8be63ec6bc38b04028198ba32b8aab86c194a2b628e80c59aca2a","sha512":"29b375fc71837e0090f63792b3c3b8b7725eab61b1bf6e0a4d6bde37d40aae4ffce1c9b97e953c6a7928b93e4db1ad4f9b1e123571d98486afc183269dbf721e","ssdeep":"1536:qlSed/3kDaF+oQi/86ZDmvFFRhzlTmtMDbg7MQG:G8Q86kvDRhLXPQG","tlshash":"32a3e62a724134318ae2b1a9911f6709b2766124a583c09d707edcd50fe8f8d30bbff9","size":105639,"data":"","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-09-18T20:41:37.308185Z","times_seen":3401,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,KGZ1bmN0aW9uKCl7dmFyIHM9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0IiksaD1kb2N1bWVudC5oZWFkO3MuYXN5bmM9MTtzLnNyYz0iaHR0cHM6Ly9tb25pdG9yLmZyYXVkYmxvY2tlci5jb20vZmJ0LmpzP3NpZD1qU1JWWkJSRXRtZGhxbW84TXlQRmEiO2guYXBwZW5kQ2hpbGQocyk7fSkoKTs=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7bc3538be9025d503d3f6d050f8feb2","sha1":"c247b2d3a6f591e56f885b07d566116a4ee773d5","sha256":"d866a949baa940b8ad66c9921d33f774fc76bcfaf08877c5e3617ff1de3fe265","sha512":"4b421caa85a95908e55cf296f7f9db1530633a191c33b5421e8010a3ec94e774725c84ba31dfe0345b7b3bf2c4c2b0b774d0dbf46c608251d1e2c74cd5b0cc5c","ssdeep":"","tlshash":"afc08c5a3a3045912750396a927aebec70223159ea31d841819decdc7a0edab054352e","size":173,"data":"","first_seen":"2026-09-18T20:32:45.536804Z","last_seen":"2026-09-18T20:41:37.380315Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/plugins/ewww-image-optimizer/includes/lazysizes.min.js","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8752159a5e0ddfc3d3c527bd76d1f23","sha1":"70f14b169067311f26b8bd73e614e1818a5c2594","sha256":"54a86ea688d94f712027abe8daae2e98745551b759efd7a078857f3f401797a2","sha512":"52b81637f9d031e912055274071173bdf7b39d9b9c94d9cd50961149781033d055e6ab8e894cc111e0780ee49a9781bca85bb29ddeb31ea201fb4673b2ea746e","ssdeep":"384:VafPSOETTi+mDsLRW+mrDPSxV/Lqb88FXNlfkrsnmzV/GAKOvPC44jOqoDgTar3H:V2kTTi+mDsLs+m3q/Lqb88PlfkYnCV/x","tlshash":"b27209ee320975b3b95710f0515f620bb232753bad07d820aa39d8e19838cd67237a7d","size":17426,"data":"","first_seen":"2026-08-21T12:55:43.459279Z","last_seen":"2026-09-18T23:35:53.915148Z","times_seen":274,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/themes/extraweb_theme/js/jquery.validate.min.js","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2adc424801bb73bee0fa69c743346a66","sha1":"0ae93cd2e60fe32e1e9027753ad5886c1881fbc3","sha256":"4d387da2ff19dfde5d0c90c4c0f0f97a8da665a6e0f9553758626d0135c08714","sha512":"cacb12894aa93be227a8fda59ad38650b54f505b8b0bf208e78a825cc86bd6bfb524279c0ed4280a69381508f08069cdcaa1919862e7d005165372b673104c70","ssdeep":"384:Q6mrHp/KLFWB6/tX2lHJdkMiYnFpg5SLwaE2fSNAc0Eny+RWuK7NeB2wV/vtrx+V:gcWB6/8lHJdkMioFpg5SUB2yQEny+NN8","tlshash":"76b2b78976e671065e9720f4509ba60761b669a0e008e83cb5b8d4d2bef4fcc50f7f78","size":24375,"data":"","first_seen":"2023-04-05T03:16:58Z","last_seen":"2026-09-18T22:56:28.098392Z","times_seen":4102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-includes/js/dist/vendor/wp-polyfill.min.js","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0632dd41c1af05ac1a5179ca21aa0d89","sha1":"8ed8a16a9df3902c768a61b7af932b2c393214fa","sha256":"ed0f8d45bd1d66bcbeb726ffe608645ffe06c328ef2bba4b1f269524440bae9b","sha512":"5e644df0a3cf1efc803a980c372b2bb9feb5dfad67b9e9ca0f4d3011a7ab5e42a1721826e5637fa79501287e628b450a4f54ad7f005caf074a750d248b6248e2","ssdeep":"384:KE09l/D/yuOiW+DJhXLzGxAi9cluvqx/Z4mlionbJwPxkqSYcGIOIUoGcMirjcym:KTveuO87N9IqtXFGHIzX6B","tlshash":"86d28289b690b4e302e3a0b4409f544ab1b75745bc1ecad1e315f6d0bc7d84ea0a7f9c","size":29873,"data":"","first_seen":"2026-07-20T04:53:37.788056Z","last_seen":"2026-09-19T05:50:53.650008Z","times_seen":2253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/eio-lazy-load-js-before","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"50c986938ac04b15674b3191b0255da7","sha1":"ccc6278650b07a8a580fd304629a448e11f3cb63","sha256":"b46ece455d392d555142094916ff841e3398db64ff92761ebb6357f35239d86e","sha512":"3ee40e6fef7667d4f14c4113e6a774e3d9b2eee66ec8d8217072204fdb20d81dd06b93a4d0bb795e59ad9961656ca841bd372c2c22252eae02047eda6c1d38ef","ssdeep":"","tlshash":"c2d0a7c4407ad3d5d66887b969493742d956f1368ac48a08c51b66145a38181135964d","size":239,"data":"","first_seen":"2026-09-18T20:32:45.530876Z","last_seen":"2026-09-18T20:41:37.380968Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/cache/autoptimize/js/autoptimize_single_96e7dc3f0e8559e4a3f3ca40b17ab9c3.js","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-09-19T05:34:33.18511Z","times_seen":238151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/cache/autoptimize/js/autoptimize_single_54fb249d31cb21aee853c2a23008cde6.js","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f794356ea6459d4a3bc7038650c61af3","sha1":"654f64a6377a4613c324eeee399380517a1d7a73","sha256":"3d792f0c368992279de259b0888be8b0a978e39dbaa153b2aa4e8da63ecf26d3","sha512":"90e520499a2dc37018a15b53585350705dd5a3f0521e975b41840199a4b14489e1c05972bea5ae392493e29ce7131ebe424831d7ba9a1118326118de2928d298","ssdeep":"","tlshash":"8b417da5f2b4f79b077f147a10bf10b63b82791592910c50e626247998fd80ae3d973f","size":2001,"data":"","first_seen":"2026-09-18T20:32:45.500595Z","last_seen":"2026-09-18T20:41:37.34155Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le1KGgtAAAAAAnhTiISMdUH_TicFHtgl-9JCukY\u0026co=aHR0cHM6Ly9yYWxjYXIubGl2ZTo0NDM.\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=g47ebcloj2bc","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d8463112156f537e64bc0cc795dc133","sha1":"3b21c915761369b640a86538e29ba402098ba12a","sha256":"b270cb1a41b1cf6fda1dd535019b54da06652f28e7ea11037dcc4393c60647d7","sha512":"f9906d38d98f0ed74ab190030b94625a420425ffdd4cb75114c533d13eff6873af4def45fc015dd2be63d6c62793164fe93616183f43e3dd8ab0d65308c53ee9","ssdeep":"","tlshash":"c3d0a7eb1441cdf7cda09dab9743d1a678efd0b780a981f405e04c522ce1c9110245ac","size":252,"data":"","first_seen":"2026-05-25T21:58:32.98547Z","last_seen":"2026-09-19T04:39:22.821575Z","times_seen":2966,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"monitor.fraudblocker.com/b.js?sid=jSRVZBREtmdhqmo8MyPFa\u0026vid=91e7205a50d9b0bb8873d09ba704c75c\u0026tz=UTC\u0026os=Windows%2010\u0026b=Firefox%20134.0\u0026bo=0\u0026audio=35.749972093850374\u0026colorDepth=24\u0026colorGamut=srgb\u0026contrast=0\u0026cookiesEnabled=true\u0026cpuClass=\u0026deviceMemory=\u0026domBlockers=\u0026fonts=Bitstream%20Vera%20Sans%20Mono%3BCentury\u0026forcedColors=false\u0026hardwareConcurrency=8\u0026indexedDB=true\u0026localStorage=true\u0026openDatabase=false\u0026pdfViewerEnabled=true\u0026platform=Linux%20x86_64\u0026plugins=PDF%20Viewer%3BChrome%20PDF%20Viewer%3BChromium%20PDF%20Viewer%3BMicrosoft%20Edge%20PDF%20Viewer%3BWebKit%20built-in%20PDF\u0026screenResolution=1280x1024\u0026sessionStorage=true\u0026touchSupport=%7B%22maxTouchPoints%22%3A0%2C%22touchEvent%22%3Afalse%2C%22touchStart%22%3Afalse%7D\u0026vendor=\u0026videoCard=%7B%22vendor%22%3A%22Mesa%22%2C%22renderer%22%3A%22llvmpipe%2C%20or%20similar%22%7D","fqdn":"monitor.fraudblocker.com","domain":"fraudblocker.com","tld":"com"},"ip":{"addr":"34.96.65.117","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bc0ee636b3b83484fc3b9348863bd22","sha1":"ebbffb7d7ea5362a22bfa1bab0bfdeb1617cd610","sha256":"a2c2339691fc48fbd14fb307292dff3e21222712d9240810742d7df0c6d74dfb","sha512":"4d094b64124366530e7e327b1ad5d06c0fd1ceb96387d6a143e9f561c2f9ff7ca9d68e7c23b8b14aab5309c202a8dced9a38d950662a50984d2841577293cd64","ssdeep":"","tlshash":"c71000000000000000000000000000c000000000000000000030000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-09-18T21:32:42.681211Z","times_seen":35469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/cache/autoptimize/js/autoptimize_single_2912c657d0592cc532dff73d0d2ce7bb.js","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-09-19T05:34:33.129657Z","times_seen":244973,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/themes/extraweb_theme/js/jquery.maskedinput.min.js","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b887a0e87cbb038789027138f82b68e","sha1":"64864ff0bfba9090898b5347017977096cfeb3bd","sha256":"b9902ff0741691f74e63b8a895b1f8494dc66a2120d024b1fa506f64b61ba938","sha512":"1b3eb15729516231f1ad30467119fa16154c3c43a95d85a326585e744043ad43b92c17a95d931e6e3ba379e70364c9b58b677712caad7185c2e887443d56e6b9","ssdeep":"96:rNYaTbFaRZqD1B7sfha1s+Gib2V81qJQOP4:KaQRZqKhadGib2VyOi","tlshash":"e191c999bdd0710361b308e500bf861981395fea542f95d2a021f9dcbd38e2921e7d7d","size":4325,"data":"","first_seen":"2023-03-08T07:52:24Z","last_seen":"2026-09-18T20:41:37.309108Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"monitor.fraudblocker.com/p.js?sid=jSRVZBREtmdhqmo8MyPFa\u0026vid=91e7205a50d9b0bb8873d09ba704c75c\u0026tz=UTC\u0026os=Windows%2010\u0026b=Firefox%20134.0\u0026bo=0\u0026audio=35.749972093850374\u0026colorDepth=24\u0026colorGamut=srgb\u0026contrast=0\u0026cookiesEnabled=true\u0026cpuClass=\u0026deviceMemory=\u0026domBlockers=\u0026fonts=Bitstream%20Vera%20Sans%20Mono%3BCentury\u0026forcedColors=false\u0026hardwareConcurrency=8\u0026indexedDB=true\u0026localStorage=true\u0026openDatabase=false\u0026pdfViewerEnabled=true\u0026platform=Linux%20x86_64\u0026plugins=PDF%20Viewer%3BChrome%20PDF%20Viewer%3BChromium%20PDF%20Viewer%3BMicrosoft%20Edge%20PDF%20Viewer%3BWebKit%20built-in%20PDF\u0026screenResolution=1280x1024\u0026sessionStorage=true\u0026touchSupport=%7B%22maxTouchPoints%22%3A0%2C%22touchEvent%22%3Afalse%2C%22touchStart%22%3Afalse%7D\u0026vendor=\u0026videoCard=%7B%22vendor%22%3A%22Mesa%22%2C%22renderer%22%3A%22llvmpipe%2C%20or%20similar%22%7D","fqdn":"monitor.fraudblocker.com","domain":"fraudblocker.com","tld":"com"},"ip":{"addr":"34.96.65.117","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bc0ee636b3b83484fc3b9348863bd22","sha1":"ebbffb7d7ea5362a22bfa1bab0bfdeb1617cd610","sha256":"a2c2339691fc48fbd14fb307292dff3e21222712d9240810742d7df0c6d74dfb","sha512":"4d094b64124366530e7e327b1ad5d06c0fd1ceb96387d6a143e9f561c2f9ff7ca9d68e7c23b8b14aab5309c202a8dced9a38d950662a50984d2841577293cd64","ssdeep":"","tlshash":"c71000000000000000000000000000c000000000000000000030000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-09-18T21:32:42.681211Z","times_seen":35469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-i18n-js-after","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a647433a478bb4731656ca686430ac5","sha1":"01dc809f7ce3de4e655fe52456cb8bb9950e4b1b","sha256":"c2ff6df28bea9c7e1ac95692e3a2eb68b33be87031c45f96ebe5319876d9ea82","sha512":"86e4b04d95e4ce23562587241d6cdf96b72416022be638a6a6884f06242f4b7d690391e4c952f667c8ee8c15f1ead3edec9f84af4233e4103004991eb860e4e5","ssdeep":"","tlshash":"f8b0128b74ab3d50828fc7b44d23be014510208782afc50875e59d3096718c0b4c362f","size":99,"data":"","first_seen":"2025-11-18T21:59:56.555736Z","last_seen":"2026-09-19T02:03:23.774575Z","times_seen":15056,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHdwY2Y3X3JlY2FwdGNoYT17InNpdGVrZXkiOiI2TGUxS0dndEFBQUFBQW5oVGlJU01kVUhfVGljRkh0Z2wtOUpDdWtZIiwiYWN0aW9ucyI6eyJob21lcGFnZSI6ImhvbWVwYWdlIiwiY29udGFjdGZvcm0iOiJjb250YWN0Zm9ybSJ9fTs=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"74532ceff25a60c490ff6f406100d3ac","sha1":"f533fceaa692a9c15de60c74065d26a38f47dc3a","sha256":"9a83eb8802b36c4b5a52f5c3eced6fec5ad84415f65fd77fbecd94879c0651b2","sha512":"1e5d944b19889399026331eee996629aea5ce1cc95b3db051362227f9d163944c076780b0e578604865ec28762c6662d95927c74371a68c9921ea331a45ae571","ssdeep":"","tlshash":"2bc02b38adf14e1212770c4471856a400f00c4f3c3c3050a0732898587f11c55401304","size":137,"data":"","first_seen":"2026-09-18T20:32:45.538003Z","last_seen":"2026-09-18T20:41:37.382801Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-09-19T05:41:27.442099Z","times_seen":367389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ralcar.live/wp-content/uploads/2024/09/icons_zamena_grm.png.webp","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:45.638Z","timestamp":1789764045638,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/uploads/2024/09/icons_zamena_grm.png.webp HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 18 Sep 2026 20:40:45 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3d32ae54bd2568b-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 543\r\ncache-control: max-age=2592000\r\netag: \"69afd9f1-2c86\"\r\nexpires: Sun, 18 Oct 2026 20:31:42 GMT\r\nlast-modified: Tue, 10 Mar 2026 08:44:33 GMT\r\nserver: cloudflare\r\nx-ray: wn68428:0.000/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cTRrWFsrYVUoRmYdpibtxa0hdc5Kjv2MvrfpKjgFvlp%2Fj8kyqlr3jrawqDNTRTlTKf4l0k0uzvo3N2UE9741Zb3JSb6qHcBBwqJ1LmktiKj25Qp5lwiNCNA5YK0Gxw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11398\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11398,"size_decoded":12156,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bb073eec684e881f6a1ad9d0f8f908ae","sha1":"90eb207c7f71ff20a6b854356cc6dd3ef1a17088","sha256":"14c71403e62d1a66c853f43000b6b0901c0198dde495fd848e1b0a8cce44be35","sha512":"b12e6c99555667ae2e381ad35a536eaf5ba5bdc1198da680e0b9342531baaede54225092bc5345782d68956649851f3a3dc86cedd166d2cae31b0f60d59421ff","ssdeep":"192:yQBzjCmdRqr9eD5tFyOsA3Fz4zq2dO3VgY/1qpxslyNPYC0/CiqbOohx:/imz+eDb6zqD3VgGueLCgHeO2x","tlshash":"f432bfcb3d44fffe254a18993311d827b338b556c878da5b827de714886342f7422c28","first_seen":"2026-09-18T20:32:45.511396Z","last_seen":"2026-09-18T20:41:37.298923Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/uploads/2024/12/ralcar.svg","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.288Z","timestamp":1789764044288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/ralcar.svg HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1rlHAw9pgF9AytBcSaUBUfEN9sBZdDlxg2kvmh12wk5Bd6iWMuFpJbLoWq5h4AEvp%2FQ9XEp4aLyfqFz5j%2F%2FBF%2Bd1L8FL3UGoCb9zQUwQQ%2BrYXRUXG2b4qJju3%2F9uZw%3D%3D\"}]}\r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a3d32adcdacb568b-OSL\r\ncf-cache-status: HIT\r\nage: 543\r\ncache-control: max-age=2592000\r\ncontent-encoding: br\r\netag: W/\"69807064-15aa\"\r\nexpires: Sun, 18 Oct 2026 20:31:40 GMT\r\nlast-modified: Mon, 02 Feb 2026 09:37:40 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nx-ray: wn68428:0.000/\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5546,"size_decoded":2540,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa15965e61c55ba85ac71dda44fdf79e","sha1":"e4678423161aa0dfd48dd9affcd23eabe2f3d0fe","sha256":"8892e37d02294b7908bcbc7e2648ebea9ae6a4675ae14c5bc6436d87c60b9ea1","sha512":"ccc970c71457590fefa3ac7b890a6a1021b905e69803ac976783e76c8b4d69c13dfe04cb9dd19e172347052b772945781030a65e3091f05289a1d67f9b7e98d4","ssdeep":"96:7gjkJI+CyqvI8zzm2aUavyrNqMcLesZ6yVtGLNqMcLesZ6yd6Uavjj/c:vJwyB8zzm2prsMcLH6yVIMMcLH6ydJyU","tlshash":"a4b10f4293449b399982c05dcf7214e0309a94cad5ebf0dcfefb970aaa1a0f5f834624","first_seen":"2026-09-18T20:32:45.466768Z","last_seen":"2026-09-18T20:41:37.300674Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/themes/extraweb_theme/images/icons/select.svg","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.352Z","timestamp":1789764044352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/themes/extraweb_theme/images/icons/select.svg HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IyGu0nbx2qe6GvoVe2ob2ddA3woMUZVnLzIjD3l7I1D3yhxiLW25OSha3gak7Inn5p08%2F6N%2BVwD0glxp%2FStSv92ljcZe0osDJG8kEfp%2BERZgTrnYDLNm6t9hnW62Sw%3D%3D\"}]}\r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a3d32add3adc568b-OSL\r\ncf-cache-status: HIT\r\netag: W/\"698e6980-eb\"\r\nage: 543\r\ncache-control: max-age=2592000\r\npriority: u=4,i\r\nexpires: Sun, 18 Oct 2026 20:31:40 GMT\r\nlast-modified: Fri, 13 Feb 2026 00:00:00 GMT\r\nserver: cloudflare\r\nx-ray: wn68428:0.000/\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":235,"size_decoded":937,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8217a0e60b141f703b7fcb5da4a39d58","sha1":"692edc33c9e745031581254fe22cd8cc338b4daf","sha256":"80110c379342d0189524b1feea5b0b816083defdae38a422e0fe6d2f11ac1983","sha512":"c47a97992ef4d23408f3202be9d4c6acadd9ba4c344651a374564263cf2dca41c49b5bc75b0289fc75cf477f3ef0628dca0073b5d4d1cef56436482e934248a9","ssdeep":"","tlshash":"1cd097aa009c081de2010306e7b03971603b10a3838e809cc9aa3031a023e666e33af9","first_seen":"2026-09-18T20:32:45.502105Z","last_seen":"2026-09-18T20:41:37.301695Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/intertight/v9/NGSwv5HMAFg6IuGlBNMjxLsD8ah8QA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.250Z","timestamp":1789764044250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/intertight/v9/NGSwv5HMAFg6IuGlBNMjxLsD8ah8QA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ralcar.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 16996\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 10:12:50 GMT\r\nexpires: Fri, 17 Sep 2027 10:12:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 124074\r\nlast-modified: Mon, 15 Sep 2025 16:28:16 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16996,"size_decoded":17809,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16996, version 1.0","md5":"d5a5f7694fd9a35a63d8dee1e6a860ab","sha1":"8beeaad1d2f17ac4b43b45104df2d95357ee4692","sha256":"3937173d62f238179ca073aee632d53ebc088967ac841bf213211be05720881a","sha512":"eaa8563089e1ffdaa04f1e8ce37dab90b02bb51d2e57f07b7643407a4d0d0190ad98ba70512ca174fe1c19c395f4f5554fc4ac5eb6ebf5e4e79504313214fdf9","ssdeep":"384:vDPvTYuTWifHW0RSBMiDuh1CdTcS+RBz117KBEPOLM7OZm1:vrTYuTWsLRSCi6adTc9L1ZhO81","tlshash":"4372df89cac2a5b9d9c48cefb32044f32364cbb1b5637cfc3506d958e08484a2f6615f","first_seen":"2025-06-07T12:04:34.154853Z","last_seen":"2026-09-18T23:09:51.905751Z","times_seen":326,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":30,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le1KGgtAAAAAAnhTiISMdUH_TicFHtgl-9JCukY\u0026co=aHR0cHM6Ly9yYWxjYXIubGl2ZTo0NDM.\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=g47ebcloj2bc","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:45.271Z","timestamp":1789764045271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6Le1KGgtAAAAAAnhTiISMdUH_TicFHtgl-9JCukY\u0026co=aHR0cHM6Ly9yYWxjYXIubGl2ZTo0NDM.\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=g47ebcloj2bc HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 18 Sep 2026 20:40:45 GMT\r\ncontent-security-policy: script-src 'nonce-aDQ1OO7n1xOr1_K97ULOxg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16860,"size_decoded":3170,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"7bd8c2c3fd5a80b48c3affaf345ff254","sha1":"a2a03029a9e2800a05e184133a9d1add0b2f6a1d","sha256":"4ac7dbf1c02d4cb2e18fbd3106753ddab3cde4c242aff5be539dca4601879bc7","sha512":"40f3820389cb01a09cd84f56917da3f259e0f4b15221ef6beb24bc9cb9734d57e0e78489a34a7e61da35bf85316af031583b9eb4d6aad2de6bd0620379714abf","ssdeep":"384:OjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/q:OFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+N","tlshash":"2b720e50041744009b835ce223ce7f30fe4e92517246d0b1abfd9b6beedbda6926939d","first_seen":"2026-09-18T20:41:37.303588Z","last_seen":"2026-09-18T20:41:37.303588Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@fancyapps/ui@4.0/dist/fancybox.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:49.213Z","timestamp":1789764049213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/@fancyapps/ui@4.0/dist/fancybox.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 3420\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 4.0.31\r\nx-jsd-version-type: version\r\netag: W/\"3cee-0nBcDQHfsMIPKlPzBhAaX/pebOA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 18 Sep 2026 20:40:49 GMT\r\nage: 35432\r\nx-served-by: cache-fra-etou8220150-FRA, cache-bma-essb1270053-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15598,"size_decoded":4162,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (15598), with no line terminators","md5":"3a867c1ea947834b92530f9d57fa799a","sha1":"d2705c0d01dfb0c20f2a53f306101a5ffa5e6ce0","sha256":"ee03159a1ee2d979a8f7d9afbdf9d29fd7597ee9d38a2ee3e323dd99300c511d","sha512":"624c83c19c70a54c8ef3a82ec5dd3f3679b7bf99a8a78c24b1fa68d823506b84c4ef284d82c64c13ebec90c53630ba8249c376ebc729af2c42f73fa7bee4f692","ssdeep":"192:uL7boMZcdAai/hvzydY8UgDP5sIP7bcCBPaK:uLn/+AaiJvzydYWP5sUBiK","tlshash":"5c6223133104392a46335b08d3af990ef279b953961121f799afa92647c63c432feacd","first_seen":"2023-04-05T22:42:18Z","last_seen":"2026-09-18T20:41:37.306709Z","times_seen":4032,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":11,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@fancyapps/ui@4.0/dist/fancybox.umd.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:49.215Z","timestamp":1789764049215,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/@fancyapps/ui@4.0/dist/fancybox.umd.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 4.0.31\r\nx-jsd-version-type: version\r\netag: W/\"19ca7-YDrz4C84GmWPE164D07veMx+dQ0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 18 Sep 2026 20:40:49 GMT\r\nage: 17153\r\nx-served-by: cache-fra-eddf8230049-FRA, cache-bma-essb1270035-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 30301\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105639,"size_decoded":31079,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65502)","md5":"0ce18f9ca64e6fdcac07ec7e97dac4c7","sha1":"603af3e02f381a658f135eb80f4eef78cc7e750d","sha256":"d1a7f655b0b8be63ec6bc38b04028198ba32b8aab86c194a2b628e80c59aca2a","sha512":"29b375fc71837e0090f63792b3c3b8b7725eab61b1bf6e0a4d6bde37d40aae4ffce1c9b97e953c6a7928b93e4db1ad4f9b1e123571d98486afc183269dbf721e","ssdeep":"1536:qlSed/3kDaF+oQi/86ZDmvFFRhzlTmtMDbg7MQG:G8Q86kvDRhLXPQG","tlshash":"32a3e62a724134318ae2b1a9911f6709b2766124a583c09d707edcd50fe8f8d30bbff9","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-09-18T20:41:37.308185Z","times_seen":3401,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":2,"connect":9,"send":0,"wait":9,"receive":3,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/themes/extraweb_theme/js/jquery.maskedinput.min.js","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.109Z","timestamp":1789764044109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/themes/extraweb_theme/js/jquery.maskedinput.min.js HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=86Jlw5%2FBwdU%2B%2FZvHlU88h%2Flql8PUFRjbrGWjgCZ669zCWX1rJy4Jl922%2BVVeDZHq1nyLll49BxkyEQTCNO1yY2SUA0rDfSEf4%2BaBtYsS1F8R4MHetzme%2FEFmPbAflA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3d32adbbaba568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4325,"size_decoded":2671,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4112)","md5":"6b887a0e87cbb038789027138f82b68e","sha1":"64864ff0bfba9090898b5347017977096cfeb3bd","sha256":"b9902ff0741691f74e63b8a895b1f8494dc66a2120d024b1fa506f64b61ba938","sha512":"1b3eb15729516231f1ad30467119fa16154c3c43a95d85a326585e744043ad43b92c17a95d931e6e3ba379e70364c9b58b677712caad7185c2e887443d56e6b9","ssdeep":"96:rNYaTbFaRZqD1B7sfha1s+Gib2V81qJQOP4:KaQRZqKhadGib2VyOi","tlshash":"e191c999bdd0710361b308e500bf861981395fea542f95d2a021f9dcbd38e2921e7d7d","first_seen":"2023-03-08T07:52:24Z","last_seen":"2026-09-18T20:41:37.309108Z","times_seen":160,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"monitor.fraudblocker.com/fbt.js?sid=jSRVZBREtmdhqmo8MyPFa","fqdn":"monitor.fraudblocker.com","domain":"fraudblocker.com","tld":"com"},"ip":{"addr":"34.96.65.117","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.231Z","timestamp":1789764044231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"monitor.fraudblocker.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 20:50:34 GMT","end":"Fri, 13 Nov 2026 21:43:06 GMT"},"fingerprint":{"sha1":"D8:93:41:BD:82:DD:6C:43:C1:C0:10:4B:19:71:2C:8B:79:FD:20:8F","sha256":"A3:87:19:8D:79:C8:DB:60:8D:C9:68:33:E9:E4:A1:FF:07:F9:B6:C8:B2:93:62:14:E4:38:10:90:54:81:7E:C7"}}},"request":{"raw":"GET /fbt.js?sid=jSRVZBREtmdhqmo8MyPFa HTTP/1.1\r\nHost: monitor.fraudblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-guploader-uploadid: AJjja9b-l1ZZ20VnLuSoy65Fo-2WLOQGo3JM6zgRe583BAy0xwGJssNLtvtJglh59i8b4ITi8omALiwuTFPB8w\r\nx-goog-generation: 1786655228423836\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: gzip\r\nx-goog-stored-content-length: 27376\r\ncontent-encoding: gzip\r\nx-goog-hash: crc32c=zIp5Gg==, md5=k5dzZQHgTT/tHDEqbpvKyw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 27376\r\nserver: UploadServer\r\ndate: Fri, 18 Sep 2026 20:31:40 GMT\r\nexpires: Sat, 19 Sep 2026 20:31:40 GMT\r\ncache-control: public, max-age=86400\r\nage: 544\r\nlast-modified: Thu, 13 Aug 2026 21:07:08 GMT\r\netag: \"9397736501e04d3fed1c312a6e9bcacb\"\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-fbc-status: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":64726,"size_decoded":28192,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54267)","md5":"f0a1952d9edcc1ef5b89533ee55b1cbc","sha1":"2c0b839f21aa364abb0f24d361a4749637d0be3b","sha256":"ce2cea9175d1e1dce41f70eb70c76cac61beb90f055d07f0dafccfd99f105253","sha512":"54dbaa062045cfcb9953f4876514e6773c9a69db87f9c38387bda8827837ddc415faafc67cd3a08c58ead96fbdbcf3ed38cff058713536d25b1cc90c349c31f9","ssdeep":"1536:qJ108MY74yvVajjmNMJflCr17WhKo7zYghrxu:qn0RYsyv2FlCr1qrPltxu","tlshash":"71536becb3d3b23c13a7a56dd63f6000793b2d11a9084461e5a6d6813cb8d875137fba","first_seen":"2026-08-14T09:40:47.377936Z","last_seen":"2026-09-18T20:41:37.309885Z","times_seen":49,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":5,"connect":13,"send":0,"wait":14,"receive":12,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/intertight/v9/NGSwv5HMAFg6IuGlBNMjxLsD8ah8QA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.255Z","timestamp":1789764044255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/intertight/v9/NGSwv5HMAFg6IuGlBNMjxLsD8ah8QA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ralcar.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 16996\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 10:12:50 GMT\r\nexpires: Fri, 17 Sep 2027 10:12:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 124074\r\nlast-modified: Mon, 15 Sep 2025 16:28:16 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16996,"size_decoded":17809,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16996, version 1.0","md5":"d5a5f7694fd9a35a63d8dee1e6a860ab","sha1":"8beeaad1d2f17ac4b43b45104df2d95357ee4692","sha256":"3937173d62f238179ca073aee632d53ebc088967ac841bf213211be05720881a","sha512":"eaa8563089e1ffdaa04f1e8ce37dab90b02bb51d2e57f07b7643407a4d0d0190ad98ba70512ca174fe1c19c395f4f5554fc4ac5eb6ebf5e4e79504313214fdf9","ssdeep":"384:vDPvTYuTWifHW0RSBMiDuh1CdTcS+RBz117KBEPOLM7OZm1:vrTYuTWsLRSCi6adTc9L1ZhO81","tlshash":"4372df89cac2a5b9d9c48cefb32044f32364cbb1b5637cfc3506d958e08484a2f6615f","first_seen":"2025-06-07T12:04:34.154853Z","last_seen":"2026-09-18T23:09:51.905751Z","times_seen":326,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":24,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/intertight/v9/NGSwv5HMAFg6IuGlBNMjxLsD8ah8QA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.256Z","timestamp":1789764044256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/intertight/v9/NGSwv5HMAFg6IuGlBNMjxLsD8ah8QA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ralcar.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 16996\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 10:12:50 GMT\r\nexpires: Fri, 17 Sep 2027 10:12:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 124074\r\nlast-modified: Mon, 15 Sep 2025 16:28:16 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16996,"size_decoded":17809,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16996, version 1.0","md5":"d5a5f7694fd9a35a63d8dee1e6a860ab","sha1":"8beeaad1d2f17ac4b43b45104df2d95357ee4692","sha256":"3937173d62f238179ca073aee632d53ebc088967ac841bf213211be05720881a","sha512":"eaa8563089e1ffdaa04f1e8ce37dab90b02bb51d2e57f07b7643407a4d0d0190ad98ba70512ca174fe1c19c395f4f5554fc4ac5eb6ebf5e4e79504313214fdf9","ssdeep":"384:vDPvTYuTWifHW0RSBMiDuh1CdTcS+RBz117KBEPOLM7OZm1:vrTYuTWsLRSCi6adTc9L1ZhO81","tlshash":"4372df89cac2a5b9d9c48cefb32044f32364cbb1b5637cfc3506d958e08484a2f6615f","first_seen":"2025-06-07T12:04:34.154853Z","last_seen":"2026-09-18T23:09:51.905751Z","times_seen":326,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/themes/extraweb_theme/images/icons/ua-flag.svg","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.289Z","timestamp":1789764044289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/themes/extraweb_theme/images/icons/ua-flag.svg HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GW9VZMRiwb2nwEIaFSyfRuVZSp6SAzuVAQpWouGCM1KFUTvqR3CajfsyzUiXinegPv%2BiVn21Sn2zM81XD3gmvPIxnOUY%2Bv421IwLscOFJdvOOAa8vZVdk0%2FR7xCMhA%3D%3D\"}]}\r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a3d32adcdacc568b-OSL\r\ncf-cache-status: HIT\r\netag: W/\"698e6980-278\"\r\nage: 543\r\ncache-control: max-age=2592000\r\npriority: u=5,i\r\nexpires: Sun, 18 Oct 2026 20:31:40 GMT\r\nlast-modified: Fri, 13 Feb 2026 00:00:00 GMT\r\nserver: cloudflare\r\nx-ray: wn68428:0.000/\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":632,"size_decoded":1061,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1783e2801edc1d2ed7b853dfd8700358","sha1":"c01d1ea586cfa51a53ccd5abbd85bbae4b885ffa","sha256":"b2d76e556e2c9ac3ede622792ef1d90361e34e8b5533baacc13f8268e7ace212","sha512":"da6a99056c27a0ba8d408cbcdc1967075665cfbb10e038fb25c7032aa027889c434b43b6e1be46f34feba2ad2b27f4a717b3d0ecc04634798ee4e3b54ff6d68e","ssdeep":"","tlshash":"def049519224d3c6495f0e893da872da212c3becf1b81199f7111a56d9c39f43d76c1f","first_seen":"2025-07-06T02:50:57.611572Z","last_seen":"2026-09-18T20:41:37.31062Z","times_seen":7,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/uploads/2024/07/icons_remont-korobki-peredach.png.webp","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:46.121Z","timestamp":1789764046121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/icons_remont-korobki-peredach.png.webp HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 18 Sep 2026 20:40:46 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3d32ae84c10568b-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 543\r\ncache-control: max-age=2592000\r\netag: \"69afda3f-e42\"\r\nexpires: Sun, 18 Oct 2026 20:31:42 GMT\r\nlast-modified: Tue, 10 Mar 2026 08:45:51 GMT\r\nserver: cloudflare\r\nx-ray: wn68428:0.000/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pVRgJHKVAruAAMs6od1pO0a0tWoad9z2xFE3zZJHExXvYnzFvci4mL7QNihFXxYq3MHg8UM0fnGi16s7ybweXdyptou1aqxQ%2FgbOyJtPxWRz1nSFKOPVJkEm7S1aow%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3650\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3650,"size_decoded":4406,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d811e6946346f26130ad4da00df700bc","sha1":"c594f925bf47c14e6c925f2149c505cbaecf0f3e","sha256":"46ba868fb94d92d595c9812411ed386fa424367c2e654aa7388d69afb17b4426","sha512":"e83a33b88b22bac59ce11c613e1a5583c676a58be004208b59d48a625fecac2caf856ebb1630bf24900357ceda5a855ce70ffaef1dbd43797346ae8271d622b0","ssdeep":"","tlshash":"c171f979c29f206289dbdb8b41e1306fb1ab396880709f5b16de75755c486c033be12c","first_seen":"2026-09-18T20:32:45.512836Z","last_seen":"2026-09-18T20:41:37.312177Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter+Tight:wght@300;400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.096Z","timestamp":1789764044096,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Inter+Tight:wght@300;400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 18 Sep 2026 20:40:44 GMT\r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9912,"size_decoded":1423,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a2e6529f405ada9531dd930620ce72d0","sha1":"3e38fda7abe34cb0417f969ed25e505e645c2a08","sha256":"05950b71d4db1faa5ed08936c870b4fc031e583a1895092ade1a07b770e9130a","sha512":"ea6d23bcc6e58673a01dcd605941c3a043e900d5c5118fc85e820220428be25a3c644ba9e03e1f1d838c18d7040dce537bd3a84a81702a0caaac811df7a3a75e","ssdeep":"192:kk0duE3FuQKrkpQHE3YHQrEk63gE3fgQEOkwJqE3xqQO5:3KxjX8m2G","tlshash":"f812bb95101ba9209b871dd323dfbe236d8e60597081c67a5bfd08dcacdac27036cb5e","first_seen":"2026-09-18T20:32:45.523218Z","last_seen":"2026-09-18T20:41:37.31324Z","times_seen":2,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":32,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/themes/extraweb_theme/images/icons/icons_messengers.svg","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.139Z","timestamp":1789764044139,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/themes/extraweb_theme/images/icons/icons_messengers.svg HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I7OnE1H7KnnY3Vh780GE0aBENtaUhLgVmU0CKe6FhExmudMTp81yJidUUGEWr3Qi2V6GsL98%2B6mEnw%2BwO3PWmc1JmN9b52P%2B1Yp4s3O7cH3OSkbOsYXXrOll7pdb3w%3D%3D\"}]}\r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncf-ray: a3d32adbeac5568b-OSL\r\ncf-cache-status: HIT\r\nage: 543\r\ncache-control: max-age=2592000\r\ncontent-encoding: br\r\netag: W/\"698e6980-4109\"\r\nexpires: Sun, 18 Oct 2026 20:31:40 GMT\r\nlast-modified: Fri, 13 Feb 2026 00:00:00 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nx-ray: wn68428:0.000/\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16649,"size_decoded":6201,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f3e55d3e42cb5cbd4c3da2dd50e3d56f","sha1":"bb924f0cff04f74bfcb194d7af258f078569528f","sha256":"b003e7deb1a3cc2dbc6b3b7903967b281f64ddd3e46832701b56b869bc12f75d","sha512":"40a3cc965025cf9b4da891ab4d06f655d5239d753484a7e4b8c4209c4d478aa549a749780a1e80232df84c51e380ae48f830e370c232a2c2bac0c982527929bf","ssdeep":"384:UE1IkegH1yaU9SKKkjaKynXqSU6PhkrViiuxBTXqtT:Uyeek9SKJavTz8Gm","tlshash":"317257faa3c8b2d0e606e3e1d53658b5b56b34fa7b6acb4443947ae5e31109d49cccc0","first_seen":"2026-09-18T20:32:45.483836Z","last_seen":"2026-09-18T20:41:37.314349Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/clr?k=6Le1KGgtAAAAAAnhTiISMdUH_TicFHtgl-9JCukY","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:45.606Z","timestamp":1789764045606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"POST /recaptcha/api2/clr?k=6Le1KGgtAAAAAAnhTiISMdUH_TicFHtgl-9JCukY HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nContent-Length: 131\r\nOrigin: https://ralcar.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":142,"data":"\n(6Le1KGgtAAAAAAnhTiISMdUH_TicFHtgl-9JCukY\u0012\u0000\u001a\u0018zqB-6Xpbd3lCIvi7Tr2D0pob\";\u0018\u0001*-\n\b\b\u0003\u0010Ì\u0013\u0018Æ\u0002\n\b\b\u0014\u0010á\b\u0018¢\u0002\n\b\b\u0012\u0010¥\u000b\u0018š\u0007\n\u0007\b\u0013\u0010Ê\u0013\u0018\u001d\u0012\u0004\b\u0001\u0010\u00018\u0002@ œ\u0001H°ê\u0001"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/binary\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ndate: Fri, 18 Sep 2026 20:40:45 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":1250,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T05:41:48.112532Z","times_seen":18543376,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-includes/js/dist/hooks.min.js","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.103Z","timestamp":1789764044103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ivpNBimBeR5%2BALZ8EMycBDFAsBZfj5f%2B9zju%2BwtFFwjjoJHJu4%2BgD3fh8Z5Dp7FWZM0yhYtH0MTp3p3IP2bvLmfm3%2BBJEZG9x4KMEXu4yGbDKp6GhBlFHYMLdCsxxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3d32adbaab6568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5107,"size_decoded":2537,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-09-19T05:18:24.008266Z","times_seen":10979,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/cache/autoptimize/js/autoptimize_single_96e7dc3f0e8559e4a3f3ca40b17ab9c3.js","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.106Z","timestamp":1789764044106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_96e7dc3f0e8559e4a3f3ca40b17ab9c3.js HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DGWoiF3%2Fk4a07VHpL3Q%2FuZ7Yi47Dhw8guxQ7KK%2FGY71vsri%2BAOSGZx52x%2BEVDUE5RzqX%2BsqLzsbFoF5T5kkWI3nFj%2BUx9ut3i5QW4XFBLrF1UCWCEx4D5d07dgrNhA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3d32adbaab8568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12512,"size_decoded":4328,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-09-19T05:34:33.18511Z","times_seen":238151,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/themes/extraweb_theme/js/jquery.validate.min.js","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.110Z","timestamp":1789764044110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/themes/extraweb_theme/js/jquery.validate.min.js HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vEMD%2FPiMNODIBW1vCAl0wBhamjbgAcKEoL9ER%2BzzN62O%2Fk0JUB3vkErKem9Z5jgdJehKEcksXTHKh8%2BA7f34sqna8%2Bc%2BwjmpsztcKD%2FgxSz8QoQ9%2B2jxAP9%2Bf6MPLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3d32adbbabc568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24376,"size_decoded":9070,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24236)","md5":"2adc424801bb73bee0fa69c743346a66","sha1":"0ae93cd2e60fe32e1e9027753ad5886c1881fbc3","sha256":"4d387da2ff19dfde5d0c90c4c0f0f97a8da665a6e0f9553758626d0135c08714","sha512":"cacb12894aa93be227a8fda59ad38650b54f505b8b0bf208e78a825cc86bd6bfb524279c0ed4280a69381508f08069cdcaa1919862e7d005165372b673104c70","ssdeep":"384:Q6mrHp/KLFWB6/tX2lHJdkMiYnFpg5SLwaE2fSNAc0Eny+RWuK7NeB2wV/vtrx+V:gcWB6/8lHJdkMioFpg5SUB2yQEny+NN8","tlshash":"76b2b78976e671065e9720f4509ba60761b669a0e008e83cb5b8d4d2bef4fcc50f7f78","first_seen":"2023-04-05T03:16:58Z","last_seen":"2026-09-18T22:56:28.098392Z","times_seen":4102,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/themes/extraweb_theme/images/icons/icons_socials.svg","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.137Z","timestamp":1789764044137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/themes/extraweb_theme/images/icons/icons_socials.svg HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4fHsSxNKUrvSPBNHKEz3JkGKERmotmBqsLg%2F1gKCAzV%2BbnIsyvWgbHyC3vmHXGSpmMY1ZCFbga%2FLmuDLyTAENhwWKOz5vwk5aM00SFWuttcD8dxAvjshiqRpu10LGw%3D%3D\"}]}\r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncf-ray: a3d32adbdac3568b-OSL\r\ncf-cache-status: HIT\r\nage: 543\r\ncache-control: max-age=2592000\r\ncontent-encoding: br\r\netag: W/\"698e6980-f75\"\r\nexpires: Sun, 18 Oct 2026 20:31:40 GMT\r\nlast-modified: Fri, 13 Feb 2026 00:00:00 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nx-ray: wn68428:0.000/\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3957,"size_decoded":2176,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d5421aac1e81ba5d3878d4b54f2a8e4","sha1":"73b0bdfc2a55249bb3e36286377eef429a65806e","sha256":"5b1aa47e43a676d76afd199ae2dcd4ab2460bd16baa1452e4b7e491a7601a97b","sha512":"88f1fd3f3c41962c0e857a3be91c48c298ef68516d039f68647b8b9ae95d50521ec746b2229c84866ccafeaf041cf566eddb9b389b0d67231de1b642bb755cc6","ssdeep":"","tlshash":"c98166d4a3ad3a78f805c7f483a5f171363a20f52a19fa2866b028fd6705d8c61f75d4","first_seen":"2026-09-18T20:32:45.488528Z","last_seen":"2026-09-18T20:41:37.317616Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/uploads/2024/07/1220h450.jpg","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:45.642Z","timestamp":1789764045642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/1220h450.jpg HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 18 Sep 2026 20:40:45 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3d32ae54bd5568b-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 543\r\ncache-control: max-age=2592000\r\netag: \"69afdaab-c035\"\r\nexpires: Sun, 18 Oct 2026 20:31:42 GMT\r\nlast-modified: Tue, 10 Mar 2026 08:47:39 GMT\r\nserver: cloudflare\r\nx-ray: wn68428:0.000/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FhWzhwSLBBd9ny5YrHRCNEt2K7HxPycrmglv7zKHxiipnv8X%2F97OHEfiqcHa89WkD172K%2FTrjTbReMTKQoWa%2BHzxsR1eCj7neeyVPMKwzLWB7k2ftL1eO%2FlZQjyl3Q%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49205\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49205,"size_decoded":49971,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1220x450, components 3","md5":"b117919a9ad44159c6b208e6b147ba42","sha1":"9a6c4c528f6b549c5fba729d7fa4236ec5fc7352","sha256":"15eea9c1738e8a59d9be2a53a3497b0738196167ba95917e96b06d88df9d793a","sha512":"1b119600603aaef4ca6bb23151a4d0c30d3d02763e1b42c60261e997af7568a93a1d6938e667a91752e3069e1935aa3904dd6c884151a317f854188b3e7fc63a","ssdeep":"768:QGqG/uj3AhZhlZXau+oCXHuqBa5nlIMh9S7cU6YCGoY6g2aPeyS0WTcwBbbvH:QFtjwPDZqdoJb54IrGoVaPBZWTFbvH","tlshash":"0e23016ba7dfd027e19e8f65444c834c5d0131d2d0550eea50eaeecea68f50771e8b2e","first_seen":"2026-09-18T20:32:45.517964Z","last_seen":"2026-09-18T20:41:37.318404Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-18T20:40:42.791Z","timestamp":1789764042791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N3gVyjnNzdcIhz5j8LKgdR%2FnqMX93VI7hW7ZW%2FsWiE6IkqzJ8RxK8X4V8ZrD5hI5Y8dCZmv8hef9McJO5VRFH9Cjdz6Ro23z4YyoBYzvqiH%2BpVm6stmxGRb7pRLuYw%3D%3D\"}]}\r\ndate: Fri, 18 Sep 2026 20:40:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: zstd\r\ncf-ray: a3d32ad3aa2c568b-OSL\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\nlink: \u003chttps://ralcar.pl/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://ralcar.pl/wp-json/wp/v2/pages/10\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://ralcar.pl/\u003e; rel=shortlink\r\nserver: cloudflare\r\nset-cookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; expires=Sat, 19-Sep-2026 20:40:43 GMT; Max-Age=86400; path=/; secure; SameSite=Strict\naDJxVky=ig7hQpvtM; expires=Sat, 19-Sep-2026 20:40:43 GMT; Max-Age=86400; path=/; secure; SameSite=Strict\nSmXKVd=%40MJ.Pu9%5BhKpn7i0; expires=Sat, 19-Sep-2026 20:40:43 GMT; Max-Age=86400; path=/; secure; SameSite=Strict\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-cache-status: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-ray: wn68428:0.450/wa68428:D=449243\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PSluKys_Gpqdf","value":"N7.api%5BQfFkMC6d1","quoted":false,"path":"/","expires":"2026-09-19T20:40:43Z","raw_expires":"Sat, 19-Sep-2026 20:40:43 GMT","max_age":86400,"secure":true,"http_only":false,"same_site":"Strict","partitioned":false,"raw":"PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; expires=Sat, 19-Sep-2026 20:40:43 GMT; Max-Age=86400; path=/; secure; SameSite=Strict"},{"name":"aDJxVky","value":"ig7hQpvtM","quoted":false,"path":"/","expires":"2026-09-19T20:40:43Z","raw_expires":"Sat, 19-Sep-2026 20:40:43 GMT","max_age":86400,"secure":true,"http_only":false,"same_site":"Strict","partitioned":false,"raw":"aDJxVky=ig7hQpvtM; expires=Sat, 19-Sep-2026 20:40:43 GMT; Max-Age=86400; path=/; secure; SameSite=Strict"},{"name":"SmXKVd","value":"%40MJ.Pu9%5BhKpn7i0","quoted":false,"path":"/","expires":"2026-09-19T20:40:43Z","raw_expires":"Sat, 19-Sep-2026 20:40:43 GMT","max_age":86400,"secure":true,"http_only":false,"same_site":"Strict","partitioned":false,"raw":"SmXKVd=%40MJ.Pu9%5BhKpn7i0; expires=Sat, 19-Sep-2026 20:40:43 GMT; Max-Age=86400; path=/; secure; SameSite=Strict"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"C3.js","description":"D3 based reusable chart library","website":"https://c3js.org/","common_platform_enumeration":"","icon":"C3.js.png","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"EWWW Image Optimizer","description":"EWWW Image Optimizer is an image optimisation WordPress plugin designed to improve the performance of your website.","website":"https://github.com/nosilver4u/ewww-image-optimizer","common_platform_enumeration":"","icon":"EWWW Image Optimizer.png","categories":["WordPress plugins","Performance"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress:7.1.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":339904,"size_decoded":51653,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (61137)","md5":"b7a6b20cec4ca1852d7a5f60242e1aa4","sha1":"3455a12ebab415ff90bbbf6cf532abc1ebd4d9e5","sha256":"d596863bad53c39e04c2dba00543157ea331fc9f008a652e4b8e965511e18d54","sha512":"4310a5aa1871157e871bce17995772e79dca60b66456383d5faf103afbde95e9495122eea69221abc2d2eaec54810c488c70227dbe0aba23ab80a6efb8133158","ssdeep":"6144:4kZgwh1nAukdDO3Xyr5Ir5eh0dT9/sF0x0H8VlNUaj8F6QOMt6mtYv5jJFgvfFPo:RZgwh1nAukdDO3Xyr5Ir5eh0dT9/sF0h","tlshash":"9b74e7bb9096101a03238b9593cc7b1cad29d03fd9a24ad97354594ec7d2fe6239b31f","first_seen":"2026-09-18T20:41:37.319199Z","last_seen":"2026-09-18T20:41:37.319199Z","times_seen":1,"resource_available":true,"data":null}},"time_used":938,"timings":{"blocked":-1,"dns":9,"connect":20,"send":0,"wait":907,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/themes/extraweb_theme/images/icons/pl-flag.svg","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.290Z","timestamp":1789764044290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/themes/extraweb_theme/images/icons/pl-flag.svg HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Trf%2B63RfMB%2FwmCm3i6jDw%2FWaF6eM35bDaE9WTHsrcALDW%2Fw8f13X6L68kvBsqRUna5Xo0fbMOc2bLGAd5e%2Fe9S9pGxrUTFp5pgVZJuAbl6L2o292FUZEsjUxANYHdA%3D%3D\"}]}\r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a3d32adcdacd568b-OSL\r\ncf-cache-status: HIT\r\netag: W/\"698e6980-275\"\r\nage: 543\r\ncache-control: max-age=2592000\r\npriority: u=5,i\r\nexpires: Sun, 18 Oct 2026 20:31:40 GMT\r\nlast-modified: Fri, 13 Feb 2026 00:00:00 GMT\r\nserver: cloudflare\r\nx-ray: wn68428:0.000/\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":629,"size_decoded":1069,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ecbfa00df5597ffcb8e2e4d4c3ae36e6","sha1":"04198b0b19397492d84c69e33c9246379a60cbe6","sha256":"3e13c967ba2bac9a465001fc942e70febef856bf5f1a4c533219d7c8faf28f5c","sha512":"658ea8f62c87c06b7c7c03c6b4a44a6136d42230f8916da3f2bfb268e71864fa317767242e920a1e27a33074140636496ce021052cd30c8fd156ff705ea33514","ssdeep":"","tlshash":"ecf049a29224c7d6095f0a892ea932d6603c3becf1b81199f7012e56c9c39f43d32d1f","first_seen":"2025-07-25T00:47:01.021301Z","last_seen":"2026-09-18T20:41:37.320366Z","times_seen":6,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le1KGgtAAAAAAnhTiISMdUH_TicFHtgl-9JCukY\u0026co=aHR0cHM6Ly9yYWxjYXIubGl2ZTo0NDM.\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=g47ebcloj2bc","date":"2026-09-18T20:40:45.566Z","timestamp":1789764045566,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 15:10:22 GMT\r\nexpires: Thu, 24 Sep 2026 15:10:22 GMT\r\ncache-control: public, max-age=604800\r\nage: 106223\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":3002,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-09-19T05:38:33.653312Z","times_seen":727625,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/plugins/ewww-image-optimizer/includes/lazysizes.min.js","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.100Z","timestamp":1789764044100,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/plugins/ewww-image-optimizer/includes/lazysizes.min.js HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bRPWfAHxWZ4KYkogk%2FSLneJwGYsWKwIOoIZG6cgIQq%2Bi0Yw6Z2hHW8hefKZcxodBvpBZWxSAvVNuIuPbVT1YYPbXcEruCNuJ3s6W5nqWb8D7UhYhcQShlwWN1eYQYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3d32adbaab4568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17426,"size_decoded":7479,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17426), with no line terminators","md5":"c8752159a5e0ddfc3d3c527bd76d1f23","sha1":"70f14b169067311f26b8bd73e614e1818a5c2594","sha256":"54a86ea688d94f712027abe8daae2e98745551b759efd7a078857f3f401797a2","sha512":"52b81637f9d031e912055274071173bdf7b39d9b9c94d9cd50961149781033d055e6ab8e894cc111e0780ee49a9781bca85bb29ddeb31ea201fb4673b2ea746e","ssdeep":"384:VafPSOETTi+mDsLRW+mrDPSxV/Lqb88FXNlfkrsnmzV/GAKOvPC44jOqoDgTar3H:V2kTTi+mDsLs+m3q/Lqb88PlfkYnCV/x","tlshash":"b27209ee320975b3b95710f0515f620bb232753bad07d820aa39d8e19838cd67237a7d","first_seen":"2026-08-21T12:55:43.459279Z","last_seen":"2026-09-18T23:35:53.915148Z","times_seen":274,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"monitor.fraudblocker.com/fcheck","fqdn":"monitor.fraudblocker.com","domain":"fraudblocker.com","tld":"com"},"ip":{"addr":"34.96.65.117","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.357Z","timestamp":1789764044357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"monitor.fraudblocker.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 20:50:34 GMT","end":"Fri, 13 Nov 2026 21:43:06 GMT"},"fingerprint":{"sha1":"D8:93:41:BD:82:DD:6C:43:C1:C0:10:4B:19:71:2C:8B:79:FD:20:8F","sha256":"A3:87:19:8D:79:C8:DB:60:8D:C9:68:33:E9:E4:A1:FF:07:F9:B6:C8:B2:93:62:14:E4:38:10:90:54:81:7E:C7"}}},"request":{"raw":"POST /fcheck HTTP/1.1\r\nHost: monitor.fraudblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nContent-Type: application/json\r\nContent-Length: 60\r\nOrigin: https://ralcar.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":60,"data":"{\"sid\":\"jSRVZBREtmdhqmo8MyPFa\",\"url\":\"https://ralcar.live/\"}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ralcar.live\r\ncontent-type: application/json\r\nvary: Origin\r\ncross-origin-resource-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nx-cloud-trace-context: ec7b2210342502d7644d77f24996aa3d\r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\nserver: Google Frontend\r\ncontent-length: 46\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":795,"mime_type":"application/json","magic":"JSON text data","md5":"e70735ab1224d3dcb22d3324e211024b","sha1":"cf8e078476cdbdebd02cbce9d595ac2b8b63758c","sha256":"1af8f27ec554921d29750e8ef737c567982ecf277e51b277451cd7ca7ad16682","sha512":"9652f09f8e04ddf9824e7d7720ef754aa6ddd0982f2c4555401e30988492410cb2d30a3ca6ff817a943cf28db2fa47ee8b539b1295e46e7ebf8c8213db92be1b","ssdeep":"","tlshash":"ae900205072014de1000d100993c460211904822a112305dc20c487c65db995125241a","first_seen":"2026-08-14T09:40:47.336866Z","last_seen":"2026-09-18T20:41:37.322628Z","times_seen":45,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"monitor.fraudblocker.com/fcheck","fqdn":"monitor.fraudblocker.com","domain":"fraudblocker.com","tld":"com"},"ip":{"addr":"34.96.65.117","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.360Z","timestamp":1789764044360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"monitor.fraudblocker.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 20:50:34 GMT","end":"Fri, 13 Nov 2026 21:43:06 GMT"},"fingerprint":{"sha1":"D8:93:41:BD:82:DD:6C:43:C1:C0:10:4B:19:71:2C:8B:79:FD:20:8F","sha256":"A3:87:19:8D:79:C8:DB:60:8D:C9:68:33:E9:E4:A1:FF:07:F9:B6:C8:B2:93:62:14:E4:38:10:90:54:81:7E:C7"}}},"request":{"raw":"OPTIONS /fcheck HTTP/1.1\r\nHost: monitor.fraudblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://ralcar.live/\r\nOrigin: https://ralcar.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,PUT,POST,DELETE,PATCH\r\naccess-control-allow-origin: https://ralcar.live\r\nvary: Origin, Access-Control-Request-Headers\r\ncross-origin-resource-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nx-cloud-trace-context: 162de3af1817a75e644d77f24996ac73\r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\ncontent-type: text/html\r\nserver: Google Frontend\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]}],"data":{"size":0,"size_decoded":860,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T05:41:48.112532Z","times_seen":18543376,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":0,"dns":0,"connect":17,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le1KGgtAAAAAAnhTiISMdUH_TicFHtgl-9JCukY\u0026co=aHR0cHM6Ly9yYWxjYXIubGl2ZTo0NDM.\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=g47ebcloj2bc","date":"2026-09-18T20:40:45.579Z","timestamp":1789764045579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 10:12:28 GMT\r\nexpires: Sat, 18 Sep 2027 10:12:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 37697\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":40940,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-09-19T05:43:21.362826Z","times_seen":993882,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-includes/js/dist/i18n.min.js","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.104Z","timestamp":1789764044104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HMckc3p7oyINexDgfoJv17UnevSCJUpjdvVQnM3X7Yv5HAT3d9u8mxZLl8JCdWDQMvKiwnKz7NlCQzdQdpDoqyLG%2B3P5Z0I6FWzPa4Aizz59mSSfMiEqVERhGmAzwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3d32adbaab7568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5791,"size_decoded":3181,"mime_type":"application/javascript","magic":"data","md5":"d2f655e068f223e5da12d436aac88d38","sha1":"003146f39636a30ac250b0f043d61bcc01117b17","sha256":"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9","sha512":"c3fa9c3955bbe3b74e30755c4c551204aa1a034f8d48c8ab2747eca57466409ac0dfbdfc76a7a3554ea64cdbd730bf3cae3c1270382e66df24afc8b8ed48bf38","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMs:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSn","tlshash":"f6c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","first_seen":"2026-08-19T23:17:42.197722Z","last_seen":"2026-09-19T05:26:30.910402Z","times_seen":10818,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/cache/autoptimize/js/autoptimize_single_54fb249d31cb21aee853c2a23008cde6.js","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.113Z","timestamp":1789764044113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_54fb249d31cb21aee853c2a23008cde6.js HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jD4elBMtNNwgLWVbEr2IUW84d0SLlgV2gjY1Qo0iu6fkx3fkrAldPhsR6Z6QPU3AKgJa3NxglBa39tydmJM9f43qYfWkXbSShnzgjJ5etN%2FQwuZ2513hBb1e4M%2FXBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3d32adbbabe568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2001,"size_decoded":1243,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f794356ea6459d4a3bc7038650c61af3","sha1":"654f64a6377a4613c324eeee399380517a1d7a73","sha256":"3d792f0c368992279de259b0888be8b0a978e39dbaa153b2aa4e8da63ecf26d3","sha512":"90e520499a2dc37018a15b53585350705dd5a3f0521e975b41840199a4b14489e1c05972bea5ae392493e29ce7131ebe424831d7ba9a1118326118de2928d298","ssdeep":"","tlshash":"8b417da5f2b4f79b077f147a10bf10b63b82791592910c50e626247998fd80ae3d973f","first_seen":"2026-09-18T20:32:45.500595Z","last_seen":"2026-09-18T20:41:37.34155Z","times_seen":2,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.pl/wp-json/contact-form-7/v1/contact-forms/474/feedback/schema","fqdn":"ralcar.pl","domain":"ralcar.pl","tld":"pl"},"ip":{"addr":"146.59.71.167","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.241Z","timestamp":1789764044241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ralcar.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 19:54:29 GMT","end":"Sun, 01 Nov 2026 19:54:28 GMT"},"fingerprint":{"sha1":"03:4A:1C:75:17:97:45:DA:75:A9:55:31:09:B6:FB:73:83:09:F9:7E","sha256":"15:03:DA:34:46:FB:72:65:AD:76:54:8F:11:49:91:55:61:91:58:74:57:89:AC:C5:23:65:D8:B3:AD:BD:F6:8F"}}},"request":{"raw":"GET /wp-json/contact-form-7/v1/contact-forms/474/feedback/schema HTTP/1.1\r\nHost: ralcar.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, */*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nOrigin: https://ralcar.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nx-robots-tag: noindex\r\nlink: \u003chttps://ralcar.pl/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link\r\naccess-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type\r\nallow: GET\r\naccess-control-allow-origin: https://ralcar.live\r\naccess-control-allow-methods: OPTIONS, GET, POST, PUT, PATCH, DELETE\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\nset-cookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict\naDJxVky=ig7hQpvtM; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict\nSmXKVd=%40MJ.Pu9%5BhKpn7i0; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict\r\nx-ray: wn68428:0.340/wa68428:D=334813\r\nx-cache-status: MISS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PSluKys_Gpqdf","value":"N7.api%5BQfFkMC6d1","quoted":false,"path":"/","expires":"2026-09-19T20:40:44Z","raw_expires":"Sat, 19-Sep-2026 20:40:44 GMT","max_age":86400,"secure":true,"http_only":false,"same_site":"Strict","partitioned":false,"raw":"PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict"},{"name":"aDJxVky","value":"ig7hQpvtM","quoted":false,"path":"/","expires":"2026-09-19T20:40:44Z","raw_expires":"Sat, 19-Sep-2026 20:40:44 GMT","max_age":86400,"secure":true,"http_only":false,"same_site":"Strict","partitioned":false,"raw":"aDJxVky=ig7hQpvtM; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict"},{"name":"SmXKVd","value":"%40MJ.Pu9%5BhKpn7i0","quoted":false,"path":"/","expires":"2026-09-19T20:40:44Z","raw_expires":"Sat, 19-Sep-2026 20:40:44 GMT","max_age":86400,"secure":true,"http_only":false,"same_site":"Strict","partitioned":false,"raw":"SmXKVd=%40MJ.Pu9%5BhKpn7i0; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":862,"size_decoded":1292,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"81a12e978a83270e9c1a864fcebb874b","sha1":"cf4a5782d50a7e258e2c0736423262abab3c965b","sha256":"86432a4b7316ff708c323bc1f948c1165b84e676227937269c44da54a786bc9d","sha512":"c4335c8cd1f900810014f16a185a2172f4621dff170784b3fa2b289b9047cacce118b2191c16772de588de5a884e6aa8d169b03d3f2829e1e2586a4d12387fd6","ssdeep":"","tlshash":"3d11448211cc9abf0d1e6aced5bf8e9c2be6e0daecc1ef449924c947d0c4a317651195","first_seen":"2026-09-18T20:32:45.495658Z","last_seen":"2026-09-18T20:41:37.343465Z","times_seen":2,"resource_available":true,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":3,"connect":25,"send":0,"wait":360,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.pl/wp-json/contact-form-7/v1/contact-forms/922/feedback/schema","fqdn":"ralcar.pl","domain":"ralcar.pl","tld":"pl"},"ip":{"addr":"146.59.71.167","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.242Z","timestamp":1789764044242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ralcar.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 19:54:29 GMT","end":"Sun, 01 Nov 2026 19:54:28 GMT"},"fingerprint":{"sha1":"03:4A:1C:75:17:97:45:DA:75:A9:55:31:09:B6:FB:73:83:09:F9:7E","sha256":"15:03:DA:34:46:FB:72:65:AD:76:54:8F:11:49:91:55:61:91:58:74:57:89:AC:C5:23:65:D8:B3:AD:BD:F6:8F"}}},"request":{"raw":"GET /wp-json/contact-form-7/v1/contact-forms/922/feedback/schema HTTP/1.1\r\nHost: ralcar.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, */*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nOrigin: https://ralcar.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 18 Sep 2026 20:40:45 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nx-robots-tag: noindex\r\nlink: \u003chttps://ralcar.pl/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link\r\naccess-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type\r\nallow: GET\r\naccess-control-allow-origin: https://ralcar.live\r\naccess-control-allow-methods: OPTIONS, GET, POST, PUT, PATCH, DELETE\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\nset-cookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict\naDJxVky=ig7hQpvtM; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict\nSmXKVd=%40MJ.Pu9%5BhKpn7i0; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict\r\nx-ray: wn68428:0.490/wa68428:D=489251\r\nx-cache-status: MISS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PSluKys_Gpqdf","value":"N7.api%5BQfFkMC6d1","quoted":false,"path":"/","expires":"2026-09-19T20:40:44Z","raw_expires":"Sat, 19-Sep-2026 20:40:44 GMT","max_age":86400,"secure":true,"http_only":false,"same_site":"Strict","partitioned":false,"raw":"PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict"},{"name":"aDJxVky","value":"ig7hQpvtM","quoted":false,"path":"/","expires":"2026-09-19T20:40:44Z","raw_expires":"Sat, 19-Sep-2026 20:40:44 GMT","max_age":86400,"secure":true,"http_only":false,"same_site":"Strict","partitioned":false,"raw":"aDJxVky=ig7hQpvtM; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict"},{"name":"SmXKVd","value":"%40MJ.Pu9%5BhKpn7i0","quoted":false,"path":"/","expires":"2026-09-19T20:40:44Z","raw_expires":"Sat, 19-Sep-2026 20:40:44 GMT","max_age":86400,"secure":true,"http_only":false,"same_site":"Strict","partitioned":false,"raw":"SmXKVd=%40MJ.Pu9%5BhKpn7i0; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":2211,"size_decoded":1343,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ebd51d69afee287db156ae29a11fdeb1","sha1":"ca725b30bd664e4ca26730f2eaaa20d0d622a3a3","sha256":"f7820207dc8292f16da702fb9793e2cc08cfde3ec0014b888acade70dd80736a","sha512":"9e4c123dc95b9040c758ce04094770867ee76d8cfcbafce141c115d5723c7dd7864d4437ada096f7d12f325b77d163a5793c39108e46f9a1064ff6787a02f422","ssdeep":"","tlshash":"104117e340fa079f1c4c38e6d776adec38c9a482d854ef6bcc2eaa43e4442316690356","first_seen":"2026-09-18T20:32:45.465296Z","last_seen":"2026-09-18T20:41:37.344619Z","times_seen":2,"resource_available":true,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":2,"connect":25,"send":0,"wait":514,"receive":0,"ssl":288},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/intertight/v9/NGSwv5HMAFg6IuGlBNMjxLsH8ag.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.254Z","timestamp":1789764044254,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/intertight/v9/NGSwv5HMAFg6IuGlBNMjxLsH8ag.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ralcar.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 44872\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:32:37 GMT\r\nexpires: Thu, 16 Sep 2027 10:32:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 209287\r\nlast-modified: Mon, 15 Sep 2025 16:28:02 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44872,"size_decoded":45685,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 44872, version 1.0","md5":"f5af7a761c2b64f7c28f1e6721d7743b","sha1":"4179443c5359657e3c405662378f19b96112154c","sha256":"77fefe8ca19b9f69b5284832c519e0493127c1f091f0a8936884be7721c4e618","sha512":"89118c1ad40849d2684d32ddc4300681caedbc09d406a75aaedbbec06902f66ae8a23d2fb05e58cfd6a74d9e41481c94c874df18907cf4730c9e79242aa8388c","ssdeep":"768:pIbgboC/jX8ToguHZRHkJAHFCGNxHefy2BiO07nP/adgItMqmUu1ztZf3BbXsi:SgboAEcsAEGxHefy2BgaPMqf6Lf+i","tlshash":"3913f2f67f5c2bab97efb99eb8f90c1619d50a3091934c9e01941c1b6728f821d9d063","first_seen":"2025-06-03T20:24:39.584186Z","last_seen":"2026-09-18T23:09:51.904379Z","times_seen":7817,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":45,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-includes/js/dist/vendor/wp-polyfill.min.js","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.117Z","timestamp":1789764044117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-includes/js/dist/vendor/wp-polyfill.min.js HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mw95WCHa8EGmm0QrML2UGX0vOyBi62OxUM0hGhHdgsCCbEL7BRDcreo9CqW9eR0qP8u%2BCaDWz9OdII9EIqdbWMzeBH2xpV8euvL3%2BVlrxALB2SxjKWyJPIjP%2F841Cw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3d32adbbac1568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29874,"size_decoded":12109,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29679)","md5":"0632dd41c1af05ac1a5179ca21aa0d89","sha1":"8ed8a16a9df3902c768a61b7af932b2c393214fa","sha256":"ed0f8d45bd1d66bcbeb726ffe608645ffe06c328ef2bba4b1f269524440bae9b","sha512":"5e644df0a3cf1efc803a980c372b2bb9feb5dfad67b9e9ca0f4d3011a7ab5e42a1721826e5637fa79501287e628b450a4f54ad7f005caf074a750d248b6248e2","ssdeep":"384:KE09l/D/yuOiW+DJhXLzGxAi9cluvqx/Z4mlionbJwPxkqSYcGIOIUoGcMirjcym:KTveuO87N9IqtXFGHIzX6B","tlshash":"86d28289b690b4e302e3a0b4409f544ab1b75745bc1ecad1e315f6d0bc7d84ea0a7f9c","first_seen":"2026-07-20T04:53:37.788056Z","last_seen":"2026-09-19T05:50:53.650008Z","times_seen":2253,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/themes/extraweb_theme/images/icons/icons.svg","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.140Z","timestamp":1789764044140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/themes/extraweb_theme/images/icons/icons.svg HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B7vwmvlxVbA%2Fh%2Fpkb0QKKo9ZYsoozdcid%2FrxWS9vxxGR%2FCCiDFOeRjAausRCOHbL3tI0oP%2FRbfuldG7D6M5fBil9f5uvto33jKVG7MGAthhZxbMKqplyjkN11c5C8A%3D%3D\"}]}\r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncf-ray: a3d32adbeac4568b-OSL\r\ncf-cache-status: HIT\r\nage: 543\r\ncache-control: max-age=2592000\r\ncontent-encoding: br\r\netag: W/\"698e6980-28ff\"\r\nexpires: Sun, 18 Oct 2026 20:31:40 GMT\r\nlast-modified: Fri, 13 Feb 2026 00:00:00 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nx-ray: wn68428:0.000/\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10495,"size_decoded":4378,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5c4ee146a4904343b3a56ab2784eb763","sha1":"c90540976127dc750c5609521b6225984c139069","sha256":"6a00105f24cf62d2663f10845edd051079a242c65c87876a45307fa171d35646","sha512":"a841b2dfd5dd7c12bac8699819fe0e7b152151d1715a907099b3a31f014252d25fe486a33cc6ca2b86a1d9d9e2d85f81381c994ade05b99392af17fe2dae5105","ssdeep":"192:PdxgYM4sjXh32tytqilfTv0pbw/CPi2dKAtTrj:PrgDh32fGY86Pltrj","tlshash":"3822b5e4d39891f8e8078794d734743e616b34f63a45ca84c7ee09a4fb5219c9a3dec0","first_seen":"2026-09-18T20:32:45.463713Z","last_seen":"2026-09-18T20:41:37.346962Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/intertight/v9/NGSwv5HMAFg6IuGlBNMjxLsH8ag.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.251Z","timestamp":1789764044251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/intertight/v9/NGSwv5HMAFg6IuGlBNMjxLsH8ag.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ralcar.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 44872\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:32:37 GMT\r\nexpires: Thu, 16 Sep 2027 10:32:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 209287\r\nlast-modified: Mon, 15 Sep 2025 16:28:02 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44872,"size_decoded":45685,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 44872, version 1.0","md5":"f5af7a761c2b64f7c28f1e6721d7743b","sha1":"4179443c5359657e3c405662378f19b96112154c","sha256":"77fefe8ca19b9f69b5284832c519e0493127c1f091f0a8936884be7721c4e618","sha512":"89118c1ad40849d2684d32ddc4300681caedbc09d406a75aaedbbec06902f66ae8a23d2fb05e58cfd6a74d9e41481c94c874df18907cf4730c9e79242aa8388c","ssdeep":"768:pIbgboC/jX8ToguHZRHkJAHFCGNxHefy2BiO07nP/adgItMqmUu1ztZf3BbXsi:SgboAEcsAEGxHefy2BgaPMqf6Lf+i","tlshash":"3913f2f67f5c2bab97efb99eb8f90c1619d50a3091934c9e01941c1b6728f821d9d063","first_seen":"2025-06-03T20:24:39.584186Z","last_seen":"2026-09-18T23:09:51.904379Z","times_seen":7817,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":49,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/uploads/2024/07/icons_remont-hodovoj-chasti.png.webp","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:45.639Z","timestamp":1789764045639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/icons_remont-hodovoj-chasti.png.webp HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 18 Sep 2026 20:40:45 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3d32ae54bd3568b-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 543\r\ncache-control: max-age=2592000\r\netag: \"69afda2b-1704\"\r\nexpires: Sun, 18 Oct 2026 20:31:42 GMT\r\nlast-modified: Tue, 10 Mar 2026 08:45:31 GMT\r\nserver: cloudflare\r\nx-ray: wn68428:0.000/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BPr4EisfnBq9SfKiePM1171Zx4IX8zWeZRqtMp6dLQyB2AXzQWUVOpzY7yotOTALgkiWDladdPREVP5VNDKJkzUiF8dx6rkzCwPn0ky4BAFsJdpwSO7yObixwizLRw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5892\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5892,"size_decoded":6649,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"99d33b659bbb57ad35efe908fde97db7","sha1":"d7a80276af03b616a96fc58a535fadfeb70a7e85","sha256":"468994483b86f9d2e8eb62459c13e52b56c58a7b4b3ae6538021b6005acfddd1","sha512":"bab9869d4575a1c2e3f0c209cd17c73c5948e38351f885064e6342729b32df1f65aa5cc2478745c4b6725b71875896f73556aa84cfb994181e6d079f4068c415","ssdeep":"96:Md8KS87nTN/kf9ThDqlGd/UR88rYFt5C9TUOgsPrSDihrdFtP55555555555555Y:bUnTN/U5hDq0/VsYFvC95nzzNtP5555U","tlshash":"efc17bf38b2de8205841a43a0c7b4828bcdf9708df747d1d354ab660a1931aff368545","first_seen":"2026-09-18T20:32:45.48664Z","last_seen":"2026-09-18T20:41:37.34768Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/uploads/2024/07/icons_remont-tormoznoj-sistemy.png.webp","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:46.124Z","timestamp":1789764046124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/icons_remont-tormoznoj-sistemy.png.webp HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 18 Sep 2026 20:40:46 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3d32ae84c12568b-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 543\r\ncache-control: max-age=2592000\r\netag: \"69afda52-4414\"\r\nexpires: Sun, 18 Oct 2026 20:31:42 GMT\r\nlast-modified: Tue, 10 Mar 2026 08:46:10 GMT\r\nserver: cloudflare\r\nx-ray: wn68428:0.000/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L6QPDmCSiFyWrrC9ubdA%2BeZjQgaGzc7tDKJJuqlupX4Qq8Z%2F%2F0ZyINslxDZGZH3cleLumJeZ2KoO6g7%2F8QBHkaTmA0wy543Rpf5k5lLpCky1q0c4wHi09e%2F6eceMyQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17428\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17428,"size_decoded":18194,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dbfb9b37d58a937935705fd1ae4d6d75","sha1":"be330ee30096ead56a02db32eefd1317c78a1302","sha256":"519264f616f6c13886fca1740ef28ae9b07613e47b7d9cfcbb32e220cce9a3b3","sha512":"46bb18488918c02a9a50d537d508746f7a5be97d9cfc1d2df61feb640a724166584cc9079cbd55e152fe7f7810c589e7a1f0860cff6b4a4b513859d4a3ff11a7","ssdeep":"384:uMDJAWHi214PocW/YQJ50i0p5QAagwdhNb2SH:33Hi2EdeVZAagyx","tlshash":"9172d0f7fc612e4faeeb3a1d91a1cc4a93f5e33e860e8355057f49c27a2574c5468822","first_seen":"2026-09-18T20:32:45.514188Z","last_seen":"2026-09-18T20:41:37.35022Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=6Le1KGgtAAAAAAnhTiISMdUH_TicFHtgl-9JCukY\u0026ver=3.0","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.116Z","timestamp":1789764044116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"GET /recaptcha/api.js?render=6Le1KGgtAAAAAAnhTiISMdUH_TicFHtgl-9JCukY\u0026ver=3.0 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Fri, 18 Sep 2026 20:40:44 GMT\r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1010,"size_decoded":1314,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1010), with no line terminators","md5":"3e9508f0a8c480f49f0064188d3f1307","sha1":"ff8a97314e38103d121ff960ebea50b4e5790c01","sha256":"20cc319b0710f11848eb12925b05d3614d0bf07a7936b170ea6d8158c215eabd","sha512":"ec9b1763d39f43712f2d4a9b5effccf2e8cdbe332a4a886c3aed5d64f5e171fea2b60e3f5830a95b739a4267b6b4972d98a6d027d2790c589740b7f32d845214","ssdeep":"","tlshash":"8e1165730604a0354b3209d4e1fecbb1e842b01cf14c85e8a921cec51e7adc7ce016c4","first_seen":"2026-09-18T20:32:45.505598Z","last_seen":"2026-09-18T20:41:37.351517Z","times_seen":2,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":3,"connect":27,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.pl/wp-json/contact-form-7/v1/contact-forms/1887/feedback/schema","fqdn":"ralcar.pl","domain":"ralcar.pl","tld":"pl"},"ip":{"addr":"146.59.71.167","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.244Z","timestamp":1789764044244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ralcar.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 19:54:29 GMT","end":"Sun, 01 Nov 2026 19:54:28 GMT"},"fingerprint":{"sha1":"03:4A:1C:75:17:97:45:DA:75:A9:55:31:09:B6:FB:73:83:09:F9:7E","sha256":"15:03:DA:34:46:FB:72:65:AD:76:54:8F:11:49:91:55:61:91:58:74:57:89:AC:C5:23:65:D8:B3:AD:BD:F6:8F"}}},"request":{"raw":"GET /wp-json/contact-form-7/v1/contact-forms/1887/feedback/schema HTTP/1.1\r\nHost: ralcar.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, */*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nOrigin: https://ralcar.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 18 Sep 2026 20:40:45 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nx-robots-tag: noindex\r\nlink: \u003chttps://ralcar.pl/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link\r\naccess-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type\r\nallow: GET\r\naccess-control-allow-origin: https://ralcar.live\r\naccess-control-allow-methods: OPTIONS, GET, POST, PUT, PATCH, DELETE\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\nset-cookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict\naDJxVky=ig7hQpvtM; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict\nSmXKVd=%40MJ.Pu9%5BhKpn7i0; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict\r\nx-ray: wn68428:0.490/wa68428:D=483338\r\nx-cache-status: MISS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PSluKys_Gpqdf","value":"N7.api%5BQfFkMC6d1","quoted":false,"path":"/","expires":"2026-09-19T20:40:44Z","raw_expires":"Sat, 19-Sep-2026 20:40:44 GMT","max_age":86400,"secure":true,"http_only":false,"same_site":"Strict","partitioned":false,"raw":"PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict"},{"name":"aDJxVky","value":"ig7hQpvtM","quoted":false,"path":"/","expires":"2026-09-19T20:40:44Z","raw_expires":"Sat, 19-Sep-2026 20:40:44 GMT","max_age":86400,"secure":true,"http_only":false,"same_site":"Strict","partitioned":false,"raw":"aDJxVky=ig7hQpvtM; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict"},{"name":"SmXKVd","value":"%40MJ.Pu9%5BhKpn7i0","quoted":false,"path":"/","expires":"2026-09-19T20:40:44Z","raw_expires":"Sat, 19-Sep-2026 20:40:44 GMT","max_age":86400,"secure":true,"http_only":false,"same_site":"Strict","partitioned":false,"raw":"SmXKVd=%40MJ.Pu9%5BhKpn7i0; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":787,"size_decoded":1277,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b757bf7204e6fb14fb916e4886e8a742","sha1":"1ac6cb02bae0ffb959bdd949aa15f7ce0bf5b3dc","sha256":"9fb2a1f0a8ab57a5510c42d7a72f139a41492fcf2dc6ad666785a8b47f5dba73","sha512":"88207345d53ab4ca432b1f3b81fb5d01ca87ef7b1ec48aa2e2c2bf8d65056e06f6040ab363a37688ba8befe40ca57c4564b4e6f13c26ab5af1450e83926547b3","ssdeep":"","tlshash":"6e01228251cc9abf0c1e2acac5bf8e9c2ae6e0daecc1ef809924c843e0c47312251195","first_seen":"2026-09-18T20:32:45.477172Z","last_seen":"2026-09-18T20:41:37.352727Z","times_seen":2,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":26,"send":0,"wait":508,"receive":0,"ssl":285},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/uploads/2024/07/icons_rul.png.webp","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:46.238Z","timestamp":1789764046238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/icons_rul.png.webp HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 18 Sep 2026 20:40:46 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3d32ae90c26568b-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 543\r\ncache-control: max-age=2592000\r\netag: \"69afda5d-35d8\"\r\nexpires: Sun, 18 Oct 2026 20:31:42 GMT\r\nlast-modified: Tue, 10 Mar 2026 08:46:21 GMT\r\nserver: cloudflare\r\nx-ray: wn68428:0.000/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d9pQOmKiqevXRY8mN%2BRTetZCSsjd4W6YinKjCfNR%2BXVwGJ8rbrXfTVBpTdgUXnvmO6iaR5S2uWAXXKLRzMoFyuEBT521cD7SzGp%2BgG32wYj1YYyph8wYU%2BL8EX8uDA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13784\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13784,"size_decoded":14548,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8abf5268a57507e4ea8280a9fef0c953","sha1":"abcb6e093fc9196e643d13549a20f92a85f7bef2","sha256":"86a63f34bbb37a0a6f58d454c409dc221c27c2a9d874b74b1c400476465da285","sha512":"15f606cbf12791761029daba98a2ee7eb4c5ced7381cd0b212c32b6541b219601cabc0266c0e62bd4701c15925598e2d3a8109d2d8936947909e56102afd7932","ssdeep":"384:OnuqEnbnOnBSS6Mmwjvp3M0Hl6BaAM23a:OnUEBbVFqJM2a","tlshash":"2e52c033851dc7d87860e73836391d70de20315903eff5c35a0eb866ac52299cf6d69a","first_seen":"2026-09-18T20:32:45.492466Z","last_seen":"2026-09-18T20:41:37.354167Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/uploads/2024/07/icons_remont-toplivnoj-sistemy.png.webp","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:46.241Z","timestamp":1789764046241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/icons_remont-toplivnoj-sistemy.png.webp HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 18 Sep 2026 20:40:46 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3d32ae90c28568b-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 543\r\ncache-control: max-age=2592000\r\netag: \"69afda6e-19ec\"\r\nexpires: Sun, 18 Oct 2026 20:31:42 GMT\r\nlast-modified: Tue, 10 Mar 2026 08:46:38 GMT\r\nserver: cloudflare\r\nx-ray: wn68428:0.000/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YwsWrqjGe%2FgQOqpUrgPD7ZtBEDkCQ0Egbq%2Buffsgr%2FntV6tKcf4PuLWhX5X4qz0S6nrkA%2BQhipmH%2BMU6EUg62hEXZsmsbxBDebH6cq%2FEdFzh2f8AUrzT%2FNDTOyUXUw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6636\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6636,"size_decoded":7405,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0ebccb2667c0e93ad9867bacc3a5025c","sha1":"1e0ecd0d46b8c9c4d04eb22dd24d668c4efb3d24","sha256":"c2166035c84b783f5c19cd3f97e4f9dab1da2392d002e6284b636b7b8cd90d46","sha512":"fef14bfe5c541e3be4d3c94008ef3ddee407dcc0d7791c51edb7ee9a512d0704a40ee2689e0706da2d970217ce23cb8812f1db064e974b72b8caf10ee6ce653e","ssdeep":"192:RaKxG5TgW5fjw+Sl8Bnr0L5VATpXi9f9r33:Rap5UCjg8Rr0dWTpy9fV","tlshash":"56d17ef2a17be595d8fa9d2a71312c2481bd4e85604c4746d0710c8a06fb5ba3cfa8fc","first_seen":"2026-09-18T20:32:45.469531Z","last_seen":"2026-09-18T20:41:37.354983Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"monitor.fraudblocker.com/b.js?sid=jSRVZBREtmdhqmo8MyPFa\u0026vid=91e7205a50d9b0bb8873d09ba704c75c\u0026tz=UTC\u0026os=Windows%2010\u0026b=Firefox%20134.0\u0026bo=0\u0026audio=35.749972093850374\u0026colorDepth=24\u0026colorGamut=srgb\u0026contrast=0\u0026cookiesEnabled=true\u0026cpuClass=\u0026deviceMemory=\u0026domBlockers=\u0026fonts=Bitstream%20Vera%20Sans%20Mono%3BCentury\u0026forcedColors=false\u0026hardwareConcurrency=8\u0026indexedDB=true\u0026localStorage=true\u0026openDatabase=false\u0026pdfViewerEnabled=true\u0026platform=Linux%20x86_64\u0026plugins=PDF%20Viewer%3BChrome%20PDF%20Viewer%3BChromium%20PDF%20Viewer%3BMicrosoft%20Edge%20PDF%20Viewer%3BWebKit%20built-in%20PDF\u0026screenResolution=1280x1024\u0026sessionStorage=true\u0026touchSupport=%7B%22maxTouchPoints%22%3A0%2C%22touchEvent%22%3Afalse%2C%22touchStart%22%3Afalse%7D\u0026vendor=\u0026videoCard=%7B%22vendor%22%3A%22Mesa%22%2C%22renderer%22%3A%22llvmpipe%2C%20or%20similar%22%7D","fqdn":"monitor.fraudblocker.com","domain":"fraudblocker.com","tld":"com"},"ip":{"addr":"34.96.65.117","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:46.779Z","timestamp":1789764046779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"monitor.fraudblocker.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 20:50:34 GMT","end":"Fri, 13 Nov 2026 21:43:06 GMT"},"fingerprint":{"sha1":"D8:93:41:BD:82:DD:6C:43:C1:C0:10:4B:19:71:2C:8B:79:FD:20:8F","sha256":"A3:87:19:8D:79:C8:DB:60:8D:C9:68:33:E9:E4:A1:FF:07:F9:B6:C8:B2:93:62:14:E4:38:10:90:54:81:7E:C7"}}},"request":{"raw":"GET /b.js?sid=jSRVZBREtmdhqmo8MyPFa\u0026vid=91e7205a50d9b0bb8873d09ba704c75c\u0026tz=UTC\u0026os=Windows%2010\u0026b=Firefox%20134.0\u0026bo=0\u0026audio=35.749972093850374\u0026colorDepth=24\u0026colorGamut=srgb\u0026contrast=0\u0026cookiesEnabled=true\u0026cpuClass=\u0026deviceMemory=\u0026domBlockers=\u0026fonts=Bitstream%20Vera%20Sans%20Mono%3BCentury\u0026forcedColors=false\u0026hardwareConcurrency=8\u0026indexedDB=true\u0026localStorage=true\u0026openDatabase=false\u0026pdfViewerEnabled=true\u0026platform=Linux%20x86_64\u0026plugins=PDF%20Viewer%3BChrome%20PDF%20Viewer%3BChromium%20PDF%20Viewer%3BMicrosoft%20Edge%20PDF%20Viewer%3BWebKit%20built-in%20PDF\u0026screenResolution=1280x1024\u0026sessionStorage=true\u0026touchSupport=%7B%22maxTouchPoints%22%3A0%2C%22touchEvent%22%3Afalse%2C%22touchStart%22%3Afalse%7D\u0026vendor=\u0026videoCard=%7B%22vendor%22%3A%22Mesa%22%2C%22renderer%22%3A%22llvmpipe%2C%20or%20similar%22%7D HTTP/1.1\r\nHost: monitor.fraudblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nx-guploader-uploadid: AJjja9bR-zvoRieLOTZMnUndMWwGFl0X9H-8bwoHo1_GVV_1xUB8qOJYkGrTYM0vibZ755p1\r\ndate: Fri, 18 Sep 2026 20:40:46 GMT\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Fri, 18 Sep 2026 20:40:46 GMT\r\nlast-modified: Fri, 30 Sep 2022 21:34:18 GMT\r\netag: \"7bc0ee636b3b83484fc3b9348863bd22\"\r\nx-goog-generation: 1664573658484855\r\nx-goog-metageneration: 3\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 2\r\nx-goog-hash: crc32c=Fz0s1w==, md5=e8DuY2s7g0hPw7k0iGO9Ig==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\ncontent-length: 2\r\nserver: UploadServer\r\nx-fbc-status: miss\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":2,"size_decoded":730,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"7bc0ee636b3b83484fc3b9348863bd22","sha1":"ebbffb7d7ea5362a22bfa1bab0bfdeb1617cd610","sha256":"a2c2339691fc48fbd14fb307292dff3e21222712d9240810742d7df0c6d74dfb","sha512":"4d094b64124366530e7e327b1ad5d06c0fd1ceb96387d6a143e9f561c2f9ff7ca9d68e7c23b8b14aab5309c202a8dced9a38d950662a50984d2841577293cd64","ssdeep":"","tlshash":"c71000000000000000000000000000c000000000000000000030000000000000000000","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-09-18T21:32:42.681211Z","times_seen":35469,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/uploads/2025/05/favicon.ico","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:45.087Z","timestamp":1789764045087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/favicon.ico HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SMG2%2FuKGbT3uiyMb04ab3lftPi8IjyZT1an0FgBxGEWsHtdZjTlP1Woq7unMb95chWnz7olHimhLQHHAZe9EuyL1QgHoJNSTk4obr1zGgxNPE6sSQ5wm9XGDZPGoWQ%3D%3D\"}]}\r\ndate: Fri, 18 Sep 2026 20:40:45 GMT\r\ncontent-type: image/x-icon\r\ncontent-encoding: zstd\r\ncf-ray: a3d32ae1cb97568b-OSL\r\ncf-cache-status: HIT\r\netag: W/\"69807062-25be\"\r\nage: 543\r\ncache-control: max-age=2592000\r\npriority: u=6,i=?0\r\nexpires: Sun, 18 Oct 2026 20:31:41 GMT\r\nlast-modified: Mon, 02 Feb 2026 09:37:38 GMT\r\nserver: cloudflare\r\nx-ray: wn68428:0.000/\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9662,"size_decoded":1764,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"ae779175810789098adddb746d0348c4","sha1":"b567b8835f07518df87caf14cbb5bad7dd5f1bc1","sha256":"a5ab7ae1c481785755eb8a1c5ebdb3b3ec990cf93368f468eea5d6be4d9aadba","sha512":"cd4acc2206e3f940bdbd2e4914b88a9418df38f3fb72b606d1955fa9d75ffa52105743717524c6ca67e1f0371f44bd8e63223ff05bc7d390e0eb28e30e5df89e","ssdeep":"24:9RQYP6SgOGyqVXM8oZj3DedA2CQLecIo1iLEsCz9qOQB/ZfNw14H+K36hwRsJpuk:9OI6SgVXM8oBydhscj1Zl9hah6ysgd8","tlshash":"9a12b8cc6100a117fd1d6e33cd9d83ba703c78d4ca5158926c8efa1ae5751b06fd143a","first_seen":"2026-09-18T20:32:45.510001Z","last_seen":"2026-09-18T20:41:37.356349Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/uploads/2024/07/icons_remont-dvigatelja-.png.webp","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:45.640Z","timestamp":1789764045640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/icons_remont-dvigatelja-.png.webp HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 18 Sep 2026 20:40:45 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3d32ae54bd4568b-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 543\r\ncache-control: max-age=2592000\r\netag: \"69afda33-4568\"\r\nexpires: Sun, 18 Oct 2026 20:31:42 GMT\r\nlast-modified: Tue, 10 Mar 2026 08:45:39 GMT\r\nserver: cloudflare\r\nx-ray: wn68428:0.000/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WFwJGIctjJ2TQe2dPoVPL4w1w%2B9DkDqM%2BLns8lCDIRwsVl4neIFolFmXyjdo9LsciaIVgbT27Ukb6hF%2FeM22Z2elFoLfVzsj0oK8dk8b5%2BeYPg4b47TfCRNjJIymKA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17768\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17768,"size_decoded":18532,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c287c81738cd2b012c203bc3e7d15ea6","sha1":"3e028427110b19dd2173bc39151131076fd1ed86","sha256":"167429dcbd63f162ce4d231d9743cd341cd37adc5a7291c75f1a9b685fe9026e","sha512":"2962827f2946a3365cf8649bf7d0aebc9df39b5d0c6559f68601d2258d03078a8030dd828d9ed91299a39076f1d6f84cba6a9bc56d0310b67df214014bff8ba9","ssdeep":"384:mFTEnSB2FlcmfXMbyry2WWiuSP7Oy6/ZY/KYof6rkgR:mFTEFBf8bSWtuk6ysEKpSrpR","tlshash":"a482e0c80bb5b58bb490f601f4f95c013bd8ca7c98c77d50eb58d1cb1e879a25aa1754","first_seen":"2026-09-18T20:32:45.475617Z","last_seen":"2026-09-18T20:41:37.357883Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/uploads/2025/08/bmw-lights-header.jpg.webp","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.098Z","timestamp":1789764044098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/bmw-lights-header.jpg.webp HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\ncontent-type: image/webp\r\npriority: u=3,i\r\ncf-ray: a3d32adbaab3568b-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 543\r\ncache-control: max-age=2592000\r\netag: \"69afd8f9-8c88\"\r\nexpires: Sun, 18 Oct 2026 20:31:40 GMT\r\nlast-modified: Tue, 10 Mar 2026 08:40:25 GMT\r\nserver: cloudflare\r\nx-ray: wn68428:0.000/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n9yc7ZdPWD5ssBkM5tqj0S8cwoqsSzzYgKq35DUFBIvX9n6YMuaRsQOf%2BZHV9%2BwGWL7xCnfgPuS0AK2U2tRRNBoyHfcb9SBwaQmgCVq6eMYWHzgJCneAE9vcrNwdNw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35976\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35976,"size_decoded":36736,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1500x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3d33deffab519e8bbe3a7d3c20c2e99c","sha1":"1c0dd34a03f5997fa2e8d198f2d73e1703ffffd2","sha256":"ea31444bfd2b23770feba921a275bcf528274c94b8b519accb3fa8255d73c3c9","sha512":"8d625b46192adc8ca8a1b3292dc254062414126c75d858b4e9e9ddcf3b494da360df7b4834a558047bf126136719139886119641c422860a995738f7017dfaf4","ssdeep":"768:6ym+b2RgiSQkBXs7E59H2JnoBaocPO89keoMtMbZJzPrQzz:kDR8QkBIvoQFkeouQ2","tlshash":"f5f2d13028b49833b2aead0011667dd6fd10d0553271dfbaea97892fe6485f90a70b5f","first_seen":"2026-09-18T20:32:45.519532Z","last_seen":"2026-09-18T20:41:37.358721Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/cache/autoptimize/js/autoptimize_single_472e6a5ff510c3a429d8f572ac157744.js","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.112Z","timestamp":1789764044112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_472e6a5ff510c3a429d8f572ac157744.js HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LaV2eMPkJJjaiGu0%2F13dOWCchPeqEEGXwyrDuShs3Mi%2Fcm87fnzbH8A8HunJJfVsD8uUgEtEQyzV4sjQ55mJUg4qjuBqAEfmJUpqZD4Sjw6lFsaCjbLELUDhEk7WcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3d32adbbabd568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3348,"size_decoded":1678,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (666)","md5":"1586d2c400e55b09d851df6c7313f22e","sha1":"b0aa44b7320f863286b5e48682a979cffa76baea","sha256":"27581d659686b23b1d98063c3f09dd928e110cc9b6364a6a806bb348c4803c72","sha512":"1044d6d009826a53d4993bb69ae25aefafdd98839e8f157da2e2499f4bc93995fa83287ba5b4feed7c6841c4e8aed3220e44d7de3f33cf21f825012eca6e0ae9","ssdeep":"","tlshash":"f761de58360037679aeba5d6861f431ba27cd33b9220b479b0f08bdc0550d71d5fb66b","first_seen":"2024-11-02T09:25:34.447088Z","last_seen":"2026-09-18T20:41:37.359978Z","times_seen":11,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/cache/autoptimize/js/autoptimize_single_31794ef61bec31d91c37be16e3565297.js","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.114Z","timestamp":1789764044114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_31794ef61bec31d91c37be16e3565297.js HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pfM3GqCZ43OMe1oNJygKbtHUGoN%2FRCVCYUK6KnQg4eH%2BudV5aqZPnpakJufka5nZutgo4bi7645sV7NCk76SNDvk7zTKgKp3WIRba6kpebsicuXz5%2BO4L9ybS4ooPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3d32adbbabf568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6427,"size_decoded":3017,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1602)","md5":"0ce7f0ffbda1ed0d4c82d64eb2417b16","sha1":"b0573d35da726e05574d95f101fa3244614572c0","sha256":"1637efcaab6ff5e847464c3243ff6e789c0ffbe095c8c94792c5e2f6c801497a","sha512":"77e1d18ceadaf08c5d9e17d9041491260ac6b582dfef1f5cfaa8226a149e382cda0b03981116f70d1871504028674d73c2a6d229389e451c85411e8723b56bb6","ssdeep":"96:rjsoA34slDdIyJtSaydxC7jvrmYvF8acv9xtFrFwa0s/uJrCr9:soAtzDUdxKrmsYv9lZwa0sGJrCx","tlshash":"40d1c729336075ba019f64bf39af57c47a3265818a42d044e9f8c85a0f78c4276b7e3f","first_seen":"2026-09-18T20:32:45.482362Z","last_seen":"2026-09-18T20:41:37.360745Z","times_seen":2,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/cache/autoptimize/js/autoptimize_single_ec0187677793456f98473f49d9e9b95f.js","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.118Z","timestamp":1789764044118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_ec0187677793456f98473f49d9e9b95f.js HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4dMl0ZcSSlZGapZVxMdCMQk5vtoOsCRGRViRuf077OsBNC099hibiKTWnvplZcmr6YXhZcNibWLcfAJK%2BYq1FxNZduILDZWiL5ps72oIw8CcN29gyBBh%2BTN6HOJzpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3d32adbcac2568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":934,"size_decoded":1094,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (934), with no line terminators","md5":"ec0187677793456f98473f49d9e9b95f","sha1":"8c55e0f4a29865e871f3d54be8d480a0665891d9","sha256":"df0ec8330290d184b1084527076cb87d41b33ba706ff5ab579d761f0cb6a744b","sha512":"84b468de22634404405e52cda2844d626b4d47054739971d677f0e63fd683dcca100550419b945391236846df54b65fb43ee4d6e7f7692eb0d414584e2594108","ssdeep":"","tlshash":"9811e1305a3031740967ca6182eb53e1be31e461f0a3898159fc4e141f7ced598b3d86","first_seen":"2023-03-07T12:57:48Z","last_seen":"2026-09-19T05:50:53.655613Z","times_seen":114455,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.pl/wp-json/contact-form-7/v1/contact-forms/299/feedback/schema","fqdn":"ralcar.pl","domain":"ralcar.pl","tld":"pl"},"ip":{"addr":"146.59.71.167","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.240Z","timestamp":1789764044240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ralcar.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 19:54:29 GMT","end":"Sun, 01 Nov 2026 19:54:28 GMT"},"fingerprint":{"sha1":"03:4A:1C:75:17:97:45:DA:75:A9:55:31:09:B6:FB:73:83:09:F9:7E","sha256":"15:03:DA:34:46:FB:72:65:AD:76:54:8F:11:49:91:55:61:91:58:74:57:89:AC:C5:23:65:D8:B3:AD:BD:F6:8F"}}},"request":{"raw":"GET /wp-json/contact-form-7/v1/contact-forms/299/feedback/schema HTTP/1.1\r\nHost: ralcar.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, */*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nOrigin: https://ralcar.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 18 Sep 2026 20:40:45 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nx-robots-tag: noindex\r\nlink: \u003chttps://ralcar.pl/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link\r\naccess-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type\r\nallow: GET\r\naccess-control-allow-origin: https://ralcar.live\r\naccess-control-allow-methods: OPTIONS, GET, POST, PUT, PATCH, DELETE\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\nset-cookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict\naDJxVky=ig7hQpvtM; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict\nSmXKVd=%40MJ.Pu9%5BhKpn7i0; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict\r\nx-ray: wn68428:0.490/wa68428:D=484766\r\nx-cache-status: MISS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PSluKys_Gpqdf","value":"N7.api%5BQfFkMC6d1","quoted":false,"path":"/","expires":"2026-09-19T20:40:44Z","raw_expires":"Sat, 19-Sep-2026 20:40:44 GMT","max_age":86400,"secure":true,"http_only":false,"same_site":"Strict","partitioned":false,"raw":"PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict"},{"name":"aDJxVky","value":"ig7hQpvtM","quoted":false,"path":"/","expires":"2026-09-19T20:40:44Z","raw_expires":"Sat, 19-Sep-2026 20:40:44 GMT","max_age":86400,"secure":true,"http_only":false,"same_site":"Strict","partitioned":false,"raw":"aDJxVky=ig7hQpvtM; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict"},{"name":"SmXKVd","value":"%40MJ.Pu9%5BhKpn7i0","quoted":false,"path":"/","expires":"2026-09-19T20:40:44Z","raw_expires":"Sat, 19-Sep-2026 20:40:44 GMT","max_age":86400,"secure":true,"http_only":false,"same_site":"Strict","partitioned":false,"raw":"SmXKVd=%40MJ.Pu9%5BhKpn7i0; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":710,"size_decoded":1288,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"18785efa8a5483c769dc397e39ffd87d","sha1":"0a5585c46c912fac5adc977ab7e5fb40c916048a","sha256":"4f1373e52ddfb992d79b4884b44352e5cb4ff62bda0b4cd1510c5af6b5af8887","sha512":"4e68525f4fe06c70d6bb405e1e04e83d600a972b9f464e015fe3d3be8886b0f069f3d681a796a135d6aafb318d392cf5afc620ae35eb1b8aa97b9b935b1b0f46","ssdeep":"","tlshash":"b80117d311e9069f088c39e6c776dd9c39d8e481e840ef9bdc2e9643d184721aa5034a","first_seen":"2026-09-18T20:32:45.459313Z","last_seen":"2026-09-18T20:41:37.362837Z","times_seen":2,"resource_available":true,"data":null}},"time_used":828,"timings":{"blocked":-1,"dns":4,"connect":29,"send":0,"wait":509,"receive":0,"ssl":285},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/uploads/2025/05/favicon.ico","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:45.086Z","timestamp":1789764045086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/favicon.ico HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6qK%2ByIgDG0WWF3zvuFVSAtyCZV%2FePgogdY0dp2yaOIvehuv58yCiJ0BsQmPu%2BJ1A9d8npbOYj7LInMgfVLEcCPbw3p1I%2BMAqgixQaLtbqlsbsVTz2OSKwceM6C4aag%3D%3D\"}]}\r\ndate: Fri, 18 Sep 2026 20:40:45 GMT\r\ncontent-type: image/x-icon\r\ncontent-encoding: zstd\r\ncf-ray: a3d32ae1cb96568b-OSL\r\ncf-cache-status: HIT\r\netag: W/\"69807062-25be\"\r\nage: 543\r\ncache-control: max-age=2592000\r\npriority: u=6,i=?0\r\nexpires: Sun, 18 Oct 2026 20:31:41 GMT\r\nlast-modified: Mon, 02 Feb 2026 09:37:38 GMT\r\nserver: cloudflare\r\nx-ray: wn68428:0.000/\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9662,"size_decoded":1770,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"ae779175810789098adddb746d0348c4","sha1":"b567b8835f07518df87caf14cbb5bad7dd5f1bc1","sha256":"a5ab7ae1c481785755eb8a1c5ebdb3b3ec990cf93368f468eea5d6be4d9aadba","sha512":"cd4acc2206e3f940bdbd2e4914b88a9418df38f3fb72b606d1955fa9d75ffa52105743717524c6ca67e1f0371f44bd8e63223ff05bc7d390e0eb28e30e5df89e","ssdeep":"24:9RQYP6SgOGyqVXM8oZj3DedA2CQLecIo1iLEsCz9qOQB/ZfNw14H+K36hwRsJpuk:9OI6SgVXM8oBydhscj1Zl9hah6ysgd8","tlshash":"9a12b8cc6100a117fd1d6e33cd9d83ba703c78d4ca5158926c8efa1ae5751b06fd143a","first_seen":"2026-09-18T20:32:45.510001Z","last_seen":"2026-09-18T20:41:37.356349Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/uploads/2024/07/icons_remont-sceplenija.png.webp","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:46.122Z","timestamp":1789764046122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/icons_remont-sceplenija.png.webp HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 18 Sep 2026 20:40:46 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3d32ae84c11568b-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 543\r\ncache-control: max-age=2592000\r\netag: \"69afda46-4af6\"\r\nexpires: Sun, 18 Oct 2026 20:31:42 GMT\r\nlast-modified: Tue, 10 Mar 2026 08:45:58 GMT\r\nserver: cloudflare\r\nx-ray: wn68428:0.000/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zJI6l55RHiQWgm35etShPGLPbBpwE3RG87m4PrAQkGd1DHuV9TfXYRPsXid5LDkpM7zT7x2yqHXpKhPx06WGmgX7qCdABinc%2FZI7VCkQe7wsgO5MR4kP42cQvbrk4w%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19190\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19190,"size_decoded":19948,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"218961097b79f9162ecb8f5ece831d28","sha1":"81abffa676b7044ddcc34149164dd839a79b49e2","sha256":"d44e5805db39f01c74b3ba87cc0930cd17990b2ae8bb8246628b632802c14ced","sha512":"605f1ac940a020681fe30db9044421026e124c79322c0529a94991bf411fb6cb498ea7306eed9536194c94610fc5e1c03f70462843fbed380be5a00886551acf","ssdeep":"384:lB0nhRZ18Ump+u5gwhaEQ/FYrb0M+qZlnwuVXmk+y:lgq62gMNP+7u1","tlshash":"1582d050266103278bd41bbc67c0bb9cc04bce6ef177071a6289942da1c7673ead4ada","first_seen":"2026-09-18T20:32:45.503509Z","last_seen":"2026-09-18T20:41:37.366906Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/themes/extraweb_theme/js/jquery.min.js","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.102Z","timestamp":1789764044102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/themes/extraweb_theme/js/jquery.min.js HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pybmKRHgs%2BdvOuEg0CNe1hZ3vW%2FVmq%2BhjbceZY8IsIpPpQ0Ox2euFLP2esuRxgcKPhZgyMuRGncEUekIuPxVylXmfqfN%2FvbuZ%2Bzgd44ey3KSp9Ld5iegNhKDXPAldg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3d32adbaab5568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86927,"size_decoded":32771,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-09-19T05:44:34.765465Z","times_seen":145314,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/cache/autoptimize/js/autoptimize_single_2912c657d0592cc532dff73d0d2ce7bb.js","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.107Z","timestamp":1789764044107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_2912c657d0592cc532dff73d0d2ce7bb.js HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nR9msMBo%2B1IZKuGS4CceORyqdADqweZOB9BbrxHNjMrEMBuetYVdsI52SfzSBjDxgyIagFZIQ6oKJiu4OdDgddSV7ur7eBUdM77gp4DT%2BieN%2FC2Zc51l93Mo8Kzeng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3d32adbaab9568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13452,"size_decoded":5091,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-09-19T05:34:33.129657Z","times_seen":244973,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/intertight/v9/NGSwv5HMAFg6IuGlBNMjxLsH8ag.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.249Z","timestamp":1789764044249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/intertight/v9/NGSwv5HMAFg6IuGlBNMjxLsH8ag.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ralcar.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 44872\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:32:37 GMT\r\nexpires: Thu, 16 Sep 2027 10:32:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 209287\r\nlast-modified: Mon, 15 Sep 2025 16:28:02 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44872,"size_decoded":45685,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 44872, version 1.0","md5":"f5af7a761c2b64f7c28f1e6721d7743b","sha1":"4179443c5359657e3c405662378f19b96112154c","sha256":"77fefe8ca19b9f69b5284832c519e0493127c1f091f0a8936884be7721c4e618","sha512":"89118c1ad40849d2684d32ddc4300681caedbc09d406a75aaedbbec06902f66ae8a23d2fb05e58cfd6a74d9e41481c94c874df18907cf4730c9e79242aa8388c","ssdeep":"768:pIbgboC/jX8ToguHZRHkJAHFCGNxHefy2BiO07nP/adgItMqmUu1ztZf3BbXsi:SgboAEcsAEGxHefy2BgaPMqf6Lf+i","tlshash":"3913f2f67f5c2bab97efb99eb8f90c1619d50a3091934c9e01941c1b6728f821d9d063","first_seen":"2025-06-03T20:24:39.584186Z","last_seen":"2026-09-18T23:09:51.904379Z","times_seen":7817,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":38,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"monitor.fraudblocker.com/p.js?sid=jSRVZBREtmdhqmo8MyPFa\u0026vid=91e7205a50d9b0bb8873d09ba704c75c\u0026tz=UTC\u0026os=Windows%2010\u0026b=Firefox%20134.0\u0026bo=0\u0026audio=35.749972093850374\u0026colorDepth=24\u0026colorGamut=srgb\u0026contrast=0\u0026cookiesEnabled=true\u0026cpuClass=\u0026deviceMemory=\u0026domBlockers=\u0026fonts=Bitstream%20Vera%20Sans%20Mono%3BCentury\u0026forcedColors=false\u0026hardwareConcurrency=8\u0026indexedDB=true\u0026localStorage=true\u0026openDatabase=false\u0026pdfViewerEnabled=true\u0026platform=Linux%20x86_64\u0026plugins=PDF%20Viewer%3BChrome%20PDF%20Viewer%3BChromium%20PDF%20Viewer%3BMicrosoft%20Edge%20PDF%20Viewer%3BWebKit%20built-in%20PDF\u0026screenResolution=1280x1024\u0026sessionStorage=true\u0026touchSupport=%7B%22maxTouchPoints%22%3A0%2C%22touchEvent%22%3Afalse%2C%22touchStart%22%3Afalse%7D\u0026vendor=\u0026videoCard=%7B%22vendor%22%3A%22Mesa%22%2C%22renderer%22%3A%22llvmpipe%2C%20or%20similar%22%7D","fqdn":"monitor.fraudblocker.com","domain":"fraudblocker.com","tld":"com"},"ip":{"addr":"34.96.65.117","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.777Z","timestamp":1789764044777,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"monitor.fraudblocker.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 20:50:34 GMT","end":"Fri, 13 Nov 2026 21:43:06 GMT"},"fingerprint":{"sha1":"D8:93:41:BD:82:DD:6C:43:C1:C0:10:4B:19:71:2C:8B:79:FD:20:8F","sha256":"A3:87:19:8D:79:C8:DB:60:8D:C9:68:33:E9:E4:A1:FF:07:F9:B6:C8:B2:93:62:14:E4:38:10:90:54:81:7E:C7"}}},"request":{"raw":"GET /p.js?sid=jSRVZBREtmdhqmo8MyPFa\u0026vid=91e7205a50d9b0bb8873d09ba704c75c\u0026tz=UTC\u0026os=Windows%2010\u0026b=Firefox%20134.0\u0026bo=0\u0026audio=35.749972093850374\u0026colorDepth=24\u0026colorGamut=srgb\u0026contrast=0\u0026cookiesEnabled=true\u0026cpuClass=\u0026deviceMemory=\u0026domBlockers=\u0026fonts=Bitstream%20Vera%20Sans%20Mono%3BCentury\u0026forcedColors=false\u0026hardwareConcurrency=8\u0026indexedDB=true\u0026localStorage=true\u0026openDatabase=false\u0026pdfViewerEnabled=true\u0026platform=Linux%20x86_64\u0026plugins=PDF%20Viewer%3BChrome%20PDF%20Viewer%3BChromium%20PDF%20Viewer%3BMicrosoft%20Edge%20PDF%20Viewer%3BWebKit%20built-in%20PDF\u0026screenResolution=1280x1024\u0026sessionStorage=true\u0026touchSupport=%7B%22maxTouchPoints%22%3A0%2C%22touchEvent%22%3Afalse%2C%22touchStart%22%3Afalse%7D\u0026vendor=\u0026videoCard=%7B%22vendor%22%3A%22Mesa%22%2C%22renderer%22%3A%22llvmpipe%2C%20or%20similar%22%7D HTTP/1.1\r\nHost: monitor.fraudblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nx-guploader-uploadid: AJjja9Y9MJXeNRQO7gHAdEpQ1e0QnqvLW4UJDLFAza_qsxeEE7c82dgdm121TeC5df9fcSn_\r\ndate: Fri, 18 Sep 2026 20:40:44 GMT\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Fri, 18 Sep 2026 20:40:44 GMT\r\nlast-modified: Wed, 18 May 2022 00:10:50 GMT\r\netag: \"7bc0ee636b3b83484fc3b9348863bd22\"\r\nx-goog-generation: 1652832650614216\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 2\r\nx-goog-hash: crc32c=Fz0s1w==, md5=e8DuY2s7g0hPw7k0iGO9Ig==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\ncontent-length: 2\r\nserver: UploadServer\r\nx-fbc-status: miss\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2,"size_decoded":730,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"7bc0ee636b3b83484fc3b9348863bd22","sha1":"ebbffb7d7ea5362a22bfa1bab0bfdeb1617cd610","sha256":"a2c2339691fc48fbd14fb307292dff3e21222712d9240810742d7df0c6d74dfb","sha512":"4d094b64124366530e7e327b1ad5d06c0fd1ceb96387d6a143e9f561c2f9ff7ca9d68e7c23b8b14aab5309c202a8dced9a38d950662a50984d2841577293cd64","ssdeep":"","tlshash":"c71000000000000000000000000000c000000000000000000030000000000000000000","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-09-18T21:32:42.681211Z","times_seen":35469,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le1KGgtAAAAAAnhTiISMdUH_TicFHtgl-9JCukY\u0026co=aHR0cHM6Ly9yYWxjYXIubGl2ZTo0NDM.\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=g47ebcloj2bc","date":"2026-09-18T20:40:45.336Z","timestamp":1789764045336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 353627\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 10:50:34 GMT\r\nexpires: Sat, 18 Sep 2027 10:50:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 14 Sep 2026 02:03:12 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 35411\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":846252,"size_decoded":354513,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (575)","md5":"fac9419e0a4c4b45ec150e400a959d8c","sha1":"79ece6c0cdc5a7cad103ccd6e32aef80793211a6","sha256":"24426f449db0a1effc9a2118370b418d5de8b9fc11076a115baec2ff5250fffe","sha512":"2dbfa5289fe1b4811bb8fe4e409f229859ba27c753f1737c5e25c4b403bdded8e7d2aa11cae71cb1d49bd0d613e9bc15601ac2b0d14ef71fa75e08c4aa7ae296","ssdeep":"12288:CiPDodYZjHqv8FNaieyWjeKizB+JgK9RP9RzGhBXDAZY:nDod1Wv/z4JgK9R/zpZY","tlshash":"dc053be9b445b6f54322f5f1606b6418a33e9826d84c081f7199d9f06eb4c0eb07beb7","first_seen":"2026-09-14T19:29:34.285397Z","last_seen":"2026-09-19T05:28:52.734498Z","times_seen":1757,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.live/wp-content/uploads/2024/07/icons_uslugi-avtojelektrika.png.webp","fqdn":"ralcar.live","domain":"ralcar.live","tld":"live"},"ip":{"addr":"172.67.210.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:46.240Z","timestamp":1789764046240,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralcar.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:29:34 GMT","end":"Sat, 14 Nov 2026 09:27:14 GMT"},"fingerprint":{"sha1":"80:F4:EE:7A:90:E7:32:EF:7E:42:EC:1F:11:6D:80:B7:82:39:E3:6B","sha256":"5E:7A:1A:B7:9B:CC:6F:95:86:40:19:95:62:BC:80:E8:8E:DC:5B:02:D2:AC:97:58:64:15:7C:5A:45:23:D9:CC"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/icons_uslugi-avtojelektrika.png.webp HTTP/1.1\r\nHost: ralcar.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; aDJxVky=ig7hQpvtM; SmXKVd=%40MJ.Pu9%5BhKpn7i0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 18 Sep 2026 20:40:46 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3d32ae90c27568b-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 543\r\ncache-control: max-age=2592000\r\netag: \"69afda66-2358\"\r\nexpires: Sun, 18 Oct 2026 20:31:42 GMT\r\nlast-modified: Tue, 10 Mar 2026 08:46:30 GMT\r\nserver: cloudflare\r\nx-ray: wn68428:0.000/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2B6sYO64uMlOjnk%2B6TIjegnLCmyKgtxi80RUerc8lA8eexuMv4O42Xc%2BnxhzMDX0k%2F78xq6zffRB4ZzmpovjbkJJtEjE8aOyPVTSA5pcuEkKCG5eeE9W8PFlZq6oOA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9048\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9048,"size_decoded":9811,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"270ba9181dbe567bcf17a333a2f35a1a","sha1":"2a28089dbb5c7e24d69a7bcf4fe5f383d7255309","sha256":"5c394f99e7aa9de3b05048f571998d81ab1f5614d0f1476633f0ea2ad97e3b21","sha512":"8061cccc2259aea6c7d81d916daa90a6dcb22e15d38c6ba8477f19546885bb7e337a042fcfac735c341a31c3f608b32bc1f1b0875041441cf856e226ca13b65e","ssdeep":"192:xuM6a7OSPncxBdi0MAjL7VMRpxcePOirsWA4w1a9rBtx:RSSPncxCwL7VMRgePZ6zaFF","tlshash":"31128e53b95ba62a3059a3f1333a0932dee8314321d359af9a4d7137ad32927524053f","first_seen":"2026-09-18T20:32:45.498907Z","last_seen":"2026-09-18T20:41:37.369665Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"ralcar.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"ralcar.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ralcar.pl/wp-json/contact-form-7/v1/contact-forms/1531/feedback/schema","fqdn":"ralcar.pl","domain":"ralcar.pl","tld":"pl"},"ip":{"addr":"146.59.71.167","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ralcar.live/","date":"2026-09-18T20:40:44.243Z","timestamp":1789764044243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ralcar.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 19:54:29 GMT","end":"Sun, 01 Nov 2026 19:54:28 GMT"},"fingerprint":{"sha1":"03:4A:1C:75:17:97:45:DA:75:A9:55:31:09:B6:FB:73:83:09:F9:7E","sha256":"15:03:DA:34:46:FB:72:65:AD:76:54:8F:11:49:91:55:61:91:58:74:57:89:AC:C5:23:65:D8:B3:AD:BD:F6:8F"}}},"request":{"raw":"GET /wp-json/contact-form-7/v1/contact-forms/1531/feedback/schema HTTP/1.1\r\nHost: ralcar.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, */*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ralcar.live/\r\nOrigin: https://ralcar.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 18 Sep 2026 20:40:45 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nx-robots-tag: noindex\r\nlink: \u003chttps://ralcar.pl/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link\r\naccess-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type\r\nallow: GET\r\naccess-control-allow-origin: https://ralcar.live\r\naccess-control-allow-methods: OPTIONS, GET, POST, PUT, PATCH, DELETE\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\nset-cookie: PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict\naDJxVky=ig7hQpvtM; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict\nSmXKVd=%40MJ.Pu9%5BhKpn7i0; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict\r\nx-ray: wn68428:0.500/wa68428:D=496956\r\nx-cache-status: MISS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PSluKys_Gpqdf","value":"N7.api%5BQfFkMC6d1","quoted":false,"path":"/","expires":"2026-09-19T20:40:44Z","raw_expires":"Sat, 19-Sep-2026 20:40:44 GMT","max_age":86400,"secure":true,"http_only":false,"same_site":"Strict","partitioned":false,"raw":"PSluKys_Gpqdf=N7.api%5BQfFkMC6d1; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict"},{"name":"aDJxVky","value":"ig7hQpvtM","quoted":false,"path":"/","expires":"2026-09-19T20:40:44Z","raw_expires":"Sat, 19-Sep-2026 20:40:44 GMT","max_age":86400,"secure":true,"http_only":false,"same_site":"Strict","partitioned":false,"raw":"aDJxVky=ig7hQpvtM; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict"},{"name":"SmXKVd","value":"%40MJ.Pu9%5BhKpn7i0","quoted":false,"path":"/","expires":"2026-09-19T20:40:44Z","raw_expires":"Sat, 19-Sep-2026 20:40:44 GMT","max_age":86400,"secure":true,"http_only":false,"same_site":"Strict","partitioned":false,"raw":"SmXKVd=%40MJ.Pu9%5BhKpn7i0; expires=Sat, 19-Sep-2026 20:40:44 GMT; Max-Age=86400; path=/; secure; SameSite=Strict"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":694,"size_decoded":1267,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b8997bafa8a6234f4f704c7ac45c55cc","sha1":"392333f6e277aaae5476780ecba45978bdcb89e7","sha256":"320dd92c0fe7525eb72cf72fd7268f447fc08dd5fa07f4e0b4a734d3b2e926cc","sha512":"f3ccf8803e697571c2641a80f90fafd08af1a1109cce6fecc3cc3e9d131bc3a35a087901d374b013c779eaf6ff1525d5c6f025ea48bf8081767f4d89744d4df3","ssdeep":"","tlshash":"5101f28211cc9abf0d0d2acac5bf8e5c2ae5e0daec81ef45dd25c943d0c47316651155","first_seen":"2026-09-18T20:32:45.485258Z","last_seen":"2026-09-18T20:41:37.37043Z","times_seen":2,"resource_available":true,"data":null}},"time_used":838,"timings":{"blocked":-1,"dns":1,"connect":25,"send":0,"wait":522,"receive":0,"ssl":288},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le1KGgtAAAAAAnhTiISMdUH_TicFHtgl-9JCukY\u0026co=aHR0cHM6Ly9yYWxjYXIubGl2ZTo0NDM.\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=g47ebcloj2bc","date":"2026-09-18T20:40:45.335Z","timestamp":1789764045335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42355\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 11:02:41 GMT\r\nexpires: Sat, 18 Sep 2027 11:02:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 14 Sep 2026 02:03:12 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 34684\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82980,"size_decoded":43201,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c7a6d902a0adcd7c9223bc3457d32a41","sha1":"a8edb18d3034cd30504e947ca68ebef437c7b706","sha256":"8266c6122d4a35954f3142697506efb503322c0470d3863c9e759e2e2295e5cc","sha512":"a49bba8e98fd71591b08e158dfa5e500f0bc0b5de853ed672f9769c3be6a813dfbee5c88c5bfe8484943f4b624aa09ed07f2a41e4b4d03b9541455ce662ed4fd","ssdeep":"1536:n7Rpgh9C9ToL9gTNfWNfK4RxXnHZzhXwWx7W1bx7:n7ArC9ULiTYNC4Rv9Xi","tlshash":"85838e7338513a1afc2b9b616196bdfdf11cc923e5515bfaa5497a20c3cb0a78223707","first_seen":"2026-09-14T19:29:34.239267Z","last_seen":"2026-09-19T05:28:52.775537Z","times_seen":1569,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}