{"report_id":"678d0af9-6495-4f4b-8421-352614040273","version":6,"status":"done","tags":[],"date":"2026-03-07T08:02:54Z","url":{"schema":"http","addr":"tiq18sf.imgimg.xyz/","fqdn":"tiq18sf.imgimg.xyz","domain":"imgimg.xyz","tld":"xyz"},"ip":{"addr":"54.215.31.113","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"vpnrcmd.com/provider/surfshark/","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"title":"SurfShark – VPN Recommend – Shop \u0026 Compare","dom":{"size":107277,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9239)","md5":"6e6f129c02e2afce32735a12ae74d9d4","sha1":"68081c4ede93a4a5a1e09e1609f4d61cb6b0190c","sha256":"5c11abcbb614ef31fd66b972a1633f639d69b9fe10a4c1f047f770931cffb46f","sha512":"d44bc9e0c76e1bd4be3abd4e350b26fcdaacb56efa6a6171137b1f00a8bb189b875f16482815a67fecd1c895fe29a06cad3076783539098fb270a32f22b7fac4","ssdeep":"1536:7rqyp+xpLJPv11uebE6R+sEODvlhmJ03/VltBqRpfSuG:7rjcxpLJrue4cFlhTztBqRpfSuG","tlshash":"6aa31973d25c207f1f3f8399671177ad63ba9638d60188e4b6bf424857c2db902b325a","dom_hash":"domhashcf354f27d3091119eeac2729a63f76cc","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tiq18sf.imgimg.xyz/","fqdn":"tiq18sf.imgimg.xyz","domain":"imgimg.xyz","tld":"xyz"},"ip":{"addr":"54.215.31.113","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-11T08:02:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"secure.gravatar.com","ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2004-07-15","domain_rank":16323,"first_seen":"2012-05-22T05:36:38Z","last_seen":"2026-03-02T08:50:32.959206Z","alert_count":0,"request_count":1,"received_data":4223,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"tiq18sf.imgimg.xyz","ip":{"addr":"54.215.31.113","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2023-07-11","domain_rank":0,"first_seen":"2026-03-07T08:02:56.095367Z","last_seen":"2026-03-07T08:02:56.095367Z","alert_count":0,"request_count":1,"received_data":106781,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"vpnrcmd.com","ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"domain_registered":"2023-03-26","domain_rank":0,"first_seen":"2025-10-07T17:00:57.339063Z","last_seen":"2026-03-07T08:02:46.916451Z","alert_count":32,"request_count":32,"received_data":1254012,"sent_data":16242,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"CookieYes","description":"","website":"https://www.cookieyes.com/","common_platform_enumeration":"","icon":"cookieyes.svg","categories":["Cookie compliance"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Gravatar","description":"Gravatar is a service for providing globally unique avatars.","website":"https://gravatar.com","common_platform_enumeration":"","icon":"Gravatar.png","categories":["Miscellaneous"]},{"name":"Site Kit:1.173.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"cdn-cookieyes.com","ip":{"addr":"104.18.18.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-22","domain_rank":9847,"first_seen":"2020-04-26T13:42:32Z","last_seen":"2026-03-02T03:42:11.405175Z","alert_count":0,"request_count":1,"received_data":99116,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":4,"received_data":175884,"sent_data":2184,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":23026,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-01T22:20:53.525798Z","alert_count":0,"request_count":1,"received_data":457822,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn-cookieyes.com/client_data/1f18974e888cdbd73ae8bad4/script.js","fqdn":"cdn-cookieyes.com","domain":"cdn-cookieyes.com","tld":"com"},"ip":{"addr":"104.18.18.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bb7ad53f1f7d624887395bd40391320","sha1":"1dc89b6e5c8507d5ae49cc0d9c01dc1bbcca5f8a","sha256":"a42cb2d9a217abf943a0dd134150a0d483c9260a0a92aa1e439c5bc87c0d91a5","sha512":"419f343d8f75ca7533153cc7d9459d4ce6363e82329738d828c79eb9219ba6435f99e4ca2c859465c61689234186e378f154d506e8d7d2890011418c502981da","ssdeep":"1536:1LWuh7/MnssiP2N742vAARSBAJ3mkEtMxdCTNCeNmw3H4z/nez:1b7/M5iet4IASCUdPeCnez","tlshash":"f2a3b68cfad1f0a517e360a4806f950bf17b2a69740d94d1eaa6c1d1ac78e8f4037e7d","size":98594,"data":"","first_seen":"2025-11-19T13:03:04.168706Z","last_seen":"2026-03-07T19:13:35.110279Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/provider/surfshark/","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"d286d68686e3f553a16762409b8f4383","sha1":"d5e503593ef9582648cf51d83b50a33c829d96ea","sha256":"9caaa7f5dc743a7ae38233f55b0b49774716be59fe8cf166df64c75c32e8532b","sha512":"bdc26520e3a51115f93a37e43a3c3a1f0665444141d2ba6213e320aa97e8a72aed33c8d460f2450e40b7cbf77bf7d18264849253ba3649f490e7e69d98fd914b","ssdeep":"","tlshash":"9001493330911afbc9bab801575637693a1333dad674641089dc060438bfe47e0d5ccc","size":771,"data":"","first_seen":"2025-12-11T16:35:33.230338Z","last_seen":"2026-03-07T19:13:35.127928Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b3c2807380c52f783922c1512ed21b6","sha1":"771c723791ecb7a6805d2ee1ddb8e0bbf04c8bfe","sha256":"47edd7424bbc5ca5e2ab73ea240da1aa218b9ac89db411fc5921fb200abec9e7","sha512":"c45aec1d7d0b3a298c00736784f61bf9049636e611a013cc7d2bce1531710cb8ebc3ba77444413858c9900b83039527b68153816b5ff858972104411677f4834","ssdeep":"96:svcHtHRA5NTDXnM2E0+1lfYsPHgRhR3S88:JN0LE0+1lfYsvSY","tlshash":"1d91b69ae77a38dbb2f900f2697a0d47eb614435d6c8d038c9bea3141cb5893c274a46","size":4453,"data":"","first_seen":"2026-03-07T08:02:49.668818Z","last_seen":"2026-03-07T19:13:35.130525Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GT-5M3B95WC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"909c0122ac1bbbc7f95deb2d309ae6db","sha1":"c3798c846e2e0be4068c8e15751955a6f2050397","sha256":"b8c82bb9db5c4a27fa24e28c7e8bc48c48134514eb81ca9e545eefb0684dd88f","sha512":"6b886cc5d48a3feea4503646430d1dab973ff03ab58901505748b913ca99de3bc2d400187a3112591d30a6473433d044c4e14a95469d29653db85dcfab0a47c1","ssdeep":"6144:n6CkKfNl3H2vNQBaKI0SfZ8RGw/V0sApXx2ZAJJx:nP/FxH2vnDfZ8t6","tlshash":"8da41bce73d674225396f478503f018ba57b28a2b48cc89af189cce46e7459a8137f7d","size":457218,"data":"","first_seen":"2026-03-07T08:02:49.652127Z","last_seen":"2026-03-07T16:14:25.047879Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/plugins/simple-tags/assets/frontend/js/frontend.js?ver=3.44.0","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fa2b9763d58f6cffcb0218dcc145b02","sha1":"86f35761c6e1ba43fd03560d44287c9ddc13b8b1","sha256":"68050132d00103b58e5dfc387574b2e9c379476798384478e32b1cda8cfae705","sha512":"68a64e3bdd35af4d19921b6853b796e7f66acb3545238e54bf9a8ea6639963847cd9dba4544d00deea440fed10e97539070eea848b6d98f5aa90bfac37b78b46","ssdeep":"","tlshash":"6c213238ed652a9150b7f338dbabae15ee22092b0142cb31bd8e4be00f716144c1eddd","size":1186,"data":"","first_seen":"2024-09-10T21:44:58Z","last_seen":"2026-04-04T15:12:46.085744Z","times_seen":1188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/provider/surfshark/google_gtagjs-js-after","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc17539c26d65a15a97c5fefe758e331","sha1":"57bb2aed9fa327c0c2a155130e3833623c22bfb3","sha256":"d8749e44edc9cf119dbef4a05d389e8f3c989efb808e7046c3a8b9d5d9960a3a","sha512":"893bf7593906fafaf5497f758de6751d8e72134ff280eaa9bc4b87f1cb9af7889e77f56ab1cc729fe80801d990fcaa42311aa359ea09f13d1da41da23824c18b","ssdeep":"","tlshash":"75212633f0911afac9baa831575627693a1333dad674641089dc060428bfe47e0d5ccc","size":1294,"data":"","first_seen":"2026-03-07T08:02:49.669615Z","last_seen":"2026-03-07T19:13:35.128881Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/themes/mercury/js/scripts.js?ver=3.9.11.1","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"0025d45c917e05da5a9524ecb3a0be5c","sha1":"14a3eb110606f1f21970bc3f46b722512f05ad8d","sha256":"de6a280187f35a8ed90567418aafe24eeae8e60a3a83ea0a7e18f7c4e168529f","sha512":"b910c358affa2c3d5b9911582a33e8c396e30f2df470ebbf947241744b79a460fb31aa4ac30d3a95b5ab2588950ecc85cba862cc9fdd8e83d131a2f9e2dbc457","ssdeep":"","tlshash":"9861af49b32aa05f78ffb294d53ee544db3e401bc10055a5bfbd2d9c370562c22b2a6e","size":3189,"data":"","first_seen":"2023-03-07T12:27:39Z","last_seen":"2026-04-04T08:06:06.659435Z","times_seen":226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/plugins/google-site-kit/dist/assets/js/googlesitekit-events-provider-wpforms-08f4a4ca33532233b542.js","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"c59c856ed333a9bfb5509888fccde99b","sha1":"b7ccb797aca95798615552c7c407ec832529adc4","sha256":"edf0506dc7465c9721377c54a33c26a1f15b889bbd06d0f4e55c8185f27cb963","sha512":"451dbc335f48dbebfc2df0265e5bff57c8f6e521581abca4fedacad502506d64a8cad8dcee494e5964eb0cf8d4f62518343327e6ab2f94247594fb5860ca2818","ssdeep":"","tlshash":"2f51788cb3cfb9d1dbc965a4b1b6901cf56c4425395d0c40d2b949763c37e8ab2b2e58","size":3046,"data":"","first_seen":"2026-02-10T01:01:02.053451Z","last_seen":"2026-04-04T15:12:46.196145Z","times_seen":948,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/themes/mercury/js/enable-sticky-sidebar.js?ver=3.9.11.1","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a57eb246e26fa7b51433d0f876be01b6","sha1":"c23452340ca6d7f10f1ee00cd33d95a833dbbced","sha256":"baa2ec62db4c150dc99ee168d5640dc8e33ffe470a1774c0950a386a44264105","sha512":"62315cb8a0439075b08ef0401c62ecb6cfadbdb95e16fe710470b3d852a1564a033fb0101e5d3b10956924e2d7ea52feb56fa5c48c4054ce25cc8432dc3c169e","ssdeep":"","tlshash":"9fc08016b06818670c67d0b154ef7d30c76b3cd53398415e973c50580d2163d44334cb","size":163,"data":"","first_seen":"2023-03-07T12:27:39Z","last_seen":"2026-04-04T00:44:19.549663Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/themes/mercury/js/theia-sticky-sidebar.min.js?ver=1.7.0","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"645850824cb639af13a1887b7d46c13e","sha1":"04bdf40ec3f5a2676269fb3ebbe1db66d9451078","sha256":"4c7fe9f4b7e2cbaeadf56a93f537dfe760444ddbc081a7d12aa5c97c98cafce9","sha512":"33db385abfa57ea6198353c44ae511aa2a73b2515ebe40e5f5d97ce68e0cc84b206f21d763ee8621f2cb47760529cbab62b6ed0105e46fdac25b3554d9f65a28","ssdeep":"96:8CErPpnMTDqfVNsArPF1DYvDRGuPHB+qCuS5+6k:FEz96DqfVOXEuPHB+qC9Q","tlshash":"4fb1525e2f607539e097f8cf90cfa028906e4da75bca9079870c81d81d6176891f2fcd","size":5433,"data":"","first_seen":"2023-03-07T12:27:39Z","last_seen":"2026-04-04T00:44:19.562158Z","times_seen":171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-04T15:49:44.595398Z","times_seen":638975,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/themes/mercury/js/owl.carousel.min.js?ver=2.3.4","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"47c357c05cb99cedbac2874840319818","sha1":"d8b05365de4b760618328fdeef7672e8374978e4","sha256":"4e0781bdd2cbb5db04da3b5e059eeca34e325fabb893bee7457b5babf5b7c029","sha512":"960b76113c78220acc1c87e437c6698fbf1066b8cf7b15a6d4d33f31ab69d8e16bd9823c07ce1897db4d0bdfe08b39e5c7085b79a7a8ef80760e87d9aa789e2e","ssdeep":"768:RCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSNc7UuHjRUQuFBt33:AITMFC4dbMVRSNcgRDV","tlshash":"39137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","size":44348,"data":"","first_seen":"2023-03-07T01:06:30Z","last_seen":"2026-04-04T15:45:32.553737Z","times_seen":9324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-04T15:50:01.223201Z","times_seen":131706,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T15:49:44.56661Z","times_seen":685615,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/provider/surfshark/","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"d1411fdc3d72959ddcc04b1047812348","sha1":"6521afafe3d1214fe8a42a6458f5e07e970e64d5","sha256":"3f3117b7dc866152e28b806308f29a72ce63b39ed59ec1443ef9506e3f3c2a75","sha512":"505cd2e52559cc0f6e6410a571c0127ad0a142e4dc162beba5f23ddb08c43e19b52d783606ded587b229ed7fc9f8c8145cd29ffbd5016192d5a9d82510d37ecc","ssdeep":"96:DwYjtcjYZ4jALjtIjDTiWobW+kY7/CA/vhzTOuKLRowaxKZItPjhQ6mgrrGzRiLV:nyHAaYbW+kSXJcRoTxKZCPjhQ6mgryF0","tlshash":"1ec1b6ea13fd123512375299a7c3b52e333442036540cd06b6ae42c8afc9d7486f2aed","size":5869,"data":"","first_seen":"2026-03-07T08:02:49.671555Z","last_seen":"2026-03-07T19:13:35.129694Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"tiq18sf.imgimg.xyz/","fqdn":"tiq18sf.imgimg.xyz","domain":"imgimg.xyz","tld":"xyz"},"ip":{"addr":"54.215.31.113","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T08:02:31.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgimg.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 13:56:04 GMT","end":"Tue, 28 Apr 2026 13:56:03 GMT"},"fingerprint":{"sha1":"0A:31:EA:1A:8F:E4:D2:09:E3:31:29:18:A2:83:A7:09:0B:81:AC:9E","sha256":"6B:8E:2E:5A:5B:88:67:B5:92:E7:E0:30:1A:20:4B:91:E7:DD:5C:01:81:53:60:BF:B3:80:F5:84:9E:3C:FD:02"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tiq18sf.imgimg.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ncontent-type: text/plain\r\ncontent-length: 0\r\ndate: Sat, 07 Mar 2026 8:02:32 GMT\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=2592000\r\ncache-control: private, no-cache, no-store, max-age=0\r\nexpires: Mon, 01 Jan 1990 0:00:00 GMT\r\nlocation: https://vpnrcmd.com/provider/surfshark/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106430,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":1044,"timings":{"blocked":444,"dns":120,"connect":156,"send":0,"wait":156,"receive":0,"ssl":165},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/themes/mercury/css/owl.carousel.min.css?ver=2.3.4","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:33.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/themes/mercury/css/owl.carousel.min.css?ver=2.3.4 HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 01 Aug 2025 10:12:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688c931e-d1c\"\r\nexpires: Sun, 07 Mar 2027 08:02:33 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3356,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3184), with CRLF line terminators","md5":"b9755c9c2613c455154caf065bd1a94d","sha1":"aa3c316b4e2ab55bcb3d8e3d186677739b0cfd64","sha256":"062368677bcefd9495e8b320e0cf22c4faca9f1bc04666efeb9cd5307cd591a4","sha512":"dc35560a766631f3b508d0e280fb95f746d9940b48565487932ea6c1ac97f5436d0ecf3b59ebc2ba2c4f21f7c5b963b4671a7f3e56745860cd1244d207fbcc6a","ssdeep":"","tlshash":"a361cbe5314a225f480f831219d81e86393dcc52d8660a8a92bbd71447dae6d213ffcf","first_seen":"2023-04-05T17:13:40Z","last_seen":"2026-04-04T13:59:09.10489Z","times_seen":4991,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/themes/mercury/fontawesome/webfonts/fa-regular-400.woff2","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:34.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/themes/mercury/fontawesome/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/wp-content/themes/mercury/fontawesome/css/all.min.css?ver=6.6.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25464\r\nlast-modified: Fri, 01 Aug 2025 10:12:46 GMT\r\netag: \"688c931e-6378\"\r\nexpires: Sun, 07 Mar 2027 08:02:34 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25464,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25464, version 774.256","md5":"2d89b49ac28614e9ccd9c81308b5120c","sha1":"46e272db3db1072791628679bc469112c8e41017","sha256":"c732f106e91bc618767fbac8e2c7b27e5c736d477b2bb4fb83f597a43198c33c","sha512":"ea52d931fe445178877aa558f6c7702b6f5836a938d51809605317f8c690356022745d4495aae3ea7018e8314a5e4c583fc58b28dded6309a2e1c37a89160bb7","ssdeep":"384:47kVrsDbxAmlq9YVDlI4zwZ0HupU6LnbbPT78/MktAxlkAhxA+iQ4QE8w:aCrsHxll7l4pPTnhjmI4QM","tlshash":"19b2e1bdb1ff69e474742512c5f42129760fe59aef31cb2a34a0e676f2460d826dc1b0","first_seen":"2024-07-20T13:53:50Z","last_seen":"2026-04-04T10:57:43.123199Z","times_seen":2496,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/themes/mercury/fontawesome/webfonts/fa-regular-400.woff2","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:34.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/themes/mercury/fontawesome/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/wp-content/themes/mercury/fontawesome/css/all.min.css?ver=6.6.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25464\r\nlast-modified: Fri, 01 Aug 2025 10:12:46 GMT\r\netag: \"688c931e-6378\"\r\nexpires: Sun, 07 Mar 2027 08:02:34 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25464,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25464, version 774.256","md5":"2d89b49ac28614e9ccd9c81308b5120c","sha1":"46e272db3db1072791628679bc469112c8e41017","sha256":"c732f106e91bc618767fbac8e2c7b27e5c736d477b2bb4fb83f597a43198c33c","sha512":"ea52d931fe445178877aa558f6c7702b6f5836a938d51809605317f8c690356022745d4495aae3ea7018e8314a5e4c583fc58b28dded6309a2e1c37a89160bb7","ssdeep":"384:47kVrsDbxAmlq9YVDlI4zwZ0HupU6LnbbPT78/MktAxlkAhxA+iQ4QE8w:aCrsHxll7l4pPTnhjmI4QM","tlshash":"19b2e1bdb1ff69e474742512c5f42129760fe59aef31cb2a34a0e676f2460d826dc1b0","first_seen":"2024-07-20T13:53:50Z","last_seen":"2026-04-04T10:57:43.123199Z","times_seen":2496,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/uploads/2022/12/private-internet-access-50x50.png","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:34.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/uploads/2022/12/private-internet-access-50x50.png HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 1904\r\nlast-modified: Fri, 01 Aug 2025 10:17:10 GMT\r\netag: \"688c9426-770\"\r\nexpires: Sun, 07 Mar 2027 08:02:34 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1904,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"900e8decc346f595ec8bf21cb2a32169","sha1":"02e7d0d6e8c67b7181897425cd2befca0f720e2c","sha256":"88a30104cdd089d6a65881a4da30ee3ae86f0d421265d17c4056f41367c1867b","sha512":"d70165e7eccde6c53477d7192a159a1fd6f2ffd07f0681ceb9587e29ec04e968f49226dc731162222e70547665b41ec3f2a2b94f7f1a401a94b8c1228566e49b","ssdeep":"","tlshash":"0d411bc3a56677c8bedd04ca935e57e9f4bb95de204b63a7d5efa435000582006d8f07","first_seen":"2025-11-19T13:03:04.153554Z","last_seen":"2026-03-07T19:13:35.112998Z","times_seen":23,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/plugins/aces/css/aces-media.css?ver=3.0.7","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:33.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/plugins/aces/css/aces-media.css?ver=3.0.7 HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 01 Aug 2025 10:12:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688c9317-e500\"\r\nexpires: Sun, 07 Mar 2027 08:02:33 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58624,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"5fb999c837859fcec08101e6740f2931","sha1":"9fc0fce001a8956e92201dd8144b33f38f705082","sha256":"65297e0cf68528194058288d5857fc15ea2be27fb186028031ea1f6a08be007f","sha512":"d9e332bd5f7cfca6c6d58430ca759383619c355d118573dbce53251fe17947abfa3d31ae94b243b8ab838c52d287c8d7ab630c79264f289f06921ede3c7386ad","ssdeep":"768:w+VJLaa++VML8HamLaa3BZ9L1HDMc0LaWZBZML2H5MRY:wQ5YQMLmnZ9LtMprZMLkMRY","tlshash":"794315e9ea99104f7639fb35afa502789fb840d68b0518f8b97931414a13dfe063378d","first_seen":"2024-08-29T17:35:27.308704Z","last_seen":"2026-04-04T00:44:19.550167Z","times_seen":106,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/themes/mercury/css/media.css?ver=3.9.11.1","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:33.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/themes/mercury/css/media.css?ver=3.9.11.1 HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 01 Aug 2025 10:12:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688c931e-b53e\"\r\nexpires: Sun, 07 Mar 2027 08:02:33 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46398,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6dea934c5ab37fa73e19929087862f2a","sha1":"539040af8c7e0050b8c6b2f77f7c16d3d2f72bd1","sha256":"05f1cb175ebb3a77a2bf79c4f5b113c442e0c2220f33a74be05ee8bcf79ca441","sha512":"5d004eff447d3f637aa6fa4c0a05527483aef367877ed937138032238fecab70f5173527048be39fd454371428d128a6887f7886ff86e47d0ab4a2ce0e73a16a","ssdeep":"768:SYhwaemFaqiUbabLthCeqUabLDRXLqtEuMlXGoVoJfGUp8bLjC:oh9DCeqhLfK","tlshash":"0023bca9e146308e5b3deb50bbf913319fc420ee9a4604c97b543d05a25aefe442778f","first_seen":"2025-02-23T08:46:47.020568Z","last_seen":"2026-04-04T08:06:06.590885Z","times_seen":126,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/uploads/2022/12/Surfshark-logo-135x135.png","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:33.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/uploads/2022/12/Surfshark-logo-135x135.png HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 5393\r\nlast-modified: Fri, 01 Aug 2025 10:15:12 GMT\r\netag: \"688c93b0-1511\"\r\nexpires: Sun, 07 Mar 2027 08:02:33 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5393,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 135 x 135, 8-bit/color RGBA, non-interlaced","md5":"e612bb7a76350aea2bceb2451e745554","sha1":"680b3fabc08abfb55385cfd5282f1463b1ab5bab","sha256":"f7f3486d48ab840652bc00c170a053e0eba981dc576ada33fca3a43c63b24ead","sha512":"1b4da591638175b7ee74a6c7372a645217123c1b93025ff095ff20798a323997512ceb567e8a77e610fcb6f282b3297ad2cf197396634a89ad7947b41ddfc193","ssdeep":"96:f5Pn6luxRbFb3qXAJJsAY8U9qkp8Te4uG27V0fYg9uZUJTZjEOJXYCTwx5QPScjQ:13RbNUAJJsA8qkeZ27qYiuGpfY5gSQ5+","tlshash":"89b17d4f959a4cffaf198c1323215fd09ab6234269e93a7190b0dc4343594ee66725dc","first_seen":"2025-11-19T13:03:04.129288Z","last_seen":"2026-03-07T19:13:35.118971Z","times_seen":22,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/themes/mercury/fontawesome/webfonts/fa-solid-900.woff2","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:34.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/themes/mercury/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/wp-content/themes/mercury/fontawesome/css/all.min.css?ver=6.6.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 157192\r\nlast-modified: Fri, 01 Aug 2025 10:12:46 GMT\r\netag: \"688c931e-26608\"\r\nexpires: Sun, 07 Mar 2027 08:02:34 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":157192,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 157192, version 774.256","md5":"237f4a0afbdb652fb2330ee7e1567dd3","sha1":"69335cd6a6ac82253ea5545899cccde35af39131","sha256":"1f0189e087fcefbf654fad74a3a06668b782c01353a61d5c0b7f0bf23e33c020","sha512":"27e8e1f91507179c207f93a19485738ed5d372a977eb27d44a4ed163013097d38b117c7a5bf4336ecc9862ca514d78ffcd2b8a07e304bbfe1b2cce9c087baa38","ssdeep":"3072:Qeqp46DjdHdb7UT/IGFc27+78oGmfIXe0pGRDH9tQm1pbYqup:Q16n/IqpoG2IXZYTtxrbdO","tlshash":"5ce3125bf5e6dbe5525e6d64fb5478972b1030823ee11cf12ce2206eb889317399e08f","first_seen":"2024-07-18T18:39:32Z","last_seen":"2026-04-04T14:30:38.815817Z","times_seen":9672,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/uploads/2022/12/purevpn_symbol-2-50x50.png","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:34.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/uploads/2022/12/purevpn_symbol-2-50x50.png HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 2384\r\nlast-modified: Fri, 01 Aug 2025 10:16:45 GMT\r\netag: \"688c940d-950\"\r\nexpires: Sun, 07 Mar 2027 08:02:34 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2384,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"7594606ddfff9a71e2fc32d0eae12813","sha1":"b9278ab53771f8748109f3ed18c0925354d68537","sha256":"35a7d32c807e197ee808111b8ebdfaada07a3138b92c16d2c101195a8a8f6e63","sha512":"f1c0a1aaf9df9613719cd66b099e6fab9325fdff0e85e7d662aa0ba1f27fe12afb8803ad1008197da5c210dbd8dc727b7baa093cb4652edd6aa80996b466f645","ssdeep":"","tlshash":"f7415bd091899c4aa6ed5a88d72e8322c46325c07d020dc07e64fcb8037d20e7d64fae","first_seen":"2025-11-19T13:03:04.155366Z","last_seen":"2026-03-07T19:13:35.090763Z","times_seen":23,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cookieyes.com/client_data/1f18974e888cdbd73ae8bad4/script.js","fqdn":"cdn-cookieyes.com","domain":"cdn-cookieyes.com","tld":"com"},"ip":{"addr":"104.18.18.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:33.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-cookieyes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 23:09:03 GMT","end":"Wed, 08 Apr 2026 00:08:58 GMT"},"fingerprint":{"sha1":"D4:E9:2A:01:0A:CD:46:BC:51:88:4C:0A:75:84:19:9D:2E:AB:5E:B5","sha256":"98:C2:AE:94:B5:82:29:71:73:28:FC:C3:61:EB:6E:61:BD:84:27:AC:26:9C:54:C8:78:B4:A4:AC:1A:BF:0F:0B"}}},"request":{"raw":"GET /client_data/1f18974e888cdbd73ae8bad4/script.js HTTP/1.1\r\nHost: cdn-cookieyes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 08:02:33 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 34212\r\nserver: cloudflare\r\nlast-modified: Wed, 19 Feb 2025 15:04:42 GMT\r\netag: \"18122-62e8013c561b9-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=0, must-revalidate, s-maxage=604800, proxy-revalidate\r\nage: 94814\r\ncf-cache-status: HIT\r\ncf-ray: 9d88141f7d43120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98594,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49982), with NEL line terminators","md5":"5bb7ad53f1f7d624887395bd40391320","sha1":"1dc89b6e5c8507d5ae49cc0d9c01dc1bbcca5f8a","sha256":"a42cb2d9a217abf943a0dd134150a0d483c9260a0a92aa1e439c5bc87c0d91a5","sha512":"419f343d8f75ca7533153cc7d9459d4ce6363e82329738d828c79eb9219ba6435f99e4ca2c859465c61689234186e378f154d506e8d7d2890011418c502981da","ssdeep":"1536:1LWuh7/MnssiP2N742vAARSBAJ3mkEtMxdCTNCeNmw3H4z/nez:1b7/M5iet4IASCUdPeCnez","tlshash":"f2a3b68cfad1f0a517e360a4806f950bf17b2a69740d94d1eaa6c1d1ac78e8f4037e7d","first_seen":"2025-11-19T13:03:04.168706Z","last_seen":"2026-03-07T19:13:35.110279Z","times_seen":23,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":5,"dns":1,"connect":1,"send":0,"wait":11,"receive":2,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/themes/mercury/fontawesome/css/all.min.css?ver=6.6.0","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:33.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/themes/mercury/fontawesome/css/all.min.css?ver=6.6.0 HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 01 Aug 2025 10:12:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688c931e-17906\"\r\nexpires: Sun, 07 Mar 2027 08:02:33 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96518,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (58966)","md5":"fbf1f3445f2554bce753c92cf6851b41","sha1":"3c73ff1cd7b97c189f139367dbac43dcf5d2c70d","sha256":"e5e202e3c899507992952533f57b634722b69b34241d271963559d31aa33ef81","sha512":"29cdf6def18112acd39a8b801029d571ec90ab2a9db128aa2d021204bdbd6945b853f33ba523c0fe0114650aafd5cc31e0e9d8c53c6f7b950c839193e8be0926","ssdeep":"1536:E6M1MvMaMfMRQk709/bQZMfjSFOlyPG9dXgRw0J:H709/UGGFwyPG9dwRw0J","tlshash":"559373f8e44c05d97732c44bab55b37c65b6f738d5810ca9f02f590c2ad26a822caf79","first_seen":"2024-07-20T00:27:59Z","last_seen":"2026-04-04T14:40:58.462793Z","times_seen":9272,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/plugins/simple-tags/assets/frontend/css/frontend.css?ver=3.44.0","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:33.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/plugins/simple-tags/assets/frontend/css/frontend.css?ver=3.44.0 HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 17:57:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6977aafe-ca6\"\r\nexpires: Sun, 07 Mar 2027 08:02:33 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3238,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"6a0279ebd08cb8787e00b98b4663954c","sha1":"04a5e34cdfeca1ac77840b203ba142358c37519c","sha256":"770ba5a45c3637473117e8055817ca2247a4b53241b9a6ecf39da05978f43460","sha512":"17ce71b90bd3d99bffeffd9f96244ee01e7d05acbcb312b231cff586acb63676a41357f7658ee27bc1dcf673bc48239a60449807573931d6b49df8d88fcb6fb2","ssdeep":"","tlshash":"f361acb99d4202c67172cb77afd31a11f81885134a2280b0bf84526c9ff7ba49d11ede","first_seen":"2026-01-14T08:32:04.070064Z","last_seen":"2026-04-04T15:12:46.188898Z","times_seen":197,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/themes/mercury/js/owl.carousel.min.js?ver=2.3.4","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:33.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/themes/mercury/js/owl.carousel.min.js?ver=2.3.4 HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 01 Aug 2025 10:12:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688c931e-ad3c\"\r\nexpires: Sun, 07 Mar 2027 08:02:33 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44348,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997), with CRLF line terminators","md5":"47c357c05cb99cedbac2874840319818","sha1":"d8b05365de4b760618328fdeef7672e8374978e4","sha256":"4e0781bdd2cbb5db04da3b5e059eeca34e325fabb893bee7457b5babf5b7c029","sha512":"960b76113c78220acc1c87e437c6698fbf1066b8cf7b15a6d4d33f31ab69d8e16bd9823c07ce1897db4d0bdfe08b39e5c7085b79a7a8ef80760e87d9aa789e2e","ssdeep":"768:RCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSNc7UuHjRUQuFBt33:AITMFC4dbMVRSNcgRDV","tlshash":"39137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-07T01:06:30Z","last_seen":"2026-04-04T15:45:32.553737Z","times_seen":9324,"resource_available":true,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/themes/mercury/js/scripts.js?ver=3.9.11.1","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:33.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/themes/mercury/js/scripts.js?ver=3.9.11.1 HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 01 Aug 2025 10:12:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688c931e-c75\"\r\nexpires: Sun, 07 Mar 2027 08:02:33 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3189,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"0025d45c917e05da5a9524ecb3a0be5c","sha1":"14a3eb110606f1f21970bc3f46b722512f05ad8d","sha256":"de6a280187f35a8ed90567418aafe24eeae8e60a3a83ea0a7e18f7c4e168529f","sha512":"b910c358affa2c3d5b9911582a33e8c396e30f2df470ebbf947241744b79a460fb31aa4ac30d3a95b5ab2588950ecc85cba862cc9fdd8e83d131a2f9e2dbc457","ssdeep":"","tlshash":"9861af49b32aa05f78ffb294d53ee544db3e401bc10055a5bfbd2d9c370562c22b2a6e","first_seen":"2023-03-07T12:27:39Z","last_seen":"2026-04-04T08:06:06.659435Z","times_seen":226,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/uploads/2022/12/Surfshark-logo-50x50.png","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:34.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/uploads/2022/12/Surfshark-logo-50x50.png HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 1580\r\nlast-modified: Fri, 01 Aug 2025 10:15:58 GMT\r\netag: \"688c93de-62c\"\r\nexpires: Sun, 07 Mar 2027 08:02:34 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1580,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"05e67190b57889bf1336acfade1e8a87","sha1":"003f365dbd6ab68822fc603bffdae1cd5be4eb77","sha256":"bbf7afdff931a4fbb3dff02f2992d4ec78e8c034099f932eebdede4ab3dcd50c","sha512":"79df65c6dc2a934940b6a60bfa25cc1e9cf935e9cd6ccacc5157ab8a1292332259e39dc983fe6acd202faaf371bcb7ff4832955203606b31b58cd5cace009bb7","ssdeep":"","tlshash":"9e310c177b672c6c448ddda0b5f7d14df8f81b40f516d6c55538a067bd8959d3048321","first_seen":"2025-11-19T13:03:04.167637Z","last_seen":"2026-03-07T19:13:35.108547Z","times_seen":23,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/plugins/aces/css/aces-style.css?ver=3.0.7","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:33.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/plugins/aces/css/aces-style.css?ver=3.0.7 HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 01 Aug 2025 10:12:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688c9317-1e924\"\r\nexpires: Sun, 07 Mar 2027 08:02:33 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":125220,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"4100cc3d0c00c26a14870a43a33cb569","sha1":"75ecf358e5a6f0179f1e78b6501ba5f7ade35a0c","sha256":"7dd80c10f495dfb4b9847b8934dfc44ae2201ceee224537fbcf052ea70dabf42","sha512":"ccc9a1aed16bf9960b62d3234ff1bff4e9a75383260bad131e68b8eba4daee9fd82195d589535aec1d707d134924585806afc6c011582f87a4bf46dcaacb921c","ssdeep":"768:eEEzwQgd633F/lphg5SOpwIdHianzmXXb/7JU81CzBtOAHrVhjg6quZH33JDJ2s+:50kWEouasbmWdwey/","tlshash":"49c323fdd614028fb93baa685ff917749fb400d28e0216ecbd76260487679fc1a63349","first_seen":"2025-03-29T20:01:02.912993Z","last_seen":"2026-04-04T00:44:19.570382Z","times_seen":88,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/themes/mercury/style.css?ver=3.9.11.1","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:33.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/themes/mercury/style.css?ver=3.9.11.1 HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 01 Aug 2025 10:12:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688c931e-199e5\"\r\nexpires: Sun, 07 Mar 2027 08:02:33 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":104933,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"2f50348ad61e7353ee7af8c24473001a","sha1":"ddfd0e0c9d0410a6b403f5fbf558994a7c009fcf","sha256":"cea5770c5a2ed4df6a08fb6a3d0bf1a5955a558af71d6f5f83fa053834ba85c4","sha512":"19d63386a5ae2497315544f734c8d76b1c3e0bf85be57309a34783d03b710c606ab0e6a04c4e9f02346ecd8a8aafb32a539d9b4b8f651ee4ceebabf1ec3f0bba","ssdeep":"768:GFmisevFZ5Npv9P8zy5DULtBUjggx0bLTXkECHj4LSFOQse8A1xv83MqsJZGMBD8:GEQkUDGyU5gOJ","tlshash":"25a36678d645108d653eeb64bbfa5b349f980096cb0702ecb7913e14979a9fc183338e","first_seen":"2025-03-29T20:01:02.920081Z","last_seen":"2026-04-03T11:32:28.19968Z","times_seen":46,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:33.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 01 Aug 2025 10:18:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688c9477-3509\"\r\nexpires: Sun, 07 Mar 2027 08:02:33 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-04T15:49:44.595398Z","times_seen":638975,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:34.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vpnrcmd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 14:59:55 GMT\r\nexpires: Fri, 05 Mar 2027 14:59:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 147759\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-04T15:50:23.17118Z","times_seen":62358,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":114,"dns":3,"connect":8,"send":0,"wait":21,"receive":10,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/uploads/2022/12/cropped-favicon-270x270.png","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:34.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/uploads/2022/12/cropped-favicon-270x270.png HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nCookie: _ga_WCKT8VX24Q=GS2.1.s1772870554$o1$g0$t1772870554$j60$l0$h0; _ga=GA1.1.1612929239.1772870554\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 28082\r\nlast-modified: Fri, 01 Aug 2025 10:15:09 GMT\r\netag: \"688c93ad-6db2\"\r\nexpires: Sun, 07 Mar 2027 08:02:34 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28082,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 270 x 270, 8-bit/color RGBA, non-interlaced","md5":"edd3b931029f37290c3a8af3c5877e23","sha1":"9ea1a88f3e7e649cb8ca38e6df96eebc6b34edb9","sha256":"642a8c0abbe7206f5e8a6f06a1aea40824c1dca1e96a1ae7b2027b88445b459d","sha512":"2075c87a367dabfac7be57860a3d28db901575488d6aee5f73b8f6fb51c2dccae532b1413aa096ffe2b77dd73b6fdfa8243f213f3172ba1fcf582c1eb4e47ca7","ssdeep":"768:vXDnOTZfAV2/yxZPwZARC9gNqhdK/cbMGG79Asi64R:KTZQbPwZAo+Nqhdnru9sR","tlshash":"c7c2f1710f2b9eb0e8d910a2e26524e3e0792e2e0dfd50d94f03eb4c65f899fc2c9558","first_seen":"2025-11-19T13:03:04.133154Z","last_seen":"2026-03-07T19:13:35.109428Z","times_seen":23,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/themes/mercury/js/theia-sticky-sidebar.min.js?ver=1.7.0","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:33.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/themes/mercury/js/theia-sticky-sidebar.min.js?ver=1.7.0 HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 01 Aug 2025 10:12:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688c931e-1539\"\r\nexpires: Sun, 07 Mar 2027 08:02:33 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5433,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5370), with CRLF, CR line terminators","md5":"645850824cb639af13a1887b7d46c13e","sha1":"04bdf40ec3f5a2676269fb3ebbe1db66d9451078","sha256":"4c7fe9f4b7e2cbaeadf56a93f537dfe760444ddbc081a7d12aa5c97c98cafce9","sha512":"33db385abfa57ea6198353c44ae511aa2a73b2515ebe40e5f5d97ce68e0cc84b206f21d763ee8621f2cb47760529cbab62b6ed0105e46fdac25b3554d9f65a28","ssdeep":"96:8CErPpnMTDqfVNsArPF1DYvDRGuPHB+qCuS5+6k:FEz96DqfVOXEuPHB+qC9Q","tlshash":"4fb1525e2f607539e097f8cf90cfa028906e4da75bca9079870c81d81d6176891f2fcd","first_seen":"2023-03-07T12:27:39Z","last_seen":"2026-04-04T00:44:19.562158Z","times_seen":171,"resource_available":true,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/themes/mercury/js/enable-sticky-sidebar.js?ver=3.9.11.1","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:33.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/themes/mercury/js/enable-sticky-sidebar.js?ver=3.9.11.1 HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 01 Aug 2025 10:12:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688c931e-a3\"\r\nexpires: Sun, 07 Mar 2027 08:02:33 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":163,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"a57eb246e26fa7b51433d0f876be01b6","sha1":"c23452340ca6d7f10f1ee00cd33d95a833dbbced","sha256":"baa2ec62db4c150dc99ee168d5640dc8e33ffe470a1774c0950a386a44264105","sha512":"62315cb8a0439075b08ef0401c62ecb6cfadbdb95e16fe710470b3d852a1564a033fb0101e5d3b10956924e2d7ea52feb56fa5c48c4054ce25cc8432dc3c169e","ssdeep":"","tlshash":"9fc08016b06818670c67d0b154ef7d30c76b3cd53398415e973c50580d2163d44334cb","first_seen":"2023-03-07T12:27:39Z","last_seen":"2026-04-04T00:44:19.549663Z","times_seen":164,"resource_available":true,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:34.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vpnrcmd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 14:59:55 GMT\r\nexpires: Fri, 05 Mar 2027 14:59:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 147759\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-04T15:50:23.17118Z","times_seen":62358,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":123,"dns":1,"connect":22,"send":0,"wait":22,"receive":28,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/uploads/2022/12/cropped-favicon-32x32.png","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:34.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/uploads/2022/12/cropped-favicon-32x32.png HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nCookie: _ga_WCKT8VX24Q=GS2.1.s1772870554$o1$g0$t1772870554$j60$l0$h0; _ga=GA1.1.1612929239.1772870554\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 1714\r\nlast-modified: Fri, 01 Aug 2025 10:14:23 GMT\r\netag: \"688c937f-6b2\"\r\nexpires: Sun, 07 Mar 2027 08:02:34 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1714,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"f2056f5fb7626a9d8534793ebb8e904e","sha1":"a75d66726c9fff8066abafb4de04783839e1bd77","sha256":"5da1dd1ec9a398f30d718edbc04a552f65b249bb3a1ec5dfa62bc4b0c3aeb3f4","sha512":"b529494783c0bd445469f2a756c05239803d042eae5339bb648b65f726ebefa217321c9cb8452d7e1099c50660a8904c55eb386914390cbdb3619a898d6320ce","ssdeep":"","tlshash":"b631f8e52274d8aec97a24a363468a701f34091b99947bb9e82640503233c2e57dc757","first_seen":"2025-11-19T13:03:04.14908Z","last_seen":"2026-03-07T19:13:35.100263Z","times_seen":23,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/provider/surfshark/","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T08:02:32.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /provider/surfshark/ HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nsg-f-cache: BYPASS\r\nx-cache-enabled: True\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://vpnrcmd.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://vpnrcmd.com/wp-json/wp/v2/organization/1152\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://vpnrcmd.com/?p=1152\u003e; rel=shortlink\r\nx-httpd-modphp: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"CookieYes","description":"","website":"https://www.cookieyes.com/","common_platform_enumeration":"","icon":"cookieyes.svg","categories":["Cookie compliance"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Gravatar","description":"Gravatar is a service for providing globally unique avatars.","website":"https://gravatar.com","common_platform_enumeration":"","icon":"Gravatar.png","categories":["Miscellaneous"]},{"name":"Site Kit:1.173.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":106430,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9239), with CRLF, LF line terminators","md5":"726f8bacc95bc8800cdb7b8e5cf90f08","sha1":"6a91888376f9e9e99ed6dd8b631483d3b8b715ef","sha256":"5f3aa142d5e0f24b7324570c4bca582d008c5e6b049ab42225786155b88c11e7","sha512":"6d6563e78e25564e89f1270122af2f48715f20c93e306eabe9d0fb3e31d3e45db7e54f5dc924aeb85ab8c2d16781bfffef69ef870b295754138640818421c3e8","ssdeep":"1536:xJUypZApUI12nWFzrzmNSey3Tk6wEqZGtBqRpffuY:xJF3ApUIUWFHIuTk0BtBqRpffuY","tlshash":"2fa3e673e25d207f1f3b8396933173ada3aad63cc70144e4b6f9524856c2db906b325a","first_seen":"2026-03-07T08:02:49.640626Z","last_seen":"2026-03-07T16:14:25.023221Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1286,"timings":{"blocked":553,"dns":1,"connect":179,"send":0,"wait":180,"receive":0,"ssl":371},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@300;400;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:33.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"6B:DB:3B:B8:9F:A1:8E:49:35:74:D9:D8:24:91:F2:5E:42:56:2F:58","sha256":"37:ED:DF:C4:FB:A3:96:16:9E:47:69:CE:86:A5:35:8E:B5:3A:0B:0B:6A:A1:08:A2:DF:DE:6C:7C:31:BE:94:B1"}}},"request":{"raw":"GET /css2?family=Roboto:wght@300;400;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 07 Mar 2026 08:02:33 GMT\r\ndate: Sat, 07 Mar 2026 08:02:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22340,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"27a050b49594c14a19427eeece93bf8a","sha1":"3f9c32422fa589dd8024b1097d773641aaa63aa0","sha256":"145c17213da75e9570b37ad643420c5f00b705c7e30010b3cd0aaec5605c2335","sha512":"30170931e51db91978e6bcb4af370ffa484e53e617a536897e52ba0356fe74f20ba9fc5bad4bb98c55cd7096268d3031fe8e79b48e8377d8a174cc9eae4c43ac","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t949fd9k9D939yQ9/I:pDS99YURRuWDyjooYhREHPWP2ZZYQRVq","tlshash":"9da21091041744009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-20T18:18:53.243459Z","last_seen":"2026-04-04T10:13:22.038817Z","times_seen":212,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":114,"dns":1,"connect":15,"send":0,"wait":38,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/plugins/simple-tags/assets/frontend/js/frontend.js?ver=3.44.0","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:33.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/plugins/simple-tags/assets/frontend/js/frontend.js?ver=3.44.0 HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 17:57:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6977aafe-4a2\"\r\nexpires: Sun, 07 Mar 2027 08:02:33 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1186,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"8fa2b9763d58f6cffcb0218dcc145b02","sha1":"86f35761c6e1ba43fd03560d44287c9ddc13b8b1","sha256":"68050132d00103b58e5dfc387574b2e9c379476798384478e32b1cda8cfae705","sha512":"68a64e3bdd35af4d19921b6853b796e7f66acb3545238e54bf9a8ea6639963847cd9dba4544d00deea440fed10e97539070eea848b6d98f5aa90bfac37b78b46","ssdeep":"","tlshash":"6c213238ed652a9150b7f338dbabae15ee22092b0142cb31bd8e4be00f716144c1eddd","first_seen":"2024-09-10T21:44:58Z","last_seen":"2026-04-04T15:12:46.085744Z","times_seen":1188,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/plugins/wp-auto-affiliate-links/css/style.css?ver=6.9.1","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:33.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/plugins/wp-auto-affiliate-links/css/style.css?ver=6.9.1 HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Mar 2026 05:57:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a7c9b1-10b4\"\r\nexpires: Sun, 07 Mar 2027 08:02:33 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4276,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d906986e0b7fe6fae53849e9ccbd6f6b","sha1":"c7865266625897ab4d60831c43ce120158a18893","sha256":"6db1a35d339d26d02aa28f4aa53de4a5b1fdc7f8c7e7008a818f4d0f709de20f","sha512":"f6e112d6a2d7185d380a3c2e25ac60713e223d7f4d1db18d8c74c44599adf6ec7ef3340268152e9c424520c011c02acc7c86a8185d346b3471d35558bd19b5e4","ssdeep":"96:riqn6Hpu3OGi7b/hvNDRASgijz/aax5xXOC:GPJu3y//1F/aox5","tlshash":"a79165a362211417f87283a6be63f3ba1344635332b566f96fad1424cf8c0869473bdd","first_seen":"2026-02-09T14:33:11.186793Z","last_seen":"2026-03-24T11:19:26.875195Z","times_seen":9,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:34.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vpnrcmd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 14:59:55 GMT\r\nexpires: Fri, 05 Mar 2027 14:59:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 147759\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-04T15:50:23.17118Z","times_seen":62358,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":121,"dns":1,"connect":22,"send":0,"wait":48,"receive":14,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/themes/mercury/fontawesome/webfonts/fa-solid-900.woff2","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:34.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/themes/mercury/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/wp-content/themes/mercury/fontawesome/css/all.min.css?ver=6.6.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 157192\r\nlast-modified: Fri, 01 Aug 2025 10:12:46 GMT\r\netag: \"688c931e-26608\"\r\nexpires: Sun, 07 Mar 2027 08:02:34 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":157192,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 157192, version 774.256","md5":"237f4a0afbdb652fb2330ee7e1567dd3","sha1":"69335cd6a6ac82253ea5545899cccde35af39131","sha256":"1f0189e087fcefbf654fad74a3a06668b782c01353a61d5c0b7f0bf23e33c020","sha512":"27e8e1f91507179c207f93a19485738ed5d372a977eb27d44a4ed163013097d38b117c7a5bf4336ecc9862ca514d78ffcd2b8a07e304bbfe1b2cce9c087baa38","ssdeep":"3072:Qeqp46DjdHdb7UT/IGFc27+78oGmfIXe0pGRDH9tQm1pbYqup:Q16n/IqpoG2IXZYTtxrbdO","tlshash":"5ce3125bf5e6dbe5525e6d64fb5478972b1030823ee11cf12ce2206eb889317399e08f","first_seen":"2024-07-18T18:39:32Z","last_seen":"2026-04-04T14:30:38.815817Z","times_seen":9672,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":181,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/uploads/2022/12/NordVPN-logo-50x50.webp","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:34.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/uploads/2022/12/NordVPN-logo-50x50.webp HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1028\r\nlast-modified: Fri, 01 Aug 2025 10:17:05 GMT\r\netag: \"688c9421-404\"\r\nexpires: Sun, 07 Mar 2027 08:02:34 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1028,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d2537557cdd8b05cf226a6238198ca4e","sha1":"790c7e6ba4521d65297e19ee72f84eee3595ae72","sha256":"e18b70f55f523665b57fe1c525db7223f110e2afe66d5e42a0d8fcfedc17ef0f","sha512":"09ab5ce113854b4363fdefd35b982ca5dcfedf804dc50890de3f1b73f8a0c7e0c5533dc717f84378f8aef6a066d76777628cab3315cffd8ca36d78592f85ebc5","ssdeep":"","tlshash":"d11175bd70b99a95d950d8719ea06589d5f89f84c034ce9053036ab320de243239eca5","first_seen":"2025-11-19T13:03:04.126146Z","last_seen":"2026-03-07T19:13:35.113832Z","times_seen":23,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:34.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.1 HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nCookie: _ga_WCKT8VX24Q=GS2.1.s1772870554$o1$g0$t1772870554$j60$l0$h0; _ga=GA1.1.1612929239.1772870554\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Dec 2025 02:42:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6930f524-58ea\"\r\nexpires: Sun, 07 Mar 2027 08:02:34 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-04T15:50:01.223201Z","times_seen":131706,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GT-5M3B95WC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:33.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:44 GMT","end":"Mon, 27 Apr 2026 08:36:43 GMT"},"fingerprint":{"sha1":"60:4D:15:F0:37:85:71:03:3A:5F:40:31:C7:D1:01:D3:83:25:3A:02","sha256":"67:C0:9E:02:17:D8:19:0D:DC:84:B7:81:9F:AA:72:31:D5:26:0D:A6:E0:AB:41:AD:C9:26:05:57:7C:19:35:3A"}}},"request":{"raw":"GET /gtag/js?id=GT-5M3B95WC HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 07 Mar 2026 08:02:33 GMT\r\nexpires: Sat, 07 Mar 2026 08:02:33 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 151361\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":457218,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"909c0122ac1bbbc7f95deb2d309ae6db","sha1":"c3798c846e2e0be4068c8e15751955a6f2050397","sha256":"b8c82bb9db5c4a27fa24e28c7e8bc48c48134514eb81ca9e545eefb0684dd88f","sha512":"6b886cc5d48a3feea4503646430d1dab973ff03ab58901505748b913ca99de3bc2d400187a3112591d30a6473433d044c4e14a95469d29653db85dcfab0a47c1","ssdeep":"6144:n6CkKfNl3H2vNQBaKI0SfZ8RGw/V0sApXx2ZAJJx:nP/FxH2vnDfZ8t6","tlshash":"8da41bce73d674225396f478503f018ba57b28a2b48cc89af189cce46e7459a8137f7d","first_seen":"2026-03-07T08:02:49.652127Z","last_seen":"2026-03-07T16:14:25.047879Z","times_seen":4,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":101,"dns":1,"connect":14,"send":0,"wait":33,"receive":45,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/plugins/google-site-kit/dist/assets/js/googlesitekit-events-provider-wpforms-08f4a4ca33532233b542.js","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:33.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/plugins/google-site-kit/dist/assets/js/googlesitekit-events-provider-wpforms-08f4a4ca33532233b542.js HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 24 Feb 2026 05:57:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d3dca-be6\"\r\nexpires: Sun, 07 Mar 2027 08:02:33 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3046,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3046), with no line terminators","md5":"c59c856ed333a9bfb5509888fccde99b","sha1":"b7ccb797aca95798615552c7c407ec832529adc4","sha256":"edf0506dc7465c9721377c54a33c26a1f15b889bbd06d0f4e55c8185f27cb963","sha512":"451dbc335f48dbebfc2df0265e5bff57c8f6e521581abca4fedacad502506d64a8cad8dcee494e5964eb0cf8d4f62518343327e6ab2f94247594fb5860ca2818","ssdeep":"","tlshash":"2f51788cb3cfb9d1dbc965a4b1b6901cf56c4425395d0c40d2b949763c37e8ab2b2e58","first_seen":"2026-02-10T01:01:02.053451Z","last_seen":"2026-04-04T15:12:46.196145Z","times_seen":948,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:34.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vpnrcmd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 14:59:55 GMT\r\nexpires: Fri, 05 Mar 2027 14:59:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 147759\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-04T15:50:23.17118Z","times_seen":62358,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":141,"dns":1,"connect":9,"send":0,"wait":21,"receive":7,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.gravatar.com/avatar/ee75c6b0ee160ec7d3a3d013eac6843256cbf977697c98823a94b77a71fed668?s=50\u0026d=mm\u0026r=g","fqdn":"secure.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:34.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 19:44:12 GMT","end":"Sun, 10 May 2026 19:44:11 GMT"},"fingerprint":{"sha1":"53:E6:67:FE:F3:2D:4B:20:29:65:08:14:EF:1C:5A:C7:E9:D3:E7:65","sha256":"2F:59:A3:5A:A1:8E:34:C4:42:31:2C:80:90:08:4C:1A:EE:BD:36:C9:DA:79:CC:33:02:4D:3C:4E:DC:18:68:67"}}},"request":{"raw":"GET /avatar/ee75c6b0ee160ec7d3a3d013eac6843256cbf977697c98823a94b77a71fed668?s=50\u0026d=mm\u0026r=g HTTP/1.1\r\nHost: secure.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 3567\r\nlast-modified: Thu, 10 Aug 2023 08:06:44 GMT\r\nlink: \u003chttps://gravatar.com/avatar/ee75c6b0ee160ec7d3a3d013eac6843256cbf977697c98823a94b77a71fed668?s=50\u0026d=mm\u0026r=g\u003e; rel=\"canonical\"\r\ncontent-disposition: inline; filename=\"ee75c6b0ee160ec7d3a3d013eac6843256cbf977697c98823a94b77a71fed668.png\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nexpires: Sat, 07 Mar 2026 08:07:34 GMT\r\ncache-control: max-age=300\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 36\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3567,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"68b2d1448f806f5e68602e4beacbe259","sha1":"f63e290b81c51243a9b615ec7302efa636480232","sha256":"740a822c0f9535fb90d0aab3442928c92b8ab0600f70b4e884b9e8fcb8f954cc","sha512":"f8b4b24dcd4af2b5c1fcef07ad8ae6b3bb42d83f2f9f11fc04f2e055ccd7a5414acae5328ac4d9edf86c6814a50aa01dcd26db55a15e964f7673870099cd182e","ssdeep":"","tlshash":"44717d6f36344b2c488a3e1070f6a29a54b1dc7bddb9e10b9790f20661501297fcb30d","first_seen":"2025-11-19T13:03:04.162877Z","last_seen":"2026-03-07T19:13:35.119803Z","times_seen":23,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":25,"dns":25,"connect":7,"send":0,"wait":8,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/plugins/slotslaunch-wp/public/css/slotslaunch-public.css?ver=1.3.7.1","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:33.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/plugins/slotslaunch-wp/public/css/slotslaunch-public.css?ver=1.3.7.1 HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 01 Aug 2025 10:12:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688c9317-6a29\"\r\nexpires: Sun, 07 Mar 2027 08:02:33 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27177,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5259)","md5":"1810dab9432de4cda5e0dd15e8e6c807","sha1":"2cdbb6b9f8cacaee866f36806dd01cdc715cb4ab","sha256":"24614e241f353118b60f3b9f00fcd7dd5ae9a166cf2525d6611d4af7f2522c73","sha512":"4a7ff1f74d84f05ce707fae1df2b264029a7a8ffea11660e416db9bcd0cd08f71df8b60bdc8849ce617025fa9a570211623e9e18410898b6bfd50d3bb25f51bc","ssdeep":"768:KRFwGivFzYFcssFfkFYyV6FYtjn2IPFFvEFmFCPPw0:wFivBY+ssmZ6z6q0Uw0","tlshash":"8cc25492aea31905b517d4586fa76b94373c9003d20edd6e7fc87258cfcb6cc9862788","first_seen":"2025-07-23T12:08:22.10957Z","last_seen":"2026-04-04T00:44:19.560509Z","times_seen":51,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/themes/mercury/css/animate.css?ver=2.3.4","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:33.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/themes/mercury/css/animate.css?ver=2.3.4 HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 01 Aug 2025 10:12:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688c931e-11d45\"\r\nexpires: Sun, 07 Mar 2027 08:02:33 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73029,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (460), with CRLF line terminators","md5":"c5b24615265e8e28d747bd885e62a617","sha1":"0209ea07e50fbfddf574b39db7d15b5e58b86c33","sha256":"486f43cd21e94ca1c6aad2f6e1f1c273176747e0c3cda01534e6f9c0cf2a2d9b","sha512":"b871dda71a97d77e531998a84ce60f2146624961bff8f86fb658550d952f4e226f9b21baf644db2d1f926fcd11844bc436b7db8ab8a65f99296bae47ba0a36ea","ssdeep":"192:CDvQHnFHQvFpjIBz+a+pjRfBV7lucqBJm7YfPZBWgQc95YKm/0kLyJgprWXhOX87:CbW5TT","tlshash":"1163d9661c91114457720b25d7de4f6cea3ca17318226efab3c2588b8f71bac13cda5b","first_seen":"2023-04-09T10:56:04Z","last_seen":"2026-04-04T10:11:58.702615Z","times_seen":980,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:33.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 01 Aug 2025 10:18:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688c9477-15601\"\r\nexpires: Sun, 07 Mar 2027 08:02:33 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T15:49:44.56661Z","times_seen":685615,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vpnrcmd.com/wp-content/uploads/2022/12/Surfshark-logo-100x100.png","fqdn":"vpnrcmd.com","domain":"vpnrcmd.com","tld":"com"},"ip":{"addr":"35.213.148.215","port":443,"asn":15169,"as":"GOOGLE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://vpnrcmd.com/provider/surfshark/","date":"2026-03-07T08:02:33.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vpnrcmd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 06:04:44 GMT","end":"Tue, 28 Apr 2026 06:04:43 GMT"},"fingerprint":{"sha1":"1F:74:0C:0D:85:AD:0C:FE:51:0E:FD:0F:87:68:3B:22:EA:52:F3:66","sha256":"8B:6F:E1:EC:02:E7:9E:40:6E:B1:47:57:D9:EC:C1:06:E8:6D:56:4A:E1:1A:78:CE:33:A1:49:FE:74:68:9D:87"}}},"request":{"raw":"GET /wp-content/uploads/2022/12/Surfshark-logo-100x100.png HTTP/1.1\r\nHost: vpnrcmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vpnrcmd.com/provider/surfshark/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 08:02:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 3472\r\nlast-modified: Fri, 01 Aug 2025 10:15:14 GMT\r\netag: \"688c93b2-d90\"\r\nexpires: Sun, 07 Mar 2027 08:02:33 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3472,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"0da681877f683ff480bdb07af65358c5","sha1":"4750fe9846afe769ad35823322abdda33bbc35ce","sha256":"81414fd5768464bff252498aa31d8729b24233e77ad7393c5dff083dd1bf26f2","sha512":"e8e952a9cd4a31464566dfaf108d7a6a2e1a1ee321d01b3ee5213fc9df58b4a121194b81ac1324f3bd649459e2cc0eeb1b0a1ebbcb8e6cdcf1cc131a6b8e6ab2","ssdeep":"","tlshash":"77614adaa63a9305b5ead7517293cbc310af61d14f08ce4f491ed04a6db175eb81c4ce","first_seen":"2025-11-19T13:03:04.159542Z","last_seen":"2026-03-07T19:13:35.105616Z","times_seen":22,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"vpnrcmd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}