{"report_id":"6aecf8ec-1a73-4e48-a182-a688e5326c6b","version":6,"status":"done","tags":[],"date":"2026-05-12T11:09:10Z","url":{"schema":"http","addr":"grok46k-cryptoslate.com","fqdn":"grok46k-cryptoslate.com","domain":"grok46k-cryptoslate.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"grok46k-cryptoslate.com/","fqdn":"grok46k-cryptoslate.com","domain":"grok46k-cryptoslate.com","tld":"com"},"title":"OmniPact Secures $50 Million to Advance Trust Infrastructure | CryptoSlate","dom":{"size":308833,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65186)","md5":"805e4cec4f6d677d5d1de1b462a1a021","sha1":"634f1d26fc9db586ae706ec070ba6c2b6e9bf84c","sha256":"792fcbd8c4a3ce8a150c0e6724aaff62dfa9453f7e8404014e490f69d19da764","sha512":"d33baa60f04737a1f9fefa28d5458030a3037249bf6481d6ca68ad0ad5a744a2cb8cd3b316cb280d8407f84a8adcf3a26d6233ae1aa1fc5adbfa5c8e328b5968","ssdeep":"3072:Q5/abLtDKDBDh9hWcqcDKDBDfS3rT1e9eViAi:Q5/abLEWpPeYAi","tlshash":"366433f2196ca02b87fac1d4f930ef69e241861dcc8786dd67fc438c47e9c56b999218","dom_hash":"domhash1c1da9a88dd00164d75932c225b99312","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"grok46k-cryptoslate.com","fqdn":"grok46k-cryptoslate.com","domain":"grok46k-cryptoslate.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-16T11:09:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"grok46k-cryptoslate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"grok46k-cryptoslate.com","ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-05-10","domain_rank":0,"first_seen":"2026-05-12T11:09:12.040126Z","last_seen":"2026-05-12T11:09:12.040126Z","alert_count":10,"request_count":10,"received_data":2123785,"sent_data":5126,"comment":"","tags":null,"fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-10T22:20:44.526759Z","alert_count":0,"request_count":1,"received_data":11282,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-10T22:17:57.86744Z","alert_count":0,"request_count":4,"received_data":85228,"sent_data":2152,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cryptoslate.com","ip":{"addr":"104.25.92.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-08-04","domain_rank":45723,"first_seen":"2017-12-13T08:51:45Z","last_seen":"2026-04-29T09:31:28.353079Z","alert_count":0,"request_count":1,"received_data":1152609,"sent_data":573,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"grok46k-cryptoslate.com/","fqdn":"grok46k-cryptoslate.com","domain":"grok46k-cryptoslate.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"8e97e26f6649ae53ee5c226d080c1b6f","sha1":"a6629873663a59457f804cf75d6cad5074f125b2","sha256":"9cd1315fc74685fddc7bb9e52cc5b6d7461b4f5f804d26a832983995ffe5f8d8","sha512":"64d48950f5e9fefa785542ad5e241cb8f3dc713b36acce7ad7e95674b75a2cad17ebd7ffc9e103dcab17e05934f4693026b6af2060df0339dba9c067a0a0f7eb","ssdeep":"","tlshash":"b690041c1314c7351cd347414501d4411d05145f403d477c1c0374c35034c445411d50","size":47,"data":"","first_seen":"2023-04-11T00:43:32Z","last_seen":"2026-05-16T23:27:08.96426Z","times_seen":4681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"grok46k-cryptoslate.com/","fqdn":"grok46k-cryptoslate.com","domain":"grok46k-cryptoslate.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-12T11:08:47.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok46k-cryptoslate.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 16:39:35 GMT","end":"Sat, 08 Aug 2026 16:39:34 GMT"},"fingerprint":{"sha1":"B4:0C:1A:29:7F:8A:DD:7E:9B:34:12:DD:F7:8C:D1:37:F5:A5:94:56","sha256":"E5:6E:2C:22:EB:F5:33:05:1E:4A:6C:9A:21:9C:83:C3:AD:AE:2C:2E:D4:1C:67:6C:F4:43:CC:74:85:66:EA:08"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: grok46k-cryptoslate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Tue, 12 May 2026 11:08:48 GMT\r\netag: \"b721bf89327c3d55b45e2940202ee9fb-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDY02H355Z74K15VW669F63\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]}],"data":{"size":308977,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17941)","md5":"d69e31ae0eb945b8cc5dfc7f7c083611","sha1":"f7b806be2da346986da995fa5c56267f910ca826","sha256":"20d939e764b93445f29c4d88df888eb8e82a1d34c830768ee8bce5cdcd337923","sha512":"f476b2052e31d7b640709385c61909c6ed43a9b9463169a32b90f8856afe3afb54d00e1538bdda5fe9f230fabc77ef0106d6554aa7121af0e71b864b247361b2","ssdeep":"3072:98WGK+DDnDtDQdQX+oeDnDtDZslcajRv21WwWv:98WGK+fXD2W7v","tlshash":"ed6432f619aca02747fa81d5f870efa9e201961dcc8786dc67fc438c4be9c45b99d218","first_seen":"2026-05-12T11:09:16.857697Z","last_seen":"2026-05-12T11:09:38.839002Z","times_seen":2,"resource_available":true,"data":null}},"time_used":598,"timings":{"blocked":229,"dns":63,"connect":1,"send":0,"wait":140,"receive":0,"ssl":162},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"grok46k-cryptoslate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok46k-cryptoslate.com/wp-content/uploads/2026/03/xai3.jpg","fqdn":"grok46k-cryptoslate.com","domain":"grok46k-cryptoslate.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok46k-cryptoslate.com/","date":"2026-05-12T11:08:48.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok46k-cryptoslate.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 16:39:35 GMT","end":"Sat, 08 Aug 2026 16:39:34 GMT"},"fingerprint":{"sha1":"B4:0C:1A:29:7F:8A:DD:7E:9B:34:12:DD:F7:8C:D1:37:F5:A5:94:56","sha256":"E5:6E:2C:22:EB:F5:33:05:1E:4A:6C:9A:21:9C:83:C3:AD:AE:2C:2E:D4:1C:67:6C:F4:43:CC:74:85:66:EA:08"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/xai3.jpg HTTP/1.1\r\nHost: grok46k-cryptoslate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok46k-cryptoslate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Tue, 12 May 2026 11:08:48 GMT\r\netag: \"9c611770e91e52847198dd56145f2272-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDY02TDEXE2WZH69M9C9ND4\r\ncontent-length: 60675\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":60675,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 1024x576, components 3","md5":"48ad0df4269b119352170a3781617e0c","sha1":"2b74a016fa5ccfcf37f6d0f06945eff7e5eefbf6","sha256":"e79af51d0b1922e6ceca1840ebe4ff2b53f2af23156995857978af8f051a6515","sha512":"659efafa804ca57de7cd7689028eb7b9ba9822c758b6bac0995fbe07a640ff780631db71dd0a43f942f1e015067763bee098494385e47a59bfbe9d2f02e02bba","ssdeep":"1536:2YPw6v8RfmCwX9GOm/eBiqe7HkwV+eaCvJDfCp/wevy+06v3l:Z4uNzNwnHkwV+/gJDstnV","tlshash":"8853021eb9309786ebd64df0c7715f8a63333f2480f68ca4e6359a79b9049e4482d06b","first_seen":"2025-01-22T06:05:51.033603Z","last_seen":"2026-05-12T11:09:38.84719Z","times_seen":29,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"grok46k-cryptoslate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok46k-cryptoslate.com/wp-content/themes/cryptoslate-2020/images/chainwire-icon.png","fqdn":"grok46k-cryptoslate.com","domain":"grok46k-cryptoslate.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok46k-cryptoslate.com/","date":"2026-05-12T11:08:49.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok46k-cryptoslate.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 16:39:35 GMT","end":"Sat, 08 Aug 2026 16:39:34 GMT"},"fingerprint":{"sha1":"B4:0C:1A:29:7F:8A:DD:7E:9B:34:12:DD:F7:8C:D1:37:F5:A5:94:56","sha256":"E5:6E:2C:22:EB:F5:33:05:1E:4A:6C:9A:21:9C:83:C3:AD:AE:2C:2E:D4:1C:67:6C:F4:43:CC:74:85:66:EA:08"}}},"request":{"raw":"GET /wp-content/themes/cryptoslate-2020/images/chainwire-icon.png HTTP/1.1\r\nHost: grok46k-cryptoslate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok46k-cryptoslate.com/wp-content/cache/autoptimize/css/autoptimize_5c70f501ae51a6d594d3c6bf2da42586.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/png\r\ndate: Tue, 12 May 2026 11:08:49 GMT\r\netag: \"fc1a7a961ebe5bd55ea984f525d0abd8-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDY03QP5044D7VVR364VZKW\r\ncontent-length: 2703\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":2703,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 46, 8-bit/color RGBA, non-interlaced","md5":"1e44dcbfbbbc036a1bfea30a2390e453","sha1":"cde7d5625e6ee5104286647b8defce2a8a9e697f","sha256":"69f43007e7c0786a005de741c752c61d8c391e8fa0fbf50ed9e613a8fd0a6904","sha512":"17f793d8f5bc1f602675ac5be7dbdec0e232f2da8507b0a7ef563ceb0c1b3c8589e2fdd828b7dc26b5c1ce4cd7e2831bba5e76df9a40a5f3dc5ea051cde9eb16","ssdeep":"","tlshash":"c8516ba6d258213f00ff70adc0ee0884de646238f174a9d1de8a67707c08a1ce74e997","first_seen":"2026-03-14T12:08:34.391746Z","last_seen":"2026-05-12T11:09:38.841962Z","times_seen":19,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"grok46k-cryptoslate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Arimo:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grok46k-cryptoslate.com/","date":"2026-05-12T11:08:48.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Arimo:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok46k-cryptoslate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 12 May 2026 11:08:48 GMT\r\ndate: Tue, 12 May 2026 11:08:48 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10596,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"aa24bf32bf6a8ff0f90aaa34b5ce7c84","sha1":"886dcd867074a0f2aab5b9080196060070f9afc0","sha256":"3b4d0f801e12d9417bf0eb9bc3280d502eac595357f832cec96648c4bcd2c929","sha512":"e031a103482e4aff33b1f4d2316049ca4fe198f3687f4b58e378766b7275486d642d46910a000c5feb213f1cf83a5e15067ab9539c273b0260b82885e5543cce","ssdeep":"192:VYFWLfOsSwv38D1YmWkYOzSXvQ88MYjWtxO2S6vJ8lTYcWuCOVSpva8Gq:i5GHAd2XV","tlshash":"5f228ba5145bd4409e870cc277cf7e36ae5e60556440c1baaffe08ccac9ac224395b1e","first_seen":"2025-09-28T04:47:35.11734Z","last_seen":"2026-05-16T00:44:32.212177Z","times_seen":197,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":186,"dns":37,"connect":21,"send":0,"wait":31,"receive":0,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok46k-cryptoslate.com/wp-content/themes/cryptoslate-2020/icons/android-icon-192x192.png","fqdn":"grok46k-cryptoslate.com","domain":"grok46k-cryptoslate.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok46k-cryptoslate.com/","date":"2026-05-12T11:08:48.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok46k-cryptoslate.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 16:39:35 GMT","end":"Sat, 08 Aug 2026 16:39:34 GMT"},"fingerprint":{"sha1":"B4:0C:1A:29:7F:8A:DD:7E:9B:34:12:DD:F7:8C:D1:37:F5:A5:94:56","sha256":"E5:6E:2C:22:EB:F5:33:05:1E:4A:6C:9A:21:9C:83:C3:AD:AE:2C:2E:D4:1C:67:6C:F4:43:CC:74:85:66:EA:08"}}},"request":{"raw":"GET /wp-content/themes/cryptoslate-2020/icons/android-icon-192x192.png HTTP/1.1\r\nHost: grok46k-cryptoslate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok46k-cryptoslate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 2\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/png\r\ndate: Tue, 12 May 2026 11:08:49 GMT\r\netag: \"3fdeb39c3d180727f804995754c0da38-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDY039QXE95PT425MVV073B\r\ncontent-length: 5236\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":5236,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced","md5":"c1ed8ea9572bf75bcdd8381d406cd25c","sha1":"d2250090d3a046eef0a9e5f755e0ce2f6d216326","sha256":"36f23493e5075a616258c0cf474fb02bf3dacfd5fc30af8c2f1239d1c98d535c","sha512":"5f7b6f102469af3d368bfc26725043dfeb309679f8b128b63188988d22e336703edb168241079bd8f99831f5ad1a4b54cd8378237f137ee8dc188f1284bf8185","ssdeep":"96:PyhwxkNNo+elbOUKJNSDEkUayw3sty8Ld4v+O0YK/CwbK9s4GWFLCo:3xk4+elq/JNfvwYpd8Q/ui4GW9Co","tlshash":"0bb17eb6b0506561df0883769c28118f735c4f1c5a71612e7a13526a6df947ff6fc231","first_seen":"2025-11-19T23:58:42.272585Z","last_seen":"2026-05-12T11:09:38.843538Z","times_seen":35,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"grok46k-cryptoslate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grok46k-cryptoslate.com/","date":"2026-05-12T11:08:49.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://grok46k-cryptoslate.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 05 May 2026 18:34:36 GMT\r\nexpires: Wed, 05 May 2027 18:34:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nage: 578053\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-05-16T23:26:17.97904Z","times_seen":7806,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":209,"dns":0,"connect":21,"send":0,"wait":10,"receive":2,"ssl":186},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok46k-cryptoslate.com/wp-content/cache/autoptimize/css/autoptimize_5c70f501ae51a6d594d3c6bf2da42586.css","fqdn":"grok46k-cryptoslate.com","domain":"grok46k-cryptoslate.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grok46k-cryptoslate.com/","date":"2026-05-12T11:08:48.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok46k-cryptoslate.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 16:39:35 GMT","end":"Sat, 08 Aug 2026 16:39:34 GMT"},"fingerprint":{"sha1":"B4:0C:1A:29:7F:8A:DD:7E:9B:34:12:DD:F7:8C:D1:37:F5:A5:94:56","sha256":"E5:6E:2C:22:EB:F5:33:05:1E:4A:6C:9A:21:9C:83:C3:AD:AE:2C:2E:D4:1C:67:6C:F4:43:CC:74:85:66:EA:08"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/css/autoptimize_5c70f501ae51a6d594d3c6bf2da42586.css HTTP/1.1\r\nHost: grok46k-cryptoslate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok46k-cryptoslate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Tue, 12 May 2026 11:08:48 GMT\r\netag: \"0f49ab8e1d2fdabfb4ccbf4c762d959f-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDY02TAYKW8E4BSEEW9Z73S\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":1009535,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (56168)","md5":"4d3083f7c1b6a6c2e12d30bdd52f8943","sha1":"849b3670f39a8701dd87ba7c5536b2de1534eba8","sha256":"1fe7fed8316be8921006bb5bb8f139aaf94a4996083910fbe4fa5e89df555b77","sha512":"f0bb59abf807c7f3609430fe0f3f25405b12c169431af65b0b1475da40ae3e34271de01b2b6db56f40a562b4cf4c7ad6a4330420c0400701af0ed20eacada87f","ssdeep":"24576:3ZLwm1KA9kGDj3Cyg5lrceb0qTx9VO6k2u5SOV+UQ3Zo/0kPliGoo42utW2XCVGs:yO6k2u5SOV+UQ3ZaiGooZutW2XCVGs","tlshash":"6a25e8126c50603b78674d7b79c8bfa862b5c612c60206fcb131d40a7efa99e71af357","first_seen":"2026-03-14T12:08:34.371009Z","last_seen":"2026-05-12T11:09:38.839946Z","times_seen":19,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"grok46k-cryptoslate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok46k-cryptoslate.com/wp-content/themes/cryptoslate-2020/images/newsletter-hero-modal-01.jpg","fqdn":"grok46k-cryptoslate.com","domain":"grok46k-cryptoslate.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok46k-cryptoslate.com/","date":"2026-05-12T11:08:48.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok46k-cryptoslate.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 16:39:35 GMT","end":"Sat, 08 Aug 2026 16:39:34 GMT"},"fingerprint":{"sha1":"B4:0C:1A:29:7F:8A:DD:7E:9B:34:12:DD:F7:8C:D1:37:F5:A5:94:56","sha256":"E5:6E:2C:22:EB:F5:33:05:1E:4A:6C:9A:21:9C:83:C3:AD:AE:2C:2E:D4:1C:67:6C:F4:43:CC:74:85:66:EA:08"}}},"request":{"raw":"GET /wp-content/themes/cryptoslate-2020/images/newsletter-hero-modal-01.jpg HTTP/1.1\r\nHost: grok46k-cryptoslate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok46k-cryptoslate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Tue, 12 May 2026 11:08:48 GMT\r\netag: \"5babbd2c0d269572af5604f69e44a2c2-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDY02TEH4VKMJAR1Q2RQTQT\r\ncontent-length: 215853\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":215853,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1536x1024, components 3","md5":"128b1c670f65a70366ebdead2cc72961","sha1":"c2c3b69a5db36b820db35789b1f64f8023f8c4d0","sha256":"c4c5638aad380d8c5787d5af40de47ffc04325186069c355ac293f815e54da17","sha512":"8711b40675d1b07421e7898d26e82a72112038ea92e7dcc55a34aa214fd566a67d7fe939851040824376f3b622d4b21f4d7861987ca3aacfe7e99387d3afcd10","ssdeep":"3072:zDYgOd7SKom2+pEDW1rrGCQ3slkdBp6xxIktKDVhtuDFIA675xT9bt+zMmiLiUmV:nYgueiDTSyHIktKDkW73XAeLiKrbWp","tlshash":"f924129fd1cf4ee308816ab1cf5e4d1bf8937d8a48930d04766dc4d6ea236c9e786502","first_seen":"2026-03-14T12:08:34.387721Z","last_seen":"2026-05-12T11:09:38.847786Z","times_seen":19,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"grok46k-cryptoslate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok46k-cryptoslate.com/wp-content/themes/cryptoslate-2020/icons/favicon-16x16.png","fqdn":"grok46k-cryptoslate.com","domain":"grok46k-cryptoslate.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok46k-cryptoslate.com/","date":"2026-05-12T11:08:48.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok46k-cryptoslate.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 16:39:35 GMT","end":"Sat, 08 Aug 2026 16:39:34 GMT"},"fingerprint":{"sha1":"B4:0C:1A:29:7F:8A:DD:7E:9B:34:12:DD:F7:8C:D1:37:F5:A5:94:56","sha256":"E5:6E:2C:22:EB:F5:33:05:1E:4A:6C:9A:21:9C:83:C3:AD:AE:2C:2E:D4:1C:67:6C:F4:43:CC:74:85:66:EA:08"}}},"request":{"raw":"GET /wp-content/themes/cryptoslate-2020/icons/favicon-16x16.png HTTP/1.1\r\nHost: grok46k-cryptoslate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok46k-cryptoslate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 2\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/png\r\ndate: Tue, 12 May 2026 11:08:49 GMT\r\netag: \"df60149faabac22492ebe08ab521a591-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDY039T61SSFDVSC58JRX5D\r\ncontent-length: 448\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":448,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced","md5":"3d041397481846b1b8f47620b58f9bfa","sha1":"6378dd65cf45acf3a29c7769f607cb41f3413919","sha256":"897cea21fd87b61b4ced02fa94e4e118fd6e8c66e260ce52ef34863bd32573fd","sha512":"2cf58856f3bc3cefc2431e41d575db577a7429a5dd9236886b12e76757165637ffa29ed13f8607b09d70a93f94bdb9a1d07ecd4f2d13fe30ce0186f08879dc82","ssdeep":"","tlshash":"8cf0bb9f3661f074c023002941844f31dc35d6004dd940e0c81be719b67e4d480c5d00","first_seen":"2025-11-19T23:58:42.356066Z","last_seen":"2026-05-12T11:09:38.840547Z","times_seen":22,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"grok46k-cryptoslate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok46k-cryptoslate.com/wp-content/themes/cryptoslate-2020/images/cryptoslate-icon.jpg","fqdn":"grok46k-cryptoslate.com","domain":"grok46k-cryptoslate.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok46k-cryptoslate.com/","date":"2026-05-12T11:08:49.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok46k-cryptoslate.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 16:39:35 GMT","end":"Sat, 08 Aug 2026 16:39:34 GMT"},"fingerprint":{"sha1":"B4:0C:1A:29:7F:8A:DD:7E:9B:34:12:DD:F7:8C:D1:37:F5:A5:94:56","sha256":"E5:6E:2C:22:EB:F5:33:05:1E:4A:6C:9A:21:9C:83:C3:AD:AE:2C:2E:D4:1C:67:6C:F4:43:CC:74:85:66:EA:08"}}},"request":{"raw":"GET /wp-content/themes/cryptoslate-2020/images/cryptoslate-icon.jpg HTTP/1.1\r\nHost: grok46k-cryptoslate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok46k-cryptoslate.com/wp-content/cache/autoptimize/css/autoptimize_5c70f501ae51a6d594d3c6bf2da42586.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Tue, 12 May 2026 11:08:49 GMT\r\netag: \"743cc9e1686ec0411069bb0591efb3c5-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDY03QF26YCHYB7P2KTSJE3\r\ncontent-length: 3671\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":3671,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"14682f9406d311d01b51b6ede052079d","sha1":"103777809b9fd42ff676c73d8ac4ef7257b969a0","sha256":"cbb00b970d1ed69ad337dddf635a435aacc39c8f61aa772fbaea4d4dc7371ef6","sha512":"e625a41de71b12b727ffc6b622b6c8087f18c73956b68b5be993cd69104b6f2b3f9807c529c9d01e1744b2c514bf52d0f90ac3fd699a0818744d951092808735","ssdeep":"","tlshash":"fa712b996b14c516fa7c127956db87912f23d62112d6873523c53f3c4fbb904ac254e0","first_seen":"2026-03-14T12:08:34.389732Z","last_seen":"2026-05-12T11:09:38.841155Z","times_seen":19,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"grok46k-cryptoslate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grok46k-cryptoslate.com/","date":"2026-05-12T11:08:49.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://grok46k-cryptoslate.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 05 May 2026 18:34:36 GMT\r\nexpires: Wed, 05 May 2027 18:34:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nage: 578053\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-05-16T23:26:17.97904Z","times_seen":7806,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":111,"dns":3,"connect":9,"send":0,"wait":9,"receive":2,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok46k-cryptoslate.com/wp-content/uploads/2026/03/xai1.png","fqdn":"grok46k-cryptoslate.com","domain":"grok46k-cryptoslate.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok46k-cryptoslate.com/","date":"2026-05-12T11:08:48.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok46k-cryptoslate.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 16:39:35 GMT","end":"Sat, 08 Aug 2026 16:39:34 GMT"},"fingerprint":{"sha1":"B4:0C:1A:29:7F:8A:DD:7E:9B:34:12:DD:F7:8C:D1:37:F5:A5:94:56","sha256":"E5:6E:2C:22:EB:F5:33:05:1E:4A:6C:9A:21:9C:83:C3:AD:AE:2C:2E:D4:1C:67:6C:F4:43:CC:74:85:66:EA:08"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/xai1.png HTTP/1.1\r\nHost: grok46k-cryptoslate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok46k-cryptoslate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/png\r\ndate: Tue, 12 May 2026 11:08:48 GMT\r\netag: \"e6c1efe1be12f9b05ecf7a25597cebf2-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDY02TBTWJ9JJTFYBCE2MGJ\r\ncontent-length: 432895\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":432895,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 559, 8-bit/color RGB, non-interlaced","md5":"796db8d8d1a6a3e5d09edcf43a769090","sha1":"6d1fac06be6a391e919ee27410ae61dc987fb59f","sha256":"b9c24a6354bb8aa9283f814a53e0d07ba38ea143f3e2f4f5af3a7db952640d9b","sha512":"83caf857d80d853eda0c29bfb940b72455f753a628fb025ef1944469c201978cb541ef98f297496de0264069a82a55307c7720b673f54a0b1aef5504b1e0fa92","ssdeep":"12288:CNMcsfTwpKSif92YjeSXMBKRgIAvcBHj6zs:CmcsfMp5ifD9XO7csY","tlshash":"f694235b164da97019621238633c29acf347c0bfc8aa9c620cb5c63f7dad62df316d56","first_seen":"2025-04-22T21:45:54.217609Z","last_seen":"2026-05-12T11:09:38.843052Z","times_seen":27,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":541,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"grok46k-cryptoslate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok46k-cryptoslate.com/wp-content/uploads/2026/03/xai2.png","fqdn":"grok46k-cryptoslate.com","domain":"grok46k-cryptoslate.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok46k-cryptoslate.com/","date":"2026-05-12T11:08:48.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok46k-cryptoslate.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 16:39:35 GMT","end":"Sat, 08 Aug 2026 16:39:34 GMT"},"fingerprint":{"sha1":"B4:0C:1A:29:7F:8A:DD:7E:9B:34:12:DD:F7:8C:D1:37:F5:A5:94:56","sha256":"E5:6E:2C:22:EB:F5:33:05:1E:4A:6C:9A:21:9C:83:C3:AD:AE:2C:2E:D4:1C:67:6C:F4:43:CC:74:85:66:EA:08"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/xai2.png HTTP/1.1\r\nHost: grok46k-cryptoslate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok46k-cryptoslate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/png\r\ndate: Tue, 12 May 2026 11:08:48 GMT\r\netag: \"c6f86f7a154f29051507ff61d0e26e64-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDY02TCYTE6WJM6DXAMB783\r\ncontent-length: 79773\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79773,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 529, 8-bit/color RGBA, non-interlaced","md5":"8c9938045f61127d87c4e3a32a660ab3","sha1":"b84936dd9fb67c2a7bb9d7c28d3e3a69b18e7232","sha256":"a757a53c6e66e32bcb26d7a2fdea8373288b9985b39efff5722c44542abf7dee","sha512":"2763c72e49121ee88988ff16a6ada343522248ecbbb9511b489064a7347cabb065392c8253ac8fc3a313537b6c91b25c167ed4a6e50eb39fcb37da7818035fcb","ssdeep":"1536:vD947AxWBXPpkRj4a5SUQaycm8jM4Yov0fclucqtAPkjXfm7gqbww8b:WGWTkRsyS5ayndJfquFtAPAXfmsq0w8b","tlshash":"0d73021350e0f6ae317a9799cadf1838ae4b5a1e35a75dfa6c45c4cf2a060402cd1e3f","first_seen":"2025-10-27T05:31:26.766124Z","last_seen":"2026-05-12T11:09:38.845394Z","times_seen":22,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"grok46k-cryptoslate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoslate.com/wp-content/themes/cryptoslate-2020/webfonts/fa-regular-400.ttf","fqdn":"cryptoslate.com","domain":"cryptoslate.com","tld":"com"},"ip":{"addr":"104.25.92.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grok46k-cryptoslate.com/","date":"2026-05-12T11:08:49.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoslate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 14:08:56 GMT","end":"Mon, 22 Jun 2026 15:08:54 GMT"},"fingerprint":{"sha1":"89:1E:E9:F3:29:A8:97:0A:FE:C9:3D:7F:2A:61:C8:45:00:96:6D:6C","sha256":"6E:3E:13:0E:25:F8:6A:3E:34:FA:80:00:91:38:DC:2B:7D:FA:4E:3C:99:E5:5C:97:D6:A5:A6:09:60:2E:35:CE"}}},"request":{"raw":"GET /wp-content/themes/cryptoslate-2020/webfonts/fa-regular-400.ttf HTTP/1.1\r\nHost: cryptoslate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://grok46k-cryptoslate.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok46k-cryptoslate.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 11:08:49 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 12 Mar 2025 00:01:23 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 09 Jun 2026 21:57:19 GMT\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i88TtBvCaUuZYSXoqXS1wvYa%2Bn5AWZoAWLD%2FyWktxaGEG%2FJx8fAlrh6lRcG2%2FvqtSGc%2FvhtmvT3F%2BGo2wLa0GeIk3hJLVdqi%2Fr%2BOK1co9xGBtqrVuVFdJfvuphUMpyHrdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\ncf-ray: 9fa8f7b87ab456af-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1151848,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 10 tables, 1st \"OS/2\", name offset 0x10cd88","md5":"b4be0ef0d06bff0ab6a6d3f4cd0ae90e","sha1":"db47c9155bc0988a1644087a246f559ea95450cf","sha256":"63f33185fd547ec758c8dbefe4b031513d473a5225b39d313afbf9100f54a334","sha512":"56546c37809af1b46d50612d126351549413a26a81845f57526ec5b77f383b2b2badd5ac4352dd8e5c1fbc59e67f9376b2c0f130c0608edecff3ac49a4a9b6b4","ssdeep":"12288:v+aKXUy8WXzGKsFn0LI5nQrRFjW/go/WQIHco3h6wbbZlk+ZanD1p7:vxQUyxgF7nOFq3yZlk+Qnhp","tlshash":"3d25098367caad0ae4277e7456801e0f3351612c4355c227fecb19eecabe8d5da35b90","first_seen":"2025-08-12T13:23:09.793673Z","last_seen":"2026-05-12T11:09:38.844496Z","times_seen":32,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":82,"dns":35,"connect":5,"send":0,"wait":200,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grok46k-cryptoslate.com/","date":"2026-05-12T11:08:49.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://grok46k-cryptoslate.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 05 May 2026 18:34:36 GMT\r\nexpires: Wed, 05 May 2027 18:34:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nage: 578053\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-05-16T23:26:17.97904Z","times_seen":7806,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":238,"dns":1,"connect":9,"send":0,"wait":8,"receive":3,"ssl":225},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grok46k-cryptoslate.com/","date":"2026-05-12T11:08:49.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://grok46k-cryptoslate.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 05 May 2026 18:34:36 GMT\r\nexpires: Wed, 05 May 2027 18:34:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nage: 578053\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-05-16T23:26:17.97904Z","times_seen":7806,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":132,"dns":2,"connect":13,"send":0,"wait":8,"receive":3,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}