{"report_id":"7060cdce-b11f-45cc-b1db-1bad7430ac95","version":6,"status":"done","tags":[],"date":"2025-11-30T16:11:40Z","url":{"schema":"http","addr":"wac.rip","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"104.21.36.113","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"wac.rip/","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"title":"wac.rip","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wac.rip","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"104.21.36.113","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-04T16:11:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"wac.rip","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-16","domain_rank":0,"first_seen":"2025-11-16T05:21:47.88336Z","last_seen":"2025-11-23T16:48:10.414085Z","alert_count":56,"request_count":28,"received_data":616828,"sent_data":12223,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"use.fontawesome.com","ip":{"addr":"172.67.142.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":6983,"first_seen":"2017-01-30T04:43:25Z","last_seen":"2025-11-23T23:00:08.854004Z","alert_count":0,"request_count":2,"received_data":257945,"sent_data":965,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wac.rip/js/autocolor.js","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"99e55c14a9cc2c6d4faeab274a7a41cf","sha1":"58ec1f6ae32744a3ad705070ce4999dce8c2a887","sha256":"08b91d0e167a137609fbeedbb1af15861bbab2d7e457b41203f5eee336bd0268","sha512":"787193799b32f57619c9bc1516a081d29c1132c8b660013a3ba269c55ffa6e2a46d6ff2aff4e3129d369dff2c7bc0cc8020689c855d40c154ca368551147f9cb","ssdeep":"48:15fa7muSMwshXUSZr0H7fWZVmWqSFQNKBOrOOwmUks6O7f5Fs6MyHs6/i6VUtOur:88yAW3iQH5XyTtOuQEL+WGT5c5F","tlshash":"3091dd75907095358833237fab9b8a4dfb313033aa1292193fed55a4cfb16e80651fda","size":4548,"data":"","first_seen":"2025-02-26T21:31:57.348306Z","last_seen":"2025-12-21T15:47:16.038546Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/js/performance.js","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b112f77223b900fb2dfc8eb2e89e512f","sha1":"43187a0f1094e3a0501c94a7e68e1e9f8877852a","sha256":"f932a6b0b8b844977200d3cef521cba86372d82486a626dfe51fe1a72b0b0faf","sha512":"87300d3387eb1a524d6de8ea29da342dac825eb50d2c6154260932fc4cda6f14af4b90ebf78ab4ff643fc2c734259d46dc418704dee9b88922400ec0941e5c4b","ssdeep":"48:GgCOsSqOUoo+y6X8+NRPEG+W+O+K+oZAkISeYwVtD1x6WrYfY/an8udQRhkukpou:dqiXR884YwDuEqP1u2oThT0YwDuEqvBi","tlshash":"cd91dd2ab19122291b33177e4aaf7224df350233a3134e6c75af970c1f718559717aae","size":4512,"data":"","first_seen":"2025-02-26T21:31:57.349317Z","last_seen":"2025-12-21T15:47:16.03951Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/js/script.js?v=0.13%20type=","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"13f078a1f49053cdc91f88ba70ef82f0","sha1":"e9dff6ecd53697592cc89d204fe26cf48cb12c6f","sha256":"bda12006b182f9f5974600f466b441a3d29873fbbb429e23e3cd2c83f1038507","sha512":"6df62e39cfd8c019680432ed92624f8c26a2f045f67112f029e4338b738032ab42cd8719ef4151c49c5a6d17e2ae9a3515e672d3dd05325c9141801f5be28b8c","ssdeep":"768:Q2oPxcvcDcrc5ppB0vzItGlcKczc2cu1QXDzAZAfZ3Z20ZTN:QvPLppB0vzHY1QXDzzN","tlshash":"23f23fa8453622308a7353bfa7965b09fa75503f620292893aedc59c1ff2c5443b2dfd","size":35612,"data":"","first_seen":"2025-07-14T07:36:18.959248Z","last_seen":"2025-12-21T15:47:16.047001Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/js/events.js","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5038fd451d527f0217882cc521ae2c3f","sha1":"e1724e481defa7c7b49d19c96558777da92f6925","sha256":"2d4136fbf6a11e54b0d37499f2a201284ee30bbdbccf2afe464972fb455853ad","sha512":"ca187ff0681a8c32a59cc50274b7b35994d04f28df818a9f27bb9b5cf490cc0a94ba59854de47bfabcbf0ee70927e2afc037224d64760914c9361eac158d190a","ssdeep":"","tlshash":"ba511b8821310024c677828d172f6221f6226163b500ea097a4dcf4c6f32e96f5abecd","size":2485,"data":"","first_seen":"2025-10-11T10:25:11.603448Z","last_seen":"2025-12-21T15:47:16.036082Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/js/auto-feed-id.js","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"59b25d5bb4027a5e1dafc7100858839f","sha1":"4daad74e5710531ff8e4d50a0b6665e68106a906","sha256":"102a621c2025b8028e940f9d890113f40e6b92deb993a859f379e39aa64b8311","sha512":"4535a3a804df9691a5a2623ee5053f854e5a0d48a579f329f4471f41eb0018a60614b2f7a51fed947c58ce745acc475ca5bc392516adbd7148506140f7a07abc","ssdeep":"","tlshash":"4a01228c04bc24200e33b7bdea894b05d5bf60732010511a3c9cd8cd3ff262a2ab0f98","size":684,"data":"","first_seen":"2025-02-26T21:31:57.335363Z","last_seen":"2025-12-21T15:47:16.04866Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"aef9269ff0b5740ee7e71dc92f8b307a","sha1":"64d7af4b93fd8107aa220467eb9436e6d4ea0c5a","sha256":"3dbd79b1779380a964c8cfbf2e5d37aa855a3fabba5b44252517ce0d4448f8f7","sha512":"e1801526ad94559db507cda5be10ab9db19fe1c382cb271291a5460ebdc39cbc4c53d2642d78e01fad11b473f7a1123c4da8a4fc7d7b647547f38d16e58086ef","ssdeep":"","tlshash":"e1e0d808316a8a210133f46e13affd4d6a6a1557e00a44563a4ec70cefc79e6a6a25c1","size":390,"data":"","first_seen":"2025-10-11T10:25:11.626235Z","last_seen":"2025-12-21T15:47:16.062705Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d089400311c82701642e85a01f274f0","sha1":"56d5810174a30cfb82208de617179845cb2f9602","sha256":"fb83ea076941e098382b42e0f7bcd9377327a2572a81f7f54e981bf6a8543801","sha512":"de1cccc0d6d5d2902fac20b4176682a3fdeb61939eb0c8a758fdb99ea1fd4b88b1a75f65c6d4ac9cf0085b97a900ea32848758ced8dbe7a3d67bdc5d65647167","ssdeep":"","tlshash":"65d0a74885b611370c7702ae7dcd52ab6225105f2403452d39ed575c3f80a611740e67","size":233,"data":"","first_seen":"2025-10-11T10:25:11.6295Z","last_seen":"2025-12-21T15:47:16.064622Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/js/waclogo.js","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ae338630fd974b0c0db2402f7ddfb79","sha1":"84aebb82d9c2c4fbd3c10888bd70fed7d0de3d89","sha256":"9e261cabb97ea4ce0b1bdb64a1143572e8ae958b1662ba30dd4071f63b3d19a3","sha512":"b5c904269080f4345e6f0a9f754a588428d0210b3618bce53984de4495d3589f9cbefac2bca23fd63f363f8cbd74760ce167df9cb376856bd33ebf865c62c7ed","ssdeep":"384:wMt3UfygTO2TH5nqi95r3AIG9rZPzDXgHz6:wM+qi9h3oQe","tlshash":"8c821d2a63a610728777637b4b9f5a4ee731403b6642c1093d2d83441ffae9825a4ffd","size":18041,"data":"","first_seen":"2025-07-14T07:36:19.010065Z","last_seen":"2025-12-21T15:47:16.051512Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/js/home-page-new.js","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"11a2e3d9a3276bf304157b87a4d5a1e2","sha1":"3b895116a94f9ed301051b866ae564392895aaaf","sha256":"85b8ee95855600bd69004f1fb10f75bce698aee052d44bef429914fc427bc8f0","sha512":"1fefb277a83f67cd3085ad1946f95ca9cdecfba0e82091f8bf2d6a1ef218c971fb504460e25651a0ec5c99d9423c356cdf667969a7b783c3e28da1420032865f","ssdeep":"48:nkamSsBwWE6cnfjTLRNQ961YIn30H093XomEjcUkzPxTlYDnYaneZtWxKyrCR2EA:nmiic/eDU94Ne2Gi84hgalCjgZ71l","tlshash":"b9c1fda59232353545b3837edb4a622de735413b3602915c3eecca9c1fb1a688761fec","size":5666,"data":"","first_seen":"2025-10-11T10:25:11.617201Z","last_seen":"2025-12-21T15:47:16.028487Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/js/font-size.js","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"062034538420e39b0d9aabad3ed05d04","sha1":"e0e8092fd7d009ea0404442ca25fc79173b68c86","sha256":"033c4022981da187a9cbbd2e6561d83fade22b087c0355e35fd1f16fec8e0acd","sha512":"e8e6bf9fa08462a29223981cc8a4d40203b28beaffbd6286ca5a33d7de62023ff52542221edf13838fdb30607ddeeb643be8553f80fdc48e09f1b8f94149e5cb","ssdeep":"","tlshash":"b211bd3801305524583953797353d385e9bb507fb023460fb58dd6a92fd042a9932f99","size":1058,"data":"","first_seen":"2025-02-26T21:31:57.334298Z","last_seen":"2025-12-21T15:47:16.047841Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/js/auto-load-feed.js","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d881288cd19ac94e438c2d4d43bcf14","sha1":"7e75f2f4efdb7fc40d3cd2b7626605b710e68082","sha256":"440e1d655db65e700853acd9502eaac068a6d340030aa196743f229520113eb8","sha512":"dac4b99ba4023f13683ef63cb2a7c6b2d502da60559ea6f4f12761dfd461140cc9daac0f6c74c989ac17866f9dde77a6905dbe19ea0bab5fde803c929c2188e3","ssdeep":"","tlshash":"11019e7a280193320d372ad9aa5f4284fc11103f33036138771dc7c06fb8895495dece","size":676,"data":"","first_seen":"2025-02-26T21:31:57.233135Z","last_seen":"2025-12-21T15:47:16.023583Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wac.rip/js/performance.js","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:13.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /js/performance.js HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wac.rip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:13 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Jan 2025 02:08:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6796ea87-11a0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 49836\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WlgVutcUPoTjyDyf99lY3AZhMG8txttovuv0HVCbzm3YzMk%2BaaN4w%2F8ImtwuTnbgk21d9RgHWV7TzNIDmAb3u97SsqCqUso%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e91bcc232fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4512,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"b112f77223b900fb2dfc8eb2e89e512f","sha1":"43187a0f1094e3a0501c94a7e68e1e9f8877852a","sha256":"f932a6b0b8b844977200d3cef521cba86372d82486a626dfe51fe1a72b0b0faf","sha512":"87300d3387eb1a524d6de8ea29da342dac825eb50d2c6154260932fc4cda6f14af4b90ebf78ab4ff643fc2c734259d46dc418704dee9b88922400ec0941e5c4b","ssdeep":"48:GgCOsSqOUoo+y6X8+NRPEG+W+O+K+oZAkISeYwVtD1x6WrYfY/an8udQRhkukpou:dqiXR884YwDuEqP1u2oThT0YwDuEqvBi","tlshash":"cd91dd2ab19122291b33177e4aaf7224df350233a3134e6c75af970c1f718559717aae","first_seen":"2025-02-26T21:31:57.349317Z","last_seen":"2025-12-21T15:47:16.03951Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/media/svg/series-title/nostreamon.svg","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:13.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /media/svg/series-title/nostreamon.svg HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wac.rip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 01 May 2025 12:12:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68136513-14fd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 54119\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VGclBmHE6tN4rctyXlkxlpPZe7xUIIuXpKEhzk77THxxMW2nGHKqLtYWazKAn40qK0Qz7Pn1z0CIxR0so7v%2Bo94VqiuMioQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e91dd1e32fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5373,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"20e510fa50eafd1b24230b90331f45f9","sha1":"378baf2ca423d1fba5d8acb198736a9f3874eb3f","sha256":"6f203dd6e94e6e3fe5a976fbe31b1e9874fa9fc8c8b5dff0049ab23f7a5bba30","sha512":"8096c783cd4dd5bcd25c4f4d735ae7706666d6b54c123596e810d68b4397b607e5edf8575784f674642315aa1da848c9f1daa801e3129247fa906b3e23dd595d","ssdeep":"96:v9LSgfTfMCBvhqzVJA0pI05wme5qOXYbNK8MaiPMBvhxSnVRjcIqmhLC:AmLhGzzIMwmejla5hiVm/mhG","tlshash":"d4b132667bb8d769d17f76b08cb75c0a2b4c38ba2210f440899b4806fe71ab53dec915","first_seen":"2025-10-11T10:25:11.622397Z","last_seen":"2025-12-21T15:47:16.040382Z","times_seen":10,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/api/events.php","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:13.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /api/events.php HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wac.rip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:13 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 2946\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sun, 30 Nov 2025 15:22:07 GMT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2FtgvWuaqsREQuxn8CSfqI5PoF32mdeZzzozY5ylOzMuuG5hb1ZGgeA2ia%2BJfr1xEhmzRA8rusYNgfI6scR2lmquwq4sNSI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e928f6632fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1849,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2968c6bca43d1b707ead7113ee6fad5a","sha1":"d9f9a884f33c5deb2d596c60bcaeea85c2794c5a","sha256":"b94ba49a459d6715727747cef7527ad5a6880a9f4fbda8e763a1e4a2372a493b","sha512":"2cc37d75cddbb05f65ede7e614f775f20858139c339b35f7b042d9b9f121e9ac5f1de94d3df12326dd8bfbdf2a71e67e9d4a3df842e72e07fb3fd08a30483dde","ssdeep":"","tlshash":"ef31be6ac8120c21b25364f659e883da279443035ea77d46bf0c3c5c8fae80f25b46bf","first_seen":"2025-11-30T16:11:43.986945Z","last_seen":"2025-11-30T16:11:43.986945Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/media/img/home/Mixed.webp","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:13.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /media/img/home/Mixed.webp HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wac.rip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35450\r\nserver: cloudflare\r\nlast-modified: Sun, 05 Jan 2025 10:37:12 GMT\r\nvary: Accept-Encoding\r\netag: \"677a60d8-8a7a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 54119\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pV1n8p7P6OV9HEg2Xd5GGUOt2CDh23D9P5nMAQRfGAmiB5DlplIeUi1%2BffY8xWTGFbaC3Vum4iW4LGWu%2BmQPo9Bk1uqp%2Fek%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e91cd0232fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35450,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"12f3b1f079151958f16ac6c5c5d77fe7","sha1":"2c6cbf3889219a53664ce662e8f3c6fa6a5b23f1","sha256":"2f5f292dba6872ec98760de25d4db490cf0e31ae1749fc0122eba31e9f82f1b8","sha512":"1fbbfaf2cc43d4115fb5b7960273dc97cf65efd0fc3c907c083b6348a0f47be27d2d0d5a7295d45d06b24e8f6385a8a7d1d17e8e7fd63e5babf4069c023a0834","ssdeep":"768:kQ9EnbuGaZWHOO87PwJMczZai6RTE6/B8SrEJJHkdxxhU/DdNT3:MnaEuOuwJM+gikJS6E/Es/BNb","tlshash":"55f2f1f9d164e0b25a62c533cc416052ad5bc6788fe499cd28b0a1ea35fd3f57a722b0","first_seen":"2025-10-11T10:25:11.594151Z","last_seen":"2025-12-21T15:47:16.049514Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/fonts/f1/Formula1-Bold.woff2","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:14.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /fonts/f1/Formula1-Bold.woff2 HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wac.rip/css/style.css?v=0.13\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 24960\r\nserver: cloudflare\r\nlast-modified: Sat, 11 Jan 2025 09:59:18 GMT\r\nvary: Accept-Encoding\r\netag: \"678240f6-6180\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 50558\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z7lEmoYXbfE1BgO61UHgB%2BEF92%2FM1afTv828Ys%2BY6Cl0se8gyLI9HpLfmEkK6Qk4P5lwFMXaSeiPOTQfQncQEZgQOKKp6Xw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e95890632fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24960,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 24960, version 1.0","md5":"bd51a3f7f95c4f016c6d74d3463451d3","sha1":"828a21a9381abad6b9c6f548b55a28849acb9569","sha256":"be8b82a8393ed4970b688f85b5244a2e37713459d53cc743094095a9a3ede20f","sha512":"d248c14ff615ad63b03f39e462a7b332801034e6e18987537f75e6f426b19059534c11a3862c8309ce5a76f60c2a70d53361c89e3ff5b8926dacb62fc866052c","ssdeep":"768:KiLaqIVLOwayOCcHAYcAegmGunEdk77tao3io:KiLu6CcHALA+SYxzio","tlshash":"11b2e1d60124b297e0a9ddf469fbcf1bf8fab6c68c27fa54b41770f04880a584552ed8","first_seen":"2025-02-26T21:31:57.23632Z","last_seen":"2025-12-21T15:47:16.056218Z","times_seen":15,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":5,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/media/svg/series-title/laliga.svg","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:13.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /media/svg/series-title/laliga.svg HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wac.rip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 05 Jan 2025 10:37:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677a60d8-82d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 54069\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ptu25YlX6ZwQ7qwJCg3Ui0llaqn2Hagh4YtvK%2FvCdCoVGsHcHiB4Kur%2FJJIkHtdvPMFw7ZnrDhUhoLLXCRJMJJEE4iha0U0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e91dd1c32fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2093,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"defab18ba93f20187ba487c8450d8746","sha1":"437cdc3b8cbbe0f46ca02f41640281f7aa23fa35","sha256":"0134f5ef31b41a50fffa66f6abb782e93d749ae3a68e274f5e9c720aa4dc475b","sha512":"cbfadfeb17e9a2337e91cc8debe6300a369ed95ad6284f34c55cf73b7c6b2a8e285d49af17ebe2088ff64c2d1b113261ad1b6fdb30c394d180cee1f633f1dad5","ssdeep":"","tlshash":"9041511207ad03acb56b4274cc732807a50d6c47458af984bb5acd5387b2ea33ed8e8c","first_seen":"2025-11-30T16:11:43.989629Z","last_seen":"2025-12-21T15:47:16.058197Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/js/events.js","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:13.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /js/events.js HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wac.rip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:13 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 15 Aug 2025 08:12:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689eebe2-9b5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 49837\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PT6g%2FqGfr9csNJBoWSKhlak%2Fu4Pr5X6iI2h037GUQwPFttWUdDecXyPLVm0K2RTv3FSOJ4sQPoTYrSfWqLt8g0QR1ujJKW0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e91bca232fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2485,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"5038fd451d527f0217882cc521ae2c3f","sha1":"e1724e481defa7c7b49d19c96558777da92f6925","sha256":"2d4136fbf6a11e54b0d37499f2a201284ee30bbdbccf2afe464972fb455853ad","sha512":"ca187ff0681a8c32a59cc50274b7b35994d04f28df818a9f27bb9b5cf490cc0a94ba59854de47bfabcbf0ee70927e2afc037224d64760914c9361eac158d190a","ssdeep":"","tlshash":"ba511b8821310024c677828d172f6221f6226163b500ea097a4dcf4c6f32e96f5abecd","first_seen":"2025-10-11T10:25:11.603448Z","last_seen":"2025-12-21T15:47:16.036082Z","times_seen":13,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v6.1.2/css/all.css","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.142.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:13.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 03:19:03 GMT","end":"Mon, 26 Jan 2026 04:18:56 GMT"},"fingerprint":{"sha1":"33:ED:5B:34:BA:AF:AF:80:58:92:84:39:09:81:C2:1C:F2:7B:1C:61","sha256":"F2:60:62:61:00:2F:5B:44:3D:71:67:60:E5:36:87:F9:BF:1E:D6:39:B2:E1:C2:20:E4:11:6C:79:74:03:6F:DD"}}},"request":{"raw":"GET /releases/v6.1.2/css/all.css HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wac.rip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:13 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eCwUyR%2FlBhoU15QpiHbJLOeVRPr020OJMwQaPaeeZYD9x2XNLVpFljN4djvTYZQeqp5SycdraEKGgFvOn9UyKPntCxiLgiVsZxNydw5DqIl7\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nage: 1262333\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 22 Sep 2023 01:46:17 GMT\r\nvary: Origin, Accept-Encoding\r\netag: W/\"8ef777107c4620d4ddd4f8c4bb14a36c\"\r\ncontent-encoding: br\r\ncf-ray: 9a6b9e91ecbcb51b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101709,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65317)","md5":"8ef777107c4620d4ddd4f8c4bb14a36c","sha1":"0ae47fa834fb55de7b50c79021aeabecfae50c9c","sha256":"c5e8e8eb22e2eaf1ad02370c22c63c04774ab0b83b4329d5945333750814bb2f","sha512":"d6c0913dd9115e1055d8f04b51d45be2d320d70d983dfdfba9ab5415e4bbce5072ee3248f0b7f8547c167d965fa57b5848bcbce69926f4669855831fc39042d4","ssdeep":"1536:RUMVM6MVMkMVM9MVMNMVMispLZdz+WnQcnlFwLb3esoUde7cQ:oZdzRQcnlFkesoUY7cQ","tlshash":"99a3b7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-05T04:43:09Z","last_seen":"2026-04-27T16:09:30.410201Z","times_seen":3976,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":4,"dns":1,"connect":1,"send":0,"wait":10,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/media/img/home/Football.webp","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:13.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /media/img/home/Football.webp HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wac.rip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17624\r\nserver: cloudflare\r\nlast-modified: Sun, 05 Jan 2025 10:37:12 GMT\r\nvary: Accept-Encoding\r\netag: \"677a60d8-44d8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 54119\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sDrMWtZXuGUOf4V7cLdwpCnFSHR2UR8MmU%2Bo8nmZ7sRnaGS1lQskqk8tgSMKgMwRlMAPRu80sCI0w5w6roNcsarDQGOoH1A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e91cd0132fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17624,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"21fb5c710fc630f1692dd95ed6b6a91b","sha1":"4e130d191ff837c0bd3ee3dcab619a351106243c","sha256":"6335e325007f982d21f299a4f0f63519a588b7a7bf320bb003edde56cd233622","sha512":"280bdc16ba4f34f593bd6c2811b58d5de7f01bccab10e714cf9e698b905b8dd01261e91ef28c2c6ff7d79283d76e221e07e4e2f0c868e34bb6f83b89013a3379","ssdeep":"384:8o9xPHIi+0GJFEy/x0XYnlEkYXLcVQgLLxxvTrKh5FUz84TRs0:8YPHIicJOy/mXYn6VcV1LLzvTrKSo4TP","tlshash":"b382d0ada2ed0212e4145be95dce2cd2ec7d48970cecac63993e342b65d784eeb51029","first_seen":"2025-10-11T10:25:11.614544Z","last_seen":"2025-12-21T15:47:16.012995Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-30T16:11:13.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wYkcm8rhJZXqer0B04qKUAy0QxZ1qAWSO8LKxjjMwWlgLhAq%2FMR008x7lW7lhmC0hoz4bBEcLo90ARA1RyvHTGMhJmAD\"}]}\r\nage: 2940\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sun, 30 Nov 2025 15:22:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9a6b9e9079bbb517-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17893,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (3978), with CRLF, LF line terminators","md5":"03dd28652a99de7e4e45227a8ceb2a8e","sha1":"8ab152746445065ee1cf8045ac74db99d4e4a69f","sha256":"541e5595ecd4ac0a737f9ac278d63d4a35d60ca15d644c9c7153a0449c2ae8b9","sha512":"742faf4e4fb8807ff964c53be118980bb0ea15e04eae7d02ab4bb022fcb10b6ee6ecc7246300e2ef7055e9265d274bc800e8604ce36c0cc43712fe1a47af333c","ssdeep":"192:LaW3cU2RgjL9Bd9oOeVzkkAiYbgloC7JV3MpokFTAsNH0EUFv7VcWWzFaM:HsU22jL0OskkAiY0loCPebxAsNH0EUtM","tlshash":"59821e30a9d9117f21a3858099756f4aff999a1bba0b866036ed1bdb3ff7c84cd03404","first_seen":"2025-11-30T16:11:43.992889Z","last_seen":"2025-11-30T16:11:43.992889Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":22,"dns":4,"connect":1,"send":0,"wait":10,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/css/style.css?v=0.13","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:13.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /css/style.css?v=0.13 HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wac.rip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:13 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 16:00:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690e178f-14682\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 50558\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MORloPQxImDBOMXwPcaOV0KC0Obc8KwVQj0c%2FFg4B33z75NgD3N35BV26KjM7gYfobGEgK3FdQaCXao1Z7H%2BKKM50cqCgQQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e91bc9532fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83586,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"65549b3753b7fee661b67318099bdd9a","sha1":"f653f7e43a7a85ff0eca4f43c937a981433ab456","sha256":"0ed715321da27be9f7ab63748b651f70a46ecbb08e70687291e3dbc289810192","sha512":"db7d8661f9dc5b3539700dabb0416320e1bbe5196e9ac7816e2fc55beaa1263cd8720c9eb586e81c706eade51ea57e692bc27a56ed26837259c637a13483f992","ssdeep":"1536:O8pg32RkrmSLAttSg3QCa2wUFugGOPFkKUO5:w32RkrmSLAtkg3QCa2vFugGOPFk7U","tlshash":"4e8362964ab32105a807d57d2fef67152239e057970fccbc7bcda24ccf861e466a1b88","first_seen":"2025-11-14T20:23:12.759909Z","last_seen":"2025-12-21T15:47:16.033792Z","times_seen":5,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/media/svg/star.svg","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:14.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /media/svg/star.svg HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wac.rip/css/style.css?v=0.13\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:14 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 01 May 2025 14:25:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6813843e-806\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 50558\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n6buCk6wwyj4QeJ7P2ZjUNepI77A%2BJmKyCnaK8ysPyY4JihkA95C%2FahJ89ZKMxmymRIHOF%2FggQUEyBxAZiBKlocbydZUs%2FI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e95384032fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2054,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7c5c4e939687069b8b2e1509402d3d26","sha1":"6c7af85678cb35bde2bb27650af2f84bff14d960","sha256":"69f3dc28dd17886edf542788c9dc5d3873aa20b4384081c9b1e2070d251f81de","sha512":"699e235b76ae0b480200f945022154453968630280975bf299e2014b212aed71b911ff10f1fc7bae89b963a8a1f355020a45bd75664d7eb76498b5417324cc64","ssdeep":"","tlshash":"78410376f14688fec22d81a41ea69d16620a35a352d00cb9b8bc8018df455e7bb3e6d8","first_seen":"2025-07-14T07:36:18.955675Z","last_seen":"2025-12-21T15:47:16.016746Z","times_seen":14,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v6.1.2/webfonts/fa-solid-900.woff2","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.142.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:14.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 03:19:03 GMT","end":"Mon, 26 Jan 2026 04:18:56 GMT"},"fingerprint":{"sha1":"33:ED:5B:34:BA:AF:AF:80:58:92:84:39:09:81:C2:1C:F2:7B:1C:61","sha256":"F2:60:62:61:00:2F:5B:44:3D:71:67:60:E5:36:87:F9:BF:1E:D6:39:B2:E1:C2:20:E4:11:6C:79:74:03:6F:DD"}}},"request":{"raw":"GET /releases/v6.1.2/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wac.rip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use.fontawesome.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 154840\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jo0EWVtRQtpHbr9w2XSf7poL%2BRNaSn8VBFGBe5nTeB88KM29B4CvD8xUQ2KNisTpstMjPWRK2kln3bH983zayk9rv1P2e1tRU32d%2BTYj32eN\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\netag: \"be4dccbe54eea47a0ad5d7bb60a3c17d\"\r\nlast-modified: Fri, 22 Sep 2023 01:46:19 GMT\r\nvary: Origin, Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1261417\r\ncf-ray: 9a6b9e956812b51b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154840,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 154840, version 769.1280","md5":"be4dccbe54eea47a0ad5d7bb60a3c17d","sha1":"1979128e8ba1517d85f5e4ee505abf486c51557c","sha256":"52bbd916956b4ed8b9d71d1784e4008b207814ec506203326fb36052f3451adb","sha512":"7f7b2964cbeca667d4c26a208be85ab5cb77bb0817318fa3b9045643475ad50b0686427f71588ce52f340df9d030a979b12282da36d9cecd02e86962ff21741f","ssdeep":"3072:cHotp2dhjcnP3MuYoRmQPg7mjPrqsA1qHO32raWB8nxDEUNnP2OcsJpJE:3p2d2nkuvzY8pW1EUNP1csJ4","tlshash":"6fe312d40dbb45e0fa24d204633a4e0e0017bdedde6169b9cf34fb8c9314798ea5ba25","first_seen":"2023-04-05T04:43:09Z","last_seen":"2026-04-27T15:26:30.634Z","times_seen":2113,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/fonts/f1/Formula1-Regular.woff2","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:14.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /fonts/f1/Formula1-Regular.woff2 HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wac.rip/css/style.css?v=0.13\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 24768\r\nserver: cloudflare\r\nlast-modified: Sat, 11 Jan 2025 09:59:17 GMT\r\nvary: Accept-Encoding\r\netag: \"678240f5-60c0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 50558\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QaqwBxh%2FEhggu6NKxlwLmXv1QdsRLNO%2FRkuf6ry%2B%2F7XtPbyd4%2BvpyriUrlel%2B%2B6dPGgtBI%2FTEIhM8Tcqk4ZNHRHX9p8WYic%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e95890832fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24768,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 24768, version 1.0","md5":"d5b223a57a15b33a922d08676a2d9f72","sha1":"3aebfeada618fefce109e3d05a3b0fbc93b23558","sha256":"8d6ab80bcbbb6ae3f4afb09428da3387287b146214706dee008ab90f3b2ca733","sha512":"ea5f25d3082a611b24edd78f1f061977aca2d52995023e1f7ad7b7df7e9d0f8c67fdb1d5467613fb6c3b6735d1bc7ab998323f7ce452bbd0f78ea970dcf72a44","ssdeep":"768:G89EvJSGtTy4Xl1oXUKNEVO8PRwsKq1omrShL:GTvJDFXl1odNuOPsRrA","tlshash":"24b2e0e05d952ca41a52ad743b69c66f19ca2f78332d3b1f9171bf41f8cfe8801209d1","first_seen":"2025-02-26T21:31:57.237171Z","last_seen":"2025-12-21T15:47:16.044393Z","times_seen":15,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/fonts/goth/Gotham-Bold.woff2","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:14.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /fonts/goth/Gotham-Bold.woff2 HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wac.rip/css/style.css?v=0.13\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 30124\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 17:26:38 GMT\r\nvary: Accept-Encoding\r\netag: \"677c124e-75ac\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 50558\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1g2Klls6ZwvKpfXx3N8FZyJPv9Nb0NQkn8epi3467mQVcjATXK%2FHO%2Fy9ZDYpfQdbt7yJJoqYCJq9duAdsfg8LmIs1kHylNY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e95890a32fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30124,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 30124, version 1.0","md5":"c070aec7f7a5daf99f2df32c9288d4ec","sha1":"ad4b035eca44bd01ffe92590c8ced5999d5be321","sha256":"d6f112b6888bf69c3cb82eb2efd527c5777e76cee3f066df850f664964a4a97b","sha512":"fb0fbb190c44e7e0225cb3628a46b45e71e8d2561e196354cd14c09ff6b6a4afd2290a9e6a33839cbf7979e5a246f9b15caff557d65ab1db992b0673d236fcbd","ssdeep":"384:MGMiqGmvoOyRvsP7ttFAbQuGHxUQ7yf5oWUUIx3EqV5BoKzwL/hHaJyBh7Bt:8om777oACQ7Ge/U63Ea5BKH+Y7/","tlshash":"22d2e0839468d864afd8c6ea608744f76271a381ec903794b6b11cfa721a13f651ff20","first_seen":"2023-11-29T21:47:27Z","last_seen":"2026-04-16T09:19:47.18398Z","times_seen":131,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/media/svg/Shortcut-Icon-WAC.svg","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:14.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /media/svg/Shortcut-Icon-WAC.svg HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wac.rip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:14 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 17 Jan 2025 23:17:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"678ae513-325e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 54135\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rYndbuzlnnKCxWf3n%2B784C9SSv%2BPqke%2BnPIyUrWM50eVDrhSL9P9yEj5aztrsm5xgOLJqzyxp4Qnn8wDfAbKOuERS6PbdNs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e95a96b32fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12894,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0f00da2118d2ce7c47de074e49f559cb","sha1":"7e53afbf38a727acdc50ffe43434e71c6a1b4691","sha256":"a178e9347e6364674254749746b89815ce33fb3fcba64050861226cdd724732a","sha512":"62e8e7e99e0548e805f6855c5fb02cf2833c14b1149c1c2874e5458cfc3e61a704613374aba8f15168c46f5bf4b01891f31e81f077de46e240a5d93570faf389","ssdeep":"384:X+NyLMnPjyQw+NyLMnPjyQj8NyLMnPjyQJ/NyLMnPjyQT4UWlMvPlsYbK:XdLMPuQwdLMPuQjPLMPuQJQLMPuQTLWR","tlshash":"2642636167a804e5210f91bc8db38d52b426299303a038477fec4b558fb69d57abdfcc","first_seen":"2025-02-26T21:31:57.297634Z","last_seen":"2025-12-21T15:47:16.032795Z","times_seen":15,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/media/img/home/Motorsport.webp","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:13.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /media/img/home/Motorsport.webp HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wac.rip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24830\r\nserver: cloudflare\r\nlast-modified: Sun, 05 Jan 2025 10:37:12 GMT\r\nvary: Accept-Encoding\r\netag: \"677a60d8-60fe\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 54119\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=phRdgjPb36WPtxiQU0nQ51W10gA%2B9m52KyesA%2BFchlTLnmWafyIZIeDUItLgD4zQmkr5kzz4tA4g3oR00ERtI%2BPpItOqpvE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e91ccfe32fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24830,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"14e9d0825131bb2cc580ad521935807f","sha1":"4550ddd40db1bcb60f17da4d2f202226bd9895c9","sha256":"9ddea86fcf890f4d20ad60195e80df672d7fb8364a32c13461310c6df9ccf197","sha512":"74f72528b79ca0d008f88af8170e99ad8644bfeefa090601b4da0561645291ba6063c5612b69a7bfe5e39041ef7a6050b3e93a5f2a8e5e598f828d7048791a11","ssdeep":"768:PRi6OvPwGJ3fb2tyXWrK3Gh4D3qaEi6FDGhjlhWZ:PUbrJ3TuprK3GSD3qapAGZWZ","tlshash":"03b2f1ec161ba0f129883c455cd5b91d8e8722ff3963d4b7178d839b29b9ba2026531e","first_seen":"2025-10-11T10:25:11.611186Z","last_seen":"2025-12-21T15:47:16.052484Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/media/svg/series-title/f1.svg","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:13.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /media/svg/series-title/f1.svg HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wac.rip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 05 Jan 2025 10:37:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677a60d8-15eb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 50556\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iwWVv9QNEUbqs%2BAngLxHPHDY7c5Ahg68Eh4oHIiEjIvYCON8nAev4O46bw7jRsq72kLYmDDsCX2%2F1Dyy5UIj%2BfL6VTAk%2FH4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e91dd1332fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5611,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b963077332e2b698a344fc75756931e8","sha1":"e21ac958d9c7af93dab13e45381c56a61e5a2131","sha256":"b15825b255a45df0b3fc130902a6da980ecf47bb7ffcc0902220f9c0d4cc6077","sha512":"988ad12690a6adda932787a91504ba9df115e5c0cfd3198ee5ea89c36dc364888f337ff523ce4db8c3af3ffed2f6f88d0067746aa343a61312552e2d26c4a8f8","ssdeep":"96:WVjb3VLbU4+pRke017wmrVRkHoOTm7Iq95kT0DsVNLn2ryvOW1+m:C335ILnkh1vVKm795qNL2r+","tlshash":"43c1e84ba39d83ec722a56b49c7618467a0d3853a044fc94f5595c01ef72def6036eb8","first_seen":"2025-10-17T17:54:50.376896Z","last_seen":"2025-11-30T16:11:43.998194Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/js/font-size.js","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:13.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /js/font-size.js HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wac.rip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:13 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Apr 2025 12:39:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa5ef8-422\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 49836\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=swfLTlAhbvACBgskD85%2BO8B6RsBop9G253sVTv3NXPN8rPuD3Er49OyNO%2F35F9RkcAdQF4%2BlmDf9fGN25xDTHuqIk2L8qV0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e91bca732fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1058,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"062034538420e39b0d9aabad3ed05d04","sha1":"e0e8092fd7d009ea0404442ca25fc79173b68c86","sha256":"033c4022981da187a9cbbd2e6561d83fade22b087c0355e35fd1f16fec8e0acd","sha512":"e8e6bf9fa08462a29223981cc8a4d40203b28beaffbd6286ca5a33d7de62023ff52542221edf13838fdb30607ddeeb643be8553f80fdc48e09f1b8f94149e5cb","ssdeep":"","tlshash":"b211bd3801305524583953797353d385e9bb507fb023460fb58dd6a92fd042a9932f99","first_seen":"2025-02-26T21:31:57.334298Z","last_seen":"2025-12-21T15:47:16.047841Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/js/auto-load-feed.js","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:13.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /js/auto-load-feed.js HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wac.rip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:13 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 05 Jan 2025 10:37:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677a60d8-2a4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 49836\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cvME96daKTMWiO51Or2eZ2u7Yxd83cMPOy89Z0%2BNb35pXCxt1gOZEgjx8zUaAC%2BlORNlRn46ihKi4W0ehVzwFLmt8MJ63bE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e91bcad32fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":676,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"7d881288cd19ac94e438c2d4d43bcf14","sha1":"7e75f2f4efdb7fc40d3cd2b7626605b710e68082","sha256":"440e1d655db65e700853acd9502eaac068a6d340030aa196743f229520113eb8","sha512":"dac4b99ba4023f13683ef63cb2a7c6b2d502da60559ea6f4f12761dfd461140cc9daac0f6c74c989ac17866f9dde77a6905dbe19ea0bab5fde803c929c2188e3","ssdeep":"","tlshash":"11019e7a280193320d372ad9aa5f4284fc11103f33036138771dc7c06fb8895495dece","first_seen":"2025-02-26T21:31:57.233135Z","last_seen":"2025-12-21T15:47:16.023583Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/media/svg/series-title/premier.svg","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:13.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /media/svg/series-title/premier.svg HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wac.rip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 05 Jan 2025 10:37:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677a60d8-f1d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 54069\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ILY2WFCWGi0nR%2BcxJtF5CNnnK4JOqle5XQUeV18uZ917M7ekM6l6HUH26QCnZ%2BPKRjeX30ePF5gT6A2qz59Y8W11GUkENBg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e91dd1532fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3869,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ccc292bebfea4f24fc002680169fc13b","sha1":"537baf65adf66b49036eecf4bba2c02c6e4c3e49","sha256":"4741f786b18820ce0efbef13f1aa431ceae0c0e99a9203da6ba0e1d61bf95b35","sha512":"15941b0a24bbb38016f6e6168a0c1b5e63e3c671a25939ccb693a4e2fee5dc363ce54afd8464dfc5ec0023cc1a096be43605e2be6f0ba1a4bb023013df00283a","ssdeep":"","tlshash":"8a81650d4b8ec050e07f9bb0bc370c877629786a7540b8865da80d59a8b2ddf3769f65","first_seen":"2025-10-19T15:33:13.090154Z","last_seen":"2025-12-21T15:47:16.054396Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/js/home-page-new.js","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:13.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /js/home-page-new.js HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wac.rip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:13 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Jun 2025 15:15:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68499d7a-1622\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 54119\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fnxTyXlRlsqmhk9lwztxtdx85cL%2BhPcq1g2S748zdywJ9%2FBzvJhVrjnNUiJLBcPC6HW3GC%2Fv5WdqIT5knd3ohdLDcRkq2fI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e91ccea32fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5666,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"11a2e3d9a3276bf304157b87a4d5a1e2","sha1":"3b895116a94f9ed301051b866ae564392895aaaf","sha256":"85b8ee95855600bd69004f1fb10f75bce698aee052d44bef429914fc427bc8f0","sha512":"1fefb277a83f67cd3085ad1946f95ca9cdecfba0e82091f8bf2d6a1ef218c971fb504460e25651a0ec5c99d9423c356cdf667969a7b783c3e28da1420032865f","ssdeep":"48:nkamSsBwWE6cnfjTLRNQ961YIn30H093XomEjcUkzPxTlYDnYaneZtWxKyrCR2EA:nmiic/eDU94Ne2Gi84hgalCjgZ71l","tlshash":"b9c1fda59232353545b3837edb4a622de735413b3602915c3eecca9c1fb1a688761fec","first_seen":"2025-10-11T10:25:11.617201Z","last_seen":"2025-12-21T15:47:16.028487Z","times_seen":9,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/js/script.js?v=0.13%20type=","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:13.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /js/script.js?v=0.13%20type= HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wac.rip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:13 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 14 Jun 2025 09:17:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"684d3e39-8b1c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 49837\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tflkvCt5bGcODSGACPmZUeGmxha0PRx1eC3jUjvJqRp1H87grPv5Ad9xVws1HCV%2FD2WKPTnFsp%2F2OEzn2p9hpOh4IakyNw0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e91bc9e32fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35612,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"13f078a1f49053cdc91f88ba70ef82f0","sha1":"e9dff6ecd53697592cc89d204fe26cf48cb12c6f","sha256":"bda12006b182f9f5974600f466b441a3d29873fbbb429e23e3cd2c83f1038507","sha512":"6df62e39cfd8c019680432ed92624f8c26a2f045f67112f029e4338b738032ab42cd8719ef4151c49c5a6d17e2ae9a3515e672d3dd05325c9141801f5be28b8c","ssdeep":"768:Q2oPxcvcDcrc5ppB0vzItGlcKczc2cu1QXDzAZAfZ3Z20ZTN:QvPLppB0vzHY1QXDzzN","tlshash":"23f23fa8453622308a7353bfa7965b09fa75503f620292893aedc59c1ff2c5443b2dfd","first_seen":"2025-07-14T07:36:18.959248Z","last_seen":"2025-12-21T15:47:16.047001Z","times_seen":14,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/js/waclogo.js","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:13.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /js/waclogo.js HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wac.rip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:13 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Mar 2025 13:18:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e2ad29-4679\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 49836\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fhxIFwZbMh1J1yMHfZkdWG1wwmRAm2eRNRTa%2BqVFytqCasslEg%2BRWpnMOYQt%2Fuo%2Bx0fvnHxtPOI4yNkLH1der9qtNttCJ1Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e91bcca32fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18041,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"5ae338630fd974b0c0db2402f7ddfb79","sha1":"84aebb82d9c2c4fbd3c10888bd70fed7d0de3d89","sha256":"9e261cabb97ea4ce0b1bdb64a1143572e8ae958b1662ba30dd4071f63b3d19a3","sha512":"b5c904269080f4345e6f0a9f754a588428d0210b3618bce53984de4495d3589f9cbefac2bca23fd63f363f8cbd74760ce167df9cb376856bd33ebf865c62c7ed","ssdeep":"384:wMt3UfygTO2TH5nqi95r3AIG9rZPzDXgHz6:wM+qi9h3oQe","tlshash":"8c821d2a63a610728777637b4b9f5a4ee731403b6642c1093d2d83441ffae9825a4ffd","first_seen":"2025-07-14T07:36:19.010065Z","last_seen":"2025-12-21T15:47:16.051512Z","times_seen":14,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/media/img/pepeclown-wac-anim.webp","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:13.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /media/img/pepeclown-wac-anim.webp HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wac.rip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40808\r\nserver: cloudflare\r\nlast-modified: Sat, 11 Jan 2025 13:19:11 GMT\r\nvary: Accept-Encoding\r\netag: \"67826fcf-9f68\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 50558\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K1jdOwlO0YGWpaLTOk0%2F5ENxqN6JHjcmH48jpxI5UxuggRl05vd8JLy%2FJU66mngL%2FAt36PqB%2BC1Quq1jqSrTV%2Bcpud7x%2FE4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e91cce932fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40808,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a51b5fdacf14884d3e678d337cb6848b","sha1":"025b23f4a2872acae0299e5b317e38b29e2f8b4c","sha256":"d337b13d9ec6adbde4ca62e861b3c16b90e3b8d36e25266031bdf39bfca18dba","sha512":"9948b5b4c14e579f68fef85ae9a1fef9e45edc43226cf3ca050d9dadf83e585ae18de829ec15ce78ea3d0b9a5265eab910d7a512b03f17af4edc2c053a2b0b27","ssdeep":"768:Tgts3GQtGN3rWMCHpNY+u7twmedI4TFoNZJGdAPiitiUxMi1cwV5LzdkoG8gwKO:UtKGtRrWMGY/+meScSdoyLVDy8go","tlshash":"5b03f1246bf80d14c3375af5c08ad420ee270897d3b4eb67fd45a299a60453dd188efb","first_seen":"2025-02-26T21:31:57.224698Z","last_seen":"2025-12-21T15:47:16.027479Z","times_seen":15,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/media/svg/series-title/seriea.svg","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:13.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /media/svg/series-title/seriea.svg HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wac.rip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 05 Jan 2025 10:37:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677a60d8-c64\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 54069\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pI6RROXWBQvZtj8kVzXhkqjB4xQ4ta1m8BpacdTmaz0l1L0%2BUUWCA9ZbAb1CfgSSN4TnwVSeQ4IIiRU4nyXERO90GSA7QRA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e91dd1a32fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3172,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c685cd79097e00cfe5431efba9699f1d","sha1":"0a410b21a72650cdfd9a0e4ccfeb817b615374b6","sha256":"54ac6e9be12193dfdb1bb71b38ca0f4d5a638c55eda904e35704f94980eee5ca","sha512":"43c127f2ca6a811896e3061085500e060ea1ed1588af57affc579843ab75ee82f6499a152792643789e4e47448bc0ce084c27e260897f5f8c732f250423715eb","ssdeep":"","tlshash":"9161010e8b98462c1f6a17a0d1744006e76cc9e7d5c0f9c47e8ba121ebbade25c84b7d","first_seen":"2025-11-23T16:48:26.703125Z","last_seen":"2025-12-07T11:15:50.611417Z","times_seen":3,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/media/svg/Head-Foot-fade.png","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:14.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /media/svg/Head-Foot-fade.png HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wac.rip/css/style.css?v=0.13\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:14 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 01 May 2025 14:16:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68138250-25537\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 49836\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A9p1wnztIvp8b%2BJ6fQSiappbhcEpPF4tq2vtrcGKyZBFGYtsZOIf6xlNrzG%2F9p4Ko5b7%2BIEvBjajSKZBZIu771ekkb3nxuc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e95383d32fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152887,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3840 x 200, 16-bit/color RGBA, non-interlaced","md5":"ee9cf3c940ec66bd6e55508d1272606c","sha1":"09e7fca8f97328867c5a22bc21afcf40f3077c39","sha256":"d8a08800ec1185fd23dab495fdd77bdecc7d68d52d35544af639d1361047f340","sha512":"e82fe6955c4249ae452cacd5e1e7d0f051e2c47406e91c49216de23973471224909e6ff3276515e7c745771f044cc8a2d91b8e5095ead060797b2f90d7e51771","ssdeep":"3072:y1I64bZVRBBspfkKLsmZSc2PEFtRIUQ9N15OPM6rAA3:yn4bZVLI5LsmZSeFtKFij","tlshash":"84e312c5a0a70cdfefe130746c397892155b537bf8840bf42120ee186a2e987d559bbb","first_seen":"2025-07-14T07:36:18.953846Z","last_seen":"2025-12-21T15:47:16.021759Z","times_seen":14,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/fonts/goth/Gotham-Medium.woff2","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:14.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /fonts/goth/Gotham-Medium.woff2 HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wac.rip/css/style.css?v=0.13\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 32296\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 17:26:37 GMT\r\nvary: Accept-Encoding\r\netag: \"677c124d-7e28\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 50558\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UD%2FXCEFG39maBV0uUTPTqrEMzANt%2Figf2ioBdcIgS7I168PVOkakfIHwZ6r%2Fwa8tqOj89OKVBxOQrFrisoX4O8hracYvUwE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e95588632fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32296,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 32296, version 1.0","md5":"77d2f5c849caf69a057994776017d8ce","sha1":"3f890dc91a3f7d23e3c4ecfc4c854ba4f7d462e9","sha256":"9afaafaa02923821bbbc7b445afe67ce68095efa6b98b8052509e1bd10ba7856","sha512":"4d46574175e1cdd054773ac52e3a9916e53348695508372983dcfb1a6cdee1b5251a38b5012387db72fbe92703c055ec376162ee4a6a633a663b805c1c1afdde","ssdeep":"768:YCSN/zWFqGNyj5SFT2QXRFMBtKXC7cXWQ1D/GPxMykzB:rS8qntSFT2NDsGQBsc","tlshash":"f6e2f1539fbc8137ea50d8bb7ba6f48cddfb48b882593a5fd067488c1a047d544e026a","first_seen":"2023-11-29T21:47:27Z","last_seen":"2026-04-26T03:19:26.437487Z","times_seen":134,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/js/autocolor.js","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:13.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /js/autocolor.js HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wac.rip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:13 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 07:56:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677b8cc3-11c4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 49836\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s0Kl3QwrX1L1RTarwWlLk05lYWzwxCeMoIGSfgSyhbfQl%2ByVXEFM1wA5WC67mUFs%2FOC6fDbBatWtddzP%2FyT9oGXi9SEMHd0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e91bcb332fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4548,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"99e55c14a9cc2c6d4faeab274a7a41cf","sha1":"58ec1f6ae32744a3ad705070ce4999dce8c2a887","sha256":"08b91d0e167a137609fbeedbb1af15861bbab2d7e457b41203f5eee336bd0268","sha512":"787193799b32f57619c9bc1516a081d29c1132c8b660013a3ba269c55ffa6e2a46d6ff2aff4e3129d369dff2c7bc0cc8020689c855d40c154ca368551147f9cb","ssdeep":"48:15fa7muSMwshXUSZr0H7fWZVmWqSFQNKBOrOOwmUks6O7f5Fs6MyHs6/i6VUtOur:88yAW3iQH5XyTtOuQEL+WGT5c5F","tlshash":"3091dd75907095358833237fab9b8a4dfb313033aa1292193fed55a4cfb16e80651fda","first_seen":"2025-02-26T21:31:57.348306Z","last_seen":"2025-12-21T15:47:16.038546Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wac.rip/js/auto-feed-id.js","fqdn":"wac.rip","domain":"wac.rip","tld":"rip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wac.rip/","date":"2025-11-30T16:11:13.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wac.rip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 00:12:02 GMT","end":"Sat, 14 Feb 2026 01:09:42 GMT"},"fingerprint":{"sha1":"30:37:2E:4F:9B:E7:AC:D1:15:51:21:17:D2:1F:0C:3F:3C:8E:C1:E2","sha256":"19:87:4A:90:45:6B:F8:73:3C:3A:AE:F3:8E:3A:DC:AC:DB:38:7A:8F:2D:4B:CC:49:7E:A3:AA:BD:09:FE:27:E1"}}},"request":{"raw":"GET /js/auto-feed-id.js HTTP/1.1\r\nHost: wac.rip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wac.rip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 16:11:13 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 05 Jan 2025 10:37:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677a60d8-2ac\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 49836\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q6Iq03kpfQTIwK3IiwjmYGVPy7U72%2B7uVw12%2FclEV8zchczeC3eNQKz5mTYF61yT8tRXdg29xOyBEmuS8DULu5QxblUpQdw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6b9e91bcbb32fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":684,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"59b25d5bb4027a5e1dafc7100858839f","sha1":"4daad74e5710531ff8e4d50a0b6665e68106a906","sha256":"102a621c2025b8028e940f9d890113f40e6b92deb993a859f379e39aa64b8311","sha512":"4535a3a804df9691a5a2623ee5053f854e5a0d48a579f329f4471f41eb0018a60614b2f7a51fed947c58ce745acc475ca5bc392516adbd7148506140f7a07abc","ssdeep":"","tlshash":"4a01228c04bc24200e33b7bdea894b05d5bf60732010511a3c9cd8cd3ff262a2ab0f98","first_seen":"2025-02-26T21:31:57.335363Z","last_seen":"2025-12-21T15:47:16.04866Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-30","alert":"Sinkholed","trigger":"wac.rip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}