{"report_id":"70c5342c-109c-4755-b80d-fe13ed66b604","version":0,"status":"done","tags":[],"date":"2026-08-26T11:02:07Z","url":{"schema":"http","addr":"acrossut.to/","fqdn":"acrossut.to","domain":"acrossut.to","tld":"to"},"ip":{"addr":"162.0.217.206","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"acrossut.to/","fqdn":"acrossut.to","domain":"acrossut.to","tld":"to"},"title":"Across Utility Bridge","dom":{"size":58192,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1655)","md5":"c4fb5348a4915a584a6874714f923ad8","sha1":"fd796f5dd50317c3645e7377abc80bd50ed3039d","sha256":"09378ac47d7d437a26c03bafd2b702b371cb3f8329687c37824fd0dd5fec7c12","sha512":"ad85222703d87167261b4cdfcba86b7551048291bb2094b8bf21a711582199fab453eef87f937f0ad93ae1cd8f30b1cc4f71525dd5ae7ed8f6030c64b2fd0ce5","ssdeep":"384:zUoJuuu0CSdFN3KcS9ZFT4/RjN5aqvjwaFmOSkAA/YfN9/r:rJuuu0C6j3KcS9XOZOkAA/YfN9j","tlshash":"cd43762060f42136009791d67a692f4bafa5ea0bc95b431c76fd8bd01fdbe92dc2355c","dom_hash":"domhashd4138ad2fa172e99b871ab214fb61d05","first_seen":"2026-08-26T11:02:12.535765Z","last_seen":"2026-08-26T11:05:21.169924Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"acrossut.to/","fqdn":"acrossut.to","domain":"acrossut.to","tld":"to"},"ip":{"addr":"162.0.217.206","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-30T11:02:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"acrossut.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"acrossut.to","ip":{"addr":"162.0.217.206","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-26T11:02:07.879835Z","last_seen":"2026-08-26T11:02:07.879835Z","alert_count":20,"request_count":20,"received_data":1018778,"sent_data":10006,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.201.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-23T22:23:59.870946Z","alert_count":0,"request_count":2,"received_data":87343,"sent_data":1177,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-23T22:20:52.902616Z","alert_count":0,"request_count":6,"received_data":245292,"sent_data":3316,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"acrossut.to/assets/web/assets/cookies-alert-plugin/cookies-alert-core.js","fqdn":"acrossut.to","domain":"acrossut.to","tld":"to"},"ip":{"addr":"162.0.217.206","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0afee98a5886b853fa9ea0f86cf2124a","sha1":"951880d089a129f9d1aeeca9ad0f6a5c0ee9cde7","sha256":"60494ec8b30c0cb002f0a7730cd5a2787ffa3b280c8eb55321943521699c7d82","sha512":"b3e969872d7cbf003b1bb29811c4f0ba8f6348d67dd46ed7af7334b7fda51d875661b637a4ca45c3c0329e79a704ce50b6ced53584de2df475962258ec48dbab","ssdeep":"192:0CsLFwjFkdQ1OOuky3dT2oAmMFI7OXSXOew/bk46vyJgo5ZP7xONT6CKKxMBVT:mk0dV7OiXOzeyJ/H66CfxMPT","tlshash":"3152f890b5f5a939425b309ea13fd399bf7208f1d844787850bcdce8ab99d840837b26","size":13295,"data":"","first_seen":"2023-10-15T09:26:47Z","last_seen":"2026-08-26T11:05:21.178943Z","times_seen":364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acrossut.to/assets/web/assets/cookies-alert-plugin/cookies-alert-script.js","fqdn":"acrossut.to","domain":"acrossut.to","tld":"to"},"ip":{"addr":"162.0.217.206","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"77f640a80229eb0e10d79281b8cee69f","sha1":"cd5a64a2c558fe55971e7c1d88832c77c766df1e","sha256":"f8571f020961f9e621a743b9e8f48ac0795d4048125dc4e576e39f437c9de5c5","sha512":"bdaf0e249f8771085b9c7d8b4b27e17d272daf0696116b011dbcf5042d0f3e16ab80b7353f84a1371aef13549ffb221157c6393475fb44fba061502ebd4574f4","ssdeep":"192:JgBEZAj8jgkIW79mkD3ssvUxtHcwHYatjr3dpjbAtr0rjL4FjvIJp0bBrE93rMsT:0AlgkIW79mkD3ssvUxOwjtjr3XnAtr03","tlshash":"e932a7ae7564713a8a173af0403f114a5a37b1b9a4085868b05decf19b65cdc193bf3e","size":11377,"data":"","first_seen":"2026-01-16T01:12:42.37465Z","last_seen":"2026-08-26T11:05:21.172513Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acrossut.to/","fqdn":"acrossut.to","domain":"acrossut.to","tld":"to"},"ip":{"addr":"162.0.217.206","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"The Netherlands","country_code":"NL"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-08-26T15:45:09.974382Z","times_seen":196006,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"acrossut.to/assets/web/assets/sources-icons2/sources2.css","fqdn":"acrossut.to","domain":"acrossut.to","tld":"to"},"ip":{"addr":"162.0.217.206","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:38.742Z","timestamp":1787742098742,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acrossut.to","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Sun, 23 Aug 2026 22:31:59 GMT","end":"Tue, 09 Mar 2027 22:39:33 GMT"},"fingerprint":{"sha1":"54:BD:F4:C7:30:AD:1C:9B:75:47:D8:93:D2:B3:F4:E8:9F:CD:69:7D","sha256":"7B:53:80:1E:29:54:CD:5D:02:32:AB:4D:54:D6:80:16:A3:95:7F:43:09:C1:E8:21:3E:AC:AF:E8:1B:C1:A8:A2"}}},"request":{"raw":"GET /assets/web/assets/sources-icons2/sources2.css HTTP/1.1\r\nHost: acrossut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acrossut.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 02 Sep 2026 11:01:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 Jun 2026 19:41:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1432\r\ndate: Wed, 26 Aug 2026 11:01:38 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":8760,"size_decoded":1792,"mime_type":"text/css","magic":"ASCII text","md5":"8816827920250cac7cec5807f7a36ece","sha1":"55b08544f1d6ba81f114b73f5df71f98d2e6c15d","sha256":"af781231bdcea4c3048c9b843956cac1c4cbab6a13e50b6cecee1fa962e6c6bd","sha512":"509eac77d9821f5e14ad6dcd4efb130916e5b73f41a88ea03d1e699c4e7b90fe16c38774be48ce21962c21a77ca11d7195e94dce05c804c88fdbbb2c32929199","ssdeep":"96:4MaUzNYOrhlYVuOrMYGRiCqSy9VYfcPYf6IvCMYgi5tPk3uLPKrVQT/59:YwNDYV4YXCyzPVSdYgGtPkSPYVQL59","tlshash":"1102e3d4f8be184013c2d8d523462ae0bf1d5326c64ebd59fa72798cb9c2ab4c5912fc","first_seen":"2025-10-28T23:22:40.944879Z","last_seen":"2026-08-26T11:05:21.171473Z","times_seen":173,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"acrossut.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acrossut.to/assets/popup-overlay-plugin/style.css","fqdn":"acrossut.to","domain":"acrossut.to","tld":"to"},"ip":{"addr":"162.0.217.206","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:38.746Z","timestamp":1787742098746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acrossut.to","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Sun, 23 Aug 2026 22:31:59 GMT","end":"Tue, 09 Mar 2027 22:39:33 GMT"},"fingerprint":{"sha1":"54:BD:F4:C7:30:AD:1C:9B:75:47:D8:93:D2:B3:F4:E8:9F:CD:69:7D","sha256":"7B:53:80:1E:29:54:CD:5D:02:32:AB:4D:54:D6:80:16:A3:95:7F:43:09:C1:E8:21:3E:AC:AF:E8:1B:C1:A8:A2"}}},"request":{"raw":"GET /assets/popup-overlay-plugin/style.css HTTP/1.1\r\nHost: acrossut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acrossut.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 02 Sep 2026 11:01:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 Jun 2026 19:41:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 70\r\ndate: Wed, 26 Aug 2026 11:01:38 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":70,"size_decoded":383,"mime_type":"text/css","magic":"ASCII text","md5":"71638b172ac533e8c815a345431e8ac6","sha1":"b42c09faebc759d3013f0d038890b1180be542f5","sha256":"f94e3f5ba208e4ee6275fb60ad700da027b936fc41cc5035ceae8d5831d2bb9d","sha512":"e4d123082c775f0601f07a03a980e52c65eac6694b03475f0731236ec6ca301eeb6bbadee9e2a6cba8f8480bf18147da94fddffa1aacbe2396fc0b30e31ff888","ssdeep":"","tlshash":"e9a0220888e203000e8c03232cbb0f3b303f002388882b3c0c30238003830028c00a00","first_seen":"2023-04-12T12:15:23Z","last_seen":"2026-08-26T11:05:21.187521Z","times_seen":417,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"acrossut.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acrossut.to/assets/socicon/css/styles.css","fqdn":"acrossut.to","domain":"acrossut.to","tld":"to"},"ip":{"addr":"162.0.217.206","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:38.748Z","timestamp":1787742098748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acrossut.to","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Sun, 23 Aug 2026 22:31:59 GMT","end":"Tue, 09 Mar 2027 22:39:33 GMT"},"fingerprint":{"sha1":"54:BD:F4:C7:30:AD:1C:9B:75:47:D8:93:D2:B3:F4:E8:9F:CD:69:7D","sha256":"7B:53:80:1E:29:54:CD:5D:02:32:AB:4D:54:D6:80:16:A3:95:7F:43:09:C1:E8:21:3E:AC:AF:E8:1B:C1:A8:A2"}}},"request":{"raw":"GET /assets/socicon/css/styles.css HTTP/1.1\r\nHost: acrossut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acrossut.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 02 Sep 2026 11:01:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 Jun 2026 19:41:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2748\r\ndate: Wed, 26 Aug 2026 11:01:38 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15625,"size_decoded":3108,"mime_type":"text/css","magic":"ASCII text","md5":"22e001ebc8811b54879a951fe421e98d","sha1":"8196d1d2d950fdd88e8d2692c4cacba369c329fa","sha256":"400732041d13033c881315a6d9d34884de9f35f7bb4b24e7f612644574fe439c","sha512":"afeac49958910e7c76c8b5ba0c01fb6ac6a17ba1e351b25250143411b3f32ea83e096d8ecae80d963013fe3a822533df31a53d0398aa2c412687c49be059c529","ssdeep":"192:PKQY8u/naYw9SpQTtT9l0SDd1G1T7bIxVwEnh5Rw2X2UQLI96+1k25j:TSaYw9Sp+xL0DUZXn","tlshash":"6a62c6e495bd8c805b00e4d12362a6a07b9d925a8f8efd29d2b37dcc75f2290d5872dc","first_seen":"2025-05-13T15:14:45.031435Z","last_seen":"2026-08-26T11:05:21.172034Z","times_seen":301,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"acrossut.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acrossut.to/assets/theme/css/style.css","fqdn":"acrossut.to","domain":"acrossut.to","tld":"to"},"ip":{"addr":"162.0.217.206","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:38.752Z","timestamp":1787742098752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acrossut.to","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Sun, 23 Aug 2026 22:31:59 GMT","end":"Tue, 09 Mar 2027 22:39:33 GMT"},"fingerprint":{"sha1":"54:BD:F4:C7:30:AD:1C:9B:75:47:D8:93:D2:B3:F4:E8:9F:CD:69:7D","sha256":"7B:53:80:1E:29:54:CD:5D:02:32:AB:4D:54:D6:80:16:A3:95:7F:43:09:C1:E8:21:3E:AC:AF:E8:1B:C1:A8:A2"}}},"request":{"raw":"GET /assets/theme/css/style.css HTTP/1.1\r\nHost: acrossut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acrossut.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 02 Sep 2026 11:01:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 Jun 2026 19:41:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3406\r\ndate: Wed, 26 Aug 2026 11:01:38 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":14946,"size_decoded":3766,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"4c7262e55fe573b4bffb762dcdcad7e3","sha1":"7e321b66e0f80909b7a44b220bf9dc29bbc1699a","sha256":"5050be85b8dd51a3a2c799349c7721907989f1d46b802fcf1332c597d9f2c489","sha512":"04e578b40eb8ff2e981f3a27409490caf7495e2b851d23d546d1eaf9da4f758dd92bfda748a745ae8de96f5e33df880203ba25fcf5aaf430c4938b0ccf00f046","ssdeep":"192:wEaE2UK9sPl2YL2q1ZGP3+ddZDKBMyM1pf94oWdbxxEJ2fuIMQOGqWj6Gq:wEaaKIjJONBapFkx+uj6Gq","tlshash":"f362635666f11e00301b985825dbb7a4773cd4429a0fcebdaae3345cdf8a2d501b2f9e","first_seen":"2026-02-01T05:41:11.508135Z","last_seen":"2026-08-26T11:05:21.175253Z","times_seen":3,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"acrossut.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Inter:100,200,300,400,500,600,700,800,900,100i,200i,300i,400i,500i,600i,700i,800i,900i\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.201.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:38.754Z","timestamp":1787742098754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:45 GMT","end":"Wed, 28 Oct 2026 20:43:44 GMT"},"fingerprint":{"sha1":"1E:50:A8:26:86:57:06:AF:03:D0:36:74:91:62:52:AE:87:D0:50:0C","sha256":"18:6F:33:F9:74:07:4C:C9:5D:94:38:03:B5:86:40:07:10:6F:E2:91:F9:CC:9C:DC:92:11:AA:41:F7:ED:5A:8E"}}},"request":{"raw":"GET /css?family=Inter:100,200,300,400,500,600,700,800,900,100i,200i,300i,400i,500i,600i,700i,800i,900i\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acrossut.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 26 Aug 2026 11:01:38 GMT\r\ndate: Wed, 26 Aug 2026 11:01:38 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45675,"size_decoded":2066,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a34f88f00b3b275162b90a5f4166b99c","sha1":"30522f09ae080dbc76f3ad81bbdf542fd8303a56","sha256":"e5e5f92d1543747b23c1658baa72b3bc102fc849e87012e0c8ef182510108940","sha512":"331de80f1de982f363d9777510073861e5337db94b413b26cf0d5038d0fbc3ffc97a9fd031e1f7dd665d5a07368175e4baa1eaf973ed48e0d4e73b3e043c5954","ssdeep":"384:v3nf353s3Lg3Y3X3xOfQRUgvM2Rf3yJgaBfofefygBu0DftwHgM7V6f01QgTg6NA:/P1AwsHsSXokZIj","tlshash":"8723cd92002be500aa931dc233cf7e3aadce10a97486d5b95ffd0cc96cdad27526875d","first_seen":"2025-09-11T17:19:41.547996Z","last_seen":"2026-08-26T15:46:54.322701Z","times_seen":4932,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":28,"connect":8,"send":0,"wait":25,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acrossut.to/assets/images/screenshot-6-739x490.jpg","fqdn":"acrossut.to","domain":"acrossut.to","tld":"to"},"ip":{"addr":"162.0.217.206","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:38.776Z","timestamp":1787742098776,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acrossut.to","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Sun, 23 Aug 2026 22:31:59 GMT","end":"Tue, 09 Mar 2027 22:39:33 GMT"},"fingerprint":{"sha1":"54:BD:F4:C7:30:AD:1C:9B:75:47:D8:93:D2:B3:F4:E8:9F:CD:69:7D","sha256":"7B:53:80:1E:29:54:CD:5D:02:32:AB:4D:54:D6:80:16:A3:95:7F:43:09:C1:E8:21:3E:AC:AF:E8:1B:C1:A8:A2"}}},"request":{"raw":"GET /assets/images/screenshot-6-739x490.jpg HTTP/1.1\r\nHost: acrossut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acrossut.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 02 Sep 2026 11:01:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 09 Jun 2026 19:41:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 71174\r\ndate: Wed, 26 Aug 2026 11:01:38 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":71174,"size_decoded":71492,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 739x490, components 3","md5":"43f63964e1cec128dbdfc3a72b8d348c","sha1":"c8699b635d43785729a5c8f7512d9f1f69e69b7c","sha256":"53552676260eb473dddd56f5568043292f30cac1005bb2513e396b4b2831e64d","sha512":"77c9e6c9c10f4a8e66fd24b99479c1b754b9245161e9a7ea8fe9b267ad4cdad49d9e21c1749abcc3b7221f712dddc54d213ff9786267ebdd64bb7f0c174845c0","ssdeep":"1536:MJYN3gwUJ0mSx2O5LqVC3DEw40810RV/MT6e71KW5m8H//qzScka:KgU5NOBq0zEg810EBKWMg/qzScka","tlshash":"07630237e4443ee1960bd611474a4b7af7e0f27d820a634f4374711a08eafe2578af69","first_seen":"2026-08-26T11:02:12.541248Z","last_seen":"2026-08-26T11:05:21.176475Z","times_seen":2,"resource_available":false,"data":null}},"time_used":662,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"acrossut.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:39.330Z","timestamp":1787742099330,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://acrossut.to\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:24 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 1815\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49343,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-26T15:41:09.319073Z","times_seen":267374,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":6,"connect":37,"send":0,"wait":21,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:39.338Z","timestamp":1787742099338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://acrossut.to\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:24 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 1815\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49343,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-26T15:41:09.319073Z","times_seen":267374,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":32,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acrossut.to/assets/dropdown/css/style.css","fqdn":"acrossut.to","domain":"acrossut.to","tld":"to"},"ip":{"addr":"162.0.217.206","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:38.747Z","timestamp":1787742098747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acrossut.to","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Sun, 23 Aug 2026 22:31:59 GMT","end":"Tue, 09 Mar 2027 22:39:33 GMT"},"fingerprint":{"sha1":"54:BD:F4:C7:30:AD:1C:9B:75:47:D8:93:D2:B3:F4:E8:9F:CD:69:7D","sha256":"7B:53:80:1E:29:54:CD:5D:02:32:AB:4D:54:D6:80:16:A3:95:7F:43:09:C1:E8:21:3E:AC:AF:E8:1B:C1:A8:A2"}}},"request":{"raw":"GET /assets/dropdown/css/style.css HTTP/1.1\r\nHost: acrossut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acrossut.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 02 Sep 2026 11:01:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 Jun 2026 19:41:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1519\r\ndate: Wed, 26 Aug 2026 11:01:38 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7945,"size_decoded":1879,"mime_type":"text/css","magic":"ASCII text","md5":"55bf276f73ef7c88f98c8a79e9a42488","sha1":"95644d658c5a473118c08894b9c469491a3a51fc","sha256":"180d8ca6812f97d5ef73a4fbc28c018bc1c3d9af25a174af4452b997b513a7f5","sha512":"f08cff2d231eaa821bb6667fb20c568f1ce06ed9f5ac4878a690fa51482ad034dbd0df2c17efc6898cc890c3d545d006fc2368cd15a5be049d3a94f691fd33f6","ssdeep":"192:4unJepSzgKLsguryPeGhVqyHzNrGyqni+/3AfYK/:q0Ff/1","tlshash":"4af1c296eaf23004205691dc97ff23856f27100bad0acc39b67b274eef871a425b5f59","first_seen":"2023-04-08T05:06:04Z","last_seen":"2026-08-26T11:05:21.188061Z","times_seen":2121,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"acrossut.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acrossut.to/assets/web/assets/cookies-alert-plugin/cookies-alert-core.js","fqdn":"acrossut.to","domain":"acrossut.to","tld":"to"},"ip":{"addr":"162.0.217.206","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:38.759Z","timestamp":1787742098759,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acrossut.to","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Sun, 23 Aug 2026 22:31:59 GMT","end":"Tue, 09 Mar 2027 22:39:33 GMT"},"fingerprint":{"sha1":"54:BD:F4:C7:30:AD:1C:9B:75:47:D8:93:D2:B3:F4:E8:9F:CD:69:7D","sha256":"7B:53:80:1E:29:54:CD:5D:02:32:AB:4D:54:D6:80:16:A3:95:7F:43:09:C1:E8:21:3E:AC:AF:E8:1B:C1:A8:A2"}}},"request":{"raw":"GET /assets/web/assets/cookies-alert-plugin/cookies-alert-core.js HTTP/1.1\r\nHost: acrossut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acrossut.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 09 Jun 2026 19:42:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3992\r\ndate: Wed, 26 Aug 2026 11:01:38 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":13295,"size_decoded":4280,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (669)","md5":"0afee98a5886b853fa9ea0f86cf2124a","sha1":"951880d089a129f9d1aeeca9ad0f6a5c0ee9cde7","sha256":"60494ec8b30c0cb002f0a7730cd5a2787ffa3b280c8eb55321943521699c7d82","sha512":"b3e969872d7cbf003b1bb29811c4f0ba8f6348d67dd46ed7af7334b7fda51d875661b637a4ca45c3c0329e79a704ce50b6ced53584de2df475962258ec48dbab","ssdeep":"192:0CsLFwjFkdQ1OOuky3dT2oAmMFI7OXSXOew/bk46vyJgo5ZP7xONT6CKKxMBVT:mk0dV7OiXOzeyJ/H66CfxMPT","tlshash":"3152f890b5f5a939425b309ea13fd399bf7208f1d844787850bcdce8ab99d840837b26","first_seen":"2023-10-15T09:26:47Z","last_seen":"2026-08-26T11:05:21.178943Z","times_seen":364,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"acrossut.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acrossut.to/assets/images/screenshot-7-739x558.jpg","fqdn":"acrossut.to","domain":"acrossut.to","tld":"to"},"ip":{"addr":"162.0.217.206","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:38.777Z","timestamp":1787742098777,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acrossut.to","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Sun, 23 Aug 2026 22:31:59 GMT","end":"Tue, 09 Mar 2027 22:39:33 GMT"},"fingerprint":{"sha1":"54:BD:F4:C7:30:AD:1C:9B:75:47:D8:93:D2:B3:F4:E8:9F:CD:69:7D","sha256":"7B:53:80:1E:29:54:CD:5D:02:32:AB:4D:54:D6:80:16:A3:95:7F:43:09:C1:E8:21:3E:AC:AF:E8:1B:C1:A8:A2"}}},"request":{"raw":"GET /assets/images/screenshot-7-739x558.jpg HTTP/1.1\r\nHost: acrossut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acrossut.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 02 Sep 2026 11:01:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 09 Jun 2026 19:41:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 83062\r\ndate: Wed, 26 Aug 2026 11:01:38 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":83062,"size_decoded":83380,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 739x558, components 3","md5":"4867e737c8bdfe80d160f929b449d562","sha1":"2da522b095ed87fe97d71e154d23d75995d2787b","sha256":"3c582a28dda38b7b49ac05fc4296784ddfede2b6376dc7376ae0fefa1c62ad17","sha512":"d2b8935e213abaec3feec10774396f0cd50136097292d7ce57fe1e0f03fb365471fb5873de25b3f9371027fe20c590b4a1ca426133b6123f867816e87b1d73bf","ssdeep":"1536:8qIEtErwk/uES/ggpH4fOI+GqjinCyJWOpiopqRbNMT8heOL2+GG04zGLu/k3v1:8ItwlubYgpH/zR41JMopSNc8hRL2zCzg","tlshash":"398312eb433641aa96230104dd0e700da72ab5d191ddf965ff20ffc99ab28cad64cd72","first_seen":"2026-08-26T11:02:12.544835Z","last_seen":"2026-08-26T11:05:21.177075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":686,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"acrossut.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:39.340Z","timestamp":1787742099340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://acrossut.to\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:24 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 1815\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49343,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-26T15:41:09.319073Z","times_seen":267374,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":39,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acrossut.to/assets/images/group206-96x96.png","fqdn":"acrossut.to","domain":"acrossut.to","tld":"to"},"ip":{"addr":"162.0.217.206","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:39.614Z","timestamp":1787742099614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acrossut.to","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Sun, 23 Aug 2026 22:31:59 GMT","end":"Tue, 09 Mar 2027 22:39:33 GMT"},"fingerprint":{"sha1":"54:BD:F4:C7:30:AD:1C:9B:75:47:D8:93:D2:B3:F4:E8:9F:CD:69:7D","sha256":"7B:53:80:1E:29:54:CD:5D:02:32:AB:4D:54:D6:80:16:A3:95:7F:43:09:C1:E8:21:3E:AC:AF:E8:1B:C1:A8:A2"}}},"request":{"raw":"GET /assets/images/group206-96x96.png HTTP/1.1\r\nHost: acrossut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acrossut.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 02 Sep 2026 11:01:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Jun 2026 19:41:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3422\r\ndate: Wed, 26 Aug 2026 11:01:39 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3422,"size_decoded":3738,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"38a5cd510a44d925584b9db32881d046","sha1":"8205fa2c7f424f65357a38d4719e9436d14e9d83","sha256":"13c8de69432c35a960d16828cb11707f8747500c5b0edbf1760a9a84ab2af5bc","sha512":"a5f9d5f0c5f323ded577fad2e027e3b537ea3ab7159493db18b30f5b87a28e1e6ec8612e76bbe32fc7b28429129e1a21e981849e998d9d3dcdff45c4285cd6fd","ssdeep":"","tlshash":"33613a8372080537eca43ff3dc1906dca610ae7472aed4434f40e95cd4b67cb65210aa","first_seen":"2026-08-26T11:02:12.546037Z","last_seen":"2026-08-26T11:05:21.173297Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"acrossut.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acrossut.to/","fqdn":"acrossut.to","domain":"acrossut.to","tld":"to"},"ip":{"addr":"162.0.217.206","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-26T11:01:38.277Z","timestamp":1787742098277,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acrossut.to","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Sun, 23 Aug 2026 22:31:59 GMT","end":"Tue, 09 Mar 2027 22:39:33 GMT"},"fingerprint":{"sha1":"54:BD:F4:C7:30:AD:1C:9B:75:47:D8:93:D2:B3:F4:E8:9F:CD:69:7D","sha256":"7B:53:80:1E:29:54:CD:5D:02:32:AB:4D:54:D6:80:16:A3:95:7F:43:09:C1:E8:21:3E:AC:AF:E8:1B:C1:A8:A2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: acrossut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 09 Jun 2026 19:42:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5632\r\ndate: Wed, 26 Aug 2026 11:01:38 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":57270,"size_decoded":5914,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (715), with CRLF, LF line terminators","md5":"b62b8e5b60e62df4ab8e98b803329f16","sha1":"06217f6807664380dfe452914e27280b52df0097","sha256":"75e312304e67ac0e77ff39bfff8093bc28b5ce73136361b83f5ca69bd248d429","sha512":"59089df8422a065dede965c73d70053252c6dc80ae067eaaab789294d00368439ddf66180df54529a2f1520217680952e73ac63699f1cd9336318ef2c0b771d4","ssdeep":"384:tUoauuu0CSdFN3KcS9ZFT4/RjN5aqvjwaFmOSkAA/Yf78U:xauuu0C6j3KcS9XOZOkAA/Yfj","tlshash":"1243762020f42176009791e67a692f4bafa5ea1bc94b431c76fd8bd00fdbe92dc2355d","first_seen":"2026-08-26T11:02:12.547129Z","last_seen":"2026-08-26T11:05:21.17076Z","times_seen":2,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":39,"connect":23,"send":0,"wait":79,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"acrossut.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Geist+Mono:100,200,300,400,500,600,700,800,900,100i,200i,300i,400i,500i,600i,700i,800i,900i\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.201.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:38.755Z","timestamp":1787742098755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:45 GMT","end":"Wed, 28 Oct 2026 20:43:44 GMT"},"fingerprint":{"sha1":"1E:50:A8:26:86:57:06:AF:03:D0:36:74:91:62:52:AE:87:D0:50:0C","sha256":"18:6F:33:F9:74:07:4C:C9:5D:94:38:03:B5:86:40:07:10:6F:E2:91:F9:CC:9C:DC:92:11:AA:41:F7:ED:5A:8E"}}},"request":{"raw":"GET /css?family=Geist+Mono:100,200,300,400,500,600,700,800,900,100i,200i,300i,400i,500i,600i,700i,800i,900i\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acrossut.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 26 Aug 2026 11:01:39 GMT\r\ndate: Wed, 26 Aug 2026 11:01:39 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40320,"size_decoded":1956,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d16ca90dc341095edcb7af49b760f995","sha1":"33ef2141ed19d037dcdc9e3d760751c2af250199","sha256":"2a5888e93b0286d6ce3630c744bd9ab084c67a0f011d86ce0364cb47d8f93267","sha512":"df3d33b2f3431f62edcab73c0eb519ead4569d3bb30bf2d583bcb1ee2d4c811dd15b8cc3918ddb7bcf8535ba5027fa95051011a9704fbaf9c1dbf3ecae49c4a3","ssdeep":"384:s3/83+3TLl3t3R3ce8/ILlgQJd8QRLlr3uk8JWLlGWrb8qnLlZtga8r8LlMstZ8p:AYOJ5NhIyXz/E","tlshash":"a303f091151b9000abd32cc17bcf7e39ae4ea1193411c27d9ffe089dad9bc265ba172d","first_seen":"2026-08-07T09:20:17.133316Z","last_seen":"2026-08-26T11:05:21.178338Z","times_seen":3,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":27,"connect":9,"send":0,"wait":27,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acrossut.to/assets/sources/css/mbr-additional.css?v=cPQmAQ","fqdn":"acrossut.to","domain":"acrossut.to","tld":"to"},"ip":{"addr":"162.0.217.206","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:38.756Z","timestamp":1787742098756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acrossut.to","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Sun, 23 Aug 2026 22:31:59 GMT","end":"Tue, 09 Mar 2027 22:39:33 GMT"},"fingerprint":{"sha1":"54:BD:F4:C7:30:AD:1C:9B:75:47:D8:93:D2:B3:F4:E8:9F:CD:69:7D","sha256":"7B:53:80:1E:29:54:CD:5D:02:32:AB:4D:54:D6:80:16:A3:95:7F:43:09:C1:E8:21:3E:AC:AF:E8:1B:C1:A8:A2"}}},"request":{"raw":"GET /assets/sources/css/mbr-additional.css?v=cPQmAQ HTTP/1.1\r\nHost: acrossut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acrossut.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 02 Sep 2026 11:01:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 Jun 2026 19:41:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13802\r\ndate: Wed, 26 Aug 2026 11:01:38 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":224156,"size_decoded":14163,"mime_type":"text/css","magic":"ASCII text, with very long lines (522)","md5":"beff2fa5ed210b5fe5b5c0fb356882c7","sha1":"5531f4acb0e08de7ed5ce714fc05cdacbc22abd0","sha256":"4f1f11d2022208c401942c91a7c7c25a1c8e377fb08aa9f2cc96efba6ac85aef","sha512":"66bbd92afd18d6f6cfcfe77a84b6b751c6693e19737cd209d4068f767c3f0a3f5dcdacf5059cd93940c6aff20fe6695da8bbaf78a3aa77122cf7999573195416","ssdeep":"1536:GlsA84cO6pJBiN8G0UGoNMPXea0seHWuC00IAWcUK686+csaQaTXyRZyqFOZmS9L:GlsADJauu7188s","tlshash":"05241198e6f139082167a3dd149f135a7b596051db0fde7f66a3215cefca28240b3f88","first_seen":"2026-08-26T11:02:12.54974Z","last_seen":"2026-08-26T11:05:21.189164Z","times_seen":2,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"acrossut.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acrossut.to/assets/images/screenshot-9-532x531.jpg","fqdn":"acrossut.to","domain":"acrossut.to","tld":"to"},"ip":{"addr":"162.0.217.206","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:38.773Z","timestamp":1787742098773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acrossut.to","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Sun, 23 Aug 2026 22:31:59 GMT","end":"Tue, 09 Mar 2027 22:39:33 GMT"},"fingerprint":{"sha1":"54:BD:F4:C7:30:AD:1C:9B:75:47:D8:93:D2:B3:F4:E8:9F:CD:69:7D","sha256":"7B:53:80:1E:29:54:CD:5D:02:32:AB:4D:54:D6:80:16:A3:95:7F:43:09:C1:E8:21:3E:AC:AF:E8:1B:C1:A8:A2"}}},"request":{"raw":"GET /assets/images/screenshot-9-532x531.jpg HTTP/1.1\r\nHost: acrossut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acrossut.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 02 Sep 2026 11:01:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 09 Jun 2026 19:41:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 50242\r\ndate: Wed, 26 Aug 2026 11:01:38 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":50242,"size_decoded":50560,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 532x531, components 3","md5":"17ee8c240200b93752af84c276ff0a4a","sha1":"14a5053937628b820e4ae3a9e6ad139abc9487c5","sha256":"2cfb14bf1ba684a1a946418f5189cb7d2943827099eda960e0155456d02c9389","sha512":"8403e21c78e65201ef2c10b741f2249e955978aec99ceda292886a84aa51efb9696061b6033970b5df2e01232df79b7047e043cfd09d63d13c376406db955169","ssdeep":"1536:3z3MVFJXyqrLpOCtNsnucz5j/jnmejuMEZEIKx00Ydm:TMV3XjkCLsT5j/6ejVEqIaDf","tlshash":"bf33f234fcba9e9c1ffd0e9a89b51178fb80c4f15a3d9501ba2b9174905d970235e1ce","first_seen":"2026-08-26T11:02:12.551109Z","last_seen":"2026-08-26T11:05:21.174077Z","times_seen":2,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"acrossut.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acrossut.to/assets/images/screenshot-5-739x490.jpg","fqdn":"acrossut.to","domain":"acrossut.to","tld":"to"},"ip":{"addr":"162.0.217.206","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:38.775Z","timestamp":1787742098775,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acrossut.to","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Sun, 23 Aug 2026 22:31:59 GMT","end":"Tue, 09 Mar 2027 22:39:33 GMT"},"fingerprint":{"sha1":"54:BD:F4:C7:30:AD:1C:9B:75:47:D8:93:D2:B3:F4:E8:9F:CD:69:7D","sha256":"7B:53:80:1E:29:54:CD:5D:02:32:AB:4D:54:D6:80:16:A3:95:7F:43:09:C1:E8:21:3E:AC:AF:E8:1B:C1:A8:A2"}}},"request":{"raw":"GET /assets/images/screenshot-5-739x490.jpg HTTP/1.1\r\nHost: acrossut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acrossut.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 02 Sep 2026 11:01:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 09 Jun 2026 19:41:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 96872\r\ndate: Wed, 26 Aug 2026 11:01:38 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":96872,"size_decoded":97190,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 739x490, components 3","md5":"9aff33508170173545eff5bc79ce9f55","sha1":"f5031a6c3d2de3c5a79d4e612b83aead79758054","sha256":"75dd68f82bd606527202f03c8da5640d5738aaceb45e339a8b31d2bdaecfd5f5","sha512":"fed897b34a617c4bba8094abfc7ea20a3985371d0e8cf3e6f6c52c3c9fa996357f6c62cef30569cd465560ff6c24622cff5e4e6ff61b3c5498391633c432251d","ssdeep":"1536:0ZLwi3YYzzdqindqKCR0bNL6knwwDcbl6Mkv5AMR4xTU2ASARbjmOFsCDG0orEvm:0ZcMnd1q3R0skwEcJ6MxTUdRSOWCKiO","tlshash":"70930212ff9c8007b6b55e5e8e10f3a6256dec3f58867c2d68db645a288f050f25ae07","first_seen":"2026-08-26T11:02:12.552978Z","last_seen":"2026-08-26T11:05:21.186392Z","times_seen":2,"resource_available":false,"data":null}},"time_used":712,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":302,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"acrossut.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acrossut.to/assets/web/assets/sources-icons2/mobirise2.woff2?f2bix4","fqdn":"acrossut.to","domain":"acrossut.to","tld":"to"},"ip":{"addr":"162.0.217.206","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:39.336Z","timestamp":1787742099336,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acrossut.to","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Sun, 23 Aug 2026 22:31:59 GMT","end":"Tue, 09 Mar 2027 22:39:33 GMT"},"fingerprint":{"sha1":"54:BD:F4:C7:30:AD:1C:9B:75:47:D8:93:D2:B3:F4:E8:9F:CD:69:7D","sha256":"7B:53:80:1E:29:54:CD:5D:02:32:AB:4D:54:D6:80:16:A3:95:7F:43:09:C1:E8:21:3E:AC:AF:E8:1B:C1:A8:A2"}}},"request":{"raw":"GET /assets/web/assets/sources-icons2/mobirise2.woff2?f2bix4 HTTP/1.1\r\nHost: acrossut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acrossut.to/assets/web/assets/sources-icons2/sources2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 02 Sep 2026 11:01:39 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Tue, 09 Jun 2026 19:41:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10824\r\ndate: Wed, 26 Aug 2026 11:01:39 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":10824,"size_decoded":11142,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10824, version 1.0","md5":"98a9d62912fe7aa6b81006f2bf1eba0c","sha1":"a8c0080de0cfcfd121d741198f29aa8323b8c26c","sha256":"5224942ff900116ce78cb11266fa7dc6a5e057e027a5e6d81f887956454820fc","sha512":"f23bd676f2177e77e5882445b47658ca6cf354a41f2998033e0352b9f97daf886a43dcb9fd9417689bff300d86ada5ff1f8d115e115a124da32ee42d3aac17e1","ssdeep":"192:qkWej+lDaHjgsTmfx0O5QfZMEBxmhJLv1SAOT+ytb5Q6nMJtnvG:D2eHE4AQhMEfmhRM+8AnvG","tlshash":"6d22af537e200cdef9e08b2f57db1b87843438df9757b246f3062a66ee590807b95102","first_seen":"2025-10-28T23:22:40.957823Z","last_seen":"2026-08-26T11:05:21.19048Z","times_seen":160,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"acrossut.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geistmono/v6/or3nQ6H-1_WfwkMZI_qYFrcdmhHijks9bA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:39.358Z","timestamp":1787742099358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/geistmono/v6/or3nQ6H-1_WfwkMZI_qYFrcdmhHijks9bA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://acrossut.to\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: font/woff2\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23156\r\ndate: Wed, 26 Aug 2026 11:01:39 GMT\r\nexpires: Thu, 26 Aug 2027 11:01:39 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Jun 2026 16:32:04 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23156,"size_decoded":23956,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23156, version 1.0","md5":"101f830f66bde67d6f815e42ed6c6f10","sha1":"9b4584e63a1554a356f3c6ad4dc7b98a034313b4","sha256":"c9b2702d0ff5865fcf7ed9442ec95888830b0065682ca4f2b44e2fa3b3a4f269","sha512":"94ba8955bef6c9ba90cd9a1ac2ebe06e6574ba2a567f0d246b79e9872d538d12bb20d3c56e67a7e5a2f36d82306ab0ca09ce315cbd171c66d471af434206edc5","ssdeep":"384:Nmb/KM+jEhKHk2xFO40A1ncGNcx18I+3Qiuo187cwcr5RIqUtshyqAeWeM6r2uOR:NaKLjEg9JbczZwQho18Awcr5RIxtsIeK","tlshash":"2ea2e129cb41eb14610048e86b820c4b3fb47d1b30835aee6452bdbaa4f2cbd175e5fd","first_seen":"2026-06-09T00:53:20.653285Z","last_seen":"2026-08-26T15:56:09.146101Z","times_seen":874,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acrossut.to/assets/bootstrap/css/bootstrap.min.css","fqdn":"acrossut.to","domain":"acrossut.to","tld":"to"},"ip":{"addr":"162.0.217.206","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:38.744Z","timestamp":1787742098744,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acrossut.to","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Sun, 23 Aug 2026 22:31:59 GMT","end":"Tue, 09 Mar 2027 22:39:33 GMT"},"fingerprint":{"sha1":"54:BD:F4:C7:30:AD:1C:9B:75:47:D8:93:D2:B3:F4:E8:9F:CD:69:7D","sha256":"7B:53:80:1E:29:54:CD:5D:02:32:AB:4D:54:D6:80:16:A3:95:7F:43:09:C1:E8:21:3E:AC:AF:E8:1B:C1:A8:A2"}}},"request":{"raw":"GET /assets/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: acrossut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acrossut.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 02 Sep 2026 11:01:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 Jun 2026 19:41:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20248\r\ndate: Wed, 26 Aug 2026 11:01:38 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":155585,"size_decoded":20609,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65306)","md5":"a868817cc1196143d0f062547aa8a967","sha1":"2fc7a95533939c2719ac383645a24720e9939573","sha256":"ccb200f2c60844c5d34bc235a45ea7cb76b7084e5a85975f555cf5a52ccff1e4","sha512":"241d3082673c892e1f7a4fd700cc0dd60bba9df0636e7c6b27dbdfa63de95ae88bd11dd789771d127cace64947801bd14fd79ff5abd86922663646d75c46f744","ssdeep":"1536:TtynW83RipVVsEBpy0cuJcf22RWt5CyVUpz600I4fT:TtynNyVUpz600I4fT","tlshash":"73e3a3d7f581241dd4a7c259a0d1bffd052f4686e3025eabb0277bb88b4a6c70963e4c","first_seen":"2023-04-06T08:13:23Z","last_seen":"2026-08-26T11:05:21.187056Z","times_seen":1651,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"acrossut.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acrossut.to/assets/web/assets/cookies-alert-plugin/cookies-alert-script.js","fqdn":"acrossut.to","domain":"acrossut.to","tld":"to"},"ip":{"addr":"162.0.217.206","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:38.761Z","timestamp":1787742098761,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acrossut.to","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Sun, 23 Aug 2026 22:31:59 GMT","end":"Tue, 09 Mar 2027 22:39:33 GMT"},"fingerprint":{"sha1":"54:BD:F4:C7:30:AD:1C:9B:75:47:D8:93:D2:B3:F4:E8:9F:CD:69:7D","sha256":"7B:53:80:1E:29:54:CD:5D:02:32:AB:4D:54:D6:80:16:A3:95:7F:43:09:C1:E8:21:3E:AC:AF:E8:1B:C1:A8:A2"}}},"request":{"raw":"GET /assets/web/assets/cookies-alert-plugin/cookies-alert-script.js HTTP/1.1\r\nHost: acrossut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acrossut.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 09 Jun 2026 19:42:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3548\r\ndate: Wed, 26 Aug 2026 11:01:38 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11377,"size_decoded":3836,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (968)","md5":"77f640a80229eb0e10d79281b8cee69f","sha1":"cd5a64a2c558fe55971e7c1d88832c77c766df1e","sha256":"f8571f020961f9e621a743b9e8f48ac0795d4048125dc4e576e39f437c9de5c5","sha512":"bdaf0e249f8771085b9c7d8b4b27e17d272daf0696116b011dbcf5042d0f3e16ab80b7353f84a1371aef13549ffb221157c6393475fb44fba061502ebd4574f4","ssdeep":"192:JgBEZAj8jgkIW79mkD3ssvUxtHcwHYatjr3dpjbAtr0rjL4FjvIJp0bBrE93rMsT:0AlgkIW79mkD3ssvUxOwjtjr3XnAtr03","tlshash":"e932a7ae7564713a8a173af0403f114a5a37b1b9a4085868b05decf19b65cdc193bf3e","first_seen":"2026-01-16T01:12:42.37465Z","last_seen":"2026-08-26T11:05:21.172513Z","times_seen":45,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"acrossut.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acrossut.to/assets/images/group206-96x96.png","fqdn":"acrossut.to","domain":"acrossut.to","tld":"to"},"ip":{"addr":"162.0.217.206","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:38.769Z","timestamp":1787742098769,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acrossut.to","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Sun, 23 Aug 2026 22:31:59 GMT","end":"Tue, 09 Mar 2027 22:39:33 GMT"},"fingerprint":{"sha1":"54:BD:F4:C7:30:AD:1C:9B:75:47:D8:93:D2:B3:F4:E8:9F:CD:69:7D","sha256":"7B:53:80:1E:29:54:CD:5D:02:32:AB:4D:54:D6:80:16:A3:95:7F:43:09:C1:E8:21:3E:AC:AF:E8:1B:C1:A8:A2"}}},"request":{"raw":"GET /assets/images/group206-96x96.png HTTP/1.1\r\nHost: acrossut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acrossut.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 02 Sep 2026 11:01:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Jun 2026 19:41:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3422\r\ndate: Wed, 26 Aug 2026 11:01:38 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3422,"size_decoded":3738,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"38a5cd510a44d925584b9db32881d046","sha1":"8205fa2c7f424f65357a38d4719e9436d14e9d83","sha256":"13c8de69432c35a960d16828cb11707f8747500c5b0edbf1760a9a84ab2af5bc","sha512":"a5f9d5f0c5f323ded577fad2e027e3b537ea3ab7159493db18b30f5b87a28e1e6ec8612e76bbe32fc7b28429129e1a21e981849e998d9d3dcdff45c4285cd6fd","ssdeep":"","tlshash":"33613a8372080537eca43ff3dc1906dca610ae7472aed4434f40e95cd4b67cb65210aa","first_seen":"2026-08-26T11:02:12.546037Z","last_seen":"2026-08-26T11:05:21.173297Z","times_seen":2,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"acrossut.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acrossut.to/assets/images/screenshot-10-711x735.jpg","fqdn":"acrossut.to","domain":"acrossut.to","tld":"to"},"ip":{"addr":"162.0.217.206","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:38.770Z","timestamp":1787742098770,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acrossut.to","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Sun, 23 Aug 2026 22:31:59 GMT","end":"Tue, 09 Mar 2027 22:39:33 GMT"},"fingerprint":{"sha1":"54:BD:F4:C7:30:AD:1C:9B:75:47:D8:93:D2:B3:F4:E8:9F:CD:69:7D","sha256":"7B:53:80:1E:29:54:CD:5D:02:32:AB:4D:54:D6:80:16:A3:95:7F:43:09:C1:E8:21:3E:AC:AF:E8:1B:C1:A8:A2"}}},"request":{"raw":"GET /assets/images/screenshot-10-711x735.jpg HTTP/1.1\r\nHost: acrossut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acrossut.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 02 Sep 2026 11:01:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 09 Jun 2026 19:41:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 48002\r\ndate: Wed, 26 Aug 2026 11:01:38 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":48002,"size_decoded":48320,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 711x735, components 3","md5":"54e72458cd792955585e367e7c1006ff","sha1":"c8a90ec91acca52ae74baae915f60f76d5d1a934","sha256":"961cbe190e95e0ce2fac48881cc26ed4071d46c07ae0bd7bc2776a7f94c3f28c","sha512":"9a88b840f327d64343f2a667f4674eec4b884bfe619995644fdd49e02aa03b5d91cc9972d2017b5ba56431c5a197c6e648269a8fc1a899bc54ee79b8dfec3913","ssdeep":"768:ZROO6rTX68xADDsycLcDobYgB/vdQZJ8ZhiGFmamlTVdwV9874sxc+gkICb3SPyW:ZP6rTX68evlcLuobYudQZJ871MVuU5x8","tlshash":"ba23f10096937ceaeda849524c5d3316c24fffa607d3cfaabdb72b9172690a51f19408","first_seen":"2026-08-26T11:02:12.55922Z","last_seen":"2026-08-26T11:05:21.175842Z","times_seen":2,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"acrossut.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acrossut.to/assets/images/screenshot-8-532x538.jpg","fqdn":"acrossut.to","domain":"acrossut.to","tld":"to"},"ip":{"addr":"162.0.217.206","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:38.772Z","timestamp":1787742098772,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acrossut.to","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Sun, 23 Aug 2026 22:31:59 GMT","end":"Tue, 09 Mar 2027 22:39:33 GMT"},"fingerprint":{"sha1":"54:BD:F4:C7:30:AD:1C:9B:75:47:D8:93:D2:B3:F4:E8:9F:CD:69:7D","sha256":"7B:53:80:1E:29:54:CD:5D:02:32:AB:4D:54:D6:80:16:A3:95:7F:43:09:C1:E8:21:3E:AC:AF:E8:1B:C1:A8:A2"}}},"request":{"raw":"GET /assets/images/screenshot-8-532x538.jpg HTTP/1.1\r\nHost: acrossut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acrossut.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 02 Sep 2026 11:01:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 09 Jun 2026 19:41:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 73747\r\ndate: Wed, 26 Aug 2026 11:01:38 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":73747,"size_decoded":74065,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 532x538, components 3","md5":"f95520b0555a1def9d8804b93f185c6e","sha1":"a260950431721f41408031cd9cc7b059f3f4ed69","sha256":"adca3b3617cd9803ab5177c21ba8c85fa65c36fe58f6d2612234ed8809ffd8f5","sha512":"f19ece6557531fc5709ff2092f0c5c6e136115732db0c738a907b81bd3a66f209b1a440e6c7b1f68513da1df4032fb6d2c27e262c19c654ad7c90ce276b74630","ssdeep":"1536:uXvVG6zTiLChdf6QuChYR22TWo1URDTKEP36j:iwwV5YR7yomRDeECj","tlshash":"997302bfa4f87bbe7d35bf68c4cdde748928d8956542a3d0635a0d0125b531d9383388","first_seen":"2026-08-26T11:02:12.560602Z","last_seen":"2026-08-26T11:05:21.179536Z","times_seen":2,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":353,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"acrossut.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acrossut.to/assets/images/screenshot-4-739x487.jpg","fqdn":"acrossut.to","domain":"acrossut.to","tld":"to"},"ip":{"addr":"162.0.217.206","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:38.774Z","timestamp":1787742098774,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acrossut.to","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Sun, 23 Aug 2026 22:31:59 GMT","end":"Tue, 09 Mar 2027 22:39:33 GMT"},"fingerprint":{"sha1":"54:BD:F4:C7:30:AD:1C:9B:75:47:D8:93:D2:B3:F4:E8:9F:CD:69:7D","sha256":"7B:53:80:1E:29:54:CD:5D:02:32:AB:4D:54:D6:80:16:A3:95:7F:43:09:C1:E8:21:3E:AC:AF:E8:1B:C1:A8:A2"}}},"request":{"raw":"GET /assets/images/screenshot-4-739x487.jpg HTTP/1.1\r\nHost: acrossut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acrossut.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 02 Sep 2026 11:01:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 09 Jun 2026 19:41:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 62473\r\ndate: Wed, 26 Aug 2026 11:01:38 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":62473,"size_decoded":62791,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 739x487, components 3","md5":"77dd8cf10d535a30d7a1a9ce2b1cd2bc","sha1":"2aca2f4d110f4fbce461d37093e4f8b1105b5095","sha256":"8e9d4cf441f0b1175e3c5b0ff5c63b727faef64733ea4519fb24ab83fc620dba","sha512":"61f622670697fdbc8215503b057c5ff915a9575cc8fb5ae2ec100142940fa15cd0e3fbb4a6aef4e15369e5b3621ad5f291b8e4a9bb0d4c1aee265a2a994ac896","ssdeep":"1536:wraDXWF+zcFuSUbN2+hOFIp3SwtRli/9xo8ItZShUnSP7:jzc2bN9oIpic2/batZCUSz","tlshash":"5d530277fc21e6d76b4c1755d1c8da9c642063ac10adde029ead2948276c33cee8b71b","first_seen":"2026-08-26T11:02:12.561857Z","last_seen":"2026-08-26T11:05:21.185344Z","times_seen":2,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"acrossut.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:39.332Z","timestamp":1787742099332,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://acrossut.to\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:24 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 1815\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49343,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-26T15:41:09.319073Z","times_seen":267374,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":24,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geistmono/v6/or3nQ6H-1_WfwkMZI_qYFrcdmhHijks9bA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://acrossut.to/","date":"2026-08-26T11:01:39.359Z","timestamp":1787742099359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/geistmono/v6/or3nQ6H-1_WfwkMZI_qYFrcdmhHijks9bA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://acrossut.to\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 11:01:39 GMT\r\nexpires: Thu, 26 Aug 2027 11:01:39 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Jun 2026 16:32:04 GMT\r\ncontent-type: font/woff2\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23156,"size_decoded":23964,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23156, version 1.0","md5":"101f830f66bde67d6f815e42ed6c6f10","sha1":"9b4584e63a1554a356f3c6ad4dc7b98a034313b4","sha256":"c9b2702d0ff5865fcf7ed9442ec95888830b0065682ca4f2b44e2fa3b3a4f269","sha512":"94ba8955bef6c9ba90cd9a1ac2ebe06e6574ba2a567f0d246b79e9872d538d12bb20d3c56e67a7e5a2f36d82306ab0ca09ce315cbd171c66d471af434206edc5","ssdeep":"384:Nmb/KM+jEhKHk2xFO40A1ncGNcx18I+3Qiuo187cwcr5RIqUtshyqAeWeM6r2uOR:NaKLjEg9JbczZwQho18Awcr5RIxtsIeK","tlshash":"2ea2e129cb41eb14610048e86b820c4b3fb47d1b30835aee6452bdbaa4f2cbd175e5fd","first_seen":"2026-06-09T00:53:20.653285Z","last_seen":"2026-08-26T15:56:09.146101Z","times_seen":874,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
