{"report_id":"7e690c53-26f2-421b-af50-1fb06cf6b7ff","version":6,"status":"done","tags":[],"date":"2026-04-04T12:12:52Z","url":{"schema":"http","addr":"fednow.cash","fqdn":"fednow.cash","domain":"fednow.cash","tld":"cash"},"ip":{"addr":"104.21.62.236","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"fednow.cash/","fqdn":"fednow.cash","domain":"fednow.cash","tld":"cash"},"title":"USPS® Digital Debit®","dom":{"size":31012,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2855)","md5":"c59171feafb446f9558456108d9b7a03","sha1":"ada66e4c58ced38e8b19f42c1bb8c443fd20a564","sha256":"4f55cf1b33e1276968963d78a4a294dddf15a5c05e0ce0cdce469a675001da54","sha512":"1cdc6901171eab740fdb01bc584297e3eb73625b51141c03c09640a5216acd8ba682ac577568a123f9e7cb9511bc7568ac78fad1494dc74eb91da9244bb82fc6","ssdeep":"384:BIf2pQsnSLjbCYJ11/76Lsl9LgtdlZtwtt3ht0ALCgTOwYSn4flhkEsLQQjmfH2c:+wbYtXYJziK8nqiGZ3TjEYuo0sCK","tlshash":"bbd296b1605e7f77832305c7b092af8570af8c31da556075f7bb85a80fe0c91a526b2b","dom_hash":"domhashf75825dd5e23e4505f03c6db4100f884","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"fednow.cash","fqdn":"fednow.cash","domain":"fednow.cash","tld":"cash"},"ip":{"addr":"104.21.62.236","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-09T12:12:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-04","alert":"Phishing Block","trigger":"fednow.cash","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-29T22:20:07.848058Z","alert_count":0,"request_count":1,"received_data":10938,"sent_data":500,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fednow.cash","ip":{"addr":"172.67.168.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-04","domain_rank":0,"first_seen":"2023-01-06T00:46:02Z","last_seen":"2026-04-04T08:36:21.075321Z","alert_count":65,"request_count":13,"received_data":2682095,"sent_data":6253,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-29T22:16:18.281815Z","alert_count":0,"request_count":3,"received_data":66219,"sent_data":1593,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fednow.cash/wp-content/plugins/multi-currency-wallet-fork-v6/assets/pwa/js/wallet-load-refresh.js?ver=1775258999","fqdn":"fednow.cash","domain":"fednow.cash","tld":"cash"},"ip":{"addr":"172.67.168.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b52b6c723bfdd455b4f7bd24db401e3","sha1":"31eecddcfdaaa24b330e9559a48083f74eab6d15","sha256":"41d8ebcdfa526bd09b1e7e58b746f962a8f4aa59c6a08bea7edba3d479e840bb","sha512":"131a1deabbef06ecd9554a3e678e96da2b23a707c4f2a088d67614947f5503cd512d5b78893db344d0c37c154db2f0a745fc3d22b66b0f57bb8406d3907f81e2","ssdeep":"","tlshash":"455175de28f21427556b347a6e8f81057b35812320498d40be4fc2616f9d73657b7f8a","size":2561,"data":"","first_seen":"2026-04-04T08:36:22.65039Z","last_seen":"2026-04-04T12:12:57.262738Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fednow.cash/wp-includes/js/wp-emoji-loader.min.js","fqdn":"fednow.cash","domain":"fednow.cash","tld":"cash"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"cae5dd7f3f41cfc1236e751832d7d91a","sha1":"86224ecd6119f71187ea4ab31ca8606cf28130bf","sha256":"968ce1d03a28f633bb41d37fdd217e8a0e679209f7bca14269216c375b438d9d","sha512":"8e51b0ef85c34582b4e11f96020af8985e4b23429cbb9fa489ebf8bc9bc2146667fafb984891cc1a2409d9d84779bb991d4cc235c105ec4659154e88aeff825e","ssdeep":"","tlshash":"d571869ae77638dbb2f900f2697a0d47eb614435d6c8d438c9bda3141cb58a3c274b46","size":3554,"data":"","first_seen":"2026-04-04T08:36:22.659052Z","last_seen":"2026-04-04T12:12:57.272421Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fednow.cash/wp-content/plugins/multi-currency-wallet-fork-v6/assets/pwa/js/url-bootstrap.js?ver=1775258999","fqdn":"fednow.cash","domain":"fednow.cash","tld":"cash"},"ip":{"addr":"172.67.168.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"899bcbe37991daa96b190df2f4f01df7","sha1":"3bac22c1272fea92f7b3fc9c953ead62fea8ccd7","sha256":"677f07b1a8d11afc886944a94d35c20e483dd3077286e423b0defde095b95698","sha512":"9c4fe502744d9b85507b52024b528c554b8746b8a9ba25c5237a2caadd72ffe1f4dc2b8896e11f78d101ee48890eff8a8081f43b6bbcb335b99d051d9fa859ab","ssdeep":"768:ACgTovWWdVv84Imd9mSCI2Yc4Y9e8iV5I/Z9p8q2INZV8AbRflPxK2rZXt6Te69o:PeW/U4Imd1Ncr9e8iV5I/Z9p8q2INZVv","tlshash":"eff2848d53f740518263b17a1bdf407a7274a4036644de583e1c9328afcab66ebb3bc5","size":36735,"data":"","first_seen":"2026-04-04T08:36:22.65326Z","last_seen":"2026-04-04T12:12:57.270507Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fednow.cash/wp-content/plugins/multi-currency-wallet-fork-v6/assets/pwa/js/app.js?ver=1775258999","fqdn":"fednow.cash","domain":"fednow.cash","tld":"cash"},"ip":{"addr":"172.67.168.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b84f0e6de67987a1cc48477d4c9e58e7","sha1":"83ccf23336b419b326486aaf14b3598aa227b484","sha256":"c46c58c5750f98061c777e3037cbaf2d2f756762d17324be8ef92025732db090","sha512":"c1315f53419d138838c5b58afad6a90c24e1c403eaa1e7f6d96dce45691aa165a81aab4bf9adbee4a6cb4b7080c25f80888a4e6eb0149499e2f2e01104f010c7","ssdeep":"24576:m3O7jt2K9K0+KmQSq+pZJT09Ke1DeqVNMl3FyI1va2LAd1b0g:m3O7jt59dSq+pDIVNMl3z13LAd1b0g","tlshash":"5e854b83375560bb428fa1d8049f5c0b923fd9bb844c8478ba94c9e719a8dd644fbf36","size":1810555,"data":"","first_seen":"2026-04-04T08:36:22.660491Z","last_seen":"2026-04-04T12:12:57.273737Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fednow.cash/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"fednow.cash","domain":"fednow.cash","tld":"cash"},"ip":{"addr":"172.67.168.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-04T17:43:51.800751Z","times_seen":131838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Manrope:wght@400;500;700;800\u0026family=Oxanium:wght@600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fednow.cash/","date":"2026-04-04T12:12:31.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css2?family=Manrope:wght@400;500;700;800\u0026family=Oxanium:wght@600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fednow.cash/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 04 Apr 2026 12:12:31 GMT\r\ndate: Sat, 04 Apr 2026 12:12:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10252,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"919b9ce8b884335a634206cc8539181b","sha1":"c05bf83ead55b97593300f1491dd9cc8ed7efe5d","sha256":"894fb2d2763947e7c6b71f48154d494dc4a5b0c5542d2057835bf519110aaea2","sha512":"8ed634257c6403346679d2ae605407d576f9c6f578eceb072370d6136d5fcd58cd2f49c952acc1da7c6514c3f6930e4644e040bb1650b6761d44c0867095b838","ssdeep":"192:zJDEV3WW89RJ8rV3118+/JGNV3TT80uJHYV3668hI1YO1fx:9wU+T2EQB","tlshash":"1422b891002be804eb470cd577cf7e3aad5e61567441c5ba9bfe18d8acdbd222360b1e","first_seen":"2026-04-04T08:36:22.656379Z","last_seen":"2026-04-04T12:12:57.261296Z","times_seen":2,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":84,"dns":0,"connect":20,"send":0,"wait":34,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fednow.cash/wp-content/plugins/multi-currency-wallet-fork-v6/assets/pwa/images/scanid-logo.png","fqdn":"fednow.cash","domain":"fednow.cash","tld":"cash"},"ip":{"addr":"172.67.168.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fednow.cash/","date":"2026-04-04T12:12:31.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fednow.cash","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 15:38:39 GMT","end":"Thu, 02 Jul 2026 15:38:38 GMT"},"fingerprint":{"sha1":"77:18:9F:3E:C4:F2:FE:C3:03:BB:AC:40:C3:7D:4F:27:54:14:2F:9B","sha256":"CC:41:7A:4A:F6:7B:BD:AA:BC:2D:74:F4:81:D1:A1:F4:2D:56:18:D4:A8:F7:76:AB:B5:CE:05:57:0D:D5:21:99"}}},"request":{"raw":"GET /wp-content/plugins/multi-currency-wallet-fork-v6/assets/pwa/images/scanid-logo.png HTTP/1.1\r\nHost: fednow.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fednow.cash/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:12:31 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 03 Apr 2026 23:29:59 GMT\r\netag: \"3529a-64e96b20be1ef\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 217754\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3NrhSSTwHf2YRbRo9HLgTmQ70ovc69tZ9YozXPwH5PqydjVZpCFVwyEJemskH60q%2FakwmLccg1pcndAO2xBMGNAifr4zbnyf25yFdG1n8Jct7lctyTn7%2Bak1N2HKBw%3D%3D\"}]}\r\ncf-ray: 9e7038c85818dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217754,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 1193, 8-bit/color RGBA, non-interlaced","md5":"86fb8a2e26eb24b9ee69e697a79c0db4","sha1":"a608c069c7a37f3f66dc143db33f33c66493b5d4","sha256":"3ed997d616de65e42e3ec42f814023da3e91f48232ea21f85cf6d95c08820d64","sha512":"82ca000b369600aebe60ea268b8ddf2870e6449674109656eede857423e62033ab3b1efbbc6901ae5d99dc6e33541d1695803129d7f270766b6791f6f8283463","ssdeep":"6144:rCLHpn/faY8/wId6MFgaU34rJ+1Jjr0HzHX04SMGG+l3O0x3gNge:rCV/SYF26naU30+1J30s5l3O0Cge","tlshash":"0124121e4e39ee73f200f888ae79c06ef65704bc96743459093ae3cded610576b062b6","first_seen":"2026-04-04T08:36:22.652452Z","last_seen":"2026-04-04T12:12:57.261976Z","times_seen":2,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-04","alert":"Phishing Block","trigger":"fednow.cash","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fednow.cash/wp-content/plugins/multi-currency-wallet-fork-v6/assets/pwa/js/wallet-load-refresh.js?ver=1775258999","fqdn":"fednow.cash","domain":"fednow.cash","tld":"cash"},"ip":{"addr":"172.67.168.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fednow.cash/","date":"2026-04-04T12:12:31.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fednow.cash","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 15:38:39 GMT","end":"Thu, 02 Jul 2026 15:38:38 GMT"},"fingerprint":{"sha1":"77:18:9F:3E:C4:F2:FE:C3:03:BB:AC:40:C3:7D:4F:27:54:14:2F:9B","sha256":"CC:41:7A:4A:F6:7B:BD:AA:BC:2D:74:F4:81:D1:A1:F4:2D:56:18:D4:A8:F7:76:AB:B5:CE:05:57:0D:D5:21:99"}}},"request":{"raw":"GET /wp-content/plugins/multi-currency-wallet-fork-v6/assets/pwa/js/wallet-load-refresh.js?ver=1775258999 HTTP/1.1\r\nHost: fednow.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fednow.cash/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:12:31 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 03 Apr 2026 23:29:59 GMT\r\netag: \"a01-64e96b20c0130-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 698\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VpclbzoAZY4jx0Z7KPo7GMQRs994TJHh3bKVGVVlneQfSgSgsw8YwmKPo%2FBfVM0%2BdYAjuQ%2BEuXRb4Uf3WcowCgcspUTixWKOHPnVhv0YdiFTfup%2BR8HXupd9GICHzw%3D%3D\"}]}\r\ncf-ray: 9e7038c8681ddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2561,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"3b52b6c723bfdd455b4f7bd24db401e3","sha1":"31eecddcfdaaa24b330e9559a48083f74eab6d15","sha256":"41d8ebcdfa526bd09b1e7e58b746f962a8f4aa59c6a08bea7edba3d479e840bb","sha512":"131a1deabbef06ecd9554a3e678e96da2b23a707c4f2a088d67614947f5503cd512d5b78893db344d0c37c154db2f0a745fc3d22b66b0f57bb8406d3907f81e2","ssdeep":"","tlshash":"455175de28f21427556b347a6e8f81057b35812320498d40be4fc2616f9d73657b7f8a","first_seen":"2026-04-04T08:36:22.65039Z","last_seen":"2026-04-04T12:12:57.262738Z","times_seen":2,"resource_available":true,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-04","alert":"Phishing Block","trigger":"fednow.cash","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fednow.cash/wp-content/uploads/fbrfg/apple-touch-icon.png","fqdn":"fednow.cash","domain":"fednow.cash","tld":"cash"},"ip":{"addr":"172.67.168.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fednow.cash/","date":"2026-04-04T12:12:32.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fednow.cash","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 15:38:39 GMT","end":"Thu, 02 Jul 2026 15:38:38 GMT"},"fingerprint":{"sha1":"77:18:9F:3E:C4:F2:FE:C3:03:BB:AC:40:C3:7D:4F:27:54:14:2F:9B","sha256":"CC:41:7A:4A:F6:7B:BD:AA:BC:2D:74:F4:81:D1:A1:F4:2D:56:18:D4:A8:F7:76:AB:B5:CE:05:57:0D:D5:21:99"}}},"request":{"raw":"GET /wp-content/uploads/fbrfg/apple-touch-icon.png HTTP/1.1\r\nHost: fednow.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fednow.cash/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:12:33 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Mar 2026 17:05:23 GMT\r\netag: \"a32-64d3b575654e5\"\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\ncontent-length: 2610\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RzpBFK7StmUc6ElDpx%2FhBWmccpbpnr1JQWKJRkfEihdPRya5HNqIjXQQ27BJNT2hOWirCFRByjVNVaZQHh7qxKJltGJyY6jpWnHuoiV4LPWJKSN2LYo5QcTcnhXVxA%3D%3D\"}]}\r\ncf-ray: 9e7038d03891dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2610,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"7b3b9c2eeb0c2f0f500a652db95b2c4a","sha1":"32d42d20ea4499c47cdd7a1c35344fed1c1b32f6","sha256":"9139ffeb6fdc31672abf83eebec38d758876241b6aa8f6ad27536d040d7fc5ce","sha512":"eb814a01f61f0c4a5774c97bffbd320944439f9841cc6b64bc1147a27f70b9fe8f87ec0f96e6f749f3bf090ca7717690f44b1e0ca76217c875141fc462d19675","ssdeep":"","tlshash":"a4513b5058dad0a2fbde58f74c8272b3ce8b6665b4a9160858712316aedc91ca8007df","first_seen":"2026-04-04T08:36:22.651661Z","last_seen":"2026-04-04T12:12:57.263894Z","times_seen":2,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-04","alert":"Phishing Block","trigger":"fednow.cash","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fednow.cash/wp-content/plugins/multi-currency-wallet-fork-v6/assets/pwa/css/styles.css?ver=1775258999","fqdn":"fednow.cash","domain":"fednow.cash","tld":"cash"},"ip":{"addr":"172.67.168.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fednow.cash/","date":"2026-04-04T12:12:31.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fednow.cash","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 15:38:39 GMT","end":"Thu, 02 Jul 2026 15:38:38 GMT"},"fingerprint":{"sha1":"77:18:9F:3E:C4:F2:FE:C3:03:BB:AC:40:C3:7D:4F:27:54:14:2F:9B","sha256":"CC:41:7A:4A:F6:7B:BD:AA:BC:2D:74:F4:81:D1:A1:F4:2D:56:18:D4:A8:F7:76:AB:B5:CE:05:57:0D:D5:21:99"}}},"request":{"raw":"GET /wp-content/plugins/multi-currency-wallet-fork-v6/assets/pwa/css/styles.css?ver=1775258999 HTTP/1.1\r\nHost: fednow.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fednow.cash/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:12:31 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 03 Apr 2026 23:29:59 GMT\r\netag: \"a8e9-64e96b20bd24f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 7848\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pNcGJcqZ86cnDB%2BW57FpkMlXxB4HcLAkPcSYZ5TdFFISdqKhB6vVjEZ90YVd1R2wwQIbACth7bj8ICKszQlyWoZ6LOH%2BH6g%2FeIZPpnFCqnwD3%2FDZ8xSpiW622TkkXg%3D%3D\"}]}\r\ncf-ray: 9e7038c85816dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43241,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"bf67de6ac1e6d999c853b7d4bb999b0d","sha1":"ce06f042758e5c69732e5ca71223906c219efebb","sha256":"22a1645b58c1d86b8d00150635a120753146fbeaad9e753a8f7cac33c7749d79","sha512":"4236ca92cad4b33ae8f10cadc5fe5389ec17e78b0035e2a37877ff5146ff93bf0c6f8b93cf9e3ac8129944cbbb8cc2fb06408ca27cf6f55d93e490456151eb11","ssdeep":"384:DnMourYC+FDSFGNPNin/hEDbHyVZ01qvzkjGO9:1C+FDSFGNPNqEvSV5vYx","tlshash":"b513948166e56a98b52fc4e65c93978bb39c9492850fcdbc3bf8305c9f891de6131f08","first_seen":"2026-04-04T08:36:22.657856Z","last_seen":"2026-04-04T12:12:57.264581Z","times_seen":2,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-04","alert":"Phishing Block","trigger":"fednow.cash","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fednow.cash/wp-content/plugins/multi-currency-wallet-fork-v6/assets/pwa/images/cart-icon.svg","fqdn":"fednow.cash","domain":"fednow.cash","tld":"cash"},"ip":{"addr":"172.67.168.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fednow.cash/","date":"2026-04-04T12:12:31.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fednow.cash","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 15:38:39 GMT","end":"Thu, 02 Jul 2026 15:38:38 GMT"},"fingerprint":{"sha1":"77:18:9F:3E:C4:F2:FE:C3:03:BB:AC:40:C3:7D:4F:27:54:14:2F:9B","sha256":"CC:41:7A:4A:F6:7B:BD:AA:BC:2D:74:F4:81:D1:A1:F4:2D:56:18:D4:A8:F7:76:AB:B5:CE:05:57:0D:D5:21:99"}}},"request":{"raw":"GET /wp-content/plugins/multi-currency-wallet-fork-v6/assets/pwa/images/cart-icon.svg HTTP/1.1\r\nHost: fednow.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fednow.cash/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:12:31 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 03 Apr 2026 23:29:59 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZO8tlk9v0OXP80Kqrl9gQ%2B4HrKno8FSk3ItZIEPbAQIEuEDtxKh7xg6kEUmSkIKGokdnc0k3oY5%2FtYc6Rrc9dhqduwKO2tNw%2F8NIuy9ScHPsHY1ehlVW7TEh8QLIgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\netag: W/\"6708-64e96b20bd24f\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9e7038c86819dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26376,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e9607422c65d15046ff88a9bdfc15ace","sha1":"aed1366ef0286da88f6e4cf13fae87fc76f23656","sha256":"9a097fe1942d6f773a2296f5cf1c96a627b85f6e4e30ff2403ccbb5f29f91025","sha512":"e172543bed5ad71511f2aba4bbaebecd06237d086b0ae4948c49963ce765c914a4252ae02b577083a1dcd2baf3edd95d4b14eb1b4af509cf35375ed77232d52b","ssdeep":"768:AIUeKpkp7bnX8UbsGbM3FOD4200P5jEME:VKpklXGG2w420EE","tlshash":"46c2d8fdaba84cdacc0a9bd5dd1386cb59d604f72e8441b9c284e78b349207cdb478c6","first_seen":"2026-04-04T08:36:22.646624Z","last_seen":"2026-04-04T12:12:57.265235Z","times_seen":2,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-04","alert":"Phishing Block","trigger":"fednow.cash","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fednow.cash/wp-content/plugins/multi-currency-wallet-fork-v6/assets/pwa/images/digital-debit-icon.svg","fqdn":"fednow.cash","domain":"fednow.cash","tld":"cash"},"ip":{"addr":"172.67.168.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fednow.cash/","date":"2026-04-04T12:12:31.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fednow.cash","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 15:38:39 GMT","end":"Thu, 02 Jul 2026 15:38:38 GMT"},"fingerprint":{"sha1":"77:18:9F:3E:C4:F2:FE:C3:03:BB:AC:40:C3:7D:4F:27:54:14:2F:9B","sha256":"CC:41:7A:4A:F6:7B:BD:AA:BC:2D:74:F4:81:D1:A1:F4:2D:56:18:D4:A8:F7:76:AB:B5:CE:05:57:0D:D5:21:99"}}},"request":{"raw":"GET /wp-content/plugins/multi-currency-wallet-fork-v6/assets/pwa/images/digital-debit-icon.svg HTTP/1.1\r\nHost: fednow.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fednow.cash/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:12:31 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 03 Apr 2026 23:29:59 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eV%2BX7p8woTsoTGse9f2x9TIs3EJ5PyALGVequiaU3Zs2Rb2A1jtpVcbTun39BCBFxsCZDGGq1cuz9pP5E3HlVU0IuHQFT3BGElZWadtJDBrCaUAjc7e%2FOrzpRnHlxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\netag: W/\"7fc-64e96b20be1ef\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9e7038c8681adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2044,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8f8c56d77469512dd4e12f00ec33949","sha1":"68808bf24564d20c68ffc070927994f1b93fa4cf","sha256":"25e580f6a021b5ddec19c5da3e740a52acaa907faea44f3c9a5f225c2ceb0aa6","sha512":"6e0a1cc4f4569a826492946bf233f951d06f85ef39e43b3e3be94568bb5f35953e5300c803ad61d5d527c3f1b5a6ca3d29d8fc7162531fa1ff3e9a99815add4a","ssdeep":"","tlshash":"1f41305c3d4c009d280d03c9cbd75556221fd1b731710cbabe9e2a71562376dfbda686","first_seen":"2026-04-04T08:36:22.648712Z","last_seen":"2026-04-04T12:12:57.265964Z","times_seen":2,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-04","alert":"Phishing Block","trigger":"fednow.cash","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fednow.cash/wp-content/plugins/multi-currency-wallet-fork-v6/assets/pwa/js/app.js?ver=1775258999","fqdn":"fednow.cash","domain":"fednow.cash","tld":"cash"},"ip":{"addr":"172.67.168.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fednow.cash/","date":"2026-04-04T12:12:31.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fednow.cash","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 15:38:39 GMT","end":"Thu, 02 Jul 2026 15:38:38 GMT"},"fingerprint":{"sha1":"77:18:9F:3E:C4:F2:FE:C3:03:BB:AC:40:C3:7D:4F:27:54:14:2F:9B","sha256":"CC:41:7A:4A:F6:7B:BD:AA:BC:2D:74:F4:81:D1:A1:F4:2D:56:18:D4:A8:F7:76:AB:B5:CE:05:57:0D:D5:21:99"}}},"request":{"raw":"GET /wp-content/plugins/multi-currency-wallet-fork-v6/assets/pwa/js/app.js?ver=1775258999 HTTP/1.1\r\nHost: fednow.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fednow.cash/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:12:31 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 03 Apr 2026 23:29:59 GMT\r\netag: \"1ba07b-64e96b20c2070-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PtSxrExVTGkHDplzLy2T%2FAOM1Xky10joBi4VEn%2B6mQHKIypJQPMY2OZ9NXKkXRtPyjIxk0gnC7tD0ODLDTG7NEq5e4m2Ud%2BYqKVlo0Z0KUF4pw5ucBklHvqGgqucYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncf-ray: 9e7038c8681bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1810555,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ae81eb05bf87bb3f9bf2928a158a8b16","sha1":"924dff738f6004ac66fbb46b7ac6017da2536ded","sha256":"0dec6ef3c9da0a7afdae39d1d5114e96bd14ca4652ad325e49b30dfa4c91554a","sha512":"5ba065d10b256af03554a016f687a7a486b9ecbc9fc30e29258f953303e8015dea2e086ecf80115767402b79084364ca5370ed4ab55adbfa6b539d4c60091669","ssdeep":"12288:Yv3O7vLt2wUkkmyxA00+KRUQXroPq+WGbK:m3O7jt2K9K0+KmQSq+pK","tlshash":"4a25f883271810bf018ed2dc049e9c4b853fdab7984cd979aea0d59705e4ee644faf27","first_seen":"2026-04-04T08:36:22.649466Z","last_seen":"2026-04-04T12:12:57.266734Z","times_seen":2,"resource_available":false,"data":null}},"time_used":933,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":545,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-04","alert":"Phishing Block","trigger":"fednow.cash","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oxanium/v21/RrQQboN_4yJ0JmiMe2LE0Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fednow.cash/","date":"2026-04-04T12:12:31.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/oxanium/v21/RrQQboN_4yJ0JmiMe2LE0Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fednow.cash\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14044\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 09:40:53 GMT\r\nexpires: Sun, 04 Apr 2027 09:40:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 9098\r\nlast-modified: Tue, 09 Sep 2025 18:59:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14044,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14044, version 1.0","md5":"aa6302b69a6dc6b6d59db30b8b53b4df","sha1":"3a6769dd478cf555100492eeb71443ae3fcc38b1","sha256":"3aa555c528430aab19bb2693dc206bab557767d3082dba66400784c9cc90cfbb","sha512":"a4f3ea1d008c61e485b88897e823cb3003add30db71cabc4fa0bdbcd7752547d34f6588b87b6e5680dabe6b550270c3f7b31dff2f90625fcef6fed00f3b0e3c8","ssdeep":"384:59+7XJp6wwLpd6EplhtnekZdYIzs6bc/Tmaryc7o8:5c7z38sEprtne+YIQ6bO/+0o8","tlshash":"4052d001dd85caf1e71d9a319d587424dceb5cf2b0a41096d92bb520c7842aab3fa4bc","first_seen":"2025-06-22T00:41:53.960552Z","last_seen":"2026-04-04T16:26:32.24756Z","times_seen":229,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":32,"receive":5,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fednow.cash/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"fednow.cash","domain":"fednow.cash","tld":"cash"},"ip":{"addr":"172.67.168.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fednow.cash/","date":"2026-04-04T12:12:32.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fednow.cash","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 15:38:39 GMT","end":"Thu, 02 Jul 2026 15:38:38 GMT"},"fingerprint":{"sha1":"77:18:9F:3E:C4:F2:FE:C3:03:BB:AC:40:C3:7D:4F:27:54:14:2F:9B","sha256":"CC:41:7A:4A:F6:7B:BD:AA:BC:2D:74:F4:81:D1:A1:F4:2D:56:18:D4:A8:F7:76:AB:B5:CE:05:57:0D:D5:21:99"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.4 HTTP/1.1\r\nHost: fednow.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fednow.cash/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:12:33 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 10:49:09 GMT\r\netag: \"58ea-64d4a33a419ce-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 5375\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FbcLpXc%2FusbBnvaU1Z04hz1SGQHecBt1AB2Pnkp6JebBxwAi6sDArgkOcnR2BFrnKYz8cp9TARMGVFCqp83Yw%2BvUKa5l8jvN1fvWavg0Bb1dQZAho2Za5EHghHtHgA%3D%3D\"}]}\r\ncf-ray: 9e7038d0a898dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-04T17:43:51.800751Z","times_seen":131838,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":358,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-04","alert":"Phishing Block","trigger":"fednow.cash","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fednow.cash/","date":"2026-04-04T12:12:31.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fednow.cash\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 02 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nage: 186399\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-04-04T17:44:28.657943Z","times_seen":16047,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":110,"dns":2,"connect":20,"send":0,"wait":31,"receive":9,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fednow.cash/","fqdn":"fednow.cash","domain":"fednow.cash","tld":"cash"},"ip":{"addr":"172.67.168.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T12:12:30.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fednow.cash","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 15:38:39 GMT","end":"Thu, 02 Jul 2026 15:38:38 GMT"},"fingerprint":{"sha1":"77:18:9F:3E:C4:F2:FE:C3:03:BB:AC:40:C3:7D:4F:27:54:14:2F:9B","sha256":"CC:41:7A:4A:F6:7B:BD:AA:BC:2D:74:F4:81:D1:A1:F4:2D:56:18:D4:A8:F7:76:AB:B5:CE:05:57:0D:D5:21:99"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fednow.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 12:12:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nlink: \u003chttps://fednow.cash/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2FALdo8DAGnBaIkKXyD8%2F3x280pLEowrMK0J7kTLY%2BC0C5TpY1SvX%2Brk71LusnudDyMo5mmFqfK%2Fbp%2BzNAuMqXM6orf3QMtjtz4ePYONH59slcKowePQ3HQHyBOEhg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e7038c48db456ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31132,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2855)","md5":"312f459b94f2fe83f474961db85e37b1","sha1":"bcb68ac138dd5a8ca243582b4f6f012d2cb53c7b","sha256":"0724ef7c571ea51299d0db1b7ce6a19d49232fb784bbba7e2c2db3ea1931a8b4","sha512":"585c69ac25e3c3544387a72ed4196661693014116e9b4d8667e4b97ede865ca57ba00fa4fb5076aad5dde5045082235a3742f39b2ce44785033e30400fe72e7d","ssdeep":"384:AJuHAer7gLjbUYux1iqxLJl0LTtdlYtwtt3ht0nLagTOwYS94flDfsbQio4H9x9P:C6XrY67YXTWnOY3CmTjEYuo0sCS","tlshash":"00e296b1501e7f7b832305c7b097af8270af9c31d9556061f7bb85a80fe0c91a61a76b","first_seen":"2026-04-04T08:36:22.645769Z","last_seen":"2026-04-04T12:12:57.26915Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1044,"timings":{"blocked":293,"dns":275,"connect":1,"send":0,"wait":458,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-04","alert":"Phishing Block","trigger":"fednow.cash","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fednow.cash/wp-content/plugins/multi-currency-wallet-fork-v6/assets/images/Bishiki_USPS_Logo.png","fqdn":"fednow.cash","domain":"fednow.cash","tld":"cash"},"ip":{"addr":"172.67.168.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fednow.cash/","date":"2026-04-04T12:12:31.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fednow.cash","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 15:38:39 GMT","end":"Thu, 02 Jul 2026 15:38:38 GMT"},"fingerprint":{"sha1":"77:18:9F:3E:C4:F2:FE:C3:03:BB:AC:40:C3:7D:4F:27:54:14:2F:9B","sha256":"CC:41:7A:4A:F6:7B:BD:AA:BC:2D:74:F4:81:D1:A1:F4:2D:56:18:D4:A8:F7:76:AB:B5:CE:05:57:0D:D5:21:99"}}},"request":{"raw":"GET /wp-content/plugins/multi-currency-wallet-fork-v6/assets/images/Bishiki_USPS_Logo.png HTTP/1.1\r\nHost: fednow.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fednow.cash/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:12:31 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 03 Apr 2026 23:29:59 GMT\r\netag: \"6b590-64e96b20bc2af\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 439696\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rX%2B%2BT7ehigIC24O40pZsQdUFChgvAejym2PxZAlI2SH19ECy%2FURlvJHZgS%2FcKQB1Dw4pP6kmKEejanJxVvlf9TnXX4jivJQCPuEIcxGg0Z%2BsSAail5lDQ1gTWPw7Cg%3D%3D\"}]}\r\ncf-ray: 9e7038c85817dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":439696,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 553 x 859, 8-bit/color RGBA, non-interlaced","md5":"2242dbed8eebd81bc70dc22cf597ba97","sha1":"96219c3e8a63ffc00a277714a6f927ea0c500fe4","sha256":"85025d34f42191e1f72ceb0f6bcebbf5476b54b9f55544f652e7c559cad5e59f","sha512":"36f714d56ee7ebff42963fe81f3e8998a4cfb01f72cc8dbe36a833b095771b7952dcb00daf0b299a014e10f7ae4234e05c7a79aa55dbe11934e2b7e9402c64ef","ssdeep":"12288:K82Yg9wCJxBa9WE9AkkhnaaAjc+NdQqTPCW7DVwGson:K82XwCJhCChaVdvTl7qGd","tlshash":"cd94230f95e6cebfbb3cd4710b9876018db85d8846dc41506f69fc96eb3b061a8c62d2","first_seen":"2026-04-04T08:36:22.647781Z","last_seen":"2026-04-04T12:12:57.269923Z","times_seen":2,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-04","alert":"Phishing Block","trigger":"fednow.cash","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fednow.cash/wp-content/plugins/multi-currency-wallet-fork-v6/assets/pwa/js/url-bootstrap.js?ver=1775258999","fqdn":"fednow.cash","domain":"fednow.cash","tld":"cash"},"ip":{"addr":"172.67.168.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fednow.cash/","date":"2026-04-04T12:12:31.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fednow.cash","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 15:38:39 GMT","end":"Thu, 02 Jul 2026 15:38:38 GMT"},"fingerprint":{"sha1":"77:18:9F:3E:C4:F2:FE:C3:03:BB:AC:40:C3:7D:4F:27:54:14:2F:9B","sha256":"CC:41:7A:4A:F6:7B:BD:AA:BC:2D:74:F4:81:D1:A1:F4:2D:56:18:D4:A8:F7:76:AB:B5:CE:05:57:0D:D5:21:99"}}},"request":{"raw":"GET /wp-content/plugins/multi-currency-wallet-fork-v6/assets/pwa/js/url-bootstrap.js?ver=1775258999 HTTP/1.1\r\nHost: fednow.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fednow.cash/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:12:31 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 03 Apr 2026 23:29:59 GMT\r\netag: \"8ff5-64e96b20c0130-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 7455\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lBAMOI780Gkx1SeGOzFM9Zo3K3O0%2FoFSy9zfdZawBWCV2wyhefivN1sjz7im3lQhNvnSDSSthWJ4WG2ejJFA99J0c9S8iUhC06FifKM9O4G4IV9dW6d99T23%2FrYBUw%3D%3D\"}]}\r\ncf-ray: 9e7038c8681cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36853,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"899bcbe37991daa96b190df2f4f01df7","sha1":"3bac22c1272fea92f7b3fc9c953ead62fea8ccd7","sha256":"677f07b1a8d11afc886944a94d35c20e483dd3077286e423b0defde095b95698","sha512":"9c4fe502744d9b85507b52024b528c554b8746b8a9ba25c5237a2caadd72ffe1f4dc2b8896e11f78d101ee48890eff8a8081f43b6bbcb335b99d051d9fa859ab","ssdeep":"768:ACgTovWWdVv84Imd9mSCI2Yc4Y9e8iV5I/Z9p8q2INZV8AbRflPxK2rZXt6Te69o:PeW/U4Imd1Ncr9e8iV5I/Z9p8q2INZVv","tlshash":"eff2848d53f740518263b17a1bdf407a7274a4036644de583e1c9328afcab66ebb3bc5","first_seen":"2026-04-04T08:36:22.65326Z","last_seen":"2026-04-04T12:12:57.270507Z","times_seen":2,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-04","alert":"Phishing Block","trigger":"fednow.cash","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fednow.cash/","date":"2026-04-04T12:12:31.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fednow.cash\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 02 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nage: 186399\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-04-04T17:44:28.657943Z","times_seen":16047,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":98,"dns":1,"connect":22,"send":0,"wait":22,"receive":19,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fednow.cash/wp-content/uploads/fbrfg/favicon.svg","fqdn":"fednow.cash","domain":"fednow.cash","tld":"cash"},"ip":{"addr":"172.67.168.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fednow.cash/","date":"2026-04-04T12:12:32.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fednow.cash","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 15:38:39 GMT","end":"Thu, 02 Jul 2026 15:38:38 GMT"},"fingerprint":{"sha1":"77:18:9F:3E:C4:F2:FE:C3:03:BB:AC:40:C3:7D:4F:27:54:14:2F:9B","sha256":"CC:41:7A:4A:F6:7B:BD:AA:BC:2D:74:F4:81:D1:A1:F4:2D:56:18:D4:A8:F7:76:AB:B5:CE:05:57:0D:D5:21:99"}}},"request":{"raw":"GET /wp-content/uploads/fbrfg/favicon.svg HTTP/1.1\r\nHost: fednow.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fednow.cash/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:12:33 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Mar 2026 17:05:23 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f85xrpsBofc%2BeUE%2FXtmysmxcyha58hAQ65ze5y2hFUnXyDmvHaVw5UmQwmN894tr5KXA6HqRBT9wntHt%2FzRpLoVDUaktzvW9X9j%2FkH3rt1XemZpyijAMQY5X3CYekA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\netag: W/\"8d04-64d3b575654e5\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9e7038d03892dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36100,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"00b8028163595dcec617d0ec2e27366e","sha1":"2f0538e45e0a15f00072f1c73535941a46839524","sha256":"1eb78871fc01b083a29e3d9e5c59c1f17ee94276b15f675e65b962a985fe3789","sha512":"fc2f7d3e71320a5dadd7343db161c1cdf0135bc738ab9c18b38168a4179a24c52962735facfbd9b647f5a7ff180404aa0cec223b3e0e2568cd1895499f5eb418","ssdeep":"384:khqbQQiPl6u7BUZD12hlOsGqO3k/Z5OFGlPMjt+JPGNHn1m924hHqrmcg9d:khiDoTIqOm5OFMtYmUiGmtd","tlshash":"e2f2947e0d5dab8e33321c6ecf47217e2e8664edb25991cf28df75edd2264109620ca1","first_seen":"2026-04-04T08:36:22.643942Z","last_seen":"2026-04-04T12:12:57.271085Z","times_seen":2,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-04","alert":"Phishing Block","trigger":"fednow.cash","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fednow.cash/superpwa-manifest.json","fqdn":"fednow.cash","domain":"fednow.cash","tld":"cash"},"ip":{"addr":"172.67.168.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://fednow.cash/","date":"2026-04-04T12:12:32.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fednow.cash","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 15:38:39 GMT","end":"Thu, 02 Jul 2026 15:38:38 GMT"},"fingerprint":{"sha1":"77:18:9F:3E:C4:F2:FE:C3:03:BB:AC:40:C3:7D:4F:27:54:14:2F:9B","sha256":"CC:41:7A:4A:F6:7B:BD:AA:BC:2D:74:F4:81:D1:A1:F4:2D:56:18:D4:A8:F7:76:AB:B5:CE:05:57:0D:D5:21:99"}}},"request":{"raw":"GET /superpwa-manifest.json HTTP/1.1\r\nHost: fednow.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fednow.cash/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:12:33 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4gmqeteICn2ANWUb8V7qH3plTSYvE5lkOQbIJFb9EoBIrGX5PsARN%2FIHCsPANEb4TigV9YkUkwON9Uy0%2BO0LoUdncpFB0NWfvO3vvaeR98vjhZslnlQa4qewTMxZCg%3D%3D\"}]}\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e7038d05895dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1221,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6cfcb4758f71ae30836f0aac6a105af0","sha1":"3fb7f87729c99373412514c84a0017ca1b8b6b56","sha256":"6a7cbe9a189841eb952c1c7a876edd732c582906d0f337db9684eda6aa3458fd","sha512":"c4391b5831e55df69888f2554b91c7cd0dceef7076d8a7289a2ab258a94269a9ca4089bbf667be90f8a9cb7e3fd544befa6aeab6f175ccc3d6031fae77884045","ssdeep":"","tlshash":"5a21407a92648735a3d8c2c8198bad1dc02d7063d594cbc8a9d4ecbcc7e8b6055176b7","first_seen":"2026-04-04T08:36:22.655219Z","last_seen":"2026-04-04T12:12:57.271742Z","times_seen":2,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"fednow.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-04","alert":"Phishing Block","trigger":"fednow.cash","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}