{"report_id":"83721d59-10f8-4089-90fd-bbfe12c5834b","version":6,"status":"done","tags":[],"date":"2025-07-19T05:34:24Z","url":{"schema":"https","addr":"script-money.cc/website_scripts/metamask-wallet-clone-script.html","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.96.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"script-money.cc/website_scripts/metamask-wallet-clone-script.html","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"title":"MetaMask Wallet Clone Script | Script Money"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-08-23T05:34:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-07-16T15:13:54.244508Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":471,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cookieinfoscript.com","ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-08-31","domain_rank":64500,"first_seen":"2015-09-03T01:14:37Z","last_seen":"2025-07-18T15:37:56.258921Z","alert_count":0,"request_count":1,"received_data":8537,"sent_data":429,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.a-ads.com","ip":{"addr":"78.46.33.196","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2012-07-07","domain_rank":34827,"first_seen":"2013-06-01T16:47:05Z","last_seen":"2025-07-15T03:32:49.307762Z","alert_count":0,"request_count":1,"received_data":13212,"sent_data":469,"comment":"","tags":null,"fingerprints":null},{"fqdn":"script-money.cc","ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":37,"received_data":1244718,"sent_data":22935,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-07-16T15:12:46.836417Z","alert_count":0,"request_count":8,"received_data":117710,"sent_data":4704,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-07-16T15:09:49.565957Z","alert_count":0,"request_count":3,"received_data":81933,"sent_data":1606,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-07-16T15:23:18.075902Z","alert_count":0,"request_count":5,"received_data":2462579,"sent_data":2407,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ad.a-ads.com","ip":{"addr":"78.46.33.196","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2012-07-07","domain_rank":26970,"first_seen":"2013-04-19T21:54:57Z","last_seen":"2025-07-12T23:49:42.298006Z","alert_count":0,"request_count":1,"received_data":14956,"sent_data":533,"comment":"","tags":null,"fingerprints":null},{"fqdn":"secure.gravatar.com","ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2004-07-15","domain_rank":1671,"first_seen":"2012-05-22T05:36:38Z","last_seen":"2025-07-19T04:12:44.615668Z","alert_count":0,"request_count":3,"received_data":6509,"sent_data":1563,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"script-money.cc/wp-content/plugins/contact-form-7/includes/js/index.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"917602d642f84a211838f0c1757c4dc1","sha1":"392df3fb4b0ec96ce4ebb5616e6b2a5c55a54bf8","sha256":"d702e5ed1e573918d912775ac1e88987fc177aa51efe1253a08f71ab54f96516","sha512":"92afc44a2405434f119e8e57732e232cdfadbdba1948d3e89eab596282119d14cf9707f36037b22c9dd6f3104aadecc28b9301d044842d60dd43cea98ddbc929","ssdeep":"384:I/Igki2JjSTXMpzZJ3eY+3kY+H6cqv8s+pfYm03pYToAAA:I/IgNwjSTXMpeY+3kY0dqv8s+pfYm03M","tlshash":"a042c6e1822955321ef606e390e513c1665575aef44bcaa1e498dc6e18bccc324f3fb7","size":13054,"data":"","first_seen":"2024-03-02T15:39:15Z","last_seen":"2026-08-02T17:43:01.280337Z","times_seen":13728,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG\u0026co=aHR0cHM6Ly9zY3JpcHQtbW9uZXkuY2M6NDQz\u0026hl=en\u0026v=3jpV4E_UA9gZWYy11LtggjoU\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=5oos0jjfc0ya","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-08-02T19:50:25.289737Z","times_seen":501062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG\u0026co=aHR0cHM6Ly9zY3JpcHQtbW9uZXkuY2M6NDQz\u0026hl=en\u0026v=3jpV4E_UA9gZWYy11LtggjoU\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=5oos0jjfc0ya","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"85ece988d2adc1a78a19417d3c38001f","sha1":"19d40b4c66e6b0bbfcebec7329d2720b48942fc3","sha256":"f9f11fa62013b701d9ba4c9b1ea8115ed365c332e42bb9e36d77635e2bb2161c","sha512":"07236a9f359aad24a02c867062a4de7f711c51015cd1de829aaa04fe56eba3d420b29517f544e75aef3ad46cdcf0889c89af42a8bf7a998b52e4d1b9d74a9e5f","ssdeep":"","tlshash":"4aa0025d1d073ce44396b93557575075ed7235521582af0d9054b990e7f902f01938df","size":64,"data":"","first_seen":"2025-07-09T07:40:45.62493Z","last_seen":"2025-07-21T11:32:17.31757Z","times_seen":600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/website_scripts/metamask-wallet-clone-script.html","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7ff44cc1079001a76da5104b07afb550","sha1":"b7964fdc184100bef34d1b40f54ec8e2ddeaae0a","sha256":"9cf3efe8b877f5b2d1cb25c5844851dd1dc76362390789b899b0a17f8c9706d6","sha512":"90acb93940c07be1c63a448ee3f82f0bbdc143f53574f5302607c12daab53dabeedfdc56d49c8e6a8d073206b8a4ad7ffa4f62ded86be9c0033cc0aad4284218","ssdeep":"","tlshash":"a761a99e3775348b32b604d16a3f4e07fb7258361a889034cab9e7541cb1463d379d4a","size":3402,"data":"","first_seen":"2025-07-19T05:34:31.267007Z","last_seen":"2025-07-19T05:34:31.267007Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-02T19:45:03.613277Z","times_seen":413301,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e526b16a63d4a5ac20e08cce079b7c18","sha1":"9a862a7bd96634c66a2aca3f61a632b38c7b93cd","sha256":"ccd5ff1eaf8ad23bf6ef217deff62e6e81ad0f61375e4c0fbd0248a1801e433a","sha512":"554562f309e616c14c927162e37493655bf99f02cee1d86393aa2c63e4358b66b277109301b5ee842a82d27519405ad9767bd46fa4fa4d1134dbf717233af76d","ssdeep":"","tlshash":"c31112b61a09e03907720ae5e1ffdbb1e452701df15cc9e8a515dec41e69ccbce0a585","size":1051,"data":"","first_seen":"2025-07-19T05:34:31.256116Z","last_seen":"2025-07-19T05:34:31.256116Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/plugins/contact-form-7/modules/recaptcha/index.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec0187677793456f98473f49d9e9b95f","sha1":"8c55e0f4a29865e871f3d54be8d480a0665891d9","sha256":"df0ec8330290d184b1084527076cb87d41b33ba706ff5ab579d761f0cb6a744b","sha512":"84b468de22634404405e52cda2844d626b4d47054739971d677f0e63fd683dcca100550419b945391236846df54b65fb43ee4d6e7f7692eb0d414584e2594108","ssdeep":"","tlshash":"9811e1305a3031740967ca6182eb53e1be31e461f0a3898159fc4e141f7ced598b3d86","size":934,"data":"","first_seen":"2023-03-07T12:57:48Z","last_seen":"2026-08-02T19:32:20.549552Z","times_seen":110323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/themes/sahifa/js/ilightbox.packed.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6925324c0c75ab9db234ce7da072faeb","sha1":"80491389cf716c242334e9d7f2ee9c7ddf2044aa","sha256":"1f560c3e9fb5beeed86da7d5be1ae459c22af6ec1d58f77e2a89a20063ef7ba2","sha512":"806ef93e0c6bd6a6fdc4027d22e317b78d49d1d1ca16e63cd22529f8735a31b4bc6c442bc52f38b69d0e282ef051a5b3d2e4ba68697d93c8aa39327548ec8355","ssdeep":"1536:vO06VKFnoUol4R/h/4/KMT/v/5/gCa9QsdudbgQqhFIire06yOIRYaqqG9U3+RQ9:mCM+9BHh+AgIO9UEpc","tlshash":"d7733be8b2503a6285b325e6405f424e6236cb37f809d416b06cd9d99cf4d8d22b7fbd","size":79789,"data":"","first_seen":"2023-03-07T01:10:29Z","last_seen":"2026-08-01T16:44:53.678292Z","times_seen":887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/website_scripts/metamask-wallet-clone-script.html","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"67933605bfc2cb3683d8aff79b844c70","sha1":"a955abd034db65c9beeaf27acbe8b4845166a144","sha256":"1e6aaee7fe38548281e2cb78874d9f5de6e4a9d78895a0c1b80c9ed292c739b7","sha512":"90b231a6a91ba4e3e92a15d0205ed0235f18b8f57b99aea999ce21510a000635934ed12d9d3d2016ce225b1596ac1ddbcc4bd187baf6108db255d59e860bcabb","ssdeep":"","tlshash":"0b119cf2eb5c9e9f407021b174feb2de642f613d3f05696a7f64e5501cd6c0001b0452","size":930,"data":"","first_seen":"2025-07-19T05:34:31.267811Z","last_seen":"2025-07-19T05:34:31.267811Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/website_scripts/metamask-wallet-clone-script.html","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"67ce0b8d1282d62af6c211b6755a85fa","sha1":"686eede40072b2743c9e2b12f6f834b42a608660","sha256":"ffba25e3eb7e933e29681ce1628d00660e85bfe542f0d4f73b95f4f9b0a59a70","sha512":"1a74d25cbb9c54616a2a7a6145855ad81161848ca2aefe233e4eb66198bb3e6d0ad10059051c2640e4dc1b1b34e1c48455c17e564e462c9e9a3afbda4f15e926","ssdeep":"","tlshash":"7de0d83a449e3d58c2721005a53fb54d331f742566da1498f38c55577f9037871e018a","size":370,"data":"","first_seen":"2025-07-19T05:34:31.268775Z","last_seen":"2025-07-19T05:34:31.268775Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/website_scripts/metamask-wallet-clone-script.html","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de6ec972a1a166722dad27acb9d8ac9e","sha1":"c46e62cb96ad4d52311efdb1ab6a9104b014d87e","sha256":"a6752a33885d3123dc7df77beeb55c576239047161f9bd0f238ac252c9c26bb7","sha512":"58f7b2b664f5a58045bb049ed74998d40b517f4d7eed3c0c0330d48cef1bf2208e7b9266175731e01fb1e478c243e71e61b7c01762c0c92c9826ab7b44dfce7b","ssdeep":"","tlshash":"fbc08cb4e04c086d64732360797b7280346a653ca903216ebaa4986e0841030214bb99","size":156,"data":"","first_seen":"2023-03-07T12:08:58Z","last_seen":"2026-02-01T11:30:27.372587Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/website_scripts/metamask-wallet-clone-script.html","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"001328645f03560f50cda8f26dd3f7a1","sha1":"8bbb5147349abcb8ece5c2a06e82aa0c4ac1182f","sha256":"3ba9b130aaf3cf50f1c3dfde0cf5c66e751ea9cc98ad488d113e770207ed3243","sha512":"f2635b7a74b267681d81ea9fc06b78c62c2cd5827259f6fa88dca385f68064ccd4c1bba13fd73e3fa8c323762c8e958688e77f71e2b4393a94e62f6d73c9e137","ssdeep":"","tlshash":"c2d02b94e26e03896ebf64b0f87f93706d2b0143f4841adc0d049cb53700ea7c4e1060","size":277,"data":"","first_seen":"2025-07-04T21:53:31.642908Z","last_seen":"2025-07-19T05:34:31.27158Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG\u0026co=aHR0cHM6Ly9zY3JpcHQtbW9uZXkuY2M6NDQz\u0026hl=en\u0026v=3jpV4E_UA9gZWYy11LtggjoU\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=5oos0jjfc0ya","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"527ca50bf48ccfa6941e0914905b3fb5","sha1":"bbc1cd7d5763ea24420799112f0cc8cb2b51532c","sha256":"2b116b1d9e38896a65372d06a768b8dde361fd1d8c1705ef0eb5b3682a6582b1","sha512":"f22d47ee6d4d4c6f9ae8e13ade4a6ebc7bbf6aea752eb9e64a96d5a47a62272fdd359c1da362cb041e95b4f72ba22a35ed30416a53e735b5a77e84d1b700afe1","ssdeep":"","tlshash":"89700008bc082880202a3220088bc02b8022000002000000000088c02e3000a20a2808","size":22,"data":"","first_seen":"2025-07-09T07:40:45.621045Z","last_seen":"2025-07-21T11:32:17.273221Z","times_seen":599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-includes/js/dist/vendor/wp-polyfill.min.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe733b72675d4683549f10df06f8072d","sha1":"c533e1b43bc3f63f10df0428cb81bc87eb69a53c","sha256":"290b9b630f7dc870dfc3c139ea090b68105f971d870a4774a1eeab5cfe31b7a7","sha512":"a0844b18ed80a58d67cd9eaeed3dc58f5df936f01c72c48d056d2976afc42b6d918f30a8e0baf284f2f04532fa34145acf05c6397c3edc4d55e93dc246e627b4","ssdeep":"384:JW/4y+6GC4BfP1ENJ/ah4AiMEkhrcSyhoOn/xqRlwch6In/vkEy1jAuAZcwlImlJ:wX+1tHzJEJ/cfbn3luKcwsIyHgvNB","tlshash":"85039549b691b0e302e3a4f4009f444bb1b75b5ab81acad0f315f6d06c7d84ea1a7f9d","size":41247,"data":"","first_seen":"2025-04-15T18:59:45.846942Z","last_seen":"2026-08-02T18:34:56.751312Z","times_seen":85876,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/themes/sahifa/js/search.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"17ab65bcd420d50b9aeaf6af9786f6ce","sha1":"c09c469801bb64a2f3a169ceb414ee25d522fa33","sha256":"89f6068c97f29b9a0fdc1f1a619db9585db8081aa0489ef0053997193ee28ede","sha512":"633b3283bd3cfc432342767735e08518679512836a3d07eebafa6055f5420a923a353a20cd3d19b171cf491c9b487dc3abff0d7fe46b24cdb294bec1c7ab7b62","ssdeep":"384:G8crD7cJX56qdravsG+rNcSpYKkUmOX/rb:Gasa6KmOP3","tlshash":"7e624391eb5d5ddf5076209cba7f32eab42e8333b84838b67d9ce3805614c2995bc835","size":14564,"data":"","first_seen":"2023-03-07T12:21:39Z","last_seen":"2026-07-21T04:26:40.9649Z","times_seen":2479,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/website_scripts/metamask-wallet-clone-script.html","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd5f648f4fa75f28b17faffe66049687","sha1":"c9c2791b295684a919a2bfd7b7e2ef5aab3c178a","sha256":"1a4ba4a340b3f30596d32c1b272ddcfdbf3ccb8e89c2fa917ea60469017aeee4","sha512":"b5fb5df2a220f64f8fa7daae2a42e5682c5d17b9bae13cef72067688f1d85759fd46d8ca267458a27c6009707e5bbe131a1bea5f7ed5aa4704f694c87e019da9","ssdeep":"","tlshash":"00b012b7309574334c4630eb3a340244344091202c430724140cb9040608dc14a771c0","size":87,"data":"","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-08-02T19:24:28.567204Z","times_seen":30279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-02T19:50:31.264592Z","times_seen":917993,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/website_scripts/metamask-wallet-clone-script.html","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"490ef96067ec495dc439819f050dde6d","sha1":"3d306891dd3e12497b364fc299aba8ad178fca2e","sha256":"ea0abb25bcf5eb30c63f4dbac2a08818f3f6b025a6099d5e9b2e52cc4065c413","sha512":"20ee737b8de690729eb5af997ac5a93f4a6b42c1115e259424a80948365a7b82e618d54ded05997cc44107137581c6ca44167de278a793c460ba02f3da69a1f1","ssdeep":"","tlshash":"a0e02d2292158458858700f33818004e0908a9221e847a1a10a02a3cbce13a9932f23c","size":306,"data":"","first_seen":"2025-07-19T05:34:31.273586Z","last_seen":"2025-07-19T05:34:31.273586Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/themes/sahifa/js/tie-scripts.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"787e23cbd267f3caedef4289b491d2d0","sha1":"581336df3c364b14ecd654363bfa384ca81a8a35","sha256":"34136f8778bd5d12414394945200539a743ce5510f0189e34933eea2c44c8621","sha512":"67bc77cadbc558a8c0e060369d15b1551ae88942ff8171cad56c3e5ed0225fda532aa87fb9960299f6bb77cd30fc2597a9900b304db97764ffa02ba41e932cbf","ssdeep":"1536:zf9nRW2+N1CKrKy6hH6Wy/JqcV6QPW0JwaD5YhzJv1Um/TlyXqUIS+kIg+sih3f8:zf9nRW2+Nt4hM","tlshash":"0473f849b300b175d5f722bd782f420971769a62b406e87cf1b8c5d87cf0a451ab3eea","size":73681,"data":"","first_seen":"2023-03-07T12:21:39Z","last_seen":"2026-06-20T18:54:07.763837Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-includes/js/jquery/jquery.min.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-02T19:50:09.608229Z","times_seen":1001431,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cookieinfoscript.com/js/cookieinfo.min.js","fqdn":"cookieinfoscript.com","domain":"cookieinfoscript.com","tld":"com"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d15d93068c1121f63008407d339bd819","sha1":"00ee31ec3bf273a658cc7d4efea4833a3189aa14","sha256":"0ab31a97c236988bb6e415187b2197cdbf689664173015dffd6da8eb96b1626f","sha512":"0ffce3520958d748828f2c82aacd1f2d6b755d4147da80aac4927b5c1711936d9689346b75b089e04d45676ad3a530fa7ca54cf7451db78ca9d83b7993805906","ssdeep":"192:ur7/M2825F6rqLcKuxRF3gVHwjh8yajsyf:uPr81rqPu7F3gJwjh8yajsyf","tlshash":"c1f1950cbbca6b1502db51e6206f214db035a33c45a8854cbc78e7f3da74d8a74bba74","size":7651,"data":"","first_seen":"2023-03-07T01:31:51Z","last_seen":"2026-08-01T01:00:14.637291Z","times_seen":597,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-includes/js/comment-reply.min.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4a49df71f8b98c1d9f9d8fce74d89e8","sha1":"b95fcda0c8c26305ad94e80343d0cfca8a048a10","sha256":"9d4687a19cab8f7442a3bda40c45be4d10e42488e091ddd706c3caed83c3ee1f","sha512":"42cd5f854779886f24c43ed14617380110c946d1b430b454060c3b391de6fbae6d0ed8ab7cdd7cfdc9726b2d6142a4e01c4448e36088dfcee7fdd00b60909f89","ssdeep":"","tlshash":"5051a7d437c95d762a83b3395efe930271712709a50805608826c86931bcfea63b67fe","size":3026,"data":"","first_seen":"2024-11-13T06:33:24.856382Z","last_seen":"2026-08-02T19:34:30.955574Z","times_seen":91407,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG\u0026co=aHR0cHM6Ly9zY3JpcHQtbW9uZXkuY2M6NDQz\u0026hl=en\u0026v=3jpV4E_UA9gZWYy11LtggjoU\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=5oos0jjfc0ya","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d2fedcb53b6667b863824fcf723d3ade","sha1":"07dfaf671f6bbe9822671b5a0e1924f9099ab28e","sha256":"a8374c545eab6aa7a2f58a0e828e5138862df241209761e8a80bbe559ea9a688","sha512":"11e5a28ecfc0b816a181ca3256c0265c0a3a9b8c7ed7a56176844d71706aff4d1f6025e261f11a80aa85151be507344989f42dfc419e905e59abc2fa3a55c402","ssdeep":"","tlshash":"327000083c082880202a3220088bc02b00a2020002000000008088c02e3082a2082c08","size":22,"data":"","first_seen":"2025-07-09T07:40:45.612659Z","last_seen":"2025-07-21T11:32:17.319532Z","times_seen":599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-includes/js/wp-emoji-release.min.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","size":19251,"data":"","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-08-02T19:32:21.326107Z","times_seen":211846,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/3jpV4E_UA9gZWYy11LtggjoU/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a214e79d68265c5ec3299d22a42be239","sha1":"0c42ddf3fb3c54cda30d01135e62d938aae9a343","sha256":"ba0ae1c9ea7f888cd598baa556f3bb53cb4b0623daedf1401edca155408e165a","sha512":"e07fac8355c7064656d4f732415c48039901a83df4dd963eb83db2a4c5b8f4413ddb3ac810067155af132f4fa438a9d0d07a2ac6eb323001d9812f76a63aa2e4","ssdeep":"12288:QD5/1PspJgRxGSGDNZoW1WNpJSCOYHSDc1ebbmQ8lIS+ILfZ:e5NVMcWSpU9I/ebaLaSV9","tlshash":"4df44aeab293f4714362bdfa10331009537da52a849c495fb1959af43ff0808757aebb","size":792131,"data":"","first_seen":"2025-07-15T16:34:43.571399Z","last_seen":"2026-05-13T23:42:05.123997Z","times_seen":2769,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG\u0026co=aHR0cHM6Ly9zY3JpcHQtbW9uZXkuY2M6NDQz\u0026hl=en\u0026v=3jpV4E_UA9gZWYy11LtggjoU\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=5oos0jjfc0ya","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4b3add2a60691542dadcd2f455286ff1","sha1":"5cd2f823dc687644278b72bb3d47db1c5b8c3d8b","sha256":"e5aa9381c3ff791dca541ad9721857d969b49a999af29a2298d701093bdbc530","sha512":"ac6762e51e1bc754d37e8911bc7c7e5216967e6d5b6c0e0fa140d4f7e21dddfd566d20953062e15f5837857d60e1700310c21ae4702c67dc21b94742ca58ad60","ssdeep":"384:ejZjfburh+SFmnSTMdpuxdlAZxvbiEnaeArwN9qiv8ocb17IRrz:g9nvaHlGMWaeFY0p","tlshash":"bf82d89cb991b5a941a2b4b040bb511df2fb2c627808245cf025d5d06fb4e9e817ffaf","size":18950,"data":"","first_seen":"2025-07-09T07:40:45.607776Z","last_seen":"2025-07-21T11:32:17.265661Z","times_seen":600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-02T19:45:03.613277Z","times_seen":413301,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/plugins/contact-form-7/includes/swv/js/index.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"efc27e253fae1b7b891fb5a40e687768","sha1":"ad12044651ffac0badcd0e42f32edef91678b1ff","sha256":"46e36dd6ca93014e4915c723632bf180d27cc96ccfb7c26e69213e1a82129a62","sha512":"42fad6d6beeab116cbe8b149df6b64d65c4998c0a2cc0562bc831ad02acd82f2b6b9b33836047aafd6c2d7cf31a6e91feaca42a2fa6c6077b7f737dea40d36e6","ssdeep":"192:wNmuf8NM+UHN9Rr7lZBNWzd4PMfm/vx3imWAel/L0Fx18b2VautyX2fkiYgu0OOJ:wwuf8N5UHvRr5ZBNW+PMfm/hibLexa2b","tlshash":"a03203e5a197e1f0c7c228b88c16c551b2bf862cb889d054fb5cccd22d1ce57266b77a","size":11513,"data":"","first_seen":"2024-03-02T15:39:15Z","last_seen":"2026-08-02T18:52:08.357868Z","times_seen":30099,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/plugins/akismet/_inc/akismet-frontend.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"91954b488a9bfcade528d6ff5c7ce83f","sha1":"edf589eb28247c73ccc04e5b34ad107b90bd1b2e","sha256":"6bc5622bfab1a16855ad49b99a3f9ed8eb24f49da469a113f9000b866f109e2e","sha512":"d4772d5a06b400a7ec7250c85b5e5630f309b0876936de85bf3d24030fb2df55bb63ea5e4905325f41561996ebfc03bec95ae2dc48320273c894ffdca9943899","ssdeep":"192:YFRYlRfiAjGof8eGJsqSggUdgPzvi7Vp5d7Zq6:SRYlRfVjJEsKgUaPzvup5dF","tlshash":"693242a75b6c263f50b2730e695ca3c9763e9471d8005836bd7e996838c4d384336eed","size":11388,"data":"","first_seen":"2024-01-21T19:52:24Z","last_seen":"2026-08-02T18:30:32.372398Z","times_seen":14452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/3jpV4E_UA9gZWYy11LtggjoU/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a214e79d68265c5ec3299d22a42be239","sha1":"0c42ddf3fb3c54cda30d01135e62d938aae9a343","sha256":"ba0ae1c9ea7f888cd598baa556f3bb53cb4b0623daedf1401edca155408e165a","sha512":"e07fac8355c7064656d4f732415c48039901a83df4dd963eb83db2a4c5b8f4413ddb3ac810067155af132f4fa438a9d0d07a2ac6eb323001d9812f76a63aa2e4","ssdeep":"12288:QD5/1PspJgRxGSGDNZoW1WNpJSCOYHSDc1ebbmQ8lIS+ILfZ:e5NVMcWSpU9I/ebaLaSV9","tlshash":"4df44aeab293f4714362bdfa10331009537da52a849c495fb1959af43ff0808757aebb","size":792131,"data":"","first_seen":"2025-07-15T16:34:43.571399Z","last_seen":"2026-05-13T23:42:05.123997Z","times_seen":2769,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG\u0026co=aHR0cHM6Ly9zY3JpcHQtbW9uZXkuY2M6NDQz\u0026hl=en\u0026v=3jpV4E_UA9gZWYy11LtggjoU\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=5oos0jjfc0ya","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"00296b71e5e6fa8715f89ff747b9d0be","sha1":"ce28702f6f6661492ed2cc4dd0a2935528ef2ed6","sha256":"a545c25f5847321f7896335dfc0570d6bbf755b81638be8e7661749f8551b177","sha512":"116a7727fe06757b8dab69c21a107b1c1aaddaca0ed2bed7e6af2159761db89a526e1f87b3bbaf9110e28a3e627bfe1fd8a7db84d2f0d2a0b34ab8121044ca19","ssdeep":"1536:jvSPEp83DBbT8SOpqFU54xI4Qp3nIEBgjC9Rhxg:DSnlT8cJOLgO9R7g","tlshash":"6153bf27f70370dfaf7eab1027d266ad227ca14a2093159c19f712c94639a9356f91cc","size":64199,"data":"","first_seen":"2025-07-19T05:34:31.275579Z","last_seen":"2025-07-19T05:34:31.275579Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG\u0026co=aHR0cHM6Ly9zY3JpcHQtbW9uZXkuY2M6NDQz\u0026hl=en\u0026v=3jpV4E_UA9gZWYy11LtggjoU\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=5oos0jjfc0ya","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d6b0245abbb3a81ff48dcd49d5738756","sha1":"7b79ace7d8a8e05f32c728803b0738ad57c8631c","sha256":"3fa5d91a886dbce2d3ae8a45fca59d88105cdeecd2cf3be6e80ff9fc8262c46b","sha512":"923b01dc0d3081d6e87b70f1c70a8ce42fefe66f4a6b67a121e5e8af43c0d2d9287383934eb6edaf3d28a1299a35eed1bd045c5b0efd925709d95631e64c71a8","ssdeep":"384:kZjfburh+SFmnSTMdpuxdlAZxvfiEnaeArwN9qiv8ocb17ARrL:09nvaHlGcWaeFY8l","tlshash":"1282e89cf591b56641a2b4b040bb111df2f62c62f808245cf065d5d06fb4e9e817bfaf","size":19052,"data":"","first_seen":"2025-07-19T05:34:31.276764Z","last_seen":"2025-07-19T05:34:31.276764Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/website_scripts/metamask-wallet-clone-script.html","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7b3bddecf5d64ed987d7c3353ea48bb","sha1":"1ea5a8d7fafa4170b9ccd18f8f7f36a1302864be","sha256":"7aad574039689ff8987098ab84a2019a38bb54cf3154b6ec1c2ae27d4403a87e","sha512":"b2f19dff397b77929f4baf366f73119c9ccc40dcb2a0d40bb9bf6535c01b7a54a49fca0ac09190c56cc9b2131080e3816ece0b739f55819d713c86e5213a7ae9","ssdeep":"","tlshash":"f3b02b142981de4024b4c3e9031cb166b241201b4c16930a55dc82400f550a4c400245","size":129,"data":"","first_seen":"2025-07-19T05:34:31.277931Z","last_seen":"2025-07-19T05:34:31.277931Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/website_scripts/metamask-wallet-clone-script.html","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5c399557f73fcf0024f42259cf94ee17","sha1":"d2f46cbd088e9b289e63cc23e2377462c6459e3f","sha256":"254e737260e5ff4f6043abc4ab52ee1f9ea6e9eab066b5c7ac1665c4cf75692b","sha512":"45d3f9da1f4948d1f01993e19e0f42c54d7a30187978deddee02d4be94d4567f0045bd1192393f108570bded3f1805f233a5a41dfb9bb164f30086f598a3cc41","ssdeep":"","tlshash":"9e9004f574d311004d57317404571cdc1134c4701c544d744070f4d10c75074551745c","size":46,"data":"","first_seen":"2023-04-11T22:36:29Z","last_seen":"2026-08-02T19:20:32.284973Z","times_seen":28905,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/website_scripts/metamask-wallet-clone-script.html","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b970e0742b70ec8f67b60366659ff484","sha1":"a625afb45dc0574e9afeb1e56afe3e5d54b04c07","sha256":"0bfbf6e428fe18151cd97f1347a9f757755be4333aac6ee749ccbdedfb700a62","sha512":"060ee5c9b22dd1e315770a1775921e1ec620398bbaf591028d2b1f37aa8d60c940a09b4164e78f5d1baae740f065e528bf8b808257a89d1ab0010274886227e5","ssdeep":"","tlshash":"e2e0205056c01c6a02d921f97005ee786fcc27540e5c7847c89cde597ee9f687ac7d4a","size":368,"data":"","first_seen":"2024-12-30T14:21:55.872286Z","last_seen":"2025-11-03T01:02:58.493507Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/website_scripts/metamask-wallet-clone-script.html","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"303cb9eae1377f98cba9cada9962a3d3","sha1":"82972ad4d7ee2ab385381eedf73979d5bf0f30f0","sha256":"8bf8135fdd74b92e4471a2539bdf2cedc91cb630ec4c3cba4b3b38cef3cba7fc","sha512":"66cf9dda5f655faf8679d036c7ee1b3745834f6ad5a19e721f58e9676ada84bb30d6c5f97fa0c130c1e9b95f9c56c51bcc2d291a02f3e4c79bb474b51ecf1c44","ssdeep":"","tlshash":"40c08038d9f11c5133b74d4d31f56341ae8149f7c343551901b4c51d0fa50c59143304","size":167,"data":"","first_seen":"2025-07-19T05:34:31.280778Z","last_seen":"2025-07-19T05:34:31.280778Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"script-money.cc/wp-content/uploads/2020/12/cropped-logo-HL-TR-200-192x192.png","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:04.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/cropped-logo-HL-TR-200-192x192.png HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=zWBRERT73Qi5y2PQ; __ddg10_=1752903244; __ddg9_=162.158.222.73; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 23166\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pbrfd2qUDrDcE8S6NkKaM01ixhcsn1XOfTJIS1auMO%2FvJkt7ZlBSHz9Qio0QS6%2Bj6c%2BtkRfummcCMpiQ8QFIwKnMojqVaf%2FIy1s59hFR8lbhHTuvzXIWM6Q%2BWGOEd3ZCajY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nset-cookie: __ddg8_=Zy22fBBuR2lNlGHZ; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:04 GMT\n__ddg10_=1752903244; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:04 GMT\n__ddg9_=162.158.222.34; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:04 GMT\r\nlast-modified: Mon, 07 Dec 2020 09:11:50 GMT\r\netag: \"5fcdf1d6-5a7e\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\ncf-ray: 9617d8fe682f568e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2576\u0026min_rtt=0\u0026rtt_var=2415\u0026sent=309\u0026recv=214\u0026lost=0\u0026retrans=0\u0026sent_bytes=204313\u0026recv_bytes=15586\u0026delivery_rate=9451030\u0026ss_exit_cwnd=14920\u0026ss_exit_reason=2\u0026cwnd=25729\u0026unsent_bytes=0\u0026cid=767adc091e7ee273\u0026ts=2047\u0026inflight_dur=128\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23166,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"698c7fc5f8e2b4af7aab2b9aa2cb1241","sha1":"b02353766d959d6adc2fabb83712a9ea1c628f02","sha256":"d7ecf2e0cca2fcfdf8e11e2db55128f44d4194d74543fa4bfc84ad9425580262","sha512":"7d0ca3f3b9d1b22c2730266ccc40b08eff9f287dd7bc2543c48af9f9010aaf2571ed1bcf126caf38a6245b0734248c106af5fdb66203a3e2485e2c9304bae9d5","ssdeep":"384:XLkS3iVa32uCv9uxXNzsHSYoLY5BcM7zrv219tcXT6sEsxF2zH:XQSGG2i9z0oLqBcMfr21MXT/4T","tlshash":"eea2e0d0d43cdd41e16165a36499b91cdfbaaf7b19bdca1d403cf6a07b32a0a94cc12d","first_seen":"2025-07-19T05:34:31.213832Z","last_seen":"2025-07-19T05:34:31.213832Z","times_seen":1,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG\u0026co=aHR0cHM6Ly9zY3JpcHQtbW9uZXkuY2M6NDQz\u0026hl=en\u0026v=3jpV4E_UA9gZWYy11LtggjoU\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=5oos0jjfc0ya","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:05.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:40:16 GMT","end":"Mon, 15 Sep 2025 08:40:15 GMT"},"fingerprint":{"sha1":"B9:AB:CF:25:07:76:A5:52:8A:C6:4E:00:9A:A3:2B:D3:B6:32:A6:32","sha256":"BD:DA:50:EC:92:BD:74:5E:26:6B:7B:A3:D1:57:18:4D:FA:93:28:23:4E:B5:B5:B3:8E:11:6B:16:D9:66:FD:7E"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG\u0026co=aHR0cHM6Ly9zY3JpcHQtbW9uZXkuY2M6NDQz\u0026hl=en\u0026v=3jpV4E_UA9gZWYy11LtggjoU\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=5oos0jjfc0ya HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 19 Jul 2025 05:34:05 GMT\r\ncontent-security-policy: script-src 'nonce-lN2EDgQauR08nlk2JGfS0w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":73266,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (56491)","md5":"5297f40717e50b9f199eabd7b5980de3","sha1":"6ecb48ab30a11044e08ade1f60bfb438594b8d09","sha256":"ecf189bb7aad3b9e0217c0f3498e9cda190bcf5bf8788c7e96278cd67681915e","sha512":"4b139986a10e0e6042128f10c2df07333d275d62810fc4be08da791630d26a8afe93e97c99ebd754e188c4e9be1eb7fd23c8e7514c7dd3e2fd7a2b6e17605b81","ssdeep":"1536:7mlvSPEp83DBbT8SOpqFU54xI4Qp3nIEBgjC9RhxP:7OSnlT8cJOLgO9R7P","tlshash":"0b63bf16a603b09adfbb6e9023c67b7d616e6106208354ac6aff11d84d7ad5353f83cc","first_seen":"2025-07-19T05:34:31.216235Z","last_seen":"2025-07-19T05:34:31.216235Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=PtPCYqGufkmmVEn2; __ddg10_=1752903242; __ddg9_=162.158.222.66; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: application/javascript\r\nexpires: Sat, 19 Jul 2025 06:22:03 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4843kTA821SQYLG6IJBMu9BspLTjZjSTlCKjjTuFSpQPMGDrEsFdDyhL3AyEcfPxd%2F4WjShgQQ78VEX2WVEkYfcIgCbvLubauQJ%2BLOk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9617d8f5092456b5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-02T19:45:03.613277Z","times_seen":413301,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/uploads/2025/06/0-124-310x165.jpg","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:04.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/0-124-310x165.jpg HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=XKjDeJMbrCQhAXhG; __ddg10_=1752903243; __ddg9_=162.158.222.73; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9542\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Djk%2BA%2BEAsWuL2XHJ%2B2UqMYdzz1%2F7uP8t6UXLebsicBobNWLjsq6zzbUZPw4%2FATKnLWetuFq50djA7FVeFNj8xzUJdSYXYghRiDYO9LMVmn2SZF9PwbEpOiLYRq7h9q7zC7k%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nset-cookie: __ddg8_=ikZtGXHiCTnuFQhJ; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:04 GMT\n__ddg10_=1752903244; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:04 GMT\n__ddg9_=162.158.222.40; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:04 GMT\r\nlast-modified: Sat, 21 Jun 2025 15:15:38 GMT\r\netag: \"6856cc9a-2546\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\ncf-ray: 9617d8fb8817568e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1233\u0026min_rtt=0\u0026rtt_var=974\u0026sent=291\u0026recv=209\u0026lost=0\u0026retrans=0\u0026sent_bytes=184854\u0026recv_bytes=14596\u0026delivery_rate=9451030\u0026ss_exit_cwnd=14920\u0026ss_exit_reason=2\u0026cwnd=25729\u0026unsent_bytes=0\u0026cid=767adc091e7ee273\u0026ts=1520\u0026inflight_dur=107\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9542,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 310x165, components 3","md5":"94890b915ee22e39e9be06ff8df8387c","sha1":"603bd594b9fc78130996fa76cf3dcb4957dec3e4","sha256":"c7e24e459c539c0adc6c89076e31afa4d9688945f95dca917febb9a116b2dafe","sha512":"cfc240d4405111569c4f4d900092c174ebae351e2e404a54d65c53befc0ee8f53333289940a392e15285a2ed32fba9f48b922810b6df317da931ea22aa3fb931","ssdeep":"192:/3KwfLzOKgE4jJZFN2T8/nu7o5zhnd7tIN9S7jl0AUvI9:fKcOE4JZf2T8/mMzYqB0AUvI9","tlshash":"12129e474f2215d5000e4cdade0be5cbd4286708be3355eb8a32de74ff66ae6289481d","first_seen":"2025-07-19T05:34:31.218365Z","last_seen":"2025-07-19T05:34:31.218365Z","times_seen":1,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-includes/js/comment-reply.min.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-includes/js/comment-reply.min.js HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=PtPCYqGufkmmVEn2; __ddg10_=1752903242; __ddg9_=162.158.222.66; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 29 Apr 2025 12:50:54 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jrYewPC%2B2XEUp%2F%2Fcn5WGLk2lT6s8gL9nLQYCPj6%2FD8lITOrFMBXQNM82Wbgt69VtSzXoPLdJxiuFuP2%2FGdOK3g%2BcLST4laIkRmm1EcE%3D\"}]}\r\ncf-cache-status: BYPASS\r\netag: W/\"6810cb2e-bd2\"\r\ncontent-encoding: br\r\nset-cookie: __ddg8_=LMQpVsKeakB8Tf7B; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg10_=1752903243; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg9_=162.158.222.206; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\r\ncf-ray: 9617d8f5194856b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3026,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2991)","md5":"e4a49df71f8b98c1d9f9d8fce74d89e8","sha1":"b95fcda0c8c26305ad94e80343d0cfca8a048a10","sha256":"9d4687a19cab8f7442a3bda40c45be4d10e42488e091ddd706c3caed83c3ee1f","sha512":"42cd5f854779886f24c43ed14617380110c946d1b430b454060c3b391de6fbae6d0ed8ab7cdd7cfdc9726b2d6142a4e01c4448e36088dfcee7fdd00b60909f89","ssdeep":"","tlshash":"5051a7d437c95d762a83b3395efe930271712709a50805608826c86931bcfea63b67fe","first_seen":"2024-11-13T06:33:24.856382Z","last_seen":"2026-08-02T19:34:30.955574Z","times_seen":91407,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/uploads/2020/12/cropped-logo-HL-TR-200-32x32.png","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:04.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/cropped-logo-HL-TR-200-32x32.png HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=zWBRERT73Qi5y2PQ; __ddg10_=1752903244; __ddg9_=162.158.222.73; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 1708\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=A%2Btjp7Aj%2FEw4f9Y2Lh%2FkKzzfl3PgiWSGKCE4%2F7%2FvvATo63SKjmFrvkMBji5%2B%2FJgg%2BwXcPc43yaqOBCUWtqn47IxZNg%2BzH6ZW28d1YMIfW%2BdCqMw3FVe1WgtTUw%2FTVGBa6mU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nset-cookie: __ddg8_=yiZ1BbqngU4JkVq9; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:04 GMT\n__ddg10_=1752903244; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:04 GMT\n__ddg9_=162.158.222.10; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:04 GMT\r\nlast-modified: Mon, 07 Dec 2020 09:11:50 GMT\r\netag: \"5fcdf1d6-6ac\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\ncf-ray: 9617d8fe6830568e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2067\u0026min_rtt=0\u0026rtt_var=1862\u0026sent=307\u0026recv=213\u0026lost=0\u0026retrans=0\u0026sent_bytes=201669\u0026recv_bytes=15539\u0026delivery_rate=9451030\u0026ss_exit_cwnd=14920\u0026ss_exit_reason=2\u0026cwnd=25729\u0026unsent_bytes=0\u0026cid=767adc091e7ee273\u0026ts=1909\u0026inflight_dur=120\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1708,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"6c06f728c72679236a9ed66865cabfa7","sha1":"e68bd13f70f3d22d949e05ee0109f3e85932d2f7","sha256":"e6ed070b8009e27246e7c0ec074c82c0e6a57fbb554a71f965f88105db9448ad","sha512":"758a261a563c27fd8a3e72d4b10f1302231a121671caccd2435fa32c02a64b702bc8abf29fa9d85c0afae32dcf5ae5d2a814ac19732e2feae3210c229587785a","ssdeep":"","tlshash":"91313dc44bc81e1e39e457346893dd049f6588d513cc52ec56bd903b69d821ff1b0aab","first_seen":"2025-07-19T05:34:31.22019Z","last_seen":"2025-07-19T05:34:31.22019Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://ad.a-ads.com/1770922?size=468x60","date":"2025-07-19T05:34:04.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:41:27 GMT","end":"Mon, 15 Sep 2025 08:41:26 GMT"},"fingerprint":{"sha1":"9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA","sha256":"C3:51:20:DB:42:A3:71:7A:7B:DE:45:2B:1D:8A:57:E1:26:22:CD:26:F6:CF:18:86:7F:48:52:DD:B1:F3:03:8C"}}},"request":{"raw":"GET /s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ad.a-ads.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Jul 2025 10:12:14 GMT\r\nexpires: Fri, 17 Jul 2026 10:12:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 156110\r\nlast-modified: Wed, 28 May 2025 18:51:44 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-02T19:41:02.425231Z","times_seen":251280,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":13,"dns":1,"connect":10,"send":0,"wait":8,"receive":10,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG\u0026co=aHR0cHM6Ly9zY3JpcHQtbW9uZXkuY2M6NDQz\u0026hl=en\u0026v=3jpV4E_UA9gZWYy11LtggjoU\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=5oos0jjfc0ya","date":"2025-07-19T05:34:05.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:41:27 GMT","end":"Mon, 15 Sep 2025 08:41:26 GMT"},"fingerprint":{"sha1":"9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA","sha256":"C3:51:20:DB:42:A3:71:7A:7B:DE:45:2B:1D:8A:57:E1:26:22:CD:26:F6:CF:18:86:7F:48:52:DD:B1:F3:03:8C"}}},"request":{"raw":"GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15344\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Jul 2025 10:25:01 GMT\r\nexpires: Fri, 17 Jul 2026 10:25:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 155344\r\nlast-modified: Mon, 16 Oct 2017 17:32:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T18:16:35.197235Z","times_seen":544211,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/uploads/2019/02/quote-logo.png","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/uploads/2019/02/quote-logo.png HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=PtPCYqGufkmmVEn2; __ddg10_=1752903242; __ddg9_=162.158.222.66; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 2772\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 24 Jun 2020 08:02:11 GMT\r\netag: \"5ef30883-ad4\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NQO6lvcoLM9DgbvR3bjjL%2FCrTLpTUAx71gg4Gnd%2F9prR8y6VrkICAjqWPE6U0Oc9%2Fy8dtrX4rHC1W8L1h89EOhdawzz%2Fko7bqwUM6BA%3D\"}]}\r\nset-cookie: __ddg8_=8KrADg79BeuRYGmJ; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg10_=1752903243; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg9_=162.158.222.10; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\r\ncf-ray: 9617d8f5092056b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2772,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 98 x 42, 8-bit/color RGB, non-interlaced","md5":"886d3ad6175ae8e7658b136939a11923","sha1":"d2efdc535c14d980a4bbaceece5e04adc99524e0","sha256":"05081406f5eea46de78a18f5bb791fcfea1ff017165d9cc3e1507e0a1e6dbc93","sha512":"2fce2bfa9de969373a7d6d42f7847d81cc17e689f6edc89f9d45fc0d061566df53c9d30ed6819d6109321d7ffd9b739690b8563a587d4a696f1ea734df721306","ssdeep":"","tlshash":"c9511b8d251238069a24e862c97206ebb5b201899c7f5f9d24fc74cb0468684d5bf428","first_seen":"2023-12-03T20:51:54Z","last_seen":"2025-07-19T05:34:31.223102Z","times_seen":2,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-includes/js/dist/vendor/wp-polyfill.min.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-includes/js/dist/vendor/wp-polyfill.min.js HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=PtPCYqGufkmmVEn2; __ddg10_=1752903242; __ddg9_=162.158.222.66; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 29 Apr 2025 12:50:54 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JO6qD88fL50wYws6qFiUu3%2FXArvfE859IDucgFtYHXm96do%2FvZXd4mGIEnxmy110nsZuyInz1a%2BR5A8xpPELSpI2r7CnEdlhPouVysU%3D\"}]}\r\ncf-cache-status: BYPASS\r\netag: W/\"6810cb2e-a11f\"\r\ncontent-encoding: br\r\nset-cookie: __ddg8_=pMEyUebEfxC22LGw; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg10_=1752903243; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg9_=162.158.223.15; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\r\ncf-ray: 9617d8f5194556b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41247,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41239), with no line terminators","md5":"fe733b72675d4683549f10df06f8072d","sha1":"c533e1b43bc3f63f10df0428cb81bc87eb69a53c","sha256":"290b9b630f7dc870dfc3c139ea090b68105f971d870a4774a1eeab5cfe31b7a7","sha512":"a0844b18ed80a58d67cd9eaeed3dc58f5df936f01c72c48d056d2976afc42b6d918f30a8e0baf284f2f04532fa34145acf05c6397c3edc4d55e93dc246e627b4","ssdeep":"384:JW/4y+6GC4BfP1ENJ/ah4AiMEkhrcSyhoOn/xqRlwch6In/vkEy1jAuAZcwlImlJ:wX+1tHzJEJ/cfbn3luKcwsIyHgvNB","tlshash":"85039549b691b0e302e3a4f4009f444bb1b75b5ab81acad0f315f6d06c7d84ea1a7f9d","first_seen":"2025-04-15T18:59:45.846942Z","last_seen":"2026-08-02T18:34:56.751312Z","times_seen":85876,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/themes/sahifa/js/search.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/themes/sahifa/js/search.js HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=PtPCYqGufkmmVEn2; __ddg10_=1752903242; __ddg9_=162.158.222.66; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 16 Jun 2020 09:17:08 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e7GNPDMccVnEEd03ZJPBisLjY6g7JpPsOfuln5IO2joFT1ckKdNA4hR9cNNzMT0JFvDMcO5Y4404xSTWz%2FF1OuQX9G0xa3tkj%2Byocgs%3D\"}]}\r\ncf-cache-status: BYPASS\r\netag: W/\"5ee88e14-38e4\"\r\ncontent-encoding: br\r\nset-cookie: __ddg8_=3H03lEylS12a3qjB; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg10_=1752903243; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg9_=162.158.222.14; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\r\ncf-ray: 9617d8f5194c56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14564,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"17ab65bcd420d50b9aeaf6af9786f6ce","sha1":"c09c469801bb64a2f3a169ceb414ee25d522fa33","sha256":"89f6068c97f29b9a0fdc1f1a619db9585db8081aa0489ef0053997193ee28ede","sha512":"633b3283bd3cfc432342767735e08518679512836a3d07eebafa6055f5420a923a353a20cd3d19b171cf491c9b487dc3abff0d7fe46b24cdb294bec1c7ab7b62","ssdeep":"384:G8crD7cJX56qdravsG+rNcSpYKkUmOX/rb:Gasa6KmOP3","tlshash":"7e624391eb5d5ddf5076209cba7f32eab42e8333b84838b67d9ce3805614c2995bc835","first_seen":"2023-03-07T12:21:39Z","last_seen":"2026-07-21T04:26:40.9649Z","times_seen":2479,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/plugins/akismet/_inc/akismet-frontend.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/plugins/akismet/_inc/akismet-frontend.js HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=PtPCYqGufkmmVEn2; __ddg10_=1752903242; __ddg9_=162.158.222.66; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 10 May 2024 12:00:42 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1MpMI304NnIkzGkj4rsdf7zX6nBxlRfpOYOQTWXkt52JK8UWjRe2DvElVfrLj1PLRo4ymAz%2FzFGZp9g6n0VWmPykjL5%2BC2VappWL%2BsU%3D\"}]}\r\ncf-cache-status: BYPASS\r\netag: W/\"663e0c6a-2c7c\"\r\ncontent-encoding: br\r\nset-cookie: __ddg8_=581xtWF9RgeyHlUl; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg10_=1752903243; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg9_=162.158.222.57; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\r\ncf-ray: 9617d8f5194d56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11388,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"91954b488a9bfcade528d6ff5c7ce83f","sha1":"edf589eb28247c73ccc04e5b34ad107b90bd1b2e","sha256":"6bc5622bfab1a16855ad49b99a3f9ed8eb24f49da469a113f9000b866f109e2e","sha512":"d4772d5a06b400a7ec7250c85b5e5630f309b0876936de85bf3d24030fb2df55bb63ea5e4905325f41561996ebfc03bec95ae2dc48320273c894ffdca9943899","ssdeep":"192:YFRYlRfiAjGof8eGJsqSggUdgPzvi7Vp5d7Zq6:SRYlRfVjJEsKgUaPzvup5dF","tlshash":"693242a75b6c263f50b2730e695ca3c9763e9471d8005836bd7e996838c4d384336eed","first_seen":"2024-01-21T19:52:24Z","last_seen":"2026-08-02T18:30:32.372398Z","times_seen":14452,"resource_available":true,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/themes/sahifa/images/patterns/body-bg7.png","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/themes/sahifa/images/patterns/body-bg7.png HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/wp-content/themes/sahifa/style.css\r\nCookie: __ddg8_=DNuHBe0ZJa3UEUsm; __ddg10_=1752903243; __ddg9_=162.158.222.21; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 21146\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CmtQLQTtTKiEcsp%2BM3AmWWjPX3GD2fd9wfK6r%2FkwXMrHI3TwTMTdgY3ELz9DQMgMQcFe%2BgcDnMV6oO0ukuT90oTp7okSYNxP0lS7mPMRnyRaSO%2FkygUcvLfZ7bq1QEs1YWo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nset-cookie: __ddg8_=QjQDzHEYgO7xNJAt; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:03 GMT\n__ddg10_=1752903243; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:03 GMT\n__ddg9_=162.158.222.68; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:03 GMT\r\nlast-modified: Tue, 16 Jun 2020 10:00:48 GMT\r\netag: \"5ee89850-529a\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\ncf-ray: 9617d8f8f805568e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2164\u0026min_rtt=507\u0026rtt_var=1980\u0026sent=160\u0026recv=188\u0026lost=0\u0026retrans=0\u0026sent_bytes=13019\u0026recv_bytes=12571\u0026delivery_rate=589328\u0026ss_exit_cwnd=14920\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=767adc091e7ee273\u0026ts=1143\u0026inflight_dur=33\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21146,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 264 x 264, 8-bit colormap, non-interlaced","md5":"b40e39a8e3747e74f4dfcf6d88ecc535","sha1":"17e825efe06f1d04a8a3c398329d51b0ddf14b53","sha256":"7a6ac6e588a725241e6f43feaad46fb36de9682576f5f29c570edc3ec5247477","sha512":"032145c7a2b9dde541f1e81c5f6025a66bd443a35651db7d6d861544b1b1716f0610cd8e17cac800f8f4d778f53fbcfa1584c41dbc14d0a41f2d212fc3a91775","ssdeep":"384:oJ+wEzLHUY0t184pZJf7HOSWovDwLL2gdom2jmnenf48kkFYIBO4eX0161:oMLUYG84JfCSn4Lbom25f/PYIBOF0+","tlshash":"3492d027c1965bfc8fa75dcf4b0ef787a425065b945f8e59294960a0cd62c3384b20e5","first_seen":"2023-05-01T15:12:34Z","last_seen":"2026-08-02T12:12:43.806531Z","times_seen":3262,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=QjQDzHEYgO7xNJAt; __ddg10_=1752903243; __ddg9_=162.158.222.68; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 16 Jul 2025 06:08:05 GMT\r\ncache-control: max-age=172800, public\r\ncontent-encoding: gzip\r\netag: W/\"687741c5-4d7\"\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2FiIX3hjr93TVIngxYLR%2FOypwDUyDyOM5TQHgWASgPJE%2F%2FMSnGhmWGGz%2FuUsKot28ucyHM7Hff1Es28QC7IK6N4eACzxNLyvnhmy1X5kcovOmH6n1nv3rRiipCeW8VA4sVGY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9617d8fa4811568e-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nexpires: Mon, 21 Jul 2025 05:34:03 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-02T19:45:03.613277Z","times_seen":413301,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/3jpV4E_UA9gZWYy11LtggjoU/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG\u0026co=aHR0cHM6Ly9zY3JpcHQtbW9uZXkuY2M6NDQz\u0026hl=en\u0026v=3jpV4E_UA9gZWYy11LtggjoU\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=5oos0jjfc0ya","date":"2025-07-19T05:34:05.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:41:27 GMT","end":"Mon, 15 Sep 2025 08:41:26 GMT"},"fingerprint":{"sha1":"9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA","sha256":"C3:51:20:DB:42:A3:71:7A:7B:DE:45:2B:1D:8A:57:E1:26:22:CD:26:F6:CF:18:86:7F:48:52:DD:B1:F3:03:8C"}}},"request":{"raw":"GET /recaptcha/releases/3jpV4E_UA9gZWYy11LtggjoU/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 338856\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Jul 2025 10:37:28 GMT\r\nexpires: Fri, 17 Jul 2026 10:37:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 14 Jul 2025 04:00:22 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 154597\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":792131,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (539)","md5":"a214e79d68265c5ec3299d22a42be239","sha1":"0c42ddf3fb3c54cda30d01135e62d938aae9a343","sha256":"ba0ae1c9ea7f888cd598baa556f3bb53cb4b0623daedf1401edca155408e165a","sha512":"e07fac8355c7064656d4f732415c48039901a83df4dd963eb83db2a4c5b8f4413ddb3ac810067155af132f4fa438a9d0d07a2ac6eb323001d9812f76a63aa2e4","ssdeep":"12288:QD5/1PspJgRxGSGDNZoW1WNpJSCOYHSDc1ebbmQ8lIS+ILfZ:e5NVMcWSpU9I/ebaLaSV9","tlshash":"4df44aeab293f4714362bdfa10331009537da52a849c495fb1959af43ff0808757aebb","first_seen":"2025-07-15T16:34:43.571399Z","last_seen":"2026-05-13T23:42:05.123997Z","times_seen":2769,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/uploads/2023/11/logo-8-3.png","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/logo-8-3.png HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=PtPCYqGufkmmVEn2; __ddg10_=1752903242; __ddg9_=162.158.222.66; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 50708\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 14 Nov 2023 02:02:18 GMT\r\netag: \"6552d52a-c614\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0dD7B5J6Tafhe%2F1rp9GvQkBr11Hpsv4pLjfQsjY1uRWNmHPgr0vlOfZFJyN3GJrHrBK%2B2ekk8XINZvMeHKyBVw5C%2FJMgP4mQhSAA3vQ%3D\"}]}\r\nset-cookie: __ddg8_=0ArcOyWdxLSF8srx; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg10_=1752903243; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg9_=162.158.222.19; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\r\ncf-ray: 9617d8f4e90b56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50708,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 380 x 120, 8-bit/color RGBA, non-interlaced","md5":"2e50a9df307bccef489a16cf3760ce86","sha1":"ea211d0d2185f7df45437d8d18cbfe5b878f6c61","sha256":"ac7a4efd1304d0cdd680c4c50009a19a73b0ab32bea561c394257c439b958b00","sha512":"d6f6fece2a6fbe58b13abaf49944d3d5d174e982e52d15e19d1471b2676312e41374acf816a1516543b30e9acdbe4b7500b6e9c35a88068b85977bb5a492537d","ssdeep":"768:ysaunDp/zOCTCf5pzErS72ATY9EthBvktTgr0kCqLr9Afm:ylunDZOACb2SSDGRvQuBCcCfm","tlshash":"0233bf2dbef17b74d91c732636a42540ad274bc3ea91a948b5cc841e5f21b9fccc3a85","first_seen":"2025-07-19T05:34:31.229071Z","last_seen":"2025-07-19T05:34:31.229071Z","times_seen":1,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/uploads/2023/11/09909.png","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/09909.png HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=PtPCYqGufkmmVEn2; __ddg10_=1752903242; __ddg9_=162.158.222.66; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 92563\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 09 Nov 2023 04:42:00 GMT\r\netag: \"654c6318-16993\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WWXLtMaEdrsa2%2FQS5PIfjopzTXASoTi02IneXt87N5y8PwlrRZTI%2BjI1a6mZ5gt2tQKKrG%2FqgidLdWLno8KbHtB8pWRwSQV3PksPR1s%3D\"}]}\r\nset-cookie: __ddg8_=2E0UrmHdGGPloiAJ; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg10_=1752903243; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg9_=162.158.222.116; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\r\ncf-ray: 9617d8f4f91856b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":92563,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 400, 8-bit/color RGBA, non-interlaced","md5":"2538863a2b389bfd58f35db93f4dca2f","sha1":"04444038f15226f2c822db98d1544e70370b732a","sha256":"13058045bf29a7db6ea2ceffdf76bb2419ffe3db0507630c42da9a5f6044d924","sha512":"f24709948cbdcb33e78ac940d10ae8b0057e869faf4dc6dd46821ebff8178e7ae91a5301c55038ad0daa3233aaf1b69c8f775cf6f6e8bdced47919718c6d7cd7","ssdeep":"1536:YO9rtqqLMat6GW2pN3tBzvldoCAy95/evyVZdtEzYg9Qj6X+jn1T:j9Jgaf3bz9doG9gvyVZdNg9Qc+D1T","tlshash":"10930225efc27cbd5d6a11b481a03a0be9ba49475083bc21ff9c624b2f41b498c3709f","first_seen":"2025-07-19T05:34:31.230906Z","last_seen":"2025-07-19T05:34:31.230906Z","times_seen":1,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG\u0026co=aHR0cHM6Ly9zY3JpcHQtbW9uZXkuY2M6NDQz\u0026hl=en\u0026v=3jpV4E_UA9gZWYy11LtggjoU\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=5oos0jjfc0ya","date":"2025-07-19T05:34:05.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:41:27 GMT","end":"Mon, 15 Sep 2025 08:41:26 GMT"},"fingerprint":{"sha1":"9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA","sha256":"C3:51:20:DB:42:A3:71:7A:7B:DE:45:2B:1D:8A:57:E1:26:22:CD:26:F6:CF:18:86:7F:48:52:DD:B1:F3:03:8C"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/3jpV4E_UA9gZWYy11LtggjoU/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Jul 2025 10:05:28 GMT\r\nexpires: Thu, 24 Jul 2025 10:05:28 GMT\r\ncache-control: public, max-age=604800\r\nage: 156517\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-08-02T19:50:25.071904Z","times_seen":700732,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/uploads/2025/06/1-48-310x165.jpg","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/1-48-310x165.jpg HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=PtPCYqGufkmmVEn2; __ddg10_=1752903242; __ddg9_=162.158.222.66; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11314\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 21 Jun 2025 15:29:12 GMT\r\netag: \"6856cfc8-2c32\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gGwBfOpDpA%2FzopYOhy2Dm3mMrdOKuhY4b0qiciEI2ppwWZ7mz%2BSpeMyu9dS%2FYn%2BpHwmfc%2FutypR%2F7I6JExbS2aZAlstdrryqv%2Ff7vdc%3D\"}]}\r\nset-cookie: __ddg8_=vqqb6gKusDzRSY7t; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg10_=1752903243; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg9_=162.158.222.101; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\r\ncf-ray: 9617d8f4f90f56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11314,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 310x165, components 3","md5":"77a0682c8d2f174e814348c072f03c59","sha1":"57ba59d94dfa07e265f48eada3ebef298e9b384a","sha256":"3ce004f3765b76c08d5605c09dfa14687f7e8829ea470dd0e42fc4b5e15f24a2","sha512":"68b769e87b929ae37b5de8a1e5161c6d3325ba2de71d032eb58f8108923074622634da918c114702834b7f6ae0615195faa166cb2920514eebd9e68b27895464","ssdeep":"192:/3y9vJc2FB4vOtR+8kQX3Lk+XNggqy3cQBXl7hYotoudW7bWw:fWl2Ak8n19g7sBXlVtc7bn","tlshash":"e732bfa3a133a004c5aafdb92d539768d7a60505640bb7717b32c05f53a83e9543fcc0","first_seen":"2025-07-19T05:34:31.233606Z","last_seen":"2025-07-19T05:34:31.233606Z","times_seen":1,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/plugins/contact-form-7/modules/recaptcha/index.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=PtPCYqGufkmmVEn2; __ddg10_=1752903242; __ddg9_=162.158.222.66; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 10 May 2024 12:01:24 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KqKRQu9VTuedwOBC5gSN2ZstUmVN2lfZcozPmPRmoLAKCLIYOETF%2BsbU89jmMOnnHivYa3A7Wur0Y9Eo%2FkDvNcNq6vXRw%2FpmqqRqTcA%3D\"}]}\r\ncf-cache-status: BYPASS\r\netag: W/\"663e0c94-3a6\"\r\ncontent-encoding: br\r\nset-cookie: __ddg8_=dH7dB8GbpxFubrHv; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg10_=1752903243; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg9_=162.158.222.14; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\r\ncf-ray: 9617d8f5194656b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":934,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (934), with no line terminators","md5":"ec0187677793456f98473f49d9e9b95f","sha1":"8c55e0f4a29865e871f3d54be8d480a0665891d9","sha256":"df0ec8330290d184b1084527076cb87d41b33ba706ff5ab579d761f0cb6a744b","sha512":"84b468de22634404405e52cda2844d626b4d47054739971d677f0e63fd683dcca100550419b945391236846df54b65fb43ee4d6e7f7692eb0d414584e2594108","ssdeep":"","tlshash":"9811e1305a3031740967ca6182eb53e1be31e461f0a3898159fc4e141f7ced598b3d86","first_seen":"2023-03-07T12:57:48Z","last_seen":"2026-08-02T19:32:20.549552Z","times_seen":110323,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/themes/sahifa/style.css","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/themes/sahifa/style.css HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=PtPCYqGufkmmVEn2; __ddg10_=1752903242; __ddg9_=162.158.222.66; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 16 Jun 2020 09:14:12 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zm7GiQxGYm6Ckkke2Iaex02DzelWavwOillgPmrUTvbiuHf%2Bp909z4rJhfD9FJTqdPH8pHzyf%2BWLj0Qj2f4eIVEifNh4IcFxrHm0hB8%3D\"}]}\r\ncf-cache-status: BYPASS\r\netag: W/\"5ee88d64-2ebb8\"\r\ncontent-encoding: br\r\nset-cookie: __ddg8_=pDkmBwP0jihVO1UY; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg10_=1752903243; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg9_=162.158.222.112; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\r\ncf-ray: 9617d8f4e90456b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":191416,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (28229)","md5":"9ff7fc2adc4b2879c51eea8c3acd2ade","sha1":"c62659256b00d4914849a92b02a6ede587b12881","sha256":"38bbd9b9c9b22077974e7769bb444d25553fc1479332769baa1541f110c8c42a","sha512":"7bdf680ca40f6e1c5a3dabb2ccf1d4602cf18f4067fc0c87f85b63b897864003eb254cda914f7abb6b572ac79d0d37a3ac3090faf0768a00fe83f859a1a88932","ssdeep":"3072:13FiS28l7YvZOQDGNsDligCz2caBe72nxAYgCbigUzVMgi7PdliJjlEbxZUWtcMz:1ES28WTDGNuligCz2caBe72nxAYvGJzS","tlshash":"cf145375ae0818c47316c29eef85f764d76da276ea0d0da5f499292c87c928004fff9c","first_seen":"2023-10-23T19:02:03Z","last_seen":"2025-07-19T05:34:31.236806Z","times_seen":2,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/themes/sahifa/css/ilightbox/dark-skin/skin.css","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/themes/sahifa/css/ilightbox/dark-skin/skin.css HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=PtPCYqGufkmmVEn2; __ddg10_=1752903242; __ddg9_=162.158.222.66; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 16 Jun 2020 10:01:58 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RMejY31jC3Wie1093FSSTve51YvPdLuXpsrtmdLoOSyRW6eic7ZuW3xN9XO4fVofi2H%2F9ZViilDtIrhlieE24qXOGOg1aFU%2B8QevetM%3D\"}]}\r\ncf-cache-status: BYPASS\r\netag: W/\"5ee89896-1b63\"\r\ncontent-encoding: br\r\nset-cookie: __ddg8_=n8Hzr3H3M056yb4w; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg10_=1752903243; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg9_=162.158.223.9; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\r\ncf-ray: 9617d8f4e90756b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7011,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2fbb6eee4f2b18075aef2626fcd180d5","sha1":"8c59309a8c0f0b2c2c5b3a2583e7c498ccb030a9","sha256":"4da6ca0cd77056754444ca25ccbaa3a9bff5cc62a8a23f0af97cd28fb3877126","sha512":"f52d1173427a22994eb7aca0ebc086646737d0785ccc31352f11c7e6d1478c4a079e256f5d3f66ee09635eda055cfa384af787df3f529ed445ee0826ba9033ee","ssdeep":"192:cdPdqbGINoAiUmUgA4hlDGApeATA45aAphY:cdPdqbNBiUmzA4h5GApJTA48AphY","tlshash":"b1e1d91263b42dd63167c9573944cba1132f02a2fd19bdb771d8b4b4a3d3ac81c67e98","first_seen":"2023-04-09T23:06:27Z","last_seen":"2026-08-01T08:13:43.474239Z","times_seen":2765,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.a-ads.com/1770922?size=468x60","fqdn":"ad.a-ads.com","domain":"a-ads.com","tld":"com"},"ip":{"addr":"78.46.33.196","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.a-ads.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sun, 05 Jan 2025 00:00:00 GMT","end":"Tue, 09 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"29:38:CF:C5:B7:11:ED:58:BF:D9:11:7B:D8:5E:88:8A:48:33:9A:23","sha256":"45:FA:EB:77:C6:2A:DF:41:C5:2C:81:84:37:99:0F:D1:0C:30:DB:93:1C:13:5F:30:1E:A3:18:97:81:88:BA:0E"}}},"request":{"raw":"GET /1770922?size=468x60 HTTP/1.1\r\nHost: ad.a-ads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nstatus: 200 OK\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R)\r\nx-original-referer: https://script-money.cc/\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14545,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7346)","md5":"b3ad8fcaf42d4e424f25f77531d2dba6","sha1":"83614d74e45f56027f1e79130a49d2f73e91c050","sha256":"44b7ac30e794e3ff58ef3e02dca2381467286b47515867b8e4ebc9748284ea8a","sha512":"afa6594d04b750070be9f9dd71872a56c95d84ecc5e15d2ac37bfe5cb1012658d43aa7ef3891db71f07b6eb23f1b9344bd4cdd7479804325702f4c22db1f0d8e","ssdeep":"192:cj1YzXciFm6Bm+hDSoEdm+It048h8LwWPq0d50xQrTmhz5W18CwPbea8JeX:cwNIorNLPPq0PlwRf1","tlshash":"a162b7239299b22e343c3d5ffc4165ed7105f029eab21fd0f4e99a75d28b2ca1d9194c","first_seen":"2025-07-19T05:34:31.239889Z","last_seen":"2025-07-19T05:34:31.239889Z","times_seen":1,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":149,"dns":14,"connect":33,"send":0,"wait":40,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/3jpV4E_UA9gZWYy11LtggjoU/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG\u0026co=aHR0cHM6Ly9zY3JpcHQtbW9uZXkuY2M6NDQz\u0026hl=en\u0026v=3jpV4E_UA9gZWYy11LtggjoU\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=5oos0jjfc0ya","date":"2025-07-19T05:34:05.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:41:27 GMT","end":"Mon, 15 Sep 2025 08:41:26 GMT"},"fingerprint":{"sha1":"9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA","sha256":"C3:51:20:DB:42:A3:71:7A:7B:DE:45:2B:1D:8A:57:E1:26:22:CD:26:F6:CF:18:86:7F:48:52:DD:B1:F3:03:8C"}}},"request":{"raw":"GET /recaptcha/releases/3jpV4E_UA9gZWYy11LtggjoU/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42100\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Jul 2025 10:46:52 GMT\r\nexpires: Fri, 17 Jul 2026 10:46:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 14 Jul 2025 04:00:22 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 154033\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":79646,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"cc1944c69283c6366b5166ce2691a040","sha1":"27546bbd39a7804ec89e4b0328b887b5d2d09dea","sha256":"ea0ac13abff27308e97e086aa93c55997e9aee9ebd3557bfb6c2c08947583214","sha512":"4ea15e3f9f18ac0a71fe074e1fc8b721024f5b7ed46e4af2718c3d81c2702f6937b1940f6dfa7a8f82180eb582deb3300bf5f8a54364ce229a5bf3b7d65e70b8","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOImztthXwW53x7:1GRFauOxLA/+IcTO5LXV","tlshash":"09739fb338513a39fc3b9b656086b9ecf21cc527e5514bf6b5497920c3d70aa8253b07","first_seen":"2025-07-15T16:34:43.573797Z","last_seen":"2026-06-17T08:20:42.838986Z","times_seen":2126,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/clr?k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:07.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:40:16 GMT","end":"Mon, 15 Sep 2025 08:40:15 GMT"},"fingerprint":{"sha1":"B9:AB:CF:25:07:76:A5:52:8A:C6:4E:00:9A:A3:2B:D3:B6:32:A6:32","sha256":"BD:DA:50:EC:92:BD:74:5E:26:6B:7B:A3:D1:57:18:4D:FA:93:28:23:4E:B5:B5:B3:8E:11:6B:16:D9:66:FD:7E"}}},"request":{"raw":"POST /recaptcha/api2/clr?k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://script-money.cc/\r\nContent-Length: 1576\r\nOrigin: https://script-money.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/binary\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ndate: Sat, 19 Jul 2025 05:34:07 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T19:49:33.547358Z","times_seen":17677276,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-includes/css/dist/block-library/style.min.css","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=PtPCYqGufkmmVEn2; __ddg10_=1752903242; __ddg9_=162.158.222.66; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 15 Jul 2025 18:30:26 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f9dIpQ9CXJwG8X8yD262geRy9VgI2QBSarhPzY%2FOnEBi5tM%2BJhy9ENrJD1AlL%2B39ydwMJF7OVmIGafkqi6UigKRx2bPYWvS2E27dCSM%3D\"}]}\r\ncf-cache-status: BYPASS\r\netag: W/\"68769e42-1c679\"\r\ncontent-encoding: br\r\nset-cookie: __ddg8_=DNuHBe0ZJa3UEUsm; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg10_=1752903243; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg9_=162.158.222.21; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\r\ncf-ray: 9617d8f4e8f756b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":116345,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"a06b3af98203ddc303997e0e0caaff83","sha1":"04c3e7de74a890d18014588c4e1f077a52d79acc","sha256":"838ede31a58a3cdb411d6dd7f13cbe65d4a26193d9fa31882854e63938f12bac","sha512":"4ce1079b8dc07043b0201dc74f5888b50aa530a4e604eecd7673e225946de62c421b290a707014ddaf4366591f8c4767737b5689bc44d57eb0a11aef905cead9","ssdeep":"3072:seeJu1iQg5MG7x+qehvP0x2pck2qkA3Pu:b1iQg5MG7x+qehvP0x2pck2lA2","tlshash":"34b3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-15T17:03:07.843749Z","last_seen":"2026-08-02T18:48:50.967066Z","times_seen":177787,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/uploads/2020/08/telegram.png","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/uploads/2020/08/telegram.png HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=PtPCYqGufkmmVEn2; __ddg10_=1752903242; __ddg9_=162.158.222.66; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 36856\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 06 Aug 2020 07:35:56 GMT\r\netag: \"5f2bb2dc-8ff8\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=unXi0h6DOcWdhNpp6NtuKbYiPiJ8Hvh4qqDdD%2Ft5%2BylEale0YJC8sNmlsDmr6Fcwc8%2FgMiEZ8YKC1UWbP5OSIIWuvN0EPFlJN0MZVH8%3D\"}]}\r\nset-cookie: __ddg8_=ZHaNAKnUFkZwCOOx; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg10_=1752903243; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg9_=162.158.223.10; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\r\ncf-ray: 9617d8f4f91456b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36856,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 196 x 196, 8-bit/color RGBA, non-interlaced","md5":"536bb01b101fa0e9b7030b3f63f247f7","sha1":"8607a33bdd5f30cba62386fca0d7e8d842fb0558","sha256":"0974fdc99af30ec1ae8c25107facfe7aa34032edad3f26e20ef8882e5e8f36d3","sha512":"1dd6ec37fa862e1eca8f9614cd697d799ba38c65e21cb395879db04dd9846d6762f2eeb123c360b8f8f4d43e32c27d734f644b8ac89dd5d20ddb0b83832c447f","ssdeep":"768:v3I+vvszK8/Bxg4iupb30lJnv5YfNNF0HfEcvExJEbTSrGeqRv:v4+vkehwklJv5YfC/EcvExJiT8s","tlshash":"7ff2f1b25cb8d4308e420c899f20bda96bc57bf9bdb4ba0427757c58f9350a4d530bad","first_seen":"2025-07-19T05:34:31.243424Z","last_seen":"2025-07-19T05:34:31.243424Z","times_seen":1,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/plugins/contact-form-7/includes/swv/js/index.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=PtPCYqGufkmmVEn2; __ddg10_=1752903242; __ddg9_=162.158.222.66; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 10 May 2024 12:01:24 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2Bz8j20r13F%2FlgrFvjEndnZ8K5OYoWJ4HN3CoembH6Nchlybwj186%2BuKj6MSnjeGPkAVswMZzBn9S492JDOoQW%2Bh4KOaDgo6b6KYNjo%3D\"}]}\r\ncf-cache-status: BYPASS\r\netag: W/\"663e0c94-2cf9\"\r\ncontent-encoding: br\r\nset-cookie: __ddg8_=q148LOCljG8AKeiO; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg10_=1752903243; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg9_=162.158.222.45; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\r\ncf-ray: 9617d8f5092556b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11513,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11513), with no line terminators","md5":"efc27e253fae1b7b891fb5a40e687768","sha1":"ad12044651ffac0badcd0e42f32edef91678b1ff","sha256":"46e36dd6ca93014e4915c723632bf180d27cc96ccfb7c26e69213e1a82129a62","sha512":"42fad6d6beeab116cbe8b149df6b64d65c4998c0a2cc0562bc831ad02acd82f2b6b9b33836047aafd6c2d7cf31a6e91feaca42a2fa6c6077b7f737dea40d36e6","ssdeep":"192:wNmuf8NM+UHN9Rr7lZBNWzd4PMfm/vx3imWAel/L0Fx18b2VautyX2fkiYgu0OOJ:wwuf8N5UHvRr5ZBNW+PMfm/hibLexa2b","tlshash":"a03203e5a197e1f0c7c228b88c16c551b2bf862cb889d054fb5cccd22d1ce57266b77a","first_seen":"2024-03-02T15:39:15Z","last_seen":"2026-08-02T18:52:08.357868Z","times_seen":30099,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/uploads/2021/08/heder-10-1.png","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/uploads/2021/08/heder-10-1.png HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=DNuHBe0ZJa3UEUsm; __ddg10_=1752903243; __ddg9_=162.158.222.21; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 20354\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Ziyo1DdOsq5hRY5DNZFwvqwbfI1005T5ZlXB4H2B4D8i06rcsXqSTw5HytR5yO31T3q9qV0Wgh10cYP6lob0j89qSd86%2By5lQKyrg3FFgby9%2FkWxV9KHLmXCB9H%2B1IBqiAs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nset-cookie: __ddg8_=3PTKrGusmG1on41G; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:03 GMT\n__ddg10_=1752903243; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:03 GMT\n__ddg9_=162.158.222.180; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:03 GMT\r\nlast-modified: Fri, 20 Aug 2021 12:06:03 GMT\r\netag: \"611f9aab-4f82\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\ncf-ray: 9617d8f92806568e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=787\u0026min_rtt=0\u0026rtt_var=495\u0026sent=274\u0026recv=206\u0026lost=0\u0026retrans=0\u0026sent_bytes=163160\u0026recv_bytes=14128\u0026delivery_rate=9451030\u0026ss_exit_cwnd=14920\u0026ss_exit_reason=2\u0026cwnd=25729\u0026unsent_bytes=0\u0026cid=767adc091e7ee273\u0026ts=1382\u0026inflight_dur=101\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20354,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1045 x 260, 8-bit/color RGBA, non-interlaced","md5":"d2650f76a2270402d6f4f688d2b8103a","sha1":"891424e661eaef4f5f9ec6e80413453601bf762d","sha256":"33ca0f36cfa17cbe9379803b23a77cca7cf9ae0afea7c0d6cadcf647a8731173","sha512":"626f4ba89c83e1098f4b2d081ef09cdf11b7dd0504c35071d99e15ce46d779e3c0cfadcd40227d4ca31cba36f8395f535cf877fbe8ce8e15185dc30091f27c06","ssdeep":"96:fSw+doSKOkEWm3GcC2AZjp63McSxNXrNCNsc59d:fSwQP/k63GcC1ZUMcQ5a","tlshash":"f492422afea17e78c424a132a7e150420cf32bcba6a05e5475ee4c9d1f94b9ddc7b301","first_seen":"2025-07-19T05:34:31.24531Z","last_seen":"2025-07-19T05:34:31.24531Z","times_seen":1,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/uploads/2025/06/16465465.jpg","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/16465465.jpg HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=DNuHBe0ZJa3UEUsm; __ddg10_=1752903243; __ddg9_=162.158.222.21; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28242\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qOQgBseO2Z%2F62Amw9suq5T%2FchAV2HSwftKChjuEr9OHRZTh8IoBtRmJmAJtGntIdneaTfV9jWDsZxjEVYYnEDnt2wtqj2cpMSfJHb0w7qHT9cG9BQppYDSOrZV30CCmurTY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nset-cookie: __ddg8_=LgOzrGibe2KhLw2T; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:03 GMT\n__ddg10_=1752903243; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:03 GMT\n__ddg9_=162.158.222.53; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:03 GMT\r\nlast-modified: Sat, 14 Jun 2025 10:28:28 GMT\r\netag: \"684d4ecc-6e52\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\ncf-ray: 9617d8f92807568e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=758\u0026min_rtt=0\u0026rtt_var=1095\u0026sent=204\u0026recv=198\u0026lost=0\u0026retrans=0\u0026sent_bytes=70800\u0026recv_bytes=13372\u0026delivery_rate=9451030\u0026ss_exit_cwnd=14920\u0026ss_exit_reason=2\u0026cwnd=25729\u0026unsent_bytes=0\u0026cid=767adc091e7ee273\u0026ts=1188\u0026inflight_dur=52\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28242,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 644x352, components 3","md5":"373fdf155a0a7770cbea82fcd84770c3","sha1":"6a4e4ee4e3220566337bd75c4a7e38395d41900f","sha256":"442bf2601b2eaded9f01ece7c25f2c0bdea2173eeea0063770065b7b17b0fe5a","sha512":"b507f05b4e0c09921c7d79c8d6168727733fadafe9ac5255a5760069bc4e72cf21498bd3b17c3782041d5bc33e5e304c014aafd203fb54a6596571db3765bff2","ssdeep":"768:WwM3ELb1VT8X80xJsrzCaIVLSyAnyQAReOcA6BNRfxJIE:WwM3Kd8s0xJsLIpPoyPeq6pH","tlshash":"8bc2e1222d668af238cd45fde404cd5846ca5d84a8a3647bc7f517efbd810e606d3e0c","first_seen":"2025-07-19T05:34:31.246351Z","last_seen":"2025-07-19T05:34:31.246351Z","times_seen":1,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.gravatar.com/avatar/ae913a9e484cd432a26acde77d4d109c96ff258c476d5317271cfcef9dbff9db?s=48\u0026d=identicon\u0026r=g","fqdn":"secure.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:04.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Jun 2025 19:44:00 GMT","end":"Fri, 12 Sep 2025 19:43:59 GMT"},"fingerprint":{"sha1":"86:5A:6E:34:F2:0D:1D:03:CB:B2:AA:04:09:C1:F7:38:10:DC:5B:76","sha256":"C7:8E:F0:EB:AF:82:F3:C6:55:72:E2:03:58:95:06:9B:4D:49:8C:10:CE:E6:17:09:75:54:1D:C5:AD:83:8D:C5"}}},"request":{"raw":"GET /avatar/ae913a9e484cd432a26acde77d4d109c96ff258c476d5317271cfcef9dbff9db?s=48\u0026d=identicon\u0026r=g HTTP/1.1\r\nHost: secure.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 05:34:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 1574\r\nlast-modified: Wed, 11 Jan 1984 08:00:00 GMT\r\nlink: \u003chttps://gravatar.com/avatar/ae913a9e484cd432a26acde77d4d109c96ff258c476d5317271cfcef9dbff9db?s=48\u0026d=identicon\u0026r=g\u003e; rel=\"canonical\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nexpires: Sat, 19 Jul 2025 05:39:04 GMT\r\ncache-control: max-age=300\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 4\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1574,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"e209c9855dcdaf677476e15a19bc243d","sha1":"4a0d61370b9b6dd5b3354b33d07a90b2ebe600c2","sha256":"770805ae9e8de6b9b23a120ea5f5060809030094710228e6f0cfc21c3a18e56d","sha512":"36314e17144ce88e7bd55ee5f6b6e02395718a0e4e0dd747c9c7c17c5a3b98e0880dcad0a634793447d1424dfe7bafbb84f615d6292225355fda30bbefda6dda","ssdeep":"","tlshash":"e6315ca31f528d3c015cdc86d8197cf6759f8cf4131211156305c5d2ea17b75083b29b","first_seen":"2025-07-19T05:34:31.24738Z","last_seen":"2025-07-19T05:34:31.24738Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":3,"dns":57,"connect":8,"send":0,"wait":7,"receive":1,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/clr?k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:07.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:40:16 GMT","end":"Mon, 15 Sep 2025 08:40:15 GMT"},"fingerprint":{"sha1":"B9:AB:CF:25:07:76:A5:52:8A:C6:4E:00:9A:A3:2B:D3:B6:32:A6:32","sha256":"BD:DA:50:EC:92:BD:74:5E:26:6B:7B:A3:D1:57:18:4D:FA:93:28:23:4E:B5:B5:B3:8E:11:6B:16:D9:66:FD:7E"}}},"request":{"raw":"POST /recaptcha/api2/clr?k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://script-money.cc/\r\nContent-Length: 1576\r\nOrigin: https://script-money.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/binary\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ndate: Sat, 19 Jul 2025 05:34:07 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T19:49:33.547358Z","times_seen":17677276,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/website_scripts/metamask-wallet-clone-script.html","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-19T05:34:02.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /website_scripts/metamask-wallet-clone-script.html HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/8.0.9\r\nx-pingback: https://script-money.cc/xmlrpc.php\r\nlink: \u003chttps://script-money.cc/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://script-money.cc/wp-json/wp/v2/posts/7086\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://script-money.cc/?p=7086\u003e; rel=shortlink\r\nstrict-transport-security: max-age=31536000;\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mlHY7QgedpowRih%2BF9AIAFoQt19eOjmpA%2B2VFTORnIX0f9x57LH4XkeO%2FIYAZ5VL51bKp%2BO3fjl8X%2BqMFNbWGdfCKih16PEBg4B2cr8%3D\"}]}\r\ncontent-encoding: br\r\nset-cookie: __ddg8_=PtPCYqGufkmmVEn2; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:02 GMT\n__ddg10_=1752903242; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:02 GMT\n__ddg9_=162.158.222.66; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:02 GMT\n__ddg1_=GZqKHPmDkZwhsipXQPGI; HttpOnly; Path=/; Domain=script-money.cc; Expires=Sun, 19 Jul 2026 05:34:02 GMT\r\ncf-ray: 9617d8ef3c2b56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":92783,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8856), with CRLF, LF line terminators","md5":"93bb6f86653a95c4a2ec075b0a119100","sha1":"63acae13fe019aa24bb0def6a2e0076953184f33","sha256":"e1be55b87772b16889e88adb0bd7a3e95b88cd48a4845f30bf1a4183ef015e09","sha512":"c4eecb219c4ba72fdbf2e6dc54db48faa314fe8f31e5a4836819bd5ac00c5b0bf1aea32f1a9e2ad62e17dc95fa1e934495d283a4b21f89a999f53c19842b61cf","ssdeep":"1536:TxapYdMmtB8dPPptaABqcqDKaDKZ5djxYV5ilzA7wzMa/654vy:TQedMmtByRts3yYV5ilzA7wzMa/654vy","tlshash":"24933a336d4cea7a232557956532f3aee3a36236ce41c568b3fca15c87c5fe10862349","first_seen":"2025-07-19T05:34:31.248734Z","last_seen":"2025-07-19T05:34:31.248734Z","times_seen":1,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":14,"dns":0,"connect":1,"send":0,"wait":542,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/plugins/contact-form-7/includes/css/styles.css","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=PtPCYqGufkmmVEn2; __ddg10_=1752903242; __ddg9_=162.158.222.66; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 10 May 2024 12:01:24 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ph2M22m4sa3qaLGM1WdcGhdpzVkRIcU6H%2BIkJB4rNgCeeHYObdZxwMEIK2ZPiGdegmFR%2FATtIAU%2FsjpwOqHP1wFHFh831%2FnO2B6KP%2Bg%3D\"}]}\r\ncf-cache-status: BYPASS\r\netag: W/\"663e0c94-b4e\"\r\ncontent-encoding: br\r\nset-cookie: __ddg8_=bgqVOaY6iLVjaxDK; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg10_=1752903243; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg9_=162.158.222.42; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\r\ncf-ray: 9617d8f4e8fa56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2894,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3fd2afa98866679439097f4ab102fe0a","sha1":"dbc9c4139e49d0d9fb41b7191aad1a2db6c555fd","sha256":"ccd31ffa708d025833f954b3e0560cedd58df9a0d2706b2ccee5f501c5b2467b","sha512":"82811ef42abd80cbebd4a74d35475fc3871478fc25a486b08bb7e04921b7824db56c56b2191e9ab56a421552b483a2e64f966396711e5f248afae9d1ded22cb2","ssdeep":"","tlshash":"12511164660028504bff92d77ea9db047b6e7481ce1faf97b0c21a3c5b786851223e5e","first_seen":"2023-11-16T07:59:28Z","last_seen":"2026-08-02T19:10:40.590397Z","times_seen":85318,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/clr?k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:07.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:40:16 GMT","end":"Mon, 15 Sep 2025 08:40:15 GMT"},"fingerprint":{"sha1":"B9:AB:CF:25:07:76:A5:52:8A:C6:4E:00:9A:A3:2B:D3:B6:32:A6:32","sha256":"BD:DA:50:EC:92:BD:74:5E:26:6B:7B:A3:D1:57:18:4D:FA:93:28:23:4E:B5:B5:B3:8E:11:6B:16:D9:66:FD:7E"}}},"request":{"raw":"POST /recaptcha/api2/clr?k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://script-money.cc/\r\nContent-Length: 1576\r\nOrigin: https://script-money.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/binary\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ndate: Sat, 19 Jul 2025 05:34:07 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T19:49:33.547358Z","times_seen":17677276,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-includes/js/jquery/jquery.min.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=PtPCYqGufkmmVEn2; __ddg10_=1752903242; __ddg9_=162.158.222.66; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 10 May 2024 11:59:58 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MKJlHmCKG%2BGiyStOi8gix5KsKODQYbKypq8TWEMPhk0m6w3kjpAgUuHhKVRvqXyruV4%2FnYK%2BEtPgohr4cxu0OnbHAbLIVrxyC42nQDQ%3D\"}]}\r\ncf-cache-status: BYPASS\r\netag: W/\"663e0c3e-15601\"\r\ncontent-encoding: br\r\nset-cookie: __ddg8_=6lTcgtYnwxvjZ3tg; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg10_=1752903243; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg9_=162.158.222.20; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\r\ncf-ray: 9617d8f4e90856b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-02T19:50:09.608229Z","times_seen":1001431,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/plugins/contact-form-7/includes/js/index.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=PtPCYqGufkmmVEn2; __ddg10_=1752903242; __ddg9_=162.158.222.66; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 10 May 2024 12:01:24 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=by%2FSqZuLCCp%2FxAFTV3l4F%2FnDayt2OulCoPzf8cT3V7j7V2JPmjxzEiivW1WKiNBppai9%2FeokFrrIA9azzg4LIceKCnAfqj3ZUT0yUMI%3D\"}]}\r\ncf-cache-status: BYPASS\r\netag: W/\"663e0c94-32fe\"\r\ncontent-encoding: br\r\nset-cookie: __ddg8_=bilqVkJVwwLw1fgT; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg10_=1752903243; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg9_=162.158.222.32; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\r\ncf-ray: 9617d8f5092a56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13054,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13054), with no line terminators","md5":"917602d642f84a211838f0c1757c4dc1","sha1":"392df3fb4b0ec96ce4ebb5616e6b2a5c55a54bf8","sha256":"d702e5ed1e573918d912775ac1e88987fc177aa51efe1253a08f71ab54f96516","sha512":"92afc44a2405434f119e8e57732e232cdfadbdba1948d3e89eab596282119d14cf9707f36037b22c9dd6f3104aadecc28b9301d044842d60dd43cea98ddbc929","ssdeep":"384:I/Igki2JjSTXMpzZJ3eY+3kY+H6cqv8s+pfYm03pYToAAA:I/IgNwjSTXMpeY+3kY0dqv8s+pfYm03M","tlshash":"a042c6e1822955321ef606e390e513c1665575aef44bcaa1e498dc6e18bccc324f3fb7","first_seen":"2024-03-02T15:39:15Z","last_seen":"2026-08-02T17:43:01.280337Z","times_seen":13728,"resource_available":true,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/uploads/2019/02/w.png","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/uploads/2019/02/w.png HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=PtPCYqGufkmmVEn2; __ddg10_=1752903242; __ddg9_=162.158.222.66; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 1707\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 24 Jun 2020 08:02:17 GMT\r\netag: \"5ef30889-6ab\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hh1b6YWRPdfiqNs85L%2B6kPdUrfe7px6QrbDideA1nk3DRIS79IM9TGNMTMVcteCjXWo2hGNauPoK6SFc%2BvyqjfcoHGGSyZ8%2BF0QlHjk%3D\"}]}\r\nset-cookie: __ddg8_=y8V7ezDfMMDIUEqk; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg10_=1752903243; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg9_=162.158.222.61; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\r\ncf-ray: 9617d8f5092256b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1707,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 182 x 33, 8-bit/color RGB, non-interlaced","md5":"e83997fff0243ee2cd06466c8ffe2f62","sha1":"f17c2c6942218336832eacc1ba7cc90c0f1a9f66","sha256":"91df113eec01c0c2fa172ffe774ec7582af0474cb16b17c2501ffb3761d7a484","sha512":"63ae4adc4e3bb19b9405bd4654886435fafa5e02fdc107055c3193af0e65df90be3acfc09a429d72696f9bf78737880aab5dface905c1146588c9dc85bd907fc","ssdeep":"","tlshash":"0e311ad6208e5cba8ced546ffd594068ac1176567d873a367f4d88233608577f4c10ed","first_seen":"2025-07-19T05:34:31.251559Z","last_seen":"2025-07-19T05:34:31.251559Z","times_seen":1,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/themes/sahifa/images/stripe.png","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/themes/sahifa/images/stripe.png HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/wp-content/themes/sahifa/style.css\r\nCookie: __ddg8_=DNuHBe0ZJa3UEUsm; __ddg10_=1752903243; __ddg9_=162.158.222.21; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 93\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=p%2Bra98nsLMJIIxYU97t226bnJ8VoLo5C8Rm1dhq1nazA4KqnKUBSp3Ue3TJTzcX4%2BGiXjay8Qw2Be08Y01GnWS13o6TuBWHSn9GWUFvpxcmBanzVf1k%2F7xpNIxlzF%2FiwGqo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nset-cookie: __ddg8_=wpt1vW3jOEbG9z0L; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:03 GMT\n__ddg10_=1752903243; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:03 GMT\n__ddg9_=162.158.223.12; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:03 GMT\r\nlast-modified: Tue, 16 Jun 2020 09:17:05 GMT\r\netag: \"5ee88e11-5d\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\ncf-ray: 9617d8f9f810568e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=674\u0026min_rtt=0\u0026rtt_var=358\u0026sent=256\u0026recv=204\u0026lost=0\u0026retrans=0\u0026sent_bytes=140809\u0026recv_bytes=13662\u0026delivery_rate=9451030\u0026ss_exit_cwnd=14920\u0026ss_exit_reason=2\u0026cwnd=25729\u0026unsent_bytes=0\u0026cid=767adc091e7ee273\u0026ts=1270\u0026inflight_dur=86\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 12 x 14, 8-bit/color RGBA, non-interlaced","md5":"51386a2f66885faebd7ce34fceee3c7f","sha1":"d428fb21cb1c35bb8d1a579df9aa7034c62f8e61","sha256":"23c79bb552706be2ca97bdb259921e3269a5263326b147676c2f7909a45b58c9","sha512":"d6495b52d4c0f6d6d599e2fff20581e2cdfb547fea78c93ee09158457126e7e37683d490d56144981b48f4960ef1590165215aa583b36b6865e47737e5d1bac3","ssdeep":"","tlshash":"c1b012c653813d3ff9462133014d0422d43591940170010c6e0b5125f5565549464349","first_seen":"2023-05-01T15:12:34Z","last_seen":"2026-08-02T12:12:43.830329Z","times_seen":3593,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/reload?k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG\u0026co=aHR0cHM6Ly9zY3JpcHQtbW9uZXkuY2M6NDQz\u0026hl=en\u0026v=3jpV4E_UA9gZWYy11LtggjoU\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=5oos0jjfc0ya","date":"2025-07-19T05:34:07.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:40:16 GMT","end":"Mon, 15 Sep 2025 08:40:15 GMT"},"fingerprint":{"sha1":"B9:AB:CF:25:07:76:A5:52:8A:C6:4E:00:9A:A3:2B:D3:B6:32:A6:32","sha256":"BD:DA:50:EC:92:BD:74:5E:26:6B:7B:A3:D1:57:18:4D:FA:93:28:23:4E:B5:B5:B3:8E:11:6B:16:D9:66:FD:7E"}}},"request":{"raw":"POST /recaptcha/api2/reload?k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-protobuffer\r\nContent-Length: 10722\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG\u0026co=aHR0cHM6Ly9zY3JpcHQtbW9uZXkuY2M6NDQz\u0026hl=en\u0026v=3jpV4E_UA9gZWYy11LtggjoU\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=5oos0jjfc0ya\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\ndate: Sat, 19 Jul 2025 05:34:07 GMT\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: _GRECAPTCHA=09ANMylNB_7uI1AeulwwtYozFM7XOnBALizXc14cQpUjWdQVrMbYcvv5sMnJ-UoMzGwZYMnywlzpzT6yB5anMT2k8; Expires=Thu, 15-Jan-2026 05:34:07 GMT; Path=/recaptcha; Secure; HttpOnly; Priority=HIGH; SameSite=none\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nexpires: Sat, 19 Jul 2025 05:34:07 GMT\r\ncache-control: private\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37407,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with very long lines (37402)","md5":"c7b7ff9de06833cab5a855b34830a5bb","sha1":"f15aedb03e29c97226846536791093d1ca6549f8","sha256":"2a08825adde6206898b161b53869031c7e84d75b92168fc959d4cb54fe531d94","sha512":"5f76022d0f69fc105769d4311649c4077658e5ebda97dc921983d4bd0b1399c9622b82399f19bb342d966333ef3e989bdc6b2bb4752772703462f56630e632f0","ssdeep":"768:/3evGLJX/zApj3OV3DnBbt7x85EOporfMP1quv/zUtNv7Wu:/3evSPEp83DBbT8SOphH7+TWu","tlshash":"1cf27d33e783b0da6f7da60066c3a57e633ab44730a359ce16d706c8483dea617b419d","first_seen":"2025-07-19T05:34:31.253132Z","last_seen":"2025-07-19T05:34:31.253132Z","times_seen":1,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":115,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/themes/sahifa/js/tie-scripts.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/themes/sahifa/js/tie-scripts.js HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=PtPCYqGufkmmVEn2; __ddg10_=1752903242; __ddg9_=162.158.222.66; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nset-cookie: __ddg8_=Jn8YoTFBHi23mRGn; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:03 GMT\n__ddg10_=1752903243; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:03 GMT\n__ddg9_=162.158.222.85; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:03 GMT\r\nlast-modified: Tue, 16 Jun 2020 09:17:09 GMT\r\netag: W/\"5ee88e15-11fd1\"\r\nstrict-transport-security: max-age=31536000;\r\ncf-cache-status: BYPASS\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Rbu2F%2BDnEnSLZlUBmbTBINok2fEM0IKIoLHEfk%2B2PE745GC%2BewBs4RH97sZFa0pd%2B%2F%2BI6Dy5pwoqxmZzSZ9%2Bmj0NM02k%2FysA%2BicZltd9LUwAXdPdWiXYwgH6zwHWrttDw%2Fg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9617d8f5093656b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1094\u0026min_rtt=409\u0026rtt_var=437\u0026sent=97\u0026recv=63\u0026lost=0\u0026retrans=0\u0026sent_bytes=81825\u0026recv_bytes=4323\u0026delivery_rate=29815577\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=47d37009f8e80ba4\u0026ts=1246\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":73681,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20455)","md5":"787e23cbd267f3caedef4289b491d2d0","sha1":"581336df3c364b14ecd654363bfa384ca81a8a35","sha256":"34136f8778bd5d12414394945200539a743ce5510f0189e34933eea2c44c8621","sha512":"67bc77cadbc558a8c0e060369d15b1551ae88942ff8171cad56c3e5ed0225fda532aa87fb9960299f6bb77cd30fc2597a9900b304db97764ffa02ba41e932cbf","ssdeep":"1536:zf9nRW2+N1CKrKy6hH6Wy/JqcV6QPW0JwaD5YhzJv1Um/TlyXqUIS+kIg+sih3f8:zf9nRW2+Nt4hM","tlshash":"0473f849b300b175d5f722bd782f420971769a62b406e87cf1b8c5d87cf0a451ab3eea","first_seen":"2023-03-07T12:21:39Z","last_seen":"2026-06-20T18:54:07.763837Z","times_seen":31,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/themes/sahifa/js/ilightbox.packed.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/themes/sahifa/js/ilightbox.packed.js HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=PtPCYqGufkmmVEn2; __ddg10_=1752903242; __ddg9_=162.158.222.66; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 16 Jun 2020 09:17:07 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EldXBrSjJzOYVjd8czmdLWcdS%2BCdQzRDpKH8aHIMjroLA1PZdi47oKwqV61WnqM%2FyAlPZJUYU%2FsNe7foOelxYx6ZyNqCaWEFSqPZWqY%3D\"}]}\r\ncf-cache-status: BYPASS\r\netag: W/\"5ee88e13-137ad\"\r\ncontent-encoding: br\r\nset-cookie: __ddg8_=gxhCR56SUrj9N88F; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg10_=1752903243; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg9_=162.158.222.126; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\r\ncf-ray: 9617d8f5194356b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":79789,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2026)","md5":"6925324c0c75ab9db234ce7da072faeb","sha1":"80491389cf716c242334e9d7f2ee9c7ddf2044aa","sha256":"1f560c3e9fb5beeed86da7d5be1ae459c22af6ec1d58f77e2a89a20063ef7ba2","sha512":"806ef93e0c6bd6a6fdc4027d22e317b78d49d1d1ca16e63cd22529f8735a31b4bc6c442bc52f38b69d0e282ef051a5b3d2e4ba68697d93c8aa39327548ec8355","ssdeep":"1536:vO06VKFnoUol4R/h/4/KMT/v/5/gCa9QsdudbgQqhFIire06yOIRYaqqG9U3+RQ9:mCM+9BHh+AgIO9UEpc","tlshash":"d7733be8b2503a6285b325e6405f424e6236cb37f809d416b06cd9d99cf4d8d22b7fbd","first_seen":"2023-03-07T01:10:29Z","last_seen":"2026-08-01T16:44:53.678292Z","times_seen":887,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/clr?k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:07.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:40:16 GMT","end":"Mon, 15 Sep 2025 08:40:15 GMT"},"fingerprint":{"sha1":"B9:AB:CF:25:07:76:A5:52:8A:C6:4E:00:9A:A3:2B:D3:B6:32:A6:32","sha256":"BD:DA:50:EC:92:BD:74:5E:26:6B:7B:A3:D1:57:18:4D:FA:93:28:23:4E:B5:B5:B3:8E:11:6B:16:D9:66:FD:7E"}}},"request":{"raw":"POST /recaptcha/api2/clr?k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://script-money.cc/\r\nContent-Length: 1576\r\nOrigin: https://script-money.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/binary\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 19 Jul 2025 05:34:07 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T19:49:33.547358Z","times_seen":17677276,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=PtPCYqGufkmmVEn2; __ddg10_=1752903242; __ddg9_=162.158.222.66; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 05 Nov 2023 00:08:24 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8HeE4jF8ykl7eL7M0bIjVmzijBMPP01uqBANSWqVGFbwvadMCtuIDI9WoZC8D%2B5zFCQztYz2HtieMDr5AB4iWk1LoLpikc71U%2BXej7Q%3D\"}]}\r\ncf-cache-status: BYPASS\r\netag: W/\"6546dcf8-3509\"\r\ncontent-encoding: br\r\nset-cookie: __ddg8_=5m1PbbUqiweMnnWI; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg10_=1752903243; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg9_=162.158.222.83; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\r\ncf-ray: 9617d8f4e90a56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-02T19:50:31.264592Z","times_seen":917993,"resource_available":true,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:42:14 GMT","end":"Mon, 15 Sep 2025 08:42:13 GMT"},"fingerprint":{"sha1":"18:68:D7:A6:6E:58:DB:F0:4B:B6:53:AF:BA:2B:82:59:4F:36:D8:73","sha256":"C2:66:D2:BC:13:71:4F:72:4A:DE:85:BA:8D:BA:D1:40:C2:E6:CB:25:A3:25:62:EB:D9:17:BF:87:E7:EF:4D:67"}}},"request":{"raw":"GET /recaptcha/api.js?render=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sat, 19 Jul 2025 05:34:03 GMT\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1051,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1051), with no line terminators","md5":"e526b16a63d4a5ac20e08cce079b7c18","sha1":"9a862a7bd96634c66a2aca3f61a632b38c7b93cd","sha256":"ccd5ff1eaf8ad23bf6ef217deff62e6e81ad0f61375e4c0fbd0248a1801e433a","sha512":"554562f309e616c14c927162e37493655bf99f02cee1d86393aa2c63e4358b66b277109301b5ee842a82d27519405ad9767bd46fa4fa4d1134dbf717233af76d","ssdeep":"","tlshash":"c31112b61a09e03907720ae5e1ffdbb1e452701df15cc9e8a515dec41e69ccbce0a585","first_seen":"2025-07-19T05:34:31.256116Z","last_seen":"2025-07-19T05:34:31.256116Z","times_seen":1,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":112,"dns":1,"connect":7,"send":0,"wait":23,"receive":0,"ssl":163},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.a-ads.com/a-ads-banners/520980/468x60?region=eu-central-1","fqdn":"static.a-ads.com","domain":"a-ads.com","tld":"com"},"ip":{"addr":"78.46.33.196","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://ad.a-ads.com/1770922?size=468x60","date":"2025-07-19T05:34:04.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.a-ads.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sun, 05 Jan 2025 00:00:00 GMT","end":"Tue, 09 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"29:38:CF:C5:B7:11:ED:58:BF:D9:11:7B:D8:5E:88:8A:48:33:9A:23","sha256":"45:FA:EB:77:C6:2A:DF:41:C5:2C:81:84:37:99:0F:D1:0C:30:DB:93:1C:13:5F:30:1E:A3:18:97:81:88:BA:0E"}}},"request":{"raw":"GET /a-ads-banners/520980/468x60?region=eu-central-1 HTTP/1.1\r\nHost: static.a-ads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.a-ads.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 05:34:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 12638\r\nx-amz-id-2: s6io3KrA/Rm1x1eCd6rnaqOxa9DqM8JmCYPgImdb6B67HGiYAIeVt+V9vNAh4GJkFyemIbG9P28=\r\nx-amz-request-id: 4W0SXHH306BV6JJ3\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Mon, 19 Aug 2024 09:27:46 GMT\r\netag: \"232cdd212e382673591847587cb6746e\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=315360000\r\nx-amz-version-id: odXS1vqqhSfF26kT.DxTukUfutOdOBep\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12638,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 468 x 60, 8-bit/color RGBA, non-interlaced","md5":"232cdd212e382673591847587cb6746e","sha1":"307def23e553e28469d1d80cbbe28dce479bd63f","sha256":"c6e25cff8bffcf46bc3ef8606bdd71838a2c6ba9b00492dae4a56461175264b5","sha512":"4e50a5cfb599fbbc0bb2387e53e330fcd1a503dea06cb7969a564b3bcc5369a9a4e18ae2b2f2e88811f920b6e678e7d607c55a3428ee0712b279d6acf8edbeb9","ssdeep":"384:TnzdITYG/0w126xV90eLRzT7v3ydyel/FjVIC8LF:3dU/FxV9zLhT76d5FGrLF","tlshash":"6842c055055e8ed74e69e8018452db32b33fd3448b4a595c8ee247fcf2e38e22981bc8","first_seen":"2024-10-11T08:47:40.726395Z","last_seen":"2026-06-02T16:39:48.930506Z","times_seen":21,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.gravatar.com/avatar/d7e8e64c5fe6f1f753d83183005d0d27208ffc709da35d9c01652c83bda4fdda?s=48\u0026d=identicon\u0026r=g","fqdn":"secure.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:04.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Jun 2025 19:44:00 GMT","end":"Fri, 12 Sep 2025 19:43:59 GMT"},"fingerprint":{"sha1":"86:5A:6E:34:F2:0D:1D:03:CB:B2:AA:04:09:C1:F7:38:10:DC:5B:76","sha256":"C7:8E:F0:EB:AF:82:F3:C6:55:72:E2:03:58:95:06:9B:4D:49:8C:10:CE:E6:17:09:75:54:1D:C5:AD:83:8D:C5"}}},"request":{"raw":"GET /avatar/d7e8e64c5fe6f1f753d83183005d0d27208ffc709da35d9c01652c83bda4fdda?s=48\u0026d=identicon\u0026r=g HTTP/1.1\r\nHost: secure.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 05:34:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 1796\r\nlast-modified: Wed, 11 Jan 1984 08:00:00 GMT\r\nlink: \u003chttps://gravatar.com/avatar/d7e8e64c5fe6f1f753d83183005d0d27208ffc709da35d9c01652c83bda4fdda?s=48\u0026d=identicon\u0026r=g\u003e; rel=\"canonical\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nexpires: Sat, 19 Jul 2025 05:39:04 GMT\r\ncache-control: max-age=300\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 4\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1796,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"622c829aba108cc7bffaa40f3fb490bb","sha1":"8bec8895cdf5ac2f8053c018d0f09697356e3d42","sha256":"3ba0de8ca3d4ffb906e6ba1013f4c938200aa85c3374545b0e2dbd12935dcf96","sha512":"a55617fcef611aa158bc444c1a64caf91738388a45b7e024d6c8d2adc522acaaa9963b76e2ecfa17cd8f3bc69472b38a743b221f51803cf083f66f961915606e","ssdeep":"","tlshash":"a83109ae7205fca9774d18e83141983cc5ea8839f6d833a445791a7f2c12cd1bc52e07","first_seen":"2025-07-19T05:34:31.258157Z","last_seen":"2025-07-19T05:34:31.258157Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":58,"connect":8,"send":0,"wait":48,"receive":1,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-includes/js/wp-emoji-release.min.js","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:04.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=3PTKrGusmG1on41G; __ddg10_=1752903243; __ddg9_=162.158.222.180; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:04 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GfELrTvleoT%2BKCpU5lSocfTjmLj1Y3G2Kz7Xg1SDkGB54QFmTQXrlgq5k6lPNiUpRnOVIfrxBjKo3nt9xax%2FNjkxLm5Rm5RxuexpIYJ9HouAsUdesQZn5kz5ccUFcBIU0DY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nset-cookie: __ddg8_=zWBRERT73Qi5y2PQ; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:04 GMT\n__ddg10_=1752903244; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:04 GMT\n__ddg9_=162.158.222.73; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:04 GMT\r\nlast-modified: Tue, 15 Jul 2025 18:30:26 GMT\r\netag: W/\"68769e42-4b33\"\r\nstrict-transport-security: max-age=31536000;\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\ncf-ray: 9617d8fc1819568e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1940\u0026min_rtt=0\u0026rtt_var=2144\u0026sent=299\u0026recv=210\u0026lost=0\u0026retrans=0\u0026sent_bytes=195491\u0026recv_bytes=14641\u0026delivery_rate=9451030\u0026ss_exit_cwnd=14920\u0026ss_exit_reason=2\u0026cwnd=25729\u0026unsent_bytes=0\u0026cid=767adc091e7ee273\u0026ts=1582\u0026inflight_dur=116\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19251,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16277)","md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-08-02T19:32:21.326107Z","times_seen":211846,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://ad.a-ads.com/1770922?size=468x60","date":"2025-07-19T05:34:04.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:41:28 GMT","end":"Mon, 15 Sep 2025 08:41:27 GMT"},"fingerprint":{"sha1":"DC:40:BF:B1:59:C9:CC:B5:4A:38:2D:D0:16:8D:06:A5:1D:B4:08:8B","sha256":"6A:4A:14:17:EA:BE:21:42:B0:C2:EF:35:F4:04:40:86:BD:19:EC:62:AA:D1:E7:38:C3:DB:96:05:A7:25:F5:AB"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.a-ads.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 19 Jul 2025 05:34:04 GMT\r\ndate: Sat, 19 Jul 2025 05:34:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"eea55531c78093c1f80ece9ef6485401","sha1":"406db5cf6ad96dd0b4f7b40dab664c24605e63be","sha256":"b984ffbaf076dc36a9c279697c9eed1539c031769c94aba15ea9b0c4782ddb1a","sha512":"72b0b3950b215a114a026c075d34f79fcc75d58bb13ae230a6afb8130c1470f3ac78900168626b0f9cb88bedb0afa22feba4b00fedb86295d532d55a8618c5f6","ssdeep":"192:9xNktq346lDYxOLuq3/pl8xxruLq3iwllCxEtkq3RXlGV:/bGo4VuCI","tlshash":"93228c92402b9500ab971cc233cf7f3aaece50896485d1b96ff90cd59ceeda6436871d","first_seen":"2025-05-29T20:41:13.521716Z","last_seen":"2025-09-10T17:16:34.521529Z","times_seen":3000,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":94,"dns":1,"connect":21,"send":0,"wait":33,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/uploads/2025/06/0-126-310x165.jpg","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/0-126-310x165.jpg HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=PtPCYqGufkmmVEn2; __ddg10_=1752903242; __ddg9_=162.158.222.66; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10969\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 21 Jun 2025 15:34:36 GMT\r\netag: \"6856d10c-2ad9\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LY%2Ba1g6ekvrtuvs2%2FgYsSI5GAopNxz3QbNNWTt45YdiBHFfmoC5vTk8A2AA2PX1Ymfqx7NGeLp75lQfevA93qGIBoLfSkQhDB%2BF9JqA%3D\"}]}\r\nset-cookie: __ddg8_=NOC73zg8x2uS9gRy; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg10_=1752903243; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg9_=162.158.222.162; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\r\ncf-ray: 9617d8f4e90e56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10969,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 310x165, components 3","md5":"14c0b3ac23a04e6f052fd5816b74bb56","sha1":"5b82089c6b371bff72e1e62ab214921309fee358","sha256":"f519780611e0180b0f853bc09d9ce461fcdc964ded2f7830ae33cac594e444d3","sha512":"ea7a400c9c4fde389b78f325f66a8f2a4cbeb0ebde3c85e9fa4116fd24f758c9f97dbfc61b736d442f8cc3d9e94f8221b12db3e9f8612e18af213213179bcc9d","ssdeep":"192:/3C1IM0w8neCjpSb82X53rgGi+O6VFHvk2xBC6W4CmElVSfEN/IIwyouL7j:fYvQ2XJPiD6Hvk2m6WPIcN/IIpX","tlshash":"5d32af2ea35751059def6c9c0ebff65d633880179cd99b948137e5d2026c0dc9ac174d","first_seen":"2025-07-19T05:34:31.260002Z","last_seen":"2025-07-19T05:34:31.260002Z","times_seen":1,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=3jpV4E_UA9gZWYy11LtggjoU","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG\u0026co=aHR0cHM6Ly9zY3JpcHQtbW9uZXkuY2M6NDQz\u0026hl=en\u0026v=3jpV4E_UA9gZWYy11LtggjoU\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=5oos0jjfc0ya","date":"2025-07-19T05:34:05.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:40:16 GMT","end":"Mon, 15 Sep 2025 08:40:15 GMT"},"fingerprint":{"sha1":"B9:AB:CF:25:07:76:A5:52:8A:C6:4E:00:9A:A3:2B:D3:B6:32:A6:32","sha256":"BD:DA:50:EC:92:BD:74:5E:26:6B:7B:A3:D1:57:18:4D:FA:93:28:23:4E:B5:B5:B3:8E:11:6B:16:D9:66:FD:7E"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=3jpV4E_UA9gZWYy11LtggjoU HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG\u0026co=aHR0cHM6Ly9zY3JpcHQtbW9uZXkuY2M6NDQz\u0026hl=en\u0026v=3jpV4E_UA9gZWYy11LtggjoU\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=5oos0jjfc0ya\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Sat, 19 Jul 2025 05:34:05 GMT\r\ndate: Sat, 19 Jul 2025 05:34:05 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"042fae76f4996e4281aa618393c114f8","sha1":"31e850eb9bf5573c5064826b758100e648b9d1db","sha256":"338fd23200611d6e900e6b1102817cc4b46a9658aa1437fd67945cd68ddab823","sha512":"b14fa9b556c0daefc99d2ec855ea5df87e4e5f8c9c88ef8dd8a0612dfece59e7436c9f9917debb9426e2f29aecad7c8ae860b3801c783e896a249583622bbd4d","ssdeep":"","tlshash":"81b012270aa0d42c0c000702c4a793e8f1159028d790f0f840285fd443152734c0d400","first_seen":"2025-07-15T16:34:43.577604Z","last_seen":"2026-01-31T06:21:34.864959Z","times_seen":2029,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/themes/sahifa/fonts/BebasNeue/BebasNeue-webfont.woff","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/themes/sahifa/fonts/BebasNeue/BebasNeue-webfont.woff HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/wp-content/themes/sahifa/style.css\r\nCookie: __ddg8_=DNuHBe0ZJa3UEUsm; __ddg10_=1752903243; __ddg9_=162.158.222.21; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 19996\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IfgAo35jg%2FC3J7g7bCMkpk3V0yNli%2BGcO1Hvg6CEoTCZvs07U1soC38FuqByWI%2BsNoKHaImmynG7qjEsL%2B%2FLwtRjOaoHBEECk%2BW0%2Bn2OXYVcPzY8xUEGB8dbqcORMIG%2Fh%2Fg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nset-cookie: __ddg8_=XKjDeJMbrCQhAXhG; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:03 GMT\n__ddg10_=1752903243; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:03 GMT\n__ddg9_=162.158.222.73; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:03 GMT\r\nlast-modified: Tue, 16 Jun 2020 10:00:10 GMT\r\netag: \"4e1c-5a8309bd6de80\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;\r\ncf-cache-status: BYPASS\r\ncf-ray: 9617d8f9880a568e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=674\u0026min_rtt=0\u0026rtt_var=358\u0026sent=257\u0026recv=204\u0026lost=0\u0026retrans=0\u0026sent_bytes=141796\u0026recv_bytes=13662\u0026delivery_rate=9451030\u0026ss_exit_cwnd=14920\u0026ss_exit_reason=2\u0026cwnd=25729\u0026unsent_bytes=0\u0026cid=767adc091e7ee273\u0026ts=1276\u0026inflight_dur=86\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19996,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, CFF, length 19996, version 1.300","md5":"07db5c04835629ee7284a0481197443d","sha1":"9f56f7e1b14b89828393aef3ff581a4a22320af0","sha256":"e8c2e4d6ab0ad2f055a6cc3c777d31531e665758db5ca815f2613afad72f7088","sha512":"1b68b27830d2cd9d794b9d883706b8c994375633e57615cf6ea9f38726cd3d7517f2e9b04a7a928774d06d90ed27b5d97e1b700aa88e8f6ec228dcf1b9bc4c6b","ssdeep":"384:npGvCEVqMZQz+jIw67yzlxdsmBxY3PYboCb+beEXnHBHa7Ez:npeCEVei67IpnigbzkX3HBHTz","tlshash":"7c92d051cf7ea548faa200754021d7bbeb3f1c65a7404c2f584496f808ce272e391db6","first_seen":"2023-04-07T03:07:26Z","last_seen":"2026-08-02T12:12:43.8264Z","times_seen":3503,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":237,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld27PwZAAAAAMuaI74lMe19-NjzEC9Z_5FoQHQG\u0026co=aHR0cHM6Ly9zY3JpcHQtbW9uZXkuY2M6NDQz\u0026hl=en\u0026v=3jpV4E_UA9gZWYy11LtggjoU\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=5oos0jjfc0ya","date":"2025-07-19T05:34:05.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:41:27 GMT","end":"Mon, 15 Sep 2025 08:41:26 GMT"},"fingerprint":{"sha1":"9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA","sha256":"C3:51:20:DB:42:A3:71:7A:7B:DE:45:2B:1D:8A:57:E1:26:22:CD:26:F6:CF:18:86:7F:48:52:DD:B1:F3:03:8C"}}},"request":{"raw":"GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Jul 2025 10:09:07 GMT\r\nexpires: Fri, 17 Jul 2026 10:09:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 156298\r\nlast-modified: Mon, 16 Oct 2017 17:33:02 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15552,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15552, version 1.0","md5":"285467176f7fe6bb6a9c6873b3dad2cc","sha1":"ea04e4ff5142ddd69307c183def721a160e0a64e","sha256":"5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7","sha512":"5f9bb763406ea8ce978ec675bd51a0263e9547021ea71188dbd62f0212eb00c1421b750d3b94550b50425bebff5f881c41299f6a33bbfa12fb1ff18c12bc7ff1","ssdeep":"384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi","tlshash":"8462e103f2bc4c01e786193ebb5870237205272619efa67780ce7ea4c65ec81a39b457","first_seen":"2023-04-05T04:58:40Z","last_seen":"2026-08-02T18:16:35.220658Z","times_seen":341674,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/uploads/2024/11/telegram-304.png","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/telegram-304.png HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=PtPCYqGufkmmVEn2; __ddg10_=1752903242; __ddg9_=162.158.222.66; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 10393\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 21 Nov 2024 05:45:20 GMT\r\netag: \"673ec8f0-2899\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oYPB19wvbpusIxxqB5x0SZNmsCrHo2Z6SxMSo3%2Bye%2FHyKaccremn9VAy%2FnxiBiCcMplJw5UXb4RhtvbeVRl0IfWho9qsgdQUsxlWHFc%3D\"}]}\r\nset-cookie: __ddg8_=uUsGtGrB6FJNFVdZ; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg10_=1752903243; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg9_=162.158.223.9; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\r\ncf-ray: 9617d8f4f91756b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10393,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 304 x 91, 8-bit colormap, non-interlaced","md5":"966e96b743c0a2339994acea5e0228c1","sha1":"8de75c30f832661e414e057c1f37a0e3fd16cf59","sha256":"a851c96c049c0729163073cfd803f07a6cb5270c7d7c1f5eb0db9714c9db6dbb","sha512":"9651f72419632584835a265cd978eb726a3e183ea9fef8c7af2fa2c439fc7527629a4e727c8e0896c6adccca9f04ca43d8f57fcefdc45628f62645965851d087","ssdeep":"192:w+LPSjCsHUb2Nu1T5WpG9kHJ1n3D5jzFk+1+YyehuLA0X:nLtyUbw4T5WpGkHjNHFr1pyC2","tlshash":"fb22b0cbfe1d610b49320593fc5805a64523d9f405f2d55ea4e3aa2e018cb88b8937e7","first_seen":"2025-07-19T05:34:31.262326Z","last_seen":"2025-07-19T05:34:31.262326Z","times_seen":1,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/themes/sahifa/fonts/fontawesome/fontawesome-webfont.woff2?v=4.6.3","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/themes/sahifa/fonts/fontawesome/fontawesome-webfont.woff2?v=4.6.3 HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/wp-content/themes/sahifa/style.css\r\nCookie: __ddg8_=DNuHBe0ZJa3UEUsm; __ddg10_=1752903243; __ddg9_=162.158.222.21; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-length: 71896\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1MyG0Tg8N6St%2FZ%2FiSqEuK3tJXp4IFhz34kMFK4Ds1JSJGWhdvaU1%2BcFdfU9MwQ7MZ0T%2FJlq4f9hOsKfPIjBrqSqUYxqSRAjU9khtJk1LizhjIQEDNxSEpfp4%2BqGPVFbH7dI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nset-cookie: __ddg8_=skG2Ag9UFXCD7A08; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:03 GMT\n__ddg10_=1752903243; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:03 GMT\n__ddg9_=162.158.222.42; Domain=.script-money.cc; Path=/; Expires=Sat, 19-Jul-2025 05:54:03 GMT\r\nlast-modified: Tue, 16 Jun 2020 10:00:13 GMT\r\netag: \"118d8-5a8309c04a540\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;\r\ncf-cache-status: BYPASS\r\ncf-ray: 9617d8f93808568e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1164\u0026min_rtt=0\u0026rtt_var=1626\u0026sent=177\u0026recv=193\u0026lost=0\u0026retrans=0\u0026sent_bytes=35549\u0026recv_bytes=12792\u0026delivery_rate=7560824\u0026ss_exit_cwnd=14920\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=767adc091e7ee273\u0026ts=1164\u0026inflight_dur=45\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":71896,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 71896, version 4.393","md5":"e6cf7c6ec7c2d6f670ae9d762604cb0b","sha1":"97e438cc545714309882fbceadbf344fcaddcec5","sha256":"7dacf83f51179de8d7980a513e67ab3a08f2c6272bb5946df8fd77c0d1763b73","sha512":"dd945face918edf20b7283b7416ae7b3735269945e3f3e379e770425024c1de1fcdc7cfb952381d295d0d1f58c8ab191fd29030f2051d10501557bd7bfbe3658","ssdeep":"1536:tA4xrPyfyECsyz2wCjYfhO/ORzc7erabg5Z06GEQMo:t3jayEC/2/OI/gcq+bg5C6G7","tlshash":"756302f87e71b01d5a306f74e56730e2491c9283e79593f8a8297cb681b2f493742c7a","first_seen":"2023-04-05T09:22:06Z","last_seen":"2026-08-02T17:58:11.687406Z","times_seen":41874,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/3jpV4E_UA9gZWYy11LtggjoU/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:04.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:41:27 GMT","end":"Mon, 15 Sep 2025 08:41:26 GMT"},"fingerprint":{"sha1":"9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA","sha256":"C3:51:20:DB:42:A3:71:7A:7B:DE:45:2B:1D:8A:57:E1:26:22:CD:26:F6:CF:18:86:7F:48:52:DD:B1:F3:03:8C"}}},"request":{"raw":"GET /recaptcha/releases/3jpV4E_UA9gZWYy11LtggjoU/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://script-money.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 338856\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Jul 2025 10:37:28 GMT\r\nexpires: Fri, 17 Jul 2026 10:37:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 14 Jul 2025 04:00:22 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 154596\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":792131,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (539)","md5":"a214e79d68265c5ec3299d22a42be239","sha1":"0c42ddf3fb3c54cda30d01135e62d938aae9a343","sha256":"ba0ae1c9ea7f888cd598baa556f3bb53cb4b0623daedf1401edca155408e165a","sha512":"e07fac8355c7064656d4f732415c48039901a83df4dd963eb83db2a4c5b8f4413ddb3ac810067155af132f4fa438a9d0d07a2ac6eb323001d9812f76a63aa2e4","ssdeep":"12288:QD5/1PspJgRxGSGDNZoW1WNpJSCOYHSDc1ebbmQ8lIS+ILfZ:e5NVMcWSpU9I/ebaLaSV9","tlshash":"4df44aeab293f4714362bdfa10331009537da52a849c495fb1959af43ff0808757aebb","first_seen":"2025-07-15T16:34:43.571399Z","last_seen":"2026-05-13T23:42:05.123997Z","times_seen":2769,"resource_available":true,"data":null}},"time_used":663,"timings":{"blocked":166,"dns":24,"connect":44,"send":0,"wait":23,"receive":103,"ssl":294},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.gravatar.com/avatar/57c5830ff8effae154796d3b07ff1733f2b0bce55ecb6a07e1b1ff02ec909899?s=48\u0026d=identicon\u0026r=g","fqdn":"secure.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:04.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Jun 2025 19:44:00 GMT","end":"Fri, 12 Sep 2025 19:43:59 GMT"},"fingerprint":{"sha1":"86:5A:6E:34:F2:0D:1D:03:CB:B2:AA:04:09:C1:F7:38:10:DC:5B:76","sha256":"C7:8E:F0:EB:AF:82:F3:C6:55:72:E2:03:58:95:06:9B:4D:49:8C:10:CE:E6:17:09:75:54:1D:C5:AD:83:8D:C5"}}},"request":{"raw":"GET /avatar/57c5830ff8effae154796d3b07ff1733f2b0bce55ecb6a07e1b1ff02ec909899?s=48\u0026d=identicon\u0026r=g HTTP/1.1\r\nHost: secure.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 05:34:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 1483\r\nlast-modified: Wed, 11 Jan 1984 08:00:00 GMT\r\nlink: \u003chttps://gravatar.com/avatar/57c5830ff8effae154796d3b07ff1733f2b0bce55ecb6a07e1b1ff02ec909899?s=48\u0026d=identicon\u0026r=g\u003e; rel=\"canonical\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nexpires: Sat, 19 Jul 2025 05:39:04 GMT\r\ncache-control: max-age=300\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 4\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1483,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"543643291eb1d9b78f898d09c3646b0e","sha1":"4c72d955769528eaa8f02055ad24faea308f0dda","sha256":"5247a078e3c2598d63a750a25339213147857264193bf4dbb455939c2ce111b7","sha512":"e8c2cc8311c77d90a69aea3503520e14ca4945d1368849dd717bfb62e98bfe85930d07411ad782e9326ab35f5558bfaaedcab13e13e9bcfb3bc3e7bc26939580","ssdeep":"","tlshash":"a231e9b10465ccf993d8aab37860cb00767470b7415f6ba17345f7e955fdf144049712","first_seen":"2025-07-19T05:34:31.263801Z","last_seen":"2025-07-19T05:34:31.263801Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":65,"connect":8,"send":0,"wait":9,"receive":3,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/3jpV4E_UA9gZWYy11LtggjoU/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=3jpV4E_UA9gZWYy11LtggjoU","date":"2025-07-19T05:34:05.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:41:27 GMT","end":"Mon, 15 Sep 2025 08:41:26 GMT"},"fingerprint":{"sha1":"9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA","sha256":"C3:51:20:DB:42:A3:71:7A:7B:DE:45:2B:1D:8A:57:E1:26:22:CD:26:F6:CF:18:86:7F:48:52:DD:B1:F3:03:8C"}}},"request":{"raw":"GET /recaptcha/releases/3jpV4E_UA9gZWYy11LtggjoU/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 338856\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Jul 2025 10:37:28 GMT\r\nexpires: Fri, 17 Jul 2026 10:37:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 14 Jul 2025 04:00:22 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 154597\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":792131,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (539)","md5":"a214e79d68265c5ec3299d22a42be239","sha1":"0c42ddf3fb3c54cda30d01135e62d938aae9a343","sha256":"ba0ae1c9ea7f888cd598baa556f3bb53cb4b0623daedf1401edca155408e165a","sha512":"e07fac8355c7064656d4f732415c48039901a83df4dd963eb83db2a4c5b8f4413ddb3ac810067155af132f4fa438a9d0d07a2ac6eb323001d9812f76a63aa2e4","ssdeep":"12288:QD5/1PspJgRxGSGDNZoW1WNpJSCOYHSDc1ebbmQ8lIS+ILfZ:e5NVMcWSpU9I/ebaLaSV9","tlshash":"4df44aeab293f4714362bdfa10331009537da52a849c495fb1959af43ff0808757aebb","first_seen":"2025-07-15T16:34:43.571399Z","last_seen":"2026-05-13T23:42:05.123997Z","times_seen":2769,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script-money.cc/wp-content/uploads/2025/06/1-47-310x165.jpg","fqdn":"script-money.cc","domain":"script-money.cc","tld":"cc"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script-money.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Jun 2025 01:56:21 GMT","end":"Mon, 01 Sep 2025 02:54:51 GMT"},"fingerprint":{"sha1":"7D:69:76:0C:5F:61:83:62:60:3B:25:C8:E0:7E:AC:1E:6F:75:27:53","sha256":"2D:2E:75:4A:E1:1A:33:7E:2B:4F:3F:29:68:64:32:26:09:2B:26:D7:3A:C2:E5:66:0A:F2:EB:85:B9:69:34:DE"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/1-47-310x165.jpg HTTP/1.1\r\nHost: script-money.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/website_scripts/metamask-wallet-clone-script.html\r\nCookie: __ddg8_=PtPCYqGufkmmVEn2; __ddg10_=1752903242; __ddg9_=162.158.222.66; __ddg1_=GZqKHPmDkZwhsipXQPGI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9954\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 21 Jun 2025 15:22:37 GMT\r\netag: \"6856ce3d-26e2\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=03E4oeNcjmas1vwX8%2BlmwwOWJYIutQt0mbL8gzCNs%2BqcuQqf76yKz78dYtgjdtf18xEnUzh6n49xHhbWaRnJ0UrJa3F3mBpGJk7tN9Y%3D\"}]}\r\nset-cookie: __ddg8_=KqHrBX66l84qs9EH; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg10_=1752903243; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\n__ddg9_=162.158.222.213; Path=/; Domain=script-money.cc; Expires=Sat, 19 Jul 2025 05:54:03 GMT\r\ncf-ray: 9617d8f4f91056b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9954,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 310x165, components 3","md5":"2a2b8bd1032764d653a3f3e3eb8783b8","sha1":"ee4acd49271fa87bde728cf64e3fe71fd44146d0","sha256":"6339443f1a227a563a3b0ab572f9872848775faaa26c61c3a6e2f27f01ce6e02","sha512":"763d5356cd2e1eb58a25548d2e9411c935578882038b64b5bdaf65dc624b4eb6546f71ebdc307252d01b05f39b130a7d88526a631f9c6d4cf960c2c68a2cbdac","ssdeep":"192:/34qAcGmkyAyrfus9vsJSeResLJ1lyiavRMs4aEW7nEVmt1XMjUzBgRxI07WkWpV:f4qfGfyeheoJjU14aLEVYcjUQC06kuOe","tlshash":"f822bfbfb162632bfa6d3ca775131536e11924129cb22d560a3fcbc0c979ac025ce40e","first_seen":"2025-07-19T05:34:31.264672Z","last_seen":"2025-07-19T05:34:31.264672Z","times_seen":1,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cookieinfoscript.com/js/cookieinfo.min.js","fqdn":"cookieinfoscript.com","domain":"cookieinfoscript.com","tld":"com"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://script-money.cc/website_scripts/metamask-wallet-clone-script.html","date":"2025-07-19T05:34:03.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookieinfoscript.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 May 2025 05:20:41 GMT","end":"Thu, 21 Aug 2025 06:19:11 GMT"},"fingerprint":{"sha1":"6A:7E:D3:0D:B7:EF:A3:15:7C:26:35:73:24:3A:E0:9C:14:37:02:C6","sha256":"EE:4D:C9:DA:FA:7F:DB:F8:DB:98:9C:2E:B6:76:67:81:69:CA:7D:24:52:17:84:4E:EA:49:01:43:6C:29:8E:D5"}}},"request":{"raw":"GET /js/cookieinfo.min.js HTTP/1.1\r\nHost: cookieinfoscript.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://script-money.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 05:34:03 GMT\r\ncontent-type: application/x-javascript\r\nx-amz-id-2: leZaY4lisUkVUvA5naYFr4kT9dZi+E0ryHvzGcjIzRfQI923p/qDX4D1DYMeOxUSwPSBxc4Xyn0=\r\nx-amz-request-id: D2YQTDYGX1W00EJ5\r\nx-amz-meta-cb-modifiedtime: Mon, 03 Jul 2023 14:52:01 GMT\r\nlast-modified: Wed, 05 Jul 2023 10:39:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fksk3h0x%2FHs6ulufoXBZIBGmV8W8Plz%2FlAhRVFLGlA5rspDYKZGPUkOcFuMNNwCPUTX%2FHYlLgRXE1CAte1F6rC6bruxHXdsYiXi%2FSaPrnmhP4A%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 6668\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\netag: W/\"d15d93068c1121f63008407d339bd819\"\r\ncontent-encoding: br\r\ncf-ray: 9617d8f57eec56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7651,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (7650)","md5":"d15d93068c1121f63008407d339bd819","sha1":"00ee31ec3bf273a658cc7d4efea4833a3189aa14","sha256":"0ab31a97c236988bb6e415187b2197cdbf689664173015dffd6da8eb96b1626f","sha512":"0ffce3520958d748828f2c82aacd1f2d6b755d4147da80aac4927b5c1711936d9689346b75b089e04d45676ad3a530fa7ca54cf7451db78ca9d83b7993805906","ssdeep":"192:ur7/M2825F6rqLcKuxRF3gVHwjh8yajsyf:uPr81rqPu7F3gJwjh8yajsyf","tlshash":"c1f1950cbbca6b1502db51e6206f214db035a33c45a8854cbc78e7f3da74d8a74bba74","first_seen":"2023-03-07T01:31:51Z","last_seen":"2026-08-01T01:00:14.637291Z","times_seen":597,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":33,"connect":2,"send":0,"wait":18,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}