{"report_id":"854231cd-4c6c-486e-95dc-ee58ec38c773","version":6,"status":"done","tags":["malicious","clickfix"],"date":"2026-01-25T01:18:53Z","url":{"schema":"https","addr":"cryptorecoverysystem.com/","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":0,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"cryptorecoverysystem.com/","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"title":"Cryptocurrency Wallet Recovery | Crypto Recovery System","dom":{"size":177412,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8832)","md5":"41d587727d3a291ce4aa2412c8e62a77","sha1":"b384e6155c83e1b4c1667515cef4eecf2b72ab7c","sha256":"43d59cf5c1e4ea51c015fca5ccef6b5e77dbad94751764fc3e1b9c3dc9d7d5e2","sha512":"6894fedb982160d3db3e2c93df0c1d4600603e72599935bd5ca4b09f63631032a13d468d701bea440a1ee25a3e73e8fef7f399f1feb359a0dfe325c5b79ccc77","ssdeep":"3072:KdU7gNKbpX8dJ8EWlZyRzrCL711kvG7XZ7tvM0kwQc0DaReF3SKTlycLbTP95:Ky4J8EW+Cs","tlshash":"22045d61b9eb6033019752e9b136f71cb2b29157c902da9077fc07886fd6fe12a23764","dom_hash":"domhash00c72c704cdca62c075d10033559f667","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"cryptorecoverysystem.com/","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":0,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-01T01:18:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rewallet.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null},{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"summary":[{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-01-21T14:53:39.137741Z","alert_count":0,"request_count":1,"received_data":18556,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-18T22:14:28.232245Z","alert_count":0,"request_count":6,"received_data":149188,"sent_data":3292,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-01-18T22:25:16.015191Z","alert_count":0,"request_count":1,"received_data":3788,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-18T22:17:29.309663Z","alert_count":0,"request_count":2,"received_data":137252,"sent_data":1355,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cryptorecoverysystem.com","ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"domain_registered":"2023-02-25","domain_rank":0,"first_seen":"2025-11-23T09:47:24.907231Z","last_seen":"2026-01-24T20:16:57.795021Z","alert_count":93,"request_count":92,"received_data":3347000,"sent_data":47739,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"PixelYourSite","description":"PixelyourSite is now probably the most complex tracking tool for WordPress, managing the Facebook Pixel, Google Analytics, Google Ads Remarketing, Pinterest Tag, Bing Tag, and virtually any other script.","website":"https://www.pixelyoursite.com","common_platform_enumeration":"","icon":"PixelYourSite.png","categories":["WordPress plugins","Analytics"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW:6.9","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"bxSlider:2.8.6","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"Contact Form 7:6.1.1","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"Elementor:3.15.0","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Breadcrumb NavXT:7.4.1","description":"Breadcrumb NavXT is a WordPress plugin compatible with WordPress versions 4.9 and up.","website":"https://github.com/mtekk/Breadcrumb-NavXT","common_platform_enumeration":"","icon":"Breadcrumb NavXT.svg","categories":["WordPress plugins"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MailChimp","description":"Mailchimp is a marketing automation platform and email marketing service.","website":"https://mailchimp.com","common_platform_enumeration":"cpe:2.3:a:thinkshout:mailchimp:*:*:*:*:*:*:*:*","icon":"mailchimp.svg","categories":["Marketing automation","Email"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"MailChimp for WordPress:4.10.6","description":"MailChimp for WordPress is an email marketing plugin that enables you to build subscriber lists.","website":"https://www.mc4wp.com","common_platform_enumeration":"","icon":"MailChimp for WordPress.png","categories":["WordPress plugins","Marketing automation"]},{"name":"Yoast SEO:25.6","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Custom Twitter Feeds:2.3.1","description":"Custom Twitter Feeds for Wordpress.","website":"https://wordpress.org/plugins/custom-twitter-feeds","common_platform_enumeration":"","icon":"","categories":["Widgets","WordPress plugins"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-18T22:20:30.851037Z","alert_count":0,"request_count":1,"received_data":355583,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"themedox.com","ip":{"addr":"72.60.161.191","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"domain_registered":"2022-11-30","domain_rank":730929,"first_seen":"2022-12-01T10:43:21Z","last_seen":"2026-01-19T02:21:56.868756Z","alert_count":0,"request_count":1,"received_data":172858,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-01-18T22:25:45.99612Z","alert_count":0,"request_count":2,"received_data":993,"sent_data":2002,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"18.158.107.33","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-01-21T14:08:53.931567Z","alert_count":0,"request_count":1,"received_data":379,"sent_data":541,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rewallet.com","ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2010-03-22","domain_rank":0,"first_seen":"2026-01-24T20:16:57.183952Z","last_seen":"2026-01-24T20:16:57.183952Z","alert_count":0,"request_count":6,"received_data":4842,"sent_data":2713,"comment":"","tags":null,"fingerprints":[{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"rewallet.de","ip":{"addr":"104.248.241.14","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-06-20T07:34:18.865819Z","last_seen":"2026-01-24T20:16:58.178874Z","alert_count":6,"request_count":6,"received_data":1075,"sent_data":2689,"comment":"","tags":null,"fingerprints":[{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}]},{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2026-01-19T00:34:04.865491Z","alert_count":0,"request_count":11,"received_data":17007,"sent_data":5139,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/pixelyoursite/dist/scripts/public.js?ver=11.1.0","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"344afe2595913c25da6247b52067df30","sha1":"e3191e09cb7bdd1c6feb59e4201bf707f065de00","sha256":"5904ec212fb81cd2d992808c4144d2251eab241f31b1ab16f1fbe18a5693494f","sha512":"191d752e4abc164130f208812dabd60f5aac5f6b71bb1cf76efdcf9494b3fe68d7bef3314e0f06874b42fd2781645cd9b0d55664c41ac59236fc7d624d8b6062","ssdeep":"1536:yM+Ih9C9S0l928Uj50+uPevzq1Tb1tnTFmnWSiNRySEhQu2JQIHHnhFSSnUZ2EmX:n+Ivp5KPevzq1Tb1xIzjEpDH","tlshash":"42e3724d25fb211811fb367c4bdfa005b2309167608ddd507d4c1fe49f90a2a9aeabee","size":146500,"data":"","first_seen":"2025-06-18T18:09:23.686093Z","last_seen":"2026-07-24T14:57:22.476619Z","times_seen":1615,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/elementor-frontend-js-before","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"49baab4c67148f7440be3bf515eae7b4","sha1":"73cde103c6b652179d7a4471a0a88ab2dc2cc253","sha256":"426eed4570e71c98e139607491d805b9e0e5fe4a9a4219ad5e92d2f079830c83","sha512":"7611306c6d952396deb12063863e05f4594f3357db629e03127de35e482498156e689d433becc747336f6feb11949ef488ff165d1cca9a0b7ee59623bd281be1","ssdeep":"48:S4AFkPuRv/1r51vZ4dXHpMut3IZPeCWP5JixJBt4VUVTw6ELHhydCInZam:S5qPCb1zUUeXRJwJBiVa8vFyUInIm","tlshash":"47a18331f645a9bb43e387b1391bf607aa6c0524d041bdb8f4fc486d25f2a642207e57","size":4708,"data":"","first_seen":"2026-01-24T20:17:02.41691Z","last_seen":"2026-01-25T01:18:59.571368Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.1","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-07-27T11:25:35.395398Z","times_seen":228331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3819c3569da71daec283a75483735f7e","sha1":"ecd40a5cc6f0b76200c454ca880210dc301cfab8","sha256":"214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0","sha512":"2710655dff46653daeb3a6e3f6d36f885e51d5b375738ee353aca40c6f66ae1a7dece57039d58747012ed9ea2822191143c06f270123b8cc580f6a41b8e8aef4","ssdeep":"192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz","tlshash":"994221493e0724222faf41f9fc1b468a632b013894c584bbb8e4d5dd18f19296f77b78","size":12198,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-07-27T11:10:52.300082Z","times_seen":73633,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/ht_ctc_app_js-js-extra","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"85fb4dfc03c6d19e199e0ae7687bcddf","sha1":"81972562e080840b29d7a6fb3b9a9838245d09bd","sha256":"d91773b66dd1467358aa944bddb9dec99c4baf0b933034319fdf3483eb6614ab","sha512":"f72501ac73c6f56d029d7b67d37cea9a6c1fdad8508e961f48fb7ab077620a4fb5bcd4d812b873dfb8a57ec6d59d688758f47b6cda19500009c96e2e9c0c7691","ssdeep":"","tlshash":"4a61ad5ef0297d738a4bf83939cc2e1769bc69adf1f4405c80008ec80b9d9ab7282e55","size":3391,"data":"","first_seen":"2026-01-24T20:17:02.427338Z","last_seen":"2026-01-25T01:18:59.573077Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/js/jquery.ba-throttle-debounce.min.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d79df4b4d417c8096ae500167e5dffd1","sha1":"0f36123058eab0c10113043afe21c7783e662c6e","sha256":"bdbebd724e0bfb51f5b69fa3d8fadd999d66f32a1f939611a6735580b7f4d2c0","sha512":"87e455e82c83c9846ece145e19d27689eafa710284716baa6640f947b0cf4f43834d1576a61ee92723d28fe326cdbd5c616e1b4d345450345160e6b24bd9db20","ssdeep":"","tlshash":"3d011099228a102253e1ae235b7b53cb972ae08439f954c9d4a0e4c0bd20c8eb30ad7c","size":730,"data":"","first_seen":"2023-03-12T18:07:49Z","last_seen":"2026-07-19T14:48:56.382353Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f6a42f5915d5fa527f2f799f4fb91162","sha1":"e8c3e61ee1f1c072fbfdbe1632eac06f435dbf16","sha256":"e83d2b8e60cf13fd687047a2f8925080a236fae0ab1d9adfc29176b0aa637684","sha512":"b82c000f2064a4a9fb93320bb4d388492628e9c2abe2f68b3033c3a5c7f2a322cbcc0cacb4955a54b01b5c1b835c84deb5a70a1193038510b11087a24925342a","ssdeep":"","tlshash":"0a6131197c9c6cde0ec6d684c1956b03477c1e717283bdb8d1482e2c12cf39127a6e23","size":3209,"data":"","first_seen":"2026-01-25T01:18:59.573734Z","last_seen":"2026-01-25T01:18:59.573734Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/js/slick.min.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42863,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-07-27T11:20:12.160717Z","times_seen":109104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-27T11:25:35.422058Z","times_seen":910204,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/pixelyoursite/dist/scripts/tld.min.js?ver=2.3.1","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"35a22bea641003807bc6e7ee80eb14eb","sha1":"80bb6fca40db4f6c5d6ff20f078328082997e3c9","sha256":"6c459c688d05bbda53ede4e2aac0862d2f4599efb297cf753129866dba170401","sha512":"f05227d29ef3e35809482aa4223246bde7353ac11ca2ab05c34b36221a24f1cd6be49995d226b56c5b1a3dbe7d9f3b0e983b44a8783fb8c35a53e4f3afe383f9","ssdeep":"1536:knDTjitRV0MXpb3AX1rxGsv31zgdKkWx14lH+:knfjitR+MqFrb1MdRN+","tlshash":"25d33fdd8d0c6b539667f8b07212701be5e4fd9ed6dc07c868a3b99898c8558e2dcbc0","size":141079,"data":"","first_seen":"2024-08-20T09:57:00.893654Z","last_seen":"2026-07-27T08:43:48.574986Z","times_seen":14421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/js/main.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ccdb432f398e7d548a90ece76406b4a","sha1":"526cdfb6b714f5a913b917fdf4b6dcc8dcae69f5","sha256":"828b09b62a00647c8697861d3a2e4cc2f2f986017318767e62c3f7abafb48415","sha512":"adbd9e8db2998ee6b582d19f601c826c1c17680ddd6dfa29d74618d276f5f43b02637e0e837a82b268c5a3693c49c1061b8d2f5c438dadecd296fea8d270d6e3","ssdeep":"96:WxOKROh9ke3bmeCE+Z2BC4W3cM7c/xra9yWm14wAZ6cp9i5iFze8/c4N:WP2kIbIEe4W3cpxQyh11YJ9RZ/c4N","tlshash":"d5c16848b126107e52ab73a88d3f4659e6a544a3c7476219f87c06b43f84b2c71d2f6f","size":5611,"data":"","first_seen":"2023-03-13T14:15:12Z","last_seen":"2026-04-22T15:03:20.998788Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/ccpw_bxslider_js-js-after","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b4d8a40d3d110bc8531fb2019dcfb22","sha1":"8ea0678bf0ace5762fc3bee67830423e95279584","sha256":"928ae8b35dda7d10b7ee493940484d62dde505c57b28042125f6b91a80d4aced","sha512":"4b02fb275698773a4f155dfd590f48350d2373cddf2068964fb4b8d14310c82e03bf45bfe63248269ddcb221c3661825206240ad921d1fc824b328da1f544f50","ssdeep":"","tlshash":"87519780fb5e25236173303606afa083a9ae2074d81248a3fc9d900807dd41900d9490","size":2706,"data":"","first_seen":"2026-01-24T20:17:02.428549Z","last_seen":"2026-01-25T01:18:59.57467Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/js/app.js?ver=4.26","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6252c5e4cb01fb14115e6572a0782968","sha1":"c353b9a3591e1239ae483f724a1fa192b6d7ae3e","sha256":"c2f2cc27fa8c6d22babd5b47d27176007870e93444ac321ed53dbd24aab669b1","sha512":"30b4ad5eebfe7897bac0ac529b9dbe898101e118dc7e4e2ec2cb1a81799ced04e162786acc396f7e99fe3e3a947db67094b36075139b5bbc2abc7a2e0c041dc3","ssdeep":"192:KPRr+j1EyONPgT8Uz2+DXUAWHmT0tK7Y3tG+VCYo67+ct26z8i1LugrYQvM:QWqyzvzhXUAiK7Y3cit6g8QE","tlshash":"5132b5ec7624b0b502e719eb55ff137675f052fdb891046a14348dbc2ab8cdb2391ea2","size":11314,"data":"","first_seen":"2025-07-23T08:23:23.990919Z","last_seen":"2026-07-22T06:40:35.254063Z","times_seen":599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/sandbox%20eval%20code","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"23c336606ee3a6d444b305153fa0e2e2","sha1":"473a2111970ae2a94b373e656d20c4bd4184d703","sha256":"305375d5052f6a14434d2d338f852f0f4f04fb26495f88a5d62b6afde2e2cc60","sha512":"ab0470885483545a0306733fa3a067239e299e0b47d35f9769a763f65ba5e9d928ee364a66f9e577499ab0c452f34dc7a3a48a774ce3d09e56fd88d1989e84ba","ssdeep":"","tlshash":"d1b09b13a650156d3f1166b1b951a003a1d977055fb75501f006005b1440ea559dc194","size":128,"data":"","first_seen":"2023-05-06T01:21:43Z","last_seen":"2026-06-07T08:08:41.456567Z","times_seen":79430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/js/bootstrap.min.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ccd9d390d31af98110f74f842ea9b32","sha1":"a85e681624c91a106a514c31eacf80de817b2cc3","sha256":"f5210fa3e7f0245a4c51eb7f280092c0ef99fdd28c45e17dab8cc5854fdf4fd3","sha512":"a5ac783258178c710f7c2c1c24b4218a063bf8df2bb7a6d5bd62c5c9432ec5286fd7bd17e774d1cc63e63e4666181864fa38a447c581338ca5ec0f563071eabe","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZY:T36WJr9ixi","tlshash":"a873c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","size":78129,"data":"","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-07-27T10:53:34.547606Z","times_seen":18754,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/js/jquery-countdowngampang.min.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"515cbb16cf8d4bd748bc224bfa076fbc","sha1":"894a32b4e2a5968b8f0def2c5988819e68c42180","sha256":"c1146cc6289cdec097dc2577b8b19c1645c1ce2a3c100f536a10e4ce2f098d05","sha512":"f022da1d21bde6944de32a0dcc24806c1a108cd0354a45a9f533558f09ec176a68a4c62484685e0934545acdd1fc55d3dab0e5d7f0881f2b825f54b527a056f8","ssdeep":"192:kxporzbmZCy8SiUQ2QsQ+Q7Oc6RSsPjqimJHe1YvjO:gD8SirFDN7SRAe1YS","tlshash":"bf32a01050720cf458b7d46b6bcb07d831af5067ad0aa9147dad72743fac81877eabd8","size":11898,"data":"","first_seen":"2023-03-13T14:15:12Z","last_seen":"2026-07-19T14:48:56.354534Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e9e391ad98fbe1b2de0b7b4fa9ca904","sha1":"21d7771223e8286a06ad878af425094a40de32b5","sha256":"1468d954f25ab75355f3c0f42cd9c84efd64a67922c47d3b69bdb6d0eb399e69","sha512":"defa1ba5ce4193014a4657fe394734634087d66c9db8024778ea2c3a59be02e38e0077725c7d000ff7046bea23070594f8942446c6068b4032d329d0716532b0","ssdeep":"","tlshash":"7731650e547cd5f601109cd6e52a3e24a036246b6e1930acf248e2246f3e04ff0ffae9","size":1648,"data":"","first_seen":"2023-05-06T01:21:43Z","last_seen":"2026-07-27T10:36:58.493995Z","times_seen":81362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/bigtech-core/assets/js/hello-world.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"42c20b028e76090b584102c1af2effca","sha1":"caec0e06e1c2e4dd0fdde2956db7b9b97cffd400","sha256":"daadbf20913b9c79bf5359f1a288e595883e9fdfc37e9984caa4c70c835b65a9","sha512":"acf729a25319aa3b99a3b2a549c943aabeb2838220681deb3e41a18925acb011e513c4ead3013aa0750540c17863e039d4dd4452ed19affe7596921b019d355f","ssdeep":"","tlshash":"d5512056fb5e50bf36bf222afc39cf02d2adc572d195d1b6788c9824976048901ccaf8","size":2452,"data":"","first_seen":"2023-03-13T14:15:12Z","last_seen":"2026-07-27T07:30:24.160319Z","times_seen":292,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-07-27T11:17:36.742404Z","times_seen":99314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/pixelyoursite/dist/scripts/jquery.bind-first-0.2.3.min.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff9016c99f73c592c2648319ea6d2074","sha1":"f2918fb5f72121b67f74c5f5ccbb47a2eb1317b0","sha256":"37045bf0d243623db4f2e99567c986944957b336dafa6368f4f75bcbad6fc4fa","sha512":"d33c0aca565c40a9da4f1002dc97c351405a60a5350f1842232a75e2ed2022c10bf2470ba2b66fcffa1558b6a265796d8334f46c0ba3c1f2985b20396ad82aba","ssdeep":"","tlshash":"062101dcb25230d1bbba2070756fa80ff031748f19268500618ed6b53dbd85574b7e36","size":1317,"data":"","first_seen":"2023-03-07T01:02:35Z","last_seen":"2026-07-27T08:43:48.631136Z","times_seen":18186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.1","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-07-27T11:25:35.480437Z","times_seen":220847,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.15.0","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"053d1365972f4a448562e4c1155a322c","sha1":"2ba5c7a35ad9f4733bda330dbd35915099af53a0","sha256":"49eabf78b80bf982ee355e31fdacd1e0fc745f7dc4d29c87141c358ca7729465","sha512":"a6231a215dadb902c219710c2a0083f0b4899c16038e6f67b7a27f73fdcf2f8d4e8f66d3591ff953a08a69a33fc04b01c3d406da8f423b9a94a271f850a39370","ssdeep":"768:SRPa/PLR8evxJMEa/sTZG8fVen5qiQ9vEAzBc5GMTSebsvHydWuUEvS75ikdXLf4:SRP4LR8QxJMEaufVlzEAzBc5fTSebsvy","tlshash":"250308563192d4aa419f48f7f4330219b3621dd9b406b59ef2bd6ce2a4b1e8333767b0","size":40746,"data":"","first_seen":"2023-07-31T21:50:19Z","last_seen":"2026-07-21T05:23:48.853541Z","times_seen":209,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f8007fb50c09483eb76c764fd6654d6a","sha1":"c0b44ea9b77b62ae9f2fef4fe87fcbb921eeccb7","sha256":"032cf9ff5c102ad5f27ac5e6e8f88cc8c3a90800bd4db3030d76289bd3294183","sha512":"b9ab9a141ea326215f37ab3cd6524d7595063e87c9f5ef042ee3e56f1323b8a021b649ba9cdbbec41f855b9912b8e405d326d4eee977f15351cf5d740c5064cd","ssdeep":"","tlshash":"3cd04c73e0b1a87a4036e7881529f504a852052f96616570370d0a745f3b2065655988","size":212,"data":"","first_seen":"2025-11-23T09:47:36.036143Z","last_seen":"2026-01-25T01:18:59.578148Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/js/jquery.countdown.min.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4e4074fdef00e6ccb52c770e486024a","sha1":"6ec0873db87fb3083e97555a36b6acb5b2b1caf6","sha256":"8d31da3ce6c7cbb620633b9b9453220b4170cccce2ff2c0172eddf2847c0a838","sha512":"ed793d3a2a5abe445f074bae5b9f41e01a5cf02b990b8c07ff178f6979e3ee64a806ddd85a773f79973bb47ebcb286c2c172d289767c540dbadc7094a2a42261","ssdeep":"96:UXpMQHIXWxspIb9TMlF9NQA3qAZRzblMJDi4jr2R2fylzM905qO2Jo1yVsqVMHTW:JQHrrTcF953zzb6rffylzM9cqO2JoQVv","tlshash":"f1c1604973f1232265aeb2105d9e4854a338e74be1c7445c78ecd6c87a258bc85bfdbc","size":5991,"data":"","first_seen":"2023-03-07T16:43:42Z","last_seen":"2026-07-27T06:47:39.873244Z","times_seen":226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6b28ddb60e4d8d90c66ec3a236d5442","sha1":"005baee1a9f2d09d1468fd3dce776dcd9e2814ed","sha256":"e4fd69040a997ca30146d5d43466069f63a991e59a815dd15a8a02617e06e50d","sha512":"c1e5899d68d235a085a889c6b47dd13f1c98189554b30b0b437d5807506d35fac6616938d72af5e0709c3b8cd62d39447a173c4e9fe171373e97997b8192074c","ssdeep":"96:cvcHtHRA5NTDXnM2E0+1lfYsPHgRhR3S6p:5N0LE0+1lfYsvSx","tlshash":"e9b1b696e77a38cbb2f900f2697a4d47eb614435d6c8d438c9ada3141cb5893c374b46","size":5235,"data":"","first_seen":"2026-01-24T20:17:02.408429Z","last_seen":"2026-01-25T01:18:59.579106Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6fb2086f6c7ac53058b42609b22bb122","sha1":"6bb8d78a65374d060387779e2f02ba41bebd1ffc","sha256":"ae5b669fd36253e2a6f33faaa63b512ab3f500e435f20fbcd3e75423a6e4db4f","sha512":"5c0ceabd83c996bdb4e10981a84de611fbf82224f795c695d4858fe9cefd71317f8341d02a6cbbf188a22dd36877f0c8ef845f6effd984885056c136f7de504e","ssdeep":"","tlshash":"18c02b88220a0cb195f72741cb7fb600b042326494f05935480963048e20f43f744964","size":155,"data":"","first_seen":"2025-11-23T09:47:36.038339Z","last_seen":"2026-01-25T01:18:59.580018Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/ctf_scripts-js-extra","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcde34107c840951de9dc87cbccbe9dc","sha1":"e2fed3b07a5d0a395d32e896c91e33f61b7437d4","sha256":"164232b840df1cbd23738e75cf6d412082acb6dedacbc016c2ef71b1a99de469","sha512":"962d12e863660e1f3e77e2596bd3051fedfacb33cfbac763cdb6960765ff0165f2c3f8b49c391458c763458b8e22bd425a59bd509c13adb1f0c5f68d5b067fde","ssdeep":"","tlshash":"d2418c41ddcc9fd252e10cfc3034e17343f12160d825a8142a8da1820a32582ca4061a","size":2325,"data":"","first_seen":"2026-01-24T20:17:02.420358Z","last_seen":"2026-01-25T01:18:59.580591Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e0dacb79eae8a2449745326c6e5faf3","sha1":"8d61880afe6b1d92b88706d18526e791d98065c9","sha256":"7393eea2522bd95c4332dcf990a458a3f30e99a4e3bfd0ec9301cc0e7d9879a9","sha512":"489415e370fe5aa70412ce3df97fda48618c05c49b171e12c2f730d857c9c4f85feeedffb30f4918c52abda931b7f1591057ca02be7d5eeeba3ee44b14ba9335","ssdeep":"","tlshash":"69e0ab7c3cb04095079205b4c1b7e2283a0a30604084c857889688695cb1fcdad025d4","size":418,"data":"","first_seen":"2025-11-23T09:47:36.040323Z","last_seen":"2026-01-25T01:18:59.581237Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/js/jarallax.min.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0458551a243e9bf81ee13d5408d24344","sha1":"328722616a2d716324ebab38c9c4ce69716b1e99","sha256":"c5d5c870a8cbf1cbf6ed11b64fcdcd3bd9469e757b27de7c43113026bcdac23a","sha512":"0c8f7c22f6bef7d86a76c77e7ad49ffd6f6225c9b3e63a2b9f1896af99e4aff91c29695a083c08b165ba006c57bbf5f9bbfcb296c2d8268c1d3f321c2d40e497","ssdeep":"192:59W5RO5CcsDpEgCpb5ck24ZBGz/1Nfw9+ThFOisY1QmAaVh4DPExc4HcBAsot6JL:PIRCYY7GxNfrMKhUPESBAsot6JL","tlshash":"3b62e79c3221321285fb72ed201f630eb635997481aac951b52cc9fd2f65e8d80f7f1a","size":15498,"data":"","first_seen":"2023-03-07T12:05:11Z","last_seen":"2026-07-25T09:15:41.702353Z","times_seen":1434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-11292302200","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dda35b4cf0f79797921389892309cc1d","sha1":"9004610e591da066c69b8c68b2329d8eb0015929","sha256":"2da960272022517694c4166b2c2d181da0d834d2ccd7050401dd8f1791d20e01","sha512":"4459e847d23105b6db0c8f685ab851e87c40213245c989719e8f743467836d273d3b84e1e09eda98218e53cf15d155adcd6740e2f9903376e41d38b1d9f6e71f","ssdeep":"6144:1JmMvPyQAxJ508RYoeXDIItDmlFldbKKCY5dqmQ0e6:TmMnyQAxJ508RYPIItDIdqn6","tlshash":"007419cd73d6746693a3a478403f114ba17b6a92f84cc899f185dce42e70aaa4177f3c","size":354933,"data":"","first_seen":"2026-01-25T01:18:59.429612Z","last_seen":"2026-01-25T01:18:59.429612Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/pixelyoursite/dist/scripts/js.cookie-2.1.3.min.js?ver=2.1.3","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbaff6df5010e82fec77e88acd359eb5","sha1":"ca5b3dc99936b2865ef02d756ede49ad455ba4a0","sha256":"4af105297c5b49ca668eaa0774c0eb479e907175f12ccc30e9c038dd7b6fcaf0","sha512":"2e8efdeafba4d67b0a4a93e3725c2bac44013f8236a2274b23149073de861d5fec1223d2a77a3e685925f89c0d41da5f7e12e855f571cf9b25619e8b88de1775","ssdeep":"","tlshash":"a231529834553c98029f6615233f128ff1b89f899c8da7598359a9f27638807802bff8","size":1709,"data":"","first_seen":"2023-03-07T01:24:05Z","last_seen":"2026-07-27T08:43:48.505027Z","times_seen":17638,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","size":5314,"data":"","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-07-27T11:21:30.683177Z","times_seen":199826,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"22a33e94aa839d67687feb4996304b75","sha1":"d34d2447edc1d8c4b44981041360d9c0a43b23a3","sha256":"bb00f00c005ae2a071ecd4a51b3628aa88f985d20293ab51e8ab759067064202","sha512":"41610cc088202240fb813b9dcc193f8c47c7e3260761a4d7f5a00057177093022d67f4f154d76086eecf98975f40601c0ae5a661f00fbf319265f415ecc891e7","ssdeep":"","tlshash":"ca01bb3850bb10211c77b0a47b6f479cb2f2e157e543a45877dc56842fdcb19a411617","size":827,"data":"","first_seen":"2025-11-23T09:47:36.041998Z","last_seen":"2026-04-22T15:03:21.205239Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"527a90eb1388b2332c220fb698d259d0","sha1":"65e4833e2a0d07b74493fb95cb44a33d4913fb10","sha256":"e58bf59ed6bdebb398bcea1927bd4b0a101e045764da3f6692c226199386d9dd","sha512":"b783054795576996d99e8a46239fa9d83fbd96a5d9b84c46d93edf884c50a66979ce4e7479b0b705a7039ff4ce59c29d93cbe041308292df7979e972ca5fba2e","ssdeep":"","tlshash":"3d51060b89a2041350b7513d6d2fc240a7e661036a2dbaa1bd8c65444f5c76e2bf46f8","size":2925,"data":"","first_seen":"2025-11-23T09:47:36.043751Z","last_seen":"2026-01-25T01:18:59.582569Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e410aeaa635d04893cc583c57d1ea35","sha1":"b87ffe96c86bf74416bc322e5cfc076961eee850","sha256":"62c9150124d76b15397f2ea9d596b88147054ec2c47b60d2504abeffc62b1924","sha512":"18b104fd19c966e7be9131ccef2ef661b8db82bc05bf309b15d7a3041e152ae7f8c604211f5f72487af8501186f7675c8ecd061778e2668163098bd3accbcaa5","ssdeep":"","tlshash":"9ee08c2a1afc20298033330d6e7b95302913b08f3a01d5633e4c91c80f08328a162b19","size":390,"data":"","first_seen":"2025-11-23T09:47:36.046225Z","last_seen":"2026-04-22T15:03:21.246315Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/js/ccpw-bxslider.min.js?ver=2.8.6","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9782f30be2c1e714dd349b59f1841b1","sha1":"47018f8ca5eb67be3bacc01abc7c89c7f479745f","sha256":"d84e3e9386c3a2c553ab74c98c2e66387c4ddf245a77f968eb3b08ba9aef5c35","sha512":"c3c03d7052222fc5ec69550bd94a163dae31592f4597acb3f9a2915f1a894951856a2edfb496cc79ddeb9cfa9ff6607b4715c44ca1e2c584395d65603e8acd51","ssdeep":"384:EXkTa68NRBy/HmYuYpIXMWwQWl06bxMAy+mFs9JFs9vudqqd/f+GEBYLOA9:EUOYDZQWl06bxSy/VEBYLOA9","tlshash":"58e2a64ae21436bb036672b9f195cf45d5fa0349cc36e1f8e3f0aa0dc9da984109bed5","size":31297,"data":"","first_seen":"2024-01-11T17:43:05Z","last_seen":"2026-07-27T03:39:43.122608Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-07-27T10:45:34.835199Z","times_seen":309207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-27T11:25:35.467154Z","times_seen":992674,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"527a90eb1388b2332c220fb698d259d0","sha1":"65e4833e2a0d07b74493fb95cb44a33d4913fb10","sha256":"e58bf59ed6bdebb398bcea1927bd4b0a101e045764da3f6692c226199386d9dd","sha512":"b783054795576996d99e8a46239fa9d83fbd96a5d9b84c46d93edf884c50a66979ce4e7479b0b705a7039ff4ce59c29d93cbe041308292df7979e972ca5fba2e","ssdeep":"","tlshash":"3d51060b89a2041350b7513d6d2fc240a7e661036a2dbaa1bd8c65444f5c76e2bf46f8","size":2925,"data":"","first_seen":"2025-11-23T09:47:36.043751Z","last_seen":"2026-01-25T01:18:59.582569Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1bb7b821b587959d4c0cc406c49077ff","sha1":"2cb4827d5cd5a05729418b369019b9c1eb0798ed","sha256":"1f93a5f6091369b8b6cdb7be01a6c7044ec8c3af0eeac05a5f0dfb3aea2a3e31","sha512":"cb99f055a8fa7834d3f693bf5c06d7622c7d9340b0147d52d4ab12cd6e1a0d1ae0553f7584cc8f682318cfeff7c34f8273dc5027206add3c1ddf57cef110a5f6","ssdeep":"","tlshash":"68d0c74caa4f605915746a169f6f62c9246d80761c8114a63e455744352581ed25496c","size":215,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-07-26T12:26:39.42773Z","times_seen":14197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/js/jquery.mCustomScrollbar.min.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"25c68168422e6e728f75ca84af6e0183","sha1":"bcd3a3268c0ab83f2396f483bba59d8082341ba5","sha256":"6e39ba4fad6e787f935f33ea8dac9105b1384cae25041a12bc108805c86598fb","sha512":"79eeb65ba6b599ed9f74b4df00d35dacc743adca3795d2337481f07cb7a42d9aa3a2930d2e2daad92542cea18cfa587c5aa2c8ed89fc4cd2370d7ee9f07972ff","ssdeep":"768:FQO8nAAe1l6bV6JUOxOyywsvQm77xjBFQ/Sx1iJb2G:Oe26JUOxOOUjBa","tlshash":"77031af9370538f752dbaf5e901b010963365966a70bc870383d8c782ff1e6522a7a6d","size":40179,"data":"","first_seen":"2023-03-07T01:07:38Z","last_seen":"2026-07-26T14:22:39.655611Z","times_seen":1233,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/custom-twitter-feeds/js/ctf-scripts.min.js?ver=2.3.1","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4231f0aab1a59146f514ba25ab9e6df6","sha1":"cc10655aa8621b5907ad478929ad71094207822f","sha256":"8e2df33c65119b175ac210c8cc700656e89bf66acf5c6c37c4115e2ba6db58c3","sha512":"a9380d68c056271a60612fe14012bf094937a30ce545417eddff82520fa90d69e1c7cba4da3e56597e447d4839d1747bc10b9d871340d76fbd00bf0ffcbd290b","ssdeep":"384:gth1KT5PkcG7ucG7KXMojfeHhvvZuV3tzsqsvO7lxH92zURFMawBUmcHUxiqMg0n:gth1KT5PS7w7kMSmRZuzzsqsvO7b9seT","tlshash":"ea722b05f2c5a49782b235a8a93fe30635733c7e4941c5226469e0f32db9b8f7163b6d","size":16112,"data":"","first_seen":"2025-03-15T02:00:16.689594Z","last_seen":"2026-07-27T04:05:34.31845Z","times_seen":530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","size":18052,"data":"","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-07-27T05:57:15.19162Z","times_seen":4268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/js/jquery.appear.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d18fe7c86d2bcea69a0810de7b81e676","sha1":"3bc98b3a47dc6f09238bbd0e496fa11daa3caa98","sha256":"70f721f0d6aaebc5c683551fb12668e6a91a02d17ac1b41f8a4dda0fa91dcbd5","sha512":"0fc73474dfb4fa9247793332815cbc70f6b575058381032981f2a05e87432e904f275a76567511841c568d554b3426c4c548c55fb775bc9b5c1d1d6bb35efd7d","ssdeep":"48:Wl3XwqL924ayV+9FLAPfnUIeohhR9zIr0FfFoBSxMEh1u1cWSKjf4WJzw:y3XUz19FkkDo7R9crgYSpTocWZAUzw","tlshash":"2b91dc4a759b2ab54877622a9f1fb20cd721513b0202c2113cedde6c6f71864a197fdc","size":4424,"data":"","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-07-27T07:07:18.584652Z","times_seen":768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/js/wow.min.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","size":8415,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-07-27T11:26:11.227432Z","times_seen":14048,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/js/jquery.odometer.min.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c35fce96f1ea9d38b7245102bcdecefc","sha1":"de238751846de9d3ca6880d04b25dc38de5e2e38","sha256":"23bdcb34c21f829e7a33294fd040c1c54376b6ed1d79157d87c87b93d5f7e476","sha512":"8df8ef1c8e44b5ee8645c8482e6cdb193cc7f4cc9e26c2e73de328d98e74bd204cd2b2c84c9ddfbdff392f76629bd126dff4b753c0be3622525126bd0af0df25","ssdeep":"192:X2vNkLkN/cBQiCmchU752Z/mE7hJrky6XHdKyXmaWZShW1Ik7IaB:GvokN0BQiX5y/m8XklHdKyXIZS8OiB","tlshash":"6042451163e1273d9307e1a1aeef8d44b7b989296194808eb61cd4d9a831c348b7dff8","size":12147,"data":"","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-07-27T11:09:38.074893Z","times_seen":709,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"725308fe47d894ec00c26d20da8a9f8c","sha1":"42286be90a1e5876398f5c2e8e31586d1d1c39b1","sha256":"238a363d9d2ef6284885ab57303accd9f428a7cf98d674877be4cc420f74e33e","sha512":"d0ad606cf7fe32c3ec885e371157f6cdec3e81791357927ba504ceae0e5e03220dc852446c9709bab7e3dd64c538b7570fa12da8f40cda75a9f7d3099c10615b","ssdeep":"192:T4vMM1XxquKa0uky+QGSsfAS4SiYSxhIL+sNZYODPJxBApcCSMidSzSxeIL+oNZf:8r0U+QGDjY6","tlshash":"7ff27cc5abf76022a87b72bd2b5eb56432324597844ccba4bc0c0e54bf8663c57b5b60","size":36374,"data":"","first_seen":"2025-11-23T09:47:36.049492Z","last_seen":"2026-01-25T01:18:59.584145Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","size":5661,"data":"","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-07-27T11:21:30.697316Z","times_seen":202873,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-i18n-js-after","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc2f4c9989f10a4c77e610b45fb97db4","sha1":"4953dae03e09fe260e71f557f214bf03334b8f24","sha256":"758cd48a2c598aefa6ec4b92fd9dc43a839152abd7813cf2938f07248f34eb39","sha512":"196aac18b8a4443e1f6d465adc2a89a56dbeabc6af65848b659fc3316d1de48bf92e082e4dd8174a99c4a392d0eb5090f0ca43b9673301d042dd26cd3d4fd4e5","ssdeep":"","tlshash":"d7412b86f0973c80418b97705a63bd024581208bc17e880424d9ca206b724c0f4c231f","size":2271,"data":"","first_seen":"2025-12-25T03:58:38.123262Z","last_seen":"2026-05-07T21:40:19.490689Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/js/jquery.easing.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"96550741c997fd57758441aa1759b21c","sha1":"28179d80067a74176c1ff7bb8028c12d7ed6940e","sha256":"e5c0fa2f30aef4faf40adcf7a23b18c01453066fe5aa0088b3344a37811d6b8c","sha512":"4c1158fe0f47fdbb97751c8f720a6699cf32592c254dd1f485d1de11b0815b6cee9e1c877d6d922d06a5ea6c88f1a7080e569dff9cb0062e1b6830a75c73848c","ssdeep":"96:Jg1rrQ4ZK8C2vFfMJjIck9kJqBs8RPjoGs1scfX+YGW3cSniU9kZwSalaKEcrTeC:JIvHK8FMrCUMoykjl","tlshash":"e4917fa877dea50653213470491b50ce62bd7a02cc1c9d6ecc4c8c9879a4a3b92a7f3c","size":4297,"data":"","first_seen":"2023-03-11T19:12:19Z","last_seen":"2026-07-27T07:07:18.578595Z","times_seen":1404,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.10.6","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d7f6b4930df680c368db0d604444b39","sha1":"41239565cd5c38258512b07994ed4519b377f3b2","sha256":"58aaf7420e6e102792fc1495be6788297845f3faa42dc59ed27d9bb0944e5fca","sha512":"7b4caee7407b6edf25a24e66ab0eac1398a4c39a937a2d3f92c1ddfc0bdc5f432626069b6f11306f83612399571c16df33ee04b5fbbaf9bb5ca2ae2b64bc4266","ssdeep":"192:urKG4shSuvZL3+ya3vBrPh/9Ckh/xEkmcXV0Ruk8Ie+j2:urj4shSEZL3+ya35rPh/9Ck1xEfIWukC","tlshash":"20d1e86c3695747743fb81e315bf5250a1322789790a8a84fa28d8e328bcd5347c7fb8","size":6555,"data":"","first_seen":"2025-06-25T18:35:12.413482Z","last_seen":"2026-07-27T06:49:44.445308Z","times_seen":5822,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0203838dba446c5041508bf7bac8571c","sha1":"50520dc9862f9293f116c673b117ab5adb3439b7","sha256":"533609a6035017a05159e1dd8e8f7edf67a320c836b3f6f6c375dc78cdefa02a","sha512":"97a4c8655c290fb9e546064d233dfbd2124fcd35142d22e079546b209da1e74654dfde9fb25032e109334e7b717d754c1aa128fa7f16b7674d00be5fa9c4ab59","ssdeep":"","tlshash":"0fe0c014bebc3c3a0545215676964b8aa77e2a051081cdceeb781943c570d20519bdbd","size":366,"data":"","first_seen":"2023-03-12T22:06:50Z","last_seen":"2026-07-27T06:49:44.525096Z","times_seen":13610,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5843dbdc71ff8014a5eafd346a262da","sha1":"127e1d971efab9341db8079f10663dc28e8e0a2f","sha256":"8e73a30d35c83ea6a597c3343324d2b7df097ad26e67b62efb5266ee12d317b5","sha512":"ac28dfa1a6fd09528e1ffc3f4fa19b0719c01f9033872e3eab51175b95c451179f1db22445b43ef9947e1810a5a37fdddeae7cdd7fe03b814a98e16e8642ab74","ssdeep":"","tlshash":"7e514241671662f381f60f36b12fb642713ad015140328b2b9bd9d90aba6deb5363d1e","size":2771,"data":"","first_seen":"2023-03-07T01:07:38Z","last_seen":"2026-07-27T10:32:05.321607Z","times_seen":16126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/contact-form-7-js-before","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe55f43c523c75c21bb7f3dcb92fbedd","sha1":"c51e0dfab884b3f54604343d3b2f13e4da30db3d","sha256":"1f610e675c1cd4864dfc53f678000e7460547a228f486abc665b86d3d342c3f8","sha512":"4026ea227219edce27230515eb42103ff87096e7b48b20a29a88d2b0d3a1697be7cf2a14b0e5e3721a8c3ff243e8d161cca85141c429b4a74ecff4a43c1b96ab","ssdeep":"","tlshash":"0b419741e6e82c4510e1c074027c4222b610611bca2b2e15734d414c1fa4078e1107c9","size":2379,"data":"","first_seen":"2026-01-24T20:17:02.415719Z","last_seen":"2026-01-25T01:18:59.585643Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/ccpw_bxslider_js-js-before","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d213bee692b7c59b335b183a34b6bed2","sha1":"08c1edebebe914f72e3dd60dbaa90c0e05810316","sha256":"98f180bdebf5611b1d07659f412f717ac2c269d67d5dd7f535cc29f268e09fc9","sha512":"89b4c5b4fdc8ea98900a497a9cf3b911d0ceaf3cfe87c3d00841625e8a5af593c8268ea9196dd4cdb94faeb7fe0c8279e892e58e62b123eae743b5635cb03953","ssdeep":"","tlshash":"eb418c99daec6a8210f305346273d6c3f697b064f416041ac88d50444dbe6058280e44","size":2335,"data":"","first_seen":"2026-01-24T20:17:02.422614Z","last_seen":"2026-01-25T01:18:59.586222Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.15.0","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"01c6cc13bbe5e530f2af60671dda2024","sha1":"12887422a77dffb39d8b5091bb41b48565c67601","sha256":"9a2474887781993a37e04b0152ee6ef1518ba84cdae1a0d85721f669dea9b4f0","sha512":"9bee27eb641c07939d28b2585ba7a12ed2b6234d31f26743e21a5201d1b950e6c273216832d37f522f6e76ff1cbbda9ac4d8b03cc5a71fc142825c4710283dcd","ssdeep":"96:BON6AUjqn93zgcf8FD4larNVwbVLXkqfjQezovOA8S2:YN6j493sjFDlNwdXkymOhS2","tlshash":"98a131d41b90fc6735e135c8e11aa771652fc0333d1bb8c1fa22dced98e8a9187a9971","size":4958,"data":"","first_seen":"2023-07-31T21:50:19Z","last_seen":"2026-07-21T05:23:48.824706Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/pys-js-extra","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e2f4f57d2d74b3fda72b8a7d86229ed","sha1":"3d24aa08e815f80957ce154de3ba47ee2d9d8749","sha256":"1997ab871f4f205cfcc870c311e1ea8716536770cb75d03cdd220170e0dcaa4e","sha512":"d648e5e7fcdf2878e5b270f2fd23d0153c28aa75ec34ecb7c80194cee4091d98c16661f0fa3a14a5fb9dd42d7971d30bba6d8d02453349cdb7154595544f8f8a","ssdeep":"","tlshash":"5c610e19fc9c6cde0ec6d6b4c1956a03467c1a71f283bdb8d1482e2c12cf39127a6e23","size":3318,"data":"","first_seen":"2026-01-25T01:18:59.586759Z","last_seen":"2026-01-25T01:18:59.586759Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/js/jquery.knob.min.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e708020309de1747a08957f691324ac8","sha1":"4df8f239f9a18fcdd446d2238e6c1b0e32ea52d5","sha256":"db5e38abe34e33f5d4e99c52a914c9f0fd16fc2918eb35dcea65d8b78fa617db","sha512":"361459ccf77330e31fd34e5799de09a27c0f7edcf83def7d99155c15e44371d0ad7e3bf8eb33c88bfed929271ba470ff5741c1d446fe6568a032ac3de155156b","ssdeep":"192:1H6pJasduw1Erl0D/Mt8AyQCkkS8Xg3t4lEKZnGduNImQhJiEkx:tvw+rl0D/Mt8A8kkS8Q3t4lOduNImGir","tlshash":"9722510f321521776bc6d626002f464a7933f92a3617821eb2399ce27d75d09637bf78","size":10804,"data":"","first_seen":"2023-03-07T12:01:33Z","last_seen":"2026-07-26T21:05:49.422154Z","times_seen":575,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-07-27T11:20:31.857921Z","times_seen":333217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.15.0","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"91ba1f8391336da5a33a6f0101478fc4","sha1":"51ca2417bc51261127ee0099c4cb6ee25f9e2cd7","sha256":"2784c7aa14a7b58b06dae8a752dfcb90a54dde95e66373307e47ad173c6a9cbb","sha512":"9a58d255d1893aa7efbd887780db0b57fae38b4b6451d10db962d33fb3b254e2224e1aa4f591312cd261c2237575955807c7ea51d043117cdcd47d9f8b825d29","ssdeep":"1536:OeAjA679C+QUVYNIe8HeBHmjkBzRNx4cR8+teAWuHDPh87FO0Q5RSS2TKtoO4C3Y:HJpAgmKN2Z","tlshash":"6c43e7423211b8b307ef41a7702f120af3221dd8740eb5987669dcf6b4b1d96637ab75","size":56154,"data":"","first_seen":"2023-07-31T21:50:19Z","last_seen":"2026-07-21T05:23:48.788132Z","times_seen":205,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/js/jquery.odometer.min.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/assets/js/jquery.odometer.min.js?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3694\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12147,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12122), with CRLF line terminators","md5":"c35fce96f1ea9d38b7245102bcdecefc","sha1":"de238751846de9d3ca6880d04b25dc38de5e2e38","sha256":"23bdcb34c21f829e7a33294fd040c1c54376b6ed1d79157d87c87b93d5f7e476","sha512":"8df8ef1c8e44b5ee8645c8482e6cdb193cc7f4cc9e26c2e73de328d98e74bd204cd2b2c84c9ddfbdff392f76629bd126dff4b753c0be3622525126bd0af0df25","ssdeep":"192:X2vNkLkN/cBQiCmchU752Z/mE7hJrky6XHdKyXmaWZShW1Ik7IaB:GvokN0BQiX5y/m8XklHdKyXIZS8OiB","tlshash":"6042451163e1273d9307e1a1aeef8d44b7b989296194808eb61cd4d9a831c348b7dff8","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-07-27T11:09:38.074893Z","times_seen":709,"resource_available":true,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":360,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewallet.com/de/img/magnifying-glass.svg","fqdn":"rewallet.com","domain":"rewallet.com","tld":"com"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewallet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Dec 2025 08:39:47 GMT","end":"Tue, 03 Mar 2026 08:39:46 GMT"},"fingerprint":{"sha1":"02:30:98:57:F1:47:44:FC:36:94:CA:59:24:90:59:92:14:A4:D0:EF","sha256":"A5:DD:E7:A1:C7:74:B6:08:92:55:40:22:2A:33:35:95:96:2D:5A:7C:CA:C2:C5:45:E0:3F:E6:05:D9:D3:DF:F5"}}},"request":{"raw":"GET /de/img/magnifying-glass.svg HTTP/1.1\r\nHost: rewallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptorecoverysystem.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 25 Jan 2026 01:18:32 GMT\r\nlink: \u003c/_next/static/media/36966cca54120369-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/904be59b21bd51cb-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/e4af272ccee01ff0-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-matched-path: /_not-found\r\nx-powered-by: Next.js\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::cdg1::j88dg-1769303911864-361c452ae08e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T11:26:20.993676Z","times_seen":17562036,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":47,"dns":13,"connect":0,"send":0,"wait":177,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewallet.de/img/anlaufen.svg","fqdn":"rewallet.de","domain":"rewallet.de","tld":"de"},"ip":{"addr":"104.248.241.14","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewallet.de","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 09:04:52 GMT","end":"Mon, 06 Apr 2026 09:04:51 GMT"},"fingerprint":{"sha1":"5D:7E:D0:A0:55:45:8D:DA:A6:E2:8A:6A:33:E7:22:61:6D:29:AB:3F","sha256":"67:F8:33:FE:1A:EB:6A:99:B1:C0:6B:57:DF:9B:4F:5C:10:62:84:F4:E1:15:35:02:EB:43:92:18:0A:CB:B2:E1"}}},"request":{"raw":"GET /img/anlaufen.svg HTTP/1.1\r\nHost: rewallet.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nlocation: https://rewallet.com/de/img/anlaufen.svg\r\nserver: uvicorn\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T11:26:20.993676Z","times_seen":17562036,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rewallet.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f4bc.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 19:44:42 GMT","end":"Wed, 25 Mar 2026 19:44:41 GMT"},"fingerprint":{"sha1":"8F:9B:8F:03:41:B5:80:0E:25:D1:4E:CC:17:8F:AE:CC:07:2D:12:90","sha256":"9C:0E:06:15:FA:81:A9:AD:A3:69:4C:1F:54:C7:64:DA:9D:26:0F:E5:D6:E2:77:5E:AC:1D:27:17:D0:CC:E5:9C"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f4bc.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 01:18:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:21:38 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 35\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":651,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7d4bf2e92b2587e47b09997dbc654823","sha1":"08f6139e131b9a0be5342ff255e072346ce9ef7b","sha256":"b7244d06499e782eb58335018c80c0f5dca9454d7dab0c9b85e3ced8a2ec1ab9","sha512":"53f07154534de82deaa3a6ae1cbd9ba459dbcb9560c3ec709f5ca4fd8ce166bcd529f770067ab4f7ad3ecbbc977bf0b0627b735e922860a530f6233d2e6ac1c1","ssdeep":"","tlshash":"96f08fd4e638d4c24506e99c3ecd37c6140d27363215509bf10fbb28e5ca5fa3a86a24","first_seen":"2023-05-23T14:24:05Z","last_seen":"2026-07-27T10:39:43.73733Z","times_seen":831,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":53,"dns":0,"connect":7,"send":0,"wait":11,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:24:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 286\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":669,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (483)","md5":"9eb2d3c87feb6bb2ffa63b70532b1477","sha1":"38f226335a05ab0e30497bc7419eb5e243a9e26c","sha256":"37bab6cd583982e8eff58501a99d7c5c4d63664c1ca34f9e3b7cf526c5b73ae2","sha512":"8d0ab38f6bc757103fc82a234fca5566328639ef549a862f9ceb8cff6b10d75d2fc626a3054fb85a4c91b3538332677801f9edc14115e09f957cce8391f8cb46","ssdeep":"","tlshash":"ce01f96e4646194141c10f1138d9fa5ded46f0a97c582f33a12adc2d8cf9e5f21b9f19","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-07-27T11:10:52.278795Z","times_seen":105076,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/uploads/2023/06/trust-icon-e1686899300386.jpg","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/trust-icon-e1686899300386.jpg HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 07 Aug 2025 16:24:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1143\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1143,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 47x31, components 3","md5":"97285add3607c9112f871b1b9cf68982","sha1":"4112807d740a7d0ff625aa069d52d454ebfc627e","sha256":"5613ebeb9abe14167133ab97b511041a7cce1fd1231a5ec995d4e68e72340409","sha512":"469f2a0b23e2028945ccc2d3c5077d472c83af9bbdc0f00d53c6b62e483e4bddcdd3fff54d7de83c1f30db3bdc353a3374ef0b87a1690fee1dd8cb3eb5cc1c02","ssdeep":"","tlshash":"9521b9fedb4703654d018dfe0da32191a1da7a46b9685b492771c1f1cba0cc8889c9dd","first_seen":"2025-11-23T09:47:36.010068Z","last_seen":"2026-01-25T01:18:59.428336Z","times_seen":3,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/uploads/elementor/css/post-5.css?ver=1754582838","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-5.css?ver=1754582838 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:24:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 323\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1164,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1164), with no line terminators","md5":"cb360efa0e8203988bbbcb7bae553943","sha1":"e538c0b60fe09e663b7245966687b0ecc5a37e2e","sha256":"74a03188fc286063c1cf45ae61e98d8f7796b60ef5e8bfb6906e8d4361cc0ae3","sha512":"d7665b0683066f3e0061f5a7ef025c6d11e299552bf187726bbb1317e9e471687cc1a422fb3f9fc33632cf42e2a7a673fa9f42f1496c2f1d0f4fe3cc070aac71","ssdeep":"","tlshash":"6c2137457a23d432e17b093f91c3b02c112cd45fa25fcadff41d8649f9bea462268643","first_seen":"2024-12-30T05:17:19.055762Z","last_seen":"2026-07-26T13:36:26.49348Z","times_seen":1286,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-11292302200","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/js?id=AW-11292302200 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nexpires: Sun, 25 Jan 2026 01:18:31 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 25 Jan 2026 00:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 123587\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":354933,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5882)","md5":"dda35b4cf0f79797921389892309cc1d","sha1":"9004610e591da066c69b8c68b2329d8eb0015929","sha256":"2da960272022517694c4166b2c2d181da0d834d2ccd7050401dd8f1791d20e01","sha512":"4459e847d23105b6db0c8f685ab851e87c40213245c989719e8f743467836d273d3b84e1e09eda98218e53cf15d155adcd6740e2f9903376e41d38b1d9f6e71f","ssdeep":"6144:1JmMvPyQAxJ508RYoeXDIItDmlFldbKKCY5dqmQ0e6:TmMnyQAxJ508RYPIItDIdqn6","tlshash":"007419cd73d6746693a3a478403f114ba17b6a92f84cc899f185dce42e70aaa4177f3c","first_seen":"2026-01-25T01:18:59.429612Z","last_seen":"2026-01-25T01:18:59.429612Z","times_seen":1,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":96,"dns":1,"connect":7,"send":0,"wait":26,"receive":22,"ssl":157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/uploads/2022/11/banner_shape01.png","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/uploads/2022/11/banner_shape01.png HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16814\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16814,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 169 x 169, 8-bit/color RGBA, non-interlaced","md5":"d7e82c92ea478560aef283f023562333","sha1":"0d271d55f750ca14cfdf9044d317e6ea6b21e2bd","sha256":"2443012f82b0ba607d62fa7588d045ef689bb657e8e9bacef9b7162cf33c27da","sha512":"d3fb9a40e976247b9c505833426c85f69862407692c73fe58387c822ba1535488dfb8789174b0a3cfb2c062036d6d58dd6ff22b4c527a8d5607b7becd71cf389","ssdeep":"384:DVozdPM7tD9Cuqn2/RaL2rT7u63OOElMm338NuMSLdzMH9otU:RoRPM7on2/RaarT7dnBm335oEU","tlshash":"1072c05fbb57521024038fb924d6c9b697ddb6ba79c0dd001c606eaaa4ce7813c25cdf","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-07-19T14:48:56.377813Z","times_seen":68,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/js/ccpw-bxslider.min.js?ver=2.8.6","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/js/ccpw-bxslider.min.js?ver=2.8.6 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:54:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 6562\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31297,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31297), with no line terminators","md5":"c9782f30be2c1e714dd349b59f1841b1","sha1":"47018f8ca5eb67be3bacc01abc7c89c7f479745f","sha256":"d84e3e9386c3a2c553ab74c98c2e66387c4ddf245a77f968eb3b08ba9aef5c35","sha512":"c3c03d7052222fc5ec69550bd94a163dae31592f4597acb3f9a2915f1a894951856a2edfb496cc79ddeb9cfa9ff6607b4715c44ca1e2c584395d65603e8acd51","ssdeep":"384:EXkTa68NRBy/HmYuYpIXMWwQWl06bxMAy+mFs9JFs9vudqqd/f+GEBYLOA9:EUOYDZQWl06bxSy/VEBYLOA9","tlshash":"58e2a64ae21436bb036672b9f195cf45d5fa0349cc36e1f8e3f0aa0dc9da984109bed5","first_seen":"2024-01-11T17:43:05Z","last_seen":"2026-07-27T03:39:43.122608Z","times_seen":75,"resource_available":true,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/img/images/line.png","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/assets/img/images/line.png HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/wp-content/themes/bigtech/assets/css/bigtech-core.css?ver=6.9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 664\r\ndate: Sun, 25 Jan 2026 01:18:32 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":664,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 122 x 9, 8-bit/color RGBA, non-interlaced","md5":"67f78867a310eaddf28af0fcc363daec","sha1":"293040a164293a5493a8b569bd4cef8524de316a","sha256":"fc5637690ad53f5e138c452339237beeb9db5d4f157a609cebd884dcf471ba86","sha512":"512a9644f48a24e8ac0b603eb5d5b427366fb80d08be1840c9ef1ba1d20e6a6069ffa421debe1868653f0646e36bfe2363c2a20bc9d068fb7c44e0d390afaf56","ssdeep":"","tlshash":"430144ec01c0c2e655e82416c1f876142c6d3dee975208657f11042151339c4b26ee06","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-06-20T23:57:44.87171Z","times_seen":48,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:24:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4248\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16471,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16214)","md5":"a2431bc290cf34e330e11ec4cfce1247","sha1":"32a53342901fef5f4f4dbb26a555e730f84437a4","sha256":"c57e64fcb72bddafa9c38de574441c3e69ac6c961df96b0cad34da83658bd196","sha512":"87aef045472db25020faead697ec02813ba38d4e313caf437b4ca5cadbb7a7495805ac0b74e5de60cd84ccecab290b76d003eb1fadfcdaa70e650a597658ada9","ssdeep":"192:IbgmUJbiKneTT4bHZ+SKbnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:IdUbeTMbHZ+Vnh2AVfHfA4XYz","tlshash":"fa7234681340282753274f374b71cbb9d9b444d24b93896e91c0ee88d7b6cbd236f6e9","first_seen":"2023-04-05T10:48:11Z","last_seen":"2026-07-27T10:51:27.513186Z","times_seen":138309,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/uploads/2022/11/banner_shape03.png","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/uploads/2022/11/banner_shape03.png HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13496\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13496,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 146 x 146, 8-bit/color RGBA, non-interlaced","md5":"0458bf5b6c99d761cb9621e7262bdeb2","sha1":"c48da2cc44b7e05a3fe8deb38fcf7c043ae2d0a8","sha256":"294b4a93fb471c518c2cadfe533499ab6acc761fc9dc0121b28d4c9c39d0f352","sha512":"499ee39d2bc0cc9635dd23998b24b5863806fbbfaed2b862dc14071a532da95f6c639918bdb65ae1e94e5c676ec0a0dc7bb5fad8b3553dce90ecc9c62bcaab9c","ssdeep":"384:ifLNGy2oXQ9NW6Btelmqn2DISryn5h9UFM4mr1:q80H6BtelsX253zr1","tlshash":"7a52cf399c99736f4542aa7682e9d7c818210f46d053b0e06bbca85def7d20d1fa5c1b","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-07-19T14:48:56.349905Z","times_seen":68,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/uploads/2022/11/fire.png","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/uploads/2022/11/fire.png HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4253\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4253,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit/color RGBA, non-interlaced","md5":"7c334312fe2bfb835806a1b50c1f4c22","sha1":"378b48dd407e4ae3945e18a7c3391ade8bbed3f3","sha256":"c8622f39fdd2309e038fcc06df8b59b00ca288820162efe40e48afd390f09d62","sha512":"6fe17943bd6d78cf6e164deb803fcaf5f6d2e585495c2da71480f565d5604e0501c80810aa801b4502bcb028a1acd72c7df80583efecd6dba9e59bbb5b3afd30","ssdeep":"96:ASMxpOWmMFSuCIMwgnYEkX9LnptDw3daAa75nAyRYBjy6DJ+J2KtQB3h:ASshntCWgILnptDwoR5AKsvJ+oKtQBx","tlshash":"b2917e0e84c3a9b1058b21bbcfb371e2146e942a61e1703e2df661eb0b71796b874f14","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-06-20T23:57:44.878936Z","times_seen":47,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":501,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.1","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.1 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:24:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4008\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13452,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-07-27T11:25:35.395398Z","times_seen":228331,"resource_available":true,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":354,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/js/jquery.mCustomScrollbar.min.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/assets/js/jquery.mCustomScrollbar.min.js?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 11435\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40179,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32001)","md5":"25c68168422e6e728f75ca84af6e0183","sha1":"bcd3a3268c0ab83f2396f483bba59d8082341ba5","sha256":"6e39ba4fad6e787f935f33ea8dac9105b1384cae25041a12bc108805c86598fb","sha512":"79eeb65ba6b599ed9f74b4df00d35dacc743adca3795d2337481f07cb7a42d9aa3a2930d2e2daad92542cea18cfa587c5aa2c8ed89fc4cd2370d7ee9f07972ff","ssdeep":"768:FQO8nAAe1l6bV6JUOxOyywsvQm77xjBFQ/Sx1iJb2G:Oe26JUOxOOUjBa","tlshash":"77031af9370538f752dbaf5e901b010963365966a70bc870383d8c782ff1e6522a7a6d","first_seen":"2023-03-07T01:07:38Z","last_seen":"2026-07-26T14:22:39.655611Z","times_seen":1233,"resource_available":true,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/css/responsive.css?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/assets/css/responsive.css?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3428\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20209,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f46dfbf7c4e27c0448e5e1e2cd6a827a","sha1":"14f13800571cea2c7fae9b96b45d38ae98635f96","sha256":"7c8ecdb88697108a91568910f7904d02018cbfa1124b732114782f37288d845b","sha512":"ce5cd7e71168108c31a7edd6c21b81ca77fbbbfdf418dbeb33843e3a0e52c71a3508ad9ee0f7b3999580ec7182245e544d886ee68323256d61fb8d6ea5522bd8","ssdeep":"192:ZvyzVhnChfd51MCqM2ICuDwjmJxMxFHMN6R4deLZBpGTmY3Cjyr5ZbcEKfvxaZh5:5GNmr1h2lpuaa5Zw7uOpBq","tlshash":"fa92afddae84245c5302bf9aaff81b659e5d68f3df4f00ed90a0560d90cfa3d61626c8","first_seen":"2023-06-08T12:31:57Z","last_seen":"2026-04-22T15:03:21.085457Z","times_seen":13,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themedox.com/bigtech/wp-content/uploads/2023/03/about_img01.png","fqdn":"themedox.com","domain":"themedox.com","tld":"com"},"ip":{"addr":"72.60.161.191","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"themedox.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 23:17:44 GMT","end":"Mon, 13 Apr 2026 23:17:43 GMT"},"fingerprint":{"sha1":"41:20:A2:A8:7B:9D:53:81:FE:70:CE:60:7A:08:56:3A:E1:6C:B8:37","sha256":"32:4A:17:76:E3:81:6F:93:60:C5:3A:97:C5:D4:50:CC:38:CE:11:D5:A1:DC:3B:1E:91:25:46:99:5F:C7:A5:3E"}}},"request":{"raw":"GET /bigtech/wp-content/uploads/2023/03/about_img01.png HTTP/1.1\r\nHost: themedox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 18 Mar 2023 07:38:54 GMT\r\netag: \"2a0d3-64156a8e-35ec24a22979d29;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 172243\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":172243,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 487 x 486, 8-bit/color RGBA, non-interlaced","md5":"fb05446ce4d14f848bc623ceaa425424","sha1":"555361a84fb9bb8cc484a4613d9949039b1252a7","sha256":"529f141c8da86be35801aa89df93743a1c6d48935b30f6629eb7f15ffbfa7c88","sha512":"b48580673222f684d07af11109abfc26566178adae1eabbf7151762344f0a179d8219ac0d32bd5f15efb6f56f03c0bab24b1e4dae7403087b3fa69a8baa99f15","ssdeep":"3072:Z6Co6Uz8aX6l2wSqcOFl9vrGgO/C9ZnP2uFXkrvNvHEDfMXG5YpEuUQN:Z6lRz8+KEWF/v4qz2nhvkKORQ","tlshash":"2cf3131ddb232ff469c5eb34cac679544b6d623292a27f889632c625cb4a0344fcf617","first_seen":"2024-04-14T07:22:43Z","last_seen":"2026-07-19T14:48:56.363655Z","times_seen":60,"resource_available":false,"data":null}},"time_used":876,"timings":{"blocked":183,"dns":34,"connect":99,"send":0,"wait":101,"receive":341,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:55:02 GMT","end":"Wed, 15 Apr 2026 06:55:01 GMT"},"fingerprint":{"sha1":"D6:AF:CD:AE:04:C9:18:A9:86:FD:53:08:D9:99:99:9B:9D:A8:58:29","sha256":"66:75:58:C3:A9:29:2F:14:30:FB:BE:32:2C:1C:9B:D1:A4:E6:58:D5:9F:33:F7:16:C3:0B:F7:A4:6C:49:F2:B5"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 25 Jan 2026 01:18:32 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6969e151-4684\"\r\nexpires: Sun, 25 Jan 2026 01:21:32 GMT\r\nlast-modified: Fri, 16 Jan 2026 06:57:21 GMT\r\nx-77-nzt: EwwBuUwJGwH3OwAAAAwBuUwKCQH3CAAAAAwBJRPCNAG3AAAAAA\r\nx-77-nzt-ray: fdb541235456433b686f756947af3013\r\nx-77-cache: HIT\r\nx-77-age: 59\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18052,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17979)","md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-07-27T05:57:15.19162Z","times_seen":4268,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":68,"dns":32,"connect":8,"send":0,"wait":11,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cryptorecoverysystem.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:05:45 GMT\r\nexpires: Sat, 23 Jan 2027 13:05:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nage: 130367\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-07-27T11:23:22.063433Z","times_seen":27629,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":10,"receive":8,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/uploads/2022/11/chart_bg.jpg","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/uploads/2022/11/chart_bg.jpg HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:32 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 72224\r\ndate: Sun, 25 Jan 2026 01:18:32 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":72224,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x787, components 3","md5":"142452ef9565111ab8d5edcb76e124b6","sha1":"de9f992c9c81622d3d58f80b85077d41187912a1","sha256":"50e5454775388b8d54f6155b1377fac47b7ab6a6b2997e9379bc102b31392422","sha512":"e86f4b5a584121d183558af719fb9e96257f28e8234aa8c1b76a2448968aabbd41297f3c00d4733de9b537f81103026f3f9e49ae3b406abc3eb1ccce720da5b4","ssdeep":"1536:zDBX5fx3zp5ZHUxWFGGoriXw7LaL6CIa1XlOoRZVMkjq:nRJRl5Z0MgmXwiLr1ko+0q","tlshash":"006302190fb85506d0ac6b3929972123bb33d3fea7a72a7e17520a715dc161cbc6c782","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-07-03T22:44:32.016929Z","times_seen":73,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 25 Jan 2026 01:18:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1046\r\ncf-ray: 9c33efed5fa075ab-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec2-ad3\"\r\nlast-modified: Mon, 04 May 2020 16:11:46 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 753222\r\nexpires: Fri, 15 Jan 2027 01:18:32 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CSmlo66wm5it2QgpCaY9kVPur9jzA9eIfaaeqynUKTINng3SUcGaTLpnEdm4QEiIg27Pja3fSCEfSnhSdYY6lU2Msf6xnZoqKwzjJNWtvO7VVbUeeoz9JVnnT%2FERZ%2F%2Btfwpdv%2FaX\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2771,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2609)","md5":"d5843dbdc71ff8014a5eafd346a262da","sha1":"127e1d971efab9341db8079f10663dc28e8e0a2f","sha256":"8e73a30d35c83ea6a597c3343324d2b7df097ad26e67b62efb5266ee12d317b5","sha512":"ac28dfa1a6fd09528e1ffc3f4fa19b0719c01f9033872e3eab51175b95c451179f1db22445b43ef9947e1810a5a37fdddeae7cdd7fe03b814a98e16e8642ab74","ssdeep":"","tlshash":"7e514241671662f381f60f36b12fb642713ad015140328b2b9bd9d90aba6deb5363d1e","first_seen":"2023-03-07T01:07:38Z","last_seen":"2026-07-27T10:32:05.321607Z","times_seen":16126,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":10,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/uploads/2023/02/breadcrumb-bg-1.jpg","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/uploads/2023/02/breadcrumb-bg-1.jpg HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:32 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 189854\r\ndate: Sun, 25 Jan 2026 01:18:32 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":189854,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1920x520, components 3","md5":"b354eb25e95613bf4a0de7a049c5f6a2","sha1":"16f9bbc6bdfeb07c897e0155716c0eb41184eabf","sha256":"c03d5baf90996e86d4f7252db9f606e8e086fc7b8d7325df84dc394a18a96da5","sha512":"f37d66216f0332be863d6b6307f303ec77734e3460a2fdd1fc69d14422e05e0944d4fd4cf491212c976d460a564897333ad41631d0f6359f635a29af66ea3bc0","ssdeep":"3072:S2mgotOqji2iPjje8iXOmfV4mGLg6xMxHIy109/u1ffPYhYbhu7XsXDS/wJpvVUn:SZtt+PHe8mDtig6xMxHIEqwfPisXD3XY","tlshash":"70040274e7c3cb05ab2a1d6c523f3cba1b2142e801e9191751436d26e78af65f9239fc","first_seen":"2025-06-30T17:29:04.856906Z","last_seen":"2026-04-27T05:45:33.378823Z","times_seen":6,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/uploads/2022/10/favicon-100x100.png","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:33.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/uploads/2022/10/favicon-100x100.png HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nCookie: _gcl_au=1.1.604525542.1769303913; pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://cryptorecoverysystem.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://cryptorecoverysystem.com/; _fbp=fb.1.1769303913038.2320734998\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5857\r\ndate: Sun, 25 Jan 2026 01:18:33 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5857,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"38ce1183260eb62fc019d5262b538ef1","sha1":"5db54cb053478791bd3496bfc34e59735a38402e","sha256":"558a90c90f3cbceadecda8761fa8ea8f27a93add3d10cbfd00d3eda10322437b","sha512":"01340dbe0991ea4afcee16d3729e97da9faa2ed953fa451f25ce5370880735b014e2ccbfd4d76ee660a44252afa2f9dc324c94276ec317d49a30831badb602fe","ssdeep":"96:tsmpsWt9n8tGFL6Kh6iET3JGx43HvrV4NMnXlH1e0nRjPhuQ8KbnWft/K6iXC:ts5W9Tg26ZTAaHvmMn1H1eyRT0rKqftn","tlshash":"b8c19e9fdabb9b6fc3447a3bf161a5a278428ae81993fb0a055a04a7340c195c96130f","first_seen":"2025-11-23T09:47:35.922234Z","last_seen":"2026-01-25T01:18:59.457748Z","times_seen":3,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/custom-twitter-feeds/css/ctf-styles.min.css?ver=2.3.1","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/custom-twitter-feeds/css/ctf-styles.min.css?ver=2.3.1 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:24:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2870\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16245,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16245), with no line terminators","md5":"37c2b469389d9b4f2c3722618cc7f6f0","sha1":"bf6781d7543373a0fee3161d182a03319f090b90","sha256":"40eded4199df55e8a5d634701767422ac6d0a210ccab1d7a687a8f75689bdcaf","sha512":"dcf67b72d72498393b9b2e5635e0cf914ee11f0c2ba3345275cb8079d29e2c87fe7224f55b0a1dfa176f13e18de735b384ec3788ed1d0f846a8facc8a292d9ae","ssdeep":"96:eaQDUcSS4fEv4aRGE6CXC3XXs8hk9aYVgeDzDhKLmESqiIEOZiCoufb75LPPITbX:eaQ+o8UaYVgIKLjiIG8Uk6GkxFPLrD22","tlshash":"f3720023794ca21cf03b86b5d6ce67e3312b47f2df12c55af699b927c1d18d42b22984","first_seen":"2023-10-25T14:47:48Z","last_seen":"2026-07-27T05:54:51.864449Z","times_seen":5556,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/simple-google-adsense/assets/css/adsense.css?ver=1.2.0","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/simple-google-adsense/assets/css/adsense.css?ver=1.2.0 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:24:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1003\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3579,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3df356413d14797def15813b5c1e681a","sha1":"9cae30cdde2c87a3a4bb3c855d37f1ebf2e536c2","sha256":"dd5209466aa4154d72e7f7e39b29dcead8c3f9c9005c17e1e715a4b61cb02208","sha512":"e95867f815b245c8808765624089417ed2662ce2bf22adad4015b841971faa6660dbaa5f200b70c9102c95e7237aafe8a2da4fb80a59603082d29a53f3cfc2ec","ssdeep":"","tlshash":"95710c5289f31803f86b91f81ff9930136ac155b424fdda6b90d3298df44eb554a1b8a","first_seen":"2025-09-14T04:54:01.138496Z","last_seen":"2026-07-25T02:21:20.92882Z","times_seen":54,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/css/animate.min.css?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/assets/css/animate.min.css?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4618\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":68601,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (460)","md5":"8ea67bf7d4ccacd55a30e2046f9241b2","sha1":"9e7eadfdcdf03a5664aaef256c76248ee786dd3b","sha256":"5d825a730b53e73c1ebf5e26ad9b5fc8e67ba28324ac6a55d5c966f4df4aa7b6","sha512":"1336cc299baba59cdcd3af3d2a9968a721ecc3ee2fbf15f62d295c761de8e88488caaaf27a8002f044ee3084e6306d6bde9a680c61bb5de71ef8056244c7f14a","ssdeep":"192:LIQHnIwf2T/awfDZUiduG+MONjnbimZbHMxymDSVbyPiVEzfukrWL7XU+qLmfRvw:LIW/yffHf7SpS/fjf7","tlshash":"9063096929e1114466370a15c7df9f78263ce5a31826ecfab3d2588bcf41fac23c9617","first_seen":"2023-04-13T23:00:03Z","last_seen":"2026-07-27T07:42:30.74435Z","times_seen":887,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewallet.de/img/magnifying-glass.svg","fqdn":"rewallet.de","domain":"rewallet.de","tld":"de"},"ip":{"addr":"104.248.241.14","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewallet.de","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 09:04:52 GMT","end":"Mon, 06 Apr 2026 09:04:51 GMT"},"fingerprint":{"sha1":"5D:7E:D0:A0:55:45:8D:DA:A6:E2:8A:6A:33:E7:22:61:6D:29:AB:3F","sha256":"67:F8:33:FE:1A:EB:6A:99:B1:C0:6B:57:DF:9B:4F:5C:10:62:84:F4:E1:15:35:02:EB:43:92:18:0A:CB:B2:E1"}}},"request":{"raw":"GET /img/magnifying-glass.svg HTTP/1.1\r\nHost: rewallet.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 25 Jan 2026 01:18:30 GMT\r\nlocation: https://rewallet.com/de/img/magnifying-glass.svg\r\nserver: uvicorn\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T11:26:20.993676Z","times_seen":17562036,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rewallet.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/js/jquery-countdowngampang.min.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/assets/js/jquery-countdowngampang.min.js?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1794\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11898,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"515cbb16cf8d4bd748bc224bfa076fbc","sha1":"894a32b4e2a5968b8f0def2c5988819e68c42180","sha256":"c1146cc6289cdec097dc2577b8b19c1645c1ce2a3c100f536a10e4ce2f098d05","sha512":"f022da1d21bde6944de32a0dcc24806c1a108cd0354a45a9f533558f09ec176a68a4c62484685e0934545acdd1fc55d3dab0e5d7f0881f2b825f54b527a056f8","ssdeep":"192:kxporzbmZCy8SiUQ2QsQ+Q7Oc6RSsPjqimJHe1YvjO:gD8SirFDN7SRAe1YS","tlshash":"bf32a01050720cf458b7d46b6bcb07d831af5067ad0aa9147dad72743fac81877eabd8","first_seen":"2023-03-13T14:15:12Z","last_seen":"2026-07-19T14:48:56.354534Z","times_seen":61,"resource_available":true,"data":null}},"time_used":576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":353,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/custom-twitter-feeds/js/ctf-scripts.min.js?ver=2.3.1","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/custom-twitter-feeds/js/ctf-scripts.min.js?ver=2.3.1 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:24:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 5600\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16112,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16112), with no line terminators","md5":"4231f0aab1a59146f514ba25ab9e6df6","sha1":"cc10655aa8621b5907ad478929ad71094207822f","sha256":"8e2df33c65119b175ac210c8cc700656e89bf66acf5c6c37c4115e2ba6db58c3","sha512":"a9380d68c056271a60612fe14012bf094937a30ce545417eddff82520fa90d69e1c7cba4da3e56597e447d4839d1747bc10b9d871340d76fbd00bf0ffcbd290b","ssdeep":"384:gth1KT5PkcG7ucG7KXMojfeHhvvZuV3tzsqsvO7lxH92zURFMawBUmcHUxiqMg0n:gth1KT5PS7w7kMSmRZuzzsqsvO7b9seT","tlshash":"ea722b05f2c5a49782b235a8a93fe30635733c7e4941c5226469e0f32db9b8f7163b6d","first_seen":"2025-03-15T02:00:16.689594Z","last_seen":"2026-07-27T04:05:34.31845Z","times_seen":530,"resource_available":true,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f1fa-1f1e6.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 19:44:42 GMT","end":"Wed, 25 Mar 2026 19:44:41 GMT"},"fingerprint":{"sha1":"8F:9B:8F:03:41:B5:80:0E:25:D1:4E:CC:17:8F:AE:CC:07:2D:12:90","sha256":"9C:0E:06:15:FA:81:A9:AD:A3:69:4C:1F:54:C7:64:DA:9D:26:0F:E5:D6:E2:77:5E:AC:1D:27:17:D0:CC:E5:9C"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f1fa-1f1e6.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 01:18:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 233\r\nlast-modified: Fri, 07 Nov 2025 05:25:34 GMT\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 35\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":233,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ac4bcb496ca349a21b05e400bd8ac5dc","sha1":"9a457bf92c1ac0fe45f5831f6b5e81d443b356d5","sha256":"8ad31e4e2ca36d66a9484937b76f003c8534d205da98fc90fe9d8fb7706e043b","sha512":"cea4f030cb3e68784ed21f8f9989d45127d8bd03762f3843c9556c303226bb69df32312df0f0583aadd84d1639b2a74c65b9f9bb5526e00d5a73c89e65efa48e","ssdeep":"","tlshash":"35d0a79cc176c1c29d14cb743dbd33c0768b2266208850dbf18357259487aee6685f24","first_seen":"2023-04-14T04:05:48Z","last_seen":"2026-07-27T08:04:43.407685Z","times_seen":778,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":60,"dns":1,"connect":14,"send":0,"wait":10,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/css/bigtech-custom.css?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/assets/css/bigtech-custom.css?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 125\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":402,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"274eeb5725436e502088ed3f4d38db01","sha1":"e722ade9a364abcc90ef50b35089414cbf202c0d","sha256":"5705cb0cebe38cd939d54ced41c999aff6553bc90b37edf47f0fc9370971ce59","sha512":"7270f9a840979e255da182b9264a5c4b67accdb4ae211399064b7660d32fc94f734e6ee7d0608b078f50b282b72345bdc44ca4ba07ededd80eb7b941422b83d1","ssdeep":"","tlshash":"6ae0ed9c85ed104cdbb57a3e59e83881bc0d6663c76464e1f814e2b88b8ef8a516db48","first_seen":"2023-11-12T17:23:05Z","last_seen":"2026-06-19T06:55:29.145532Z","times_seen":16,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/uploads/2023/02/imageedit_5_7927994127.png","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/uploads/2023/02/imageedit_5_7927994127.png HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 31607\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31607,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 216, 8-bit/color RGBA, non-interlaced","md5":"fbda0b9dbba2984e03020e6b63c15077","sha1":"01e88d9cd586e185cd46c986e2154db097f6a791","sha256":"b4b515e8b63be1c746d7bfa3e0cc51156de19afa67b26edec9deffd52e26da91","sha512":"5b0a51fef6d2a53d672d1d62ec1a5f7b3f49fa523bb4029fa7677b8c0da93b0a2efbaed9a59fa459f4d8fd6b47b19673a4f664aacc5cb70cb0ca11676fa33496","ssdeep":"384:ObduJIe450vC9cT8iPDKpRBGZEUz3V50iILuMiiR/u8RwIKco33KSpwNq2s2PWS9:Ob2u0KG8iupRzm7Iaw/qIa3DwNq1rSfd","tlshash":"bce2f1c28b2d16cd6a7d1530e1e3744eae3cc903da3fad649db518cd9c8247eb425267","first_seen":"2025-11-23T09:47:36.029936Z","last_seen":"2026-01-25T01:18:59.464852Z","times_seen":3,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:24:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2867\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12198,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12198), with no line terminators","md5":"3819c3569da71daec283a75483735f7e","sha1":"ecd40a5cc6f0b76200c454ca880210dc301cfab8","sha256":"214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0","sha512":"2710655dff46653daeb3a6e3f6d36f885e51d5b375738ee353aca40c6f66ae1a7dece57039d58747012ed9ea2822191143c06f270123b8cc580f6a41b8e8aef4","ssdeep":"192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz","tlshash":"994221493e0724222faf41f9fc1b468a632b013894c584bbb8e4d5dd18f19296f77b78","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-07-27T11:10:52.300082Z","times_seen":73633,"resource_available":true,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewallet.de/img/list.svg","fqdn":"rewallet.de","domain":"rewallet.de","tld":"de"},"ip":{"addr":"104.248.241.14","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewallet.de","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 09:04:52 GMT","end":"Mon, 06 Apr 2026 09:04:51 GMT"},"fingerprint":{"sha1":"5D:7E:D0:A0:55:45:8D:DA:A6:E2:8A:6A:33:E7:22:61:6D:29:AB:3F","sha256":"67:F8:33:FE:1A:EB:6A:99:B1:C0:6B:57:DF:9B:4F:5C:10:62:84:F4:E1:15:35:02:EB:43:92:18:0A:CB:B2:E1"}}},"request":{"raw":"GET /img/list.svg HTTP/1.1\r\nHost: rewallet.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 25 Jan 2026 01:18:30 GMT\r\nlocation: https://rewallet.com/de/img/list.svg\r\nserver: uvicorn\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T11:26:20.993676Z","times_seen":17562036,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rewallet.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.21.0","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.21.0 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:24:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3664\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19488,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19442)","md5":"56435e46abd5f7a20dd5b8590fbdc083","sha1":"fab2a319dc679ed90d62af44f9e37625a0562958","sha256":"8631189ca38e73206e52ed06e8f0f3b2e839b9facc236b9519b9fd8d7f8d63e2","sha512":"6173abe44b1ad586108395af2534997c7ebd06a59e571eff155c70aab5692b309ae4d6f3d13496d5a583013c96fc7b0a29472d3d7d8054325007298fc80dd6af","ssdeep":"192:Yt877iN3iCOy2bvGIdp8khugk8/H6qiMs7HqnFTSZq7RXDlCdkgI8:T7iNyqEpXk8/aq8uFucbrgI8","tlshash":"e992dbe4e46923c87b32c403e745f64c64d9f921cac49d59fa6f850c1ee16a316c6fb8","first_seen":"2023-06-17T01:39:03Z","last_seen":"2026-07-27T09:56:40.659064Z","times_seen":3349,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/pixelyoursite/dist/scripts/jquery.bind-first-0.2.3.min.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/pixelyoursite/dist/scripts/jquery.bind-first-0.2.3.min.js?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Sep 2025 10:53:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 625\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1317,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1146)","md5":"ff9016c99f73c592c2648319ea6d2074","sha1":"f2918fb5f72121b67f74c5f5ccbb47a2eb1317b0","sha256":"37045bf0d243623db4f2e99567c986944957b336dafa6368f4f75bcbad6fc4fa","sha512":"d33c0aca565c40a9da4f1002dc97c351405a60a5350f1842232a75e2ed2022c10bf2470ba2b66fcffa1558b6a265796d8334f46c0ba3c1f2985b20396ad82aba","ssdeep":"","tlshash":"062101dcb25230d1bbba2070756fa80ff031748f19268500618ed6b53dbd85574b7e36","first_seen":"2023-03-07T01:02:35Z","last_seen":"2026-07-27T08:43:48.631136Z","times_seen":18186,"resource_available":true,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/uploads/2022/11/about_img02.png","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/uploads/2022/11/about_img02.png HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4180\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4180,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"51451ebfad16ab2a8369b281d9594b42","sha1":"0137bccfbf97f77883c0ac37d7a8683ec301758a","sha256":"04e73d96a166e13688c26a3e553bfe13e84969e6900191717dc3142485a54fdd","sha512":"3f3ee8985b06a9a778fabea33c1abadddde6790ff35726a32d07310969269db57710bafad2f53655bbc5a52c00f0ec7cb7e9f5fef42ab26b306b38359445b4d7","ssdeep":"96:DSVkWW2elToSaStiHY7PaMXZ/WujSfNJ5SPOmGsRO:DSaP2ioQi4baMXZ/njwSv9RO","tlshash":"f2817d9d923f8d6e46990298d3b585fe259ffeac42d24057bfd7100880cb47c01ae316","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-07-03T22:44:31.967818Z","times_seen":66,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/uploads/2022/11/choose_icon01.svg","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/uploads/2022/11/choose_icon01.svg HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 405\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":766,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7a6af37068e5fe59517ca2fba1183c2e","sha1":"0e3def9b2521b0f3038eca9f1fb481916da00aae","sha256":"2634e608ad078ce608b4f7d623eb15a5348ae609d79b42a696270703ce7c1cfa","sha512":"272d6a2b52b059fdc19f652e4241bbd3a72ebe57fa4c9958712728a5ad4a577af7935dec01cbbb9c43063b3b6afc139f9a3827379595fbf3d2c7a7cee038aaca","ssdeep":"","tlshash":"3301d0a9f36c0d35f3409340e9cc7532613159e5a985cce1e681be2a3c70ade6c2d6c0","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-07-19T14:48:56.324087Z","times_seen":43,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":502,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Dec 2025 12:53:29 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2119\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-07-27T11:21:30.683177Z","times_seen":199826,"resource_available":true,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/js/main.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/assets/js/main.js?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1522\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5611,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"3ccdb432f398e7d548a90ece76406b4a","sha1":"526cdfb6b714f5a913b917fdf4b6dcc8dcae69f5","sha256":"828b09b62a00647c8697861d3a2e4cc2f2f986017318767e62c3f7abafb48415","sha512":"adbd9e8db2998ee6b582d19f601c826c1c17680ddd6dfa29d74618d276f5f43b02637e0e837a82b268c5a3693c49c1061b8d2f5c438dadecd296fea8d270d6e3","ssdeep":"96:WxOKROh9ke3bmeCE+Z2BC4W3cM7c/xra9yWm14wAZ6cp9i5iFze8/c4N:WP2kIbIEe4W3cpxQyh11YJ9RZ/c4N","tlshash":"d5c16848b126107e52ab73a88d3f4659e6a544a3c7476219f87c06b43f84b2c71d2f6f","first_seen":"2023-03-13T14:15:12Z","last_seen":"2026-04-22T15:03:20.998788Z","times_seen":13,"resource_available":true,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":362,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fcryptorecoverysystem.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1192266161.1769303913\u0026dt=Cryptocurrency%20Wallet%20Recovery%20%7C%20Crypto%20Recovery%20System\u0026auid=604525542.1769303913\u0026navt=n\u0026npa=1\u0026gtm=45be61m0h1v9200044481za200zd9200044481xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115495939~115938466~115938468~116682875~117041587\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-11292302200\u0026tid=AW-11292302200\u0026tft=1769303912969\u0026tfd=3214","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:33.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:53:09 GMT","end":"Mon, 23 Mar 2026 19:53:08 GMT"},"fingerprint":{"sha1":"48:33:DD:3F:0B:48:93:34:93:FB:CD:86:06:0B:02:0A:26:C8:9D:34","sha256":"51:93:52:C6:2F:18:71:EC:3A:8F:29:E1:74:86:FF:6C:A2:EC:19:58:65:2A:9C:A2:DF:E5:86:6A:E9:6A:73:7E"}}},"request":{"raw":"POST /ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fcryptorecoverysystem.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1192266161.1769303913\u0026dt=Cryptocurrency%20Wallet%20Recovery%20%7C%20Crypto%20Recovery%20System\u0026auid=604525542.1769303913\u0026navt=n\u0026npa=1\u0026gtm=45be61m0h1v9200044481za200zd9200044481xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115495939~115938466~115938468~116682875~117041587\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-11292302200\u0026tid=AW-11292302200\u0026tft=1769303912969\u0026tfd=3214 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptorecoverysystem.com/\r\nOrigin: https://cryptorecoverysystem.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-type: text/plain\r\ndate: Sun, 25 Jan 2026 01:18:33 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://cryptorecoverysystem.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T11:26:20.993676Z","times_seen":17562036,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":98,"dns":0,"connect":21,"send":0,"wait":30,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/uploads/2022/11/document_img.png","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/uploads/2022/11/document_img.png HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 141174\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":141174,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 456 x 612, 8-bit/color RGBA, non-interlaced","md5":"81205c03506086b04079cfbaf79164f6","sha1":"3fc24aecbb4f2aca0451caf62948be0fed191d3b","sha256":"d11af6db1de1015b81ff081285becf08ff0fdedd5304355c357dfde3d97481e8","sha512":"37999e71ca82a3be5cd2bf0da80b3b2a688084c76694462aef27587dffb1462cc4ac4830ec514613d224f6d1a9e8d8e7ea225df82ab124e659ed2d57b0c5b4f5","ssdeep":"3072:/Zp49+Qj/g6/pniKQVN0IfQQzcQDdKlXHTbq9mJgT5qTipilbuU9:/ZHSg8KVJfQyca0zbq9ZwTHZ","tlshash":"2ad3123283f7277239e929b46f7bed57bd3a0e0178c94087029c50ee94f51b5a1681af","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-04-27T05:45:33.390715Z","times_seen":40,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":501,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/js/jquery.appear.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/assets/js/jquery.appear.js?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1239\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4424,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d18fe7c86d2bcea69a0810de7b81e676","sha1":"3bc98b3a47dc6f09238bbd0e496fa11daa3caa98","sha256":"70f721f0d6aaebc5c683551fb12668e6a91a02d17ac1b41f8a4dda0fa91dcbd5","sha512":"0fc73474dfb4fa9247793332815cbc70f6b575058381032981f2a05e87432e904f275a76567511841c568d554b3426c4c548c55fb775bc9b5c1d1d6bb35efd7d","ssdeep":"48:Wl3XwqL924ayV+9FLAPfnUIeohhR9zIr0FfFoBSxMEh1u1cWSKjf4WJzw:y3XUz19FkkDo7R9crgYSpTocWZAUzw","tlshash":"2b91dc4a759b2ab54877622a9f1fb20cd721513b0202c2113cedde6c6f71864a197fdc","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-07-27T07:07:18.584652Z","times_seen":768,"resource_available":true,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":578,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.1","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.1 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:24:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 899\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2947,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"64ac31699f5326cb3c76122498b76f66","sha1":"cc0a5a1741b8257001f89b331378d8aa7c30094a","sha256":"4048fd0e6c44412465449ba4f5c7272349ee1574401cec755d6b8d9c0ccc28dd","sha512":"23ad865e63544ee039221161083510346b01b8be56fa7a83540036c51dceb3f0171adf8f932cf77a457240427c0c3ccbad1f9f371e977c5b6a01e9fe316a878f","ssdeep":"","tlshash":"d0510164660028504bff92db6ea9db047b6e7481cd1faf97b0c21a7c5b782851223e5e","first_seen":"2025-06-26T12:36:15.124007Z","last_seen":"2026-07-27T11:28:56.290608Z","times_seen":138102,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/js/jquery.ba-throttle-debounce.min.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/assets/js/jquery.ba-throttle-debounce.min.js?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 408\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":730,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (479)","md5":"d79df4b4d417c8096ae500167e5dffd1","sha1":"0f36123058eab0c10113043afe21c7783e662c6e","sha256":"bdbebd724e0bfb51f5b69fa3d8fadd999d66f32a1f939611a6735580b7f4d2c0","sha512":"87e455e82c83c9846ece145e19d27689eafa710284716baa6640f947b0cf4f43834d1576a61ee92723d28fe326cdbd5c616e1b4d345450345160e6b24bd9db20","ssdeep":"","tlshash":"3d011099228a102253e1ae235b7b53cb972ae08439f954c9d4a0e4c0bd20c8eb30ad7c","first_seen":"2023-03-12T18:07:49Z","last_seen":"2026-07-19T14:48:56.382353Z","times_seen":95,"resource_available":true,"data":null}},"time_used":576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":575,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/js/jquery.easing.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/assets/js/jquery.easing.js?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1146\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4297,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"96550741c997fd57758441aa1759b21c","sha1":"28179d80067a74176c1ff7bb8028c12d7ed6940e","sha256":"e5c0fa2f30aef4faf40adcf7a23b18c01453066fe5aa0088b3344a37811d6b8c","sha512":"4c1158fe0f47fdbb97751c8f720a6699cf32592c254dd1f485d1de11b0815b6cee9e1c877d6d922d06a5ea6c88f1a7080e569dff9cb0062e1b6830a75c73848c","ssdeep":"96:Jg1rrQ4ZK8C2vFfMJjIck9kJqBs8RPjoGs1scfX+YGW3cSniU9kZwSalaKEcrTeC:JIvHK8FMrCUMoykjl","tlshash":"e4917fa877dea50653213470491b50ce62bd7a02cc1c9d6ecc4c8c9879a4a3b92a7f3c","first_seen":"2023-03-11T19:12:19Z","last_seen":"2026-07-27T07:07:18.578595Z","times_seen":1404,"resource_available":true,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":578,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-json/contact-form-7/v1/contact-forms/209/refill","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:33.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-json/contact-form-7/v1/contact-forms/209/refill HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, */*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptorecoverysystem.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.604525542.1769303913; pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://cryptorecoverysystem.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://cryptorecoverysystem.com/; _fbp=fb.1.1769303913038.2320734998\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nx-robots-tag: noindex\r\nlink: \u003chttps://cryptorecoverysystem.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link\r\naccess-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type\r\nallow: GET\r\nvary: Origin,Accept-Encoding,User-Agent\r\netag: \"30052-1769303914;br\"\r\nx-litespeed-cache: miss\r\ncontent-length: 6\r\ncontent-encoding: br\r\ndate: Sun, 25 Jan 2026 01:18:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-07-27T11:25:02.509722Z","times_seen":311295,"resource_available":true,"data":null}},"time_used":1362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/css/main.css?ver=4.26","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/css/main.css?ver=4.26 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:24:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 623\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1845,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1845), with no line terminators","md5":"ba1a8f49355c443a241bb64bd4df5f3b","sha1":"b991441c2054fc6390549fb19fbed1b6489e4a17","sha256":"32414e7056c36670196a60bd1d7d40ac8995a4e8e0514cac469d0aab05f4027c","sha512":"d8aa0f8fc4397a2123e1b1b8cbfba9f148e1543554e47231393733bc2958b10aeddd32ea0d7167e0ffe509cad648f81c93eaf94950de6af97fbd6879d06ae0d2","ssdeep":"","tlshash":"f431dbdfb6c4f0484263a843796eab3c1abd40e4eb971a9d6658f33c47c93870062da5","first_seen":"2025-07-07T19:25:34.677557Z","last_seen":"2026-07-20T10:23:10.6471Z","times_seen":508,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/css/fontawesome-all.min.css?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/assets/css/fontawesome-all.min.css?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 12368\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59251,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59065)","md5":"86027feefc001d797bb989d60f2f0bf4","sha1":"a315139f11c2bbe1be8a4ccbdf5c34d27f69d0e7","sha256":"ca05ea3332e3c8196d181fee4abac691b6c6ef6821f9195b78ed503d69899700","sha512":"8013b361f58e44fa0813ab094574685f36ee38f7e54db4d6412e93f3a1198c7a7af412fbcc16e1e86584c69d9068cdac45766d7d28b14cbf7239626284e72b58","ssdeep":"768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSzJ:PE0PxXE4YXJgndFTfy9lQ1","tlshash":"f643fbb8e54c01cab732c44bef81b2bc61b6f73de5914d95f00e591c2ad26a811c5fba","first_seen":"2023-05-16T06:42:34Z","last_seen":"2026-07-25T09:47:11.516883Z","times_seen":1459,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/css/ccpw-icons.min.css?ver=2.8.6","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/css/ccpw-icons.min.css?ver=2.8.6 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:54:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 607\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2396,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2396), with no line terminators","md5":"7e6fbafd43170733b0d5f397f8e6210f","sha1":"baa55fafe76c0f33eb8ba35bd496809468115442","sha256":"46298b237ce219a608e02724a5f7a2c3d42bc18b0cb6791b79f54b4edcf6eda8","sha512":"e7c63efb0033fcf70d0beb5de66f4ff4528ece00fd545db5a9930abf1f7c06916b31f85ec58eeb8fc5b82fc8e01673c0e39ade6b4e2b0048aeb06a70882346ab","ssdeep":"","tlshash":"8341f8e5d69c18b2434bf8876783f3e01709a224a9924d01d24b5c3ddefa206bbd0bdd","first_seen":"2024-09-28T08:38:49.169669Z","last_seen":"2026-07-27T03:39:43.19269Z","times_seen":73,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/uploads/2022/11/chart.png","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/uploads/2022/11/chart.png HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19806\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19806,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 238 x 238, 8-bit/color RGBA, non-interlaced","md5":"44024b9a462131e6ff78ef0a9ee1576a","sha1":"02464b72ede2f36701938a3249339e2e9c61de44","sha256":"b41b8d84e3c0dbde71c1ad13559202302fd4b1e8017ad7abdf33e8d2273c3444","sha512":"d44c01e811e4481d2cbd82f9c50d05b0063c39d64b6bf4cb47ba1d8980588c0518314fc4aeaf75ad6c0bbd5dbae992d7e3392a813b2aeeb890d830cdc8d28868","ssdeep":"384:9apEP2P8OjOdwU+lClJbkEpPagYhmF+/d37b3eRyLxjYkXWq5SblU:8SP2P8r0gD9XFsd33uRyLx8kTyU","tlshash":"ae92d048bfdd9c98ea84e109ee9f34ca4cf15d42684bf8b122b15e860b6e0710617f5e","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-07-19T14:48:56.365889Z","times_seen":48,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.1","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.1 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:24:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3369\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12512,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-07-27T11:25:35.480437Z","times_seen":220847,"resource_available":true,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":578,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/uploads/2023/06/toolkit-icon-e1686899547388.jpg","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/toolkit-icon-e1686899547388.jpg HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 07 Aug 2025 16:24:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1351\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1351,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 47x31, components 3","md5":"084ca6f255471f40e88dddc6693f347a","sha1":"03f50b08866e23d8c3185f4ad1b0c5e3152e0b6b","sha256":"a9359aeca6dc72427faaab5fba853cc2533498ade6548282ab955c2980b95923","sha512":"e263cbf53643c265fb086225af800317425d5aaded46c93472ce347908cc7745d40784eb1de5feb6a594f305a54320ef4ed4ca42f1d2c39d4f147eea01787167","ssdeep":"","tlshash":"5621cb16db5283d19d0d5cb6045e101e938c9cc1764df3566af2c9f2cf108dcd958658","first_seen":"2025-11-23T09:47:35.977187Z","last_seen":"2026-01-25T01:18:59.485949Z","times_seen":3,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":501,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f1e8-1f1e6.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 19:44:42 GMT","end":"Wed, 25 Mar 2026 19:44:41 GMT"},"fingerprint":{"sha1":"8F:9B:8F:03:41:B5:80:0E:25:D1:4E:CC:17:8F:AE:CC:07:2D:12:90","sha256":"9C:0E:06:15:FA:81:A9:AD:A3:69:4C:1F:54:C7:64:DA:9D:26:0F:E5:D6:E2:77:5E:AC:1D:27:17:D0:CC:E5:9C"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f1e8-1f1e6.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 01:18:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:21:38 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 35\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":910,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6ea8666882589830dd40b86f950081bf","sha1":"c8257e62c3f91fb0b0a2486d43bcd87d016510ca","sha256":"fa546cdc4c1e65f3eac9c2996fcaf37c08b42da266b68fc2526d0248c1d0854a","sha512":"34711d230f80527103aed3a55c4918e50af34e40d509307a8a183eed49bee5cb1c0091492277bfde508b3d6e83aa11ada3287578d5d915935b758e464da8dc16","ssdeep":"","tlshash":"9d11d0e70231f3c89cc6d81d6f55f46581bbb1659c7288c7e59f170c65869ce7600e04","first_seen":"2023-05-08T16:47:32Z","last_seen":"2026-07-27T08:39:42.711834Z","times_seen":735,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":59,"dns":1,"connect":14,"send":0,"wait":11,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/js/jarallax.min.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/assets/js/jarallax.min.js?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 5050\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15498,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15303)","md5":"0458551a243e9bf81ee13d5408d24344","sha1":"328722616a2d716324ebab38c9c4ce69716b1e99","sha256":"c5d5c870a8cbf1cbf6ed11b64fcdcd3bd9469e757b27de7c43113026bcdac23a","sha512":"0c8f7c22f6bef7d86a76c77e7ad49ffd6f6225c9b3e63a2b9f1896af99e4aff91c29695a083c08b165ba006c57bbf5f9bbfcb296c2d8268c1d3f321c2d40e497","ssdeep":"192:59W5RO5CcsDpEgCpb5ck24ZBGz/1Nfw9+ThFOisY1QmAaVh4DPExc4HcBAsot6JL:PIRCYY7GxNfrMKhUPESBAsot6JL","tlshash":"3b62e79c3221321285fb72ed201f630eb635997481aac951b52cc9fd2f65e8d80f7f1a","first_seen":"2023-03-07T12:05:11Z","last_seen":"2026-07-25T09:15:41.702353Z","times_seen":1434,"resource_available":true,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/pixelyoursite/dist/scripts/js.cookie-2.1.3.min.js?ver=2.1.3","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/pixelyoursite/dist/scripts/js.cookie-2.1.3.min.js?ver=2.1.3 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Sep 2025 10:53:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 803\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1709,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1709), with no line terminators","md5":"fbaff6df5010e82fec77e88acd359eb5","sha1":"ca5b3dc99936b2865ef02d756ede49ad455ba4a0","sha256":"4af105297c5b49ca668eaa0774c0eb479e907175f12ccc30e9c038dd7b6fcaf0","sha512":"2e8efdeafba4d67b0a4a93e3725c2bac44013f8236a2274b23149073de861d5fec1223d2a77a3e685925f89c0d41da5f7e12e855f571cf9b25619e8b88de1775","ssdeep":"","tlshash":"a231529834553c98029f6615233f128ff1b89f899c8da7598359a9f27638807802bff8","first_seen":"2023-03-07T01:24:05Z","last_seen":"2026-07-27T08:43:48.505027Z","times_seen":17638,"resource_available":true,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/js/jquery.knob.min.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/assets/js/jquery.knob.min.js?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3485\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10804,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10804), with no line terminators","md5":"e708020309de1747a08957f691324ac8","sha1":"4df8f239f9a18fcdd446d2238e6c1b0e32ea52d5","sha256":"db5e38abe34e33f5d4e99c52a914c9f0fd16fc2918eb35dcea65d8b78fa617db","sha512":"361459ccf77330e31fd34e5799de09a27c0f7edcf83def7d99155c15e44371d0ad7e3bf8eb33c88bfed929271ba470ff5741c1d446fe6568a032ac3de155156b","ssdeep":"192:1H6pJasduw1Erl0D/Mt8AyQCkkS8Xg3t4lEKZnGduNImQhJiEkx:tvw+rl0D/Mt8A8kkS8Q3t4lOduNImGir","tlshash":"9722510f321521776bc6d626002f464a7933f92a3617821eb2399ce27d75d09637bf78","first_seen":"2023-03-07T12:01:33Z","last_seen":"2026-07-26T21:05:49.422154Z","times_seen":575,"resource_available":true,"data":null}},"time_used":576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":356,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/2709.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 19:44:42 GMT","end":"Wed, 25 Mar 2026 19:44:41 GMT"},"fingerprint":{"sha1":"8F:9B:8F:03:41:B5:80:0E:25:D1:4E:CC:17:8F:AE:CC:07:2D:12:90","sha256":"9C:0E:06:15:FA:81:A9:AD:A3:69:4C:1F:54:C7:64:DA:9D:26:0F:E5:D6:E2:77:5E:AC:1D:27:17:D0:CC:E5:9C"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/2709.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 01:18:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:26:01 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 35\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":862,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e62b930d873735bbede7ae1785d13233","sha1":"d45d0ae7aae2c4287280072d8574af8e7ffcf414","sha256":"a0131284c8eb7d0f8c051da1c379a618d297da2a730b4a85296b666b96c011a9","sha512":"c3635af9655c9c57cc09cc4404478785a36507ee11d5ace36ad9bad01ddd0af2da5989995b4758173700ab1579539409cb1ef22e5cd59959e7bd44d8303bb651","ssdeep":"","tlshash":"dc1123ca856151c1c042e7663fbcfad1236615b42db16552fec6871cc4c77db1d12eb0","first_seen":"2023-04-30T08:56:03Z","last_seen":"2026-07-27T08:15:11.059057Z","times_seen":1688,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":66,"dns":1,"connect":7,"send":0,"wait":8,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/uploads/elementor/css/global.css?ver=1702468424","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/global.css?ver=1702468424 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://cryptorecoverysystem.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-litespeed-cache-control: public,max-age=3600\r\nx-litespeed-tag: 620_HTTP.404,620_404,620_URL.ecb2bc40d21ef21ed095a4f68d1b165f,620_\r\nx-litespeed-cache: miss\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Sun, 25 Jan 2026 01:18:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PixelYourSite","description":"PixelyourSite is now probably the most complex tracking tool for WordPress, managing the Facebook Pixel, Google Analytics, Google Ads Remarketing, Pinterest Tag, Bing Tag, and virtually any other script.","website":"https://www.pixelyoursite.com","common_platform_enumeration":"","icon":"PixelYourSite.png","categories":["WordPress plugins","Analytics"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW:6.9","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"bxSlider:2.8.6","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"Contact Form 7:6.1.1","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"Elementor:3.15.0","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Breadcrumb NavXT:7.4.1","description":"Breadcrumb NavXT is a WordPress plugin compatible with WordPress versions 4.9 and up.","website":"https://github.com/mtekk/Breadcrumb-NavXT","common_platform_enumeration":"","icon":"Breadcrumb NavXT.svg","categories":["WordPress plugins"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MailChimp","description":"Mailchimp is a marketing automation platform and email marketing service.","website":"https://mailchimp.com","common_platform_enumeration":"cpe:2.3:a:thinkshout:mailchimp:*:*:*:*:*:*:*:*","icon":"mailchimp.svg","categories":["Marketing automation","Email"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"MailChimp for WordPress:4.10.6","description":"MailChimp for WordPress is an email marketing plugin that enables you to build subscriber lists.","website":"https://www.mc4wp.com","common_platform_enumeration":"","icon":"MailChimp for WordPress.png","categories":["WordPress plugins","Marketing automation"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Yoast SEO:25.6","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":91180,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8832), with CRLF, LF line terminators","md5":"4fa37ec106ac1b15d7e1c1d5ea21a8ea","sha1":"d25a4d9f962156c2c7c0f75e0bbde8b39051afbd","sha256":"85915fd54fd2e1ff78a27ce21ba00c490db6752b84736ecd7ba45b6e807bd510","sha512":"064911672f8dd1898dec7bd63a699ff436f9c8f810c653a03c62f15886e9a487e2816fb32545fc973c37222a021381eb2c58004ef7b3c2b955cd53497cea2a65","ssdeep":"1536:WINypYgNKbzY56rx9NlZNosy1+TrCzf711kvja7XZ7tvM0kwQc0DymATya/Dwc:WIomgNKb85UrNlZFs+HCL711kvG7XZ7/","tlshash":"fa93da92bdeb903355ab72bca325f618f2318117c505db6076ec1b48afc6ea40773768","first_seen":"2026-01-25T01:18:59.490943Z","last_seen":"2026-01-25T01:18:59.490943Z","times_seen":1,"resource_available":false,"data":null}},"time_used":834,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":830,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:24:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 12133\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57912,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57726)","md5":"eeb705d0bdccfd645d3bbd46dd1fbab3","sha1":"066def290f42ed8c00860e573cc880bd46e9ced4","sha256":"d01a2ba2805c78957e15a2958135de0f3cb88e95159dd0f6c0a032bd76b1b0e9","sha512":"39d11741808e95d8ea504b2e30ab19463f771eddb741196121bf04fd7d2c6f066199ef1e530ea0f2aec077118929a91c05bbfbfbf3d7d067366ed7fb46ef1c64","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzO:0E0PxXE4YXJgndFTfy9lt5C","tlshash":"1843f9b8e54c01cab731c44bef42b2bc61b6f73de5914d95f00e691c2ad26a81185fba","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-07-27T11:31:32.406677Z","times_seen":27580,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/css/ccpw-styles.min.css?ver=2.8.6","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/css/ccpw-styles.min.css?ver=2.8.6 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:54:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1251\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6008,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6008), with no line terminators","md5":"c07ca2be8a243c16bb5b5b2b67e3319c","sha1":"a1f40bad8e30d5d9751371556742be7497c0c932","sha256":"c691a747d2c99c4234b665b321f33a5e81f4b20dfc6b48b1ace8077042aa8ddd","sha512":"5af65fa6ce50ffd2de854b8f17a4bf74dcbdfc0265cf1d51ad246d48ad0f9d28288ef451fad37aafbff8740fccad488165ac021f6e5bb65d2a89c8106e62a3b8","ssdeep":"96:9eiSSE3HdGHOHn4HnkYByOrS5kKkyX1OkFIsYkz+GnqG/CUa3qzYp+SC3teQh9ao:9+VqwOrikKkiwkFIhkz+GnqG/CUa3qz9","tlshash":"81c11021eb917c75e03d8a19eec322dc3aa04a3d636305bed47de516dac904eb624f31","first_seen":"2025-06-30T08:08:12.320267Z","last_seen":"2026-07-27T03:39:43.13781Z","times_seen":57,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewallet.com/de/img/magnifying-glass.svg","fqdn":"rewallet.com","domain":"rewallet.com","tld":"com"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewallet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Dec 2025 08:39:47 GMT","end":"Tue, 03 Mar 2026 08:39:46 GMT"},"fingerprint":{"sha1":"02:30:98:57:F1:47:44:FC:36:94:CA:59:24:90:59:92:14:A4:D0:EF","sha256":"A5:DD:E7:A1:C7:74:B6:08:92:55:40:22:2A:33:35:95:96:2D:5A:7C:CA:C2:C5:45:E0:3F:E6:05:D9:D3:DF:F5"}}},"request":{"raw":"GET /de/img/magnifying-glass.svg HTTP/1.1\r\nHost: rewallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptorecoverysystem.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 25 Jan 2026 01:18:33 GMT\r\nlink: \u003c/_next/static/media/36966cca54120369-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/904be59b21bd51cb-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/e4af272ccee01ff0-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-matched-path: /_not-found\r\nx-powered-by: Next.js\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::cdg1::lbmvr-1769303912669-7d984f439f99\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T11:26:20.993676Z","times_seen":17562036,"resource_available":true,"data":null}},"time_used":463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":463,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewallet.de/img/agreement.svg","fqdn":"rewallet.de","domain":"rewallet.de","tld":"de"},"ip":{"addr":"104.248.241.14","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewallet.de","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 09:04:52 GMT","end":"Mon, 06 Apr 2026 09:04:51 GMT"},"fingerprint":{"sha1":"5D:7E:D0:A0:55:45:8D:DA:A6:E2:8A:6A:33:E7:22:61:6D:29:AB:3F","sha256":"67:F8:33:FE:1A:EB:6A:99:B1:C0:6B:57:DF:9B:4F:5C:10:62:84:F4:E1:15:35:02:EB:43:92:18:0A:CB:B2:E1"}}},"request":{"raw":"GET /img/agreement.svg HTTP/1.1\r\nHost: rewallet.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 25 Jan 2026 01:18:30 GMT\r\nlocation: https://rewallet.com/de/img/agreement.svg\r\nserver: uvicorn\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T11:26:20.993676Z","times_seen":17562036,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":57,"dns":31,"connect":32,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rewallet.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/css/mCustomScrollbar.min.css?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/assets/css/mCustomScrollbar.min.css?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3806\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42839,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (42839), with no line terminators","md5":"f59e3f4c0087b4d8ddc27bdd9c9ab92b","sha1":"fac9b521062feb5250c04d62128a8c3ddb312632","sha256":"247184981eb6f698a94e431a83d68c6b0df623cce57b6e29dc5a6c11e23aa195","sha512":"eaa92f05b0f29794c326d349882f1fa32115b81ea0c4c064acacbaed7a6a9c80f1caf2cb3c9ce64e3023d5d4497cd7665d6a83d7455b26878de29390a83c2f44","ssdeep":"768:hStyRbNWmYd7Z9t6vw7R01rnk6BcxL+zhRNxA5l2ng7ytcKaWDxQ:hStyRsmYd7Z9t6+R9","tlshash":"581317992a4336dffa4f447dbb81379a11fc37834552166cb0d75ca4ab88bf7a439402","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-07-27T10:04:22.142643Z","times_seen":15449,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cryptorecoverysystem.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:05:45 GMT\r\nexpires: Sat, 23 Jan 2027 13:05:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nage: 130367\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-07-27T11:23:22.063433Z","times_seen":27629,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-admin/admin-ajax.php","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:33.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nCache-Control: no-cache\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 452\r\nOrigin: https://cryptorecoverysystem.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nCookie: _gcl_au=1.1.604525542.1769303913; pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://cryptorecoverysystem.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://cryptorecoverysystem.com/; _fbp=fb.1.1769303913038.2320734998\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":452,"data":"action=pys_api_event\u0026pixel=facebook\u0026event=PageView\u0026data%5Bpage_title%5D=CRYPTO+RECOVERY+SYSTEM\u0026data%5Bpost_type%5D=page\u0026data%5Bpost_id%5D=34\u0026data%5Bplugin%5D=PixelYourSite\u0026data%5Buser_role%5D=guest\u0026data%5Bevent_url%5D=cryptorecoverysystem.com%2F\u0026data%5B_fbp%5D=fb.1.1769303913038.2320734998\u0026ids%5B%5D=1278118336852106\u0026eventID=fd6b4205-fcdd-4507-8a1f-a7ceef6ef9e5\u0026url=https%3A%2F%2Fcryptorecoverysystem.com%2F\u0026ajax_event=e0c58a0f46\u0026woo_order=\u0026edd_order="}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://cryptorecoverysystem.com\r\naccess-control-allow-credentials: true\r\ncontent-type: text/html; charset=UTF-8\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self';\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nx-litespeed-cache-control: no-cache\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\ncontent-length: 0\r\ndate: Sun, 25 Jan 2026 01:18:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T11:26:20.993676Z","times_seen":17562036,"resource_available":true,"data":null}},"time_used":1568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1568,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/uploads/elementor/css/post-34.css?ver=1754584942","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-34.css?ver=1754584942 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:42:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 730\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5649,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5649), with no line terminators","md5":"c21c8e74c061894ad2727bfcf24cf350","sha1":"a08dc3fb96112839e01f86f2bafda12930e6db12","sha256":"bdbb3ad6b5ad3b59517908267227b1167435d5d88631e326840ad2fbde476ac9","sha512":"4b2ad20eb90563ee8861bab8f94133a3d49af1e7677b1e5923fcd44817d1c486c710411146e612a8d0f43a9b5ac3d13546a32bd6f327200037459960c8b07902","ssdeep":"96:nALAnURvXQLAnMRvCX1Fuxyu0uzaFMUiF/0LAn9qRvsjLAng93cxRv/BuzaFMUiL:A0UC0MUzuAu0uzxFc0cM06WhBuzxSS0K","tlshash":"5cc1f4693d430165702fa25f1123d58ca53edccdd47a76eae429a063b0bad9433f2e63","first_seen":"2025-11-23T09:47:36.004015Z","last_seen":"2026-01-25T01:18:59.494028Z","times_seen":3,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/pixelyoursite/dist/scripts/public.js?ver=11.1.0","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/pixelyoursite/dist/scripts/public.js?ver=11.1.0 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Sep 2025 10:53:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 21013\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":146500,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"344afe2595913c25da6247b52067df30","sha1":"e3191e09cb7bdd1c6feb59e4201bf707f065de00","sha256":"5904ec212fb81cd2d992808c4144d2251eab241f31b1ab16f1fbe18a5693494f","sha512":"191d752e4abc164130f208812dabd60f5aac5f6b71bb1cf76efdcf9494b3fe68d7bef3314e0f06874b42fd2781645cd9b0d55664c41ac59236fc7d624d8b6062","ssdeep":"1536:yM+Ih9C9S0l928Uj50+uPevzq1Tb1tnTFmnWSiNRySEhQu2JQIHHnhFSSnUZ2EmX:n+Ivp5KPevzq1Tb1xIzjEpDH","tlshash":"42e3724d25fb211811fb367c4bdfa005b2309167608ddd507d4c1fe49f90a2a9aeabee","first_seen":"2025-06-18T18:09:23.686093Z","last_seen":"2026-07-24T14:57:22.476619Z","times_seen":1615,"resource_available":true,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":460,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/bigtech-core/assets/js/hello-world.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/bigtech-core/assets/js/hello-world.js?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:24:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 845\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2452,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"42c20b028e76090b584102c1af2effca","sha1":"caec0e06e1c2e4dd0fdde2956db7b9b97cffd400","sha256":"daadbf20913b9c79bf5359f1a288e595883e9fdfc37e9984caa4c70c835b65a9","sha512":"acf729a25319aa3b99a3b2a549c943aabeb2838220681deb3e41a18925acb011e513c4ead3013aa0750540c17863e039d4dd4452ed19affe7596921b019d355f","ssdeep":"","tlshash":"d5512056fb5e50bf36bf222afc39cf02d2adc572d195d1b6788c9824976048901ccaf8","first_seen":"2023-03-13T14:15:12Z","last_seen":"2026-07-27T07:30:24.160319Z","times_seen":292,"resource_available":true,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cryptorecoverysystem.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:05:45 GMT\r\nexpires: Sat, 23 Jan 2027 13:05:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nage: 130367\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-07-27T11:23:22.063433Z","times_seen":27629,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":207,"dns":3,"connect":21,"send":0,"wait":8,"receive":3,"ssl":176},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:24:27 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 29744\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-27T11:25:35.467154Z","times_seen":992674,"resource_available":true,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cryptorecoverysystem.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:05:45 GMT\r\nexpires: Sat, 23 Jan 2027 13:05:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nage: 130367\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-07-27T11:23:22.063433Z","times_seen":27629,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":94,"dns":3,"connect":8,"send":0,"wait":9,"receive":5,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:32 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 07 Aug 2025 16:24:19 GMT\r\naccept-ranges: bytes\r\ncontent-length: 78196\r\ndate: Sun, 25 Jan 2026 01:18:32 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78196,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261","md5":"e8a427e15cc502bef99cfd722b37ea98","sha1":"a9922842a120a7f1eaced667480c5e185a106d69","sha256":"d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef","sha512":"113775748a4166c07e58c26cf6db7fed473732dc6124b8ee0f0dcc0d6439eb2ab2c5d9e01c67324fdf9de4105349cf30cc5796a0b0e0ce9a08f337b9d4e10b7b","ssdeep":"1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU","tlshash":"3273121cf567643ef6a8e05f3c38256d4fd5c724e2e68a06748db808c4ce71d90879b6","first_seen":"2023-04-05T08:37:56Z","last_seen":"2026-07-27T11:10:52.235159Z","times_seen":162554,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":138,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.15.0","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.15.0 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:24:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 15972\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":56154,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (56113)","md5":"91ba1f8391336da5a33a6f0101478fc4","sha1":"51ca2417bc51261127ee0099c4cb6ee25f9e2cd7","sha256":"2784c7aa14a7b58b06dae8a752dfcb90a54dde95e66373307e47ad173c6a9cbb","sha512":"9a58d255d1893aa7efbd887780db0b57fae38b4b6451d10db962d33fb3b254e2224e1aa4f591312cd261c2237575955807c7ea51d043117cdcd47d9f8b825d29","ssdeep":"1536:OeAjA679C+QUVYNIe8HeBHmjkBzRNx4cR8+teAWuHDPh87FO0Q5RSS2TKtoO4C3Y:HJpAgmKN2Z","tlshash":"6c43e7423211b8b307ef41a7702f120af3221dd8740eb5987669dcf6b4b1d96637ab75","first_seen":"2023-07-31T21:50:19Z","last_seen":"2026-07-21T05:23:48.788132Z","times_seen":205,"resource_available":true,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":573,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/style.css?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/style.css?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 324\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":567,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"23e6b779c929b59e6fb97df8447cab95","sha1":"b0418b05692fc2f1fdf6d391c8a858f4a9477af6","sha256":"be2644711caaee16307e5ede31d64adb76d478e94de941d86bdd5a513ce43ae2","sha512":"33b0389c4df70a2ac3c7fe659cb107c6ca12deb848f5205a60ccaf8545c7309ca960a1d323d7d05ad78eb959acd7d4df6a27b8b2d4aba63b9d8f4d2d0f716d00","ssdeep":"","tlshash":"35f0e10e7a1f913623f086123a7d71c9975bef01019b10f9f78fd24e47555390999625","first_seen":"2025-11-23T09:47:35.9604Z","last_seen":"2026-03-13T05:01:36.716841Z","times_seen":4,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/uploads/2023/06/experience-icon-e1686899078925.jpg","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/experience-icon-e1686899078925.jpg HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 07 Aug 2025 16:24:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1350\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1350,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 45x30, components 3","md5":"5ba19421f310a2f85e57b181b7ca651e","sha1":"cb70ea82dee091f2df20173ecb88567e0e82f860","sha256":"5c4a22c84a98a1cd94b6f9132380b0b658d0d43c7fdbe81d8080c367282befe8","sha512":"7cd49942e4d8c4e4cff6559322e9a3729de08a2453c1ac997168aed7c2f2446ee4c7f8c3d93866a448d471a92c9e4bd3ef15c5ddbe42d1a9255beefcf9108cb6","ssdeep":"","tlshash":"0021ea1da70100dceca5cd7d88097c79d2dd5d52bd64a70c3771c29ac6349cd494888d","first_seen":"2025-11-23T09:47:35.94587Z","last_seen":"2026-01-25T01:18:59.498239Z","times_seen":3,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/img/bg/footer_shape.png","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/assets/img/bg/footer_shape.png HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/wp-content/themes/bigtech/assets/css/bigtech-core.css?ver=6.9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11873\r\ndate: Sun, 25 Jan 2026 01:18:32 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11873,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 39, 8-bit/color RGBA, non-interlaced","md5":"c7b21696c8913486e805ee0f8c02e9f8","sha1":"b89cbcf4572beaf1c30a61838f93bb77ea95201d","sha256":"9796c58414b0255683489590c09bf8a35479c68779c6bd0433862e61253935eb","sha512":"8e08809fe9a82e99b665f1d0347ec50925cbff993913a3db3718f6b00b65e1e0fcf265f1915f7b4afbb4b1ab3e5f093b15681cef9cb2fe3e63c0315ef8c7472b","ssdeep":"192:nIIHUCD4waz7FH49X79t6++cqFOk8JlVJX9mXf5wF54Ob+q8moqLdik:Z0w62peFOkcXJA5wF6op8mZT","tlshash":"c632af58dcf8ea277e8fa97231978b7f21536181c1c15918e4dbc78f0614e042eaa78a","first_seen":"2025-06-30T17:29:04.851686Z","last_seen":"2026-01-25T01:18:59.498902Z","times_seen":4,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-includes/css/dist/block-library/style.min.css?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Dec 2025 12:53:29 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 14921\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":119695,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55871)","md5":"693359d40ab420bb23aa1b4be239f162","sha1":"67719855e95b9befb5e16556455ea78f3b9d7d92","sha256":"b4cd2f5507698b3ebd388e2d1ed31bef9c5704a171ccd53720c27c66df2510c7","sha512":"3ea55e5e2d2cfa21f66701e322928f3199042b8d3eef8f611cae1ee5d931903fb69d39b5cbb72f493e84f477b56f44fb24badc73f2c298785a9f29eb72b6d8a5","ssdeep":"3072:SoeJBCCUQg5MG7x+qehvX02dclkWwbFpPu:mfUQg5MG7x+qehvX02dclkWiF0","tlshash":"7ec3621417b4dcf935ffa73a5e4ee258a107aa41c68a67e6e066d190718ca490cf3f0f","first_seen":"2025-12-02T22:14:51.412485Z","last_seen":"2026-07-27T02:48:45.214359Z","times_seen":21678,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/secure-copy-content-protection/public/css/secure-copy-content-protection-public.css?ver=4.7.3","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/secure-copy-content-protection/public/css/secure-copy-content-protection-public.css?ver=4.7.3 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:24:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 329\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":954,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (954), with no line terminators","md5":"06a67acea628d335749c7963e66fb5c3","sha1":"de465d6297dc80fc5d65b8f2e96005a8d7af17f3","sha256":"e5a6b332ce0e1d7e9ffe36470190a421acd4bd6c6e70cd377a80c19b92cd06d0","sha512":"aaf8412c72222fded5b242a82c8f50a10712d21ee193d0b085bab5a50bd34c403e2b5e8a58f8a48f5d64752d8689b75bf5f875438dcbe8d1ae37d1487dd818fd","ssdeep":"","tlshash":"c2117b23da33205cc537d133fd72b76c6635c406dad6177da1079ba0428a0ca0187b4c","first_seen":"2023-05-21T19:47:32Z","last_seen":"2026-07-27T11:07:01.500934Z","times_seen":1072,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/css/bootstrap.min.css?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/assets/css/bootstrap.min.css?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 21225\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":163873,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65306)","md5":"94994c66fec8c3468b269dc0cc242151","sha1":"ec16bd19bf4ae9bc2e2336ac409a503bbbdaacad","sha256":"62f74b1cf824a89f03554c638e719594c309b4d8a627a758928c0516fa7890ab","sha512":"190194d1f30c8b6dfcb80f9afdb75625fa5418a52405d81f15d8019bbd92510e817b25a3a18feda27d2d1231fe3921fd88fe037e1fbb1ccd08f5fe5e4742ffe3","ssdeep":"1536:4t04T8if0W8DsEBpy0cuJBf2rIWE5e0VUpz600I4fM:4t04/0VUpz600I4fM","tlshash":"c1f3b4dbf581341dd4a7c259a4d1bffd052f4586e3025aabb0277bb88b892c70963e4c","first_seen":"2023-04-05T04:27:21Z","last_seen":"2026-07-27T11:20:31.606697Z","times_seen":25816,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cryptorecoverysystem.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 19:51:49 GMT\r\nexpires: Sat, 23 Jan 2027 19:51:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 106003\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-07-27T11:26:11.168993Z","times_seen":283510,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewallet.de/img/anlaufen.svg","fqdn":"rewallet.de","domain":"rewallet.de","tld":"de"},"ip":{"addr":"104.248.241.14","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewallet.de","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 09:04:52 GMT","end":"Mon, 06 Apr 2026 09:04:51 GMT"},"fingerprint":{"sha1":"5D:7E:D0:A0:55:45:8D:DA:A6:E2:8A:6A:33:E7:22:61:6D:29:AB:3F","sha256":"67:F8:33:FE:1A:EB:6A:99:B1:C0:6B:57:DF:9B:4F:5C:10:62:84:F4:E1:15:35:02:EB:43:92:18:0A:CB:B2:E1"}}},"request":{"raw":"GET /img/anlaufen.svg HTTP/1.1\r\nHost: rewallet.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 25 Jan 2026 01:18:30 GMT\r\nlocation: https://rewallet.com/de/img/anlaufen.svg\r\nserver: uvicorn\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T11:26:20.993676Z","times_seen":17562036,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rewallet.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/js/wow.min.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/assets/js/wow.min.js?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2572\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8415,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8385)","md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-07-27T11:26:11.227432Z","times_seen":14048,"resource_available":true,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":362,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f6a8.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 19:44:42 GMT","end":"Wed, 25 Mar 2026 19:44:41 GMT"},"fingerprint":{"sha1":"8F:9B:8F:03:41:B5:80:0E:25:D1:4E:CC:17:8F:AE:CC:07:2D:12:90","sha256":"9C:0E:06:15:FA:81:A9:AD:A3:69:4C:1F:54:C7:64:DA:9D:26:0F:E5:D6:E2:77:5E:AC:1D:27:17:D0:CC:E5:9C"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f6a8.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 01:18:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:22:04 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 35\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1108,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b56e4108808ff9e886c75a135ccdb784","sha1":"6e0b4fb5fc4b151408d021fe25d75b8545fcde23","sha256":"5ed681717a4679f291aa6076a88951cc5dea77f2e85ad52009f35c9eca5662e0","sha512":"d87fed3461451963fcc0bebd2ee1d0f9ee069717a19a70412edf27c06e002be6ff81d4b244d1d8a40e3015ea65def24510697eb97a52f403da364ece313b0bac","ssdeep":"","tlshash":"ab11ad4c237d53c7e4c6da4d8fa0a9a055e8f0dcc8b84de46bcd861d9096d8fb974920","first_seen":"2023-04-15T18:40:12Z","last_seen":"2026-07-26T04:46:55.88524Z","times_seen":1340,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/uploads/2022/10/favicon.png","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:33.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/uploads/2022/10/favicon.png HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nCookie: _gcl_au=1.1.604525542.1769303913; pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://cryptorecoverysystem.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://cryptorecoverysystem.com/; _fbp=fb.1.1769303913038.2320734998\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10133\r\ndate: Sun, 25 Jan 2026 01:18:33 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10133,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"b494ed084c3a1a415b5279f28d853b02","sha1":"ed9358ccf5ac7a306513f79c05482a07f415d983","sha256":"e253b566f4377d64bc88ffd16d59182df6bb96105ccfeacf8fd2862b7b0c7ad6","sha512":"7be3196c2b9c03d08156836ae3f55a98af899bbc3b2239859d095a637fa586913cfa0124368f0a0f985a9850ca0c9cb713e187eb5b7e066af68492a91313d150","ssdeep":"192:e7F8knd/obY5rNAJr/VjpMRA/M1K0hcXYYAWj2PRLW/HkWz:eNndQE5ZCTJpM6UHgiLWvkWz","tlshash":"2422be43f328be80055aa07400f9681397f159ea5ad7ac45dccecdd6dcb22d6cc94e69","first_seen":"2025-09-18T12:13:05.178054Z","last_seen":"2026-01-25T01:18:59.504644Z","times_seen":4,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/js/slick.min.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/assets/js/slick.min.js?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 10097\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42863,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42862)","md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-07-27T11:20:12.160717Z","times_seen":109104,"resource_available":true,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewallet.com/de/img/agreement.svg","fqdn":"rewallet.com","domain":"rewallet.com","tld":"com"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewallet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Dec 2025 08:39:47 GMT","end":"Tue, 03 Mar 2026 08:39:46 GMT"},"fingerprint":{"sha1":"02:30:98:57:F1:47:44:FC:36:94:CA:59:24:90:59:92:14:A4:D0:EF","sha256":"A5:DD:E7:A1:C7:74:B6:08:92:55:40:22:2A:33:35:95:96:2D:5A:7C:CA:C2:C5:45:E0:3F:E6:05:D9:D3:DF:F5"}}},"request":{"raw":"GET /de/img/agreement.svg HTTP/1.1\r\nHost: rewallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptorecoverysystem.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 25 Jan 2026 01:18:33 GMT\r\nlink: \u003c/_next/static/media/36966cca54120369-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/904be59b21bd51cb-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/e4af272ccee01ff0-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-matched-path: /_not-found\r\nx-powered-by: Next.js\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::cdg1::442cf-1769303911866-2ed5591a132c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T11:26:20.993676Z","times_seen":17562036,"resource_available":true,"data":null}},"time_used":1332,"timings":{"blocked":64,"dns":15,"connect":1,"send":0,"wait":1208,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/uploads/2022/11/contact_bg.png","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/uploads/2022/11/contact_bg.png HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 220258\r\ndate: Sun, 25 Jan 2026 01:18:32 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":220258,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1290 x 539, 8-bit colormap, non-interlaced","md5":"884a5b858bff3054b69c65e093f8a8ca","sha1":"af71b2c69098ed0e4419a65e2f21d2876d06359a","sha256":"5c2fd4a48dd7122c1a3bbe5d9eb993be19dec8909b51e1ff11708f48d9b215bc","sha512":"88429935506a6ae26bd80af366de0cee42c40d9bb09d5a3f91da7abd25f0b28528e03ac1407c9aa7a7a53022133bdb47fd29d8ea5adf279f448e867c9014bb0d","ssdeep":"6144:ocokNsrIOx4MzA3pVJeA0Xja0UY5caVT6d0Zo5:ukDOCMM3pV2jfUTBdGo5","tlshash":"f82412d2472c93ac2874ad360aeab7de5ac76428535ca7036d2e5bb3c501fd48e0477e","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-06-20T23:57:44.879418Z","times_seen":33,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f4bb.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 19:44:42 GMT","end":"Wed, 25 Mar 2026 19:44:41 GMT"},"fingerprint":{"sha1":"8F:9B:8F:03:41:B5:80:0E:25:D1:4E:CC:17:8F:AE:CC:07:2D:12:90","sha256":"9C:0E:06:15:FA:81:A9:AD:A3:69:4C:1F:54:C7:64:DA:9D:26:0F:E5:D6:E2:77:5E:AC:1D:27:17:D0:CC:E5:9C"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f4bb.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 01:18:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:29:30 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 35\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1188,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"509dd485f6269e2521955120f3e8f0ef","sha1":"a1cbd41f1628aee91610a3480e3506bbcd6d7cdb","sha256":"d79848b4a09f0c1ea74b7cef8c3296593d60788a32d0edde3177a492c39b61b3","sha512":"7c2b74bc188f988ab19eccb2d77370f0bc36dbe76ea2da0bcb0db6b3f44b1331a66307af0fcb64242b060bb88611d59e79c7dca8ac2784bd3cdf562aae4fa739","ssdeep":"","tlshash":"ba2121c5133492c96a8e989e5fb86fc2605774fcd56b70c550ee4e0cd04b98ef045a1c","first_seen":"2023-05-22T02:58:27Z","last_seen":"2026-07-26T19:03:41.682208Z","times_seen":1100,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-admin/admin-ajax.php?action=pys_get_pbid","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:33.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-admin/admin-ajax.php?action=pys_get_pbid HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nCookie: _gcl_au=1.1.604525542.1769303913; pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://cryptorecoverysystem.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://cryptorecoverysystem.com/; _fbp=fb.1.1769303913038.2320734998\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self';\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nx-litespeed-cache-control: no-cache\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\ncontent-length: 5\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Sun, 25 Jan 2026 01:18:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-07-27T11:06:45.824492Z","times_seen":118282,"resource_available":true,"data":null}},"time_used":1334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/uploads/2022/11/banner_shape02.png","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/uploads/2022/11/banner_shape02.png HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3836\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3836,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced","md5":"6eac0fc242ab4d5ed148297f253ac590","sha1":"4a4a137a6b04909bc2f75c30300a490ebe26c831","sha256":"8e8efc129d8af45977aba3cc65ad8ae9e34747f81915f2246cff8443d47893da","sha512":"52fde0c4bc3b2bf89717b7104fe436a570237e58e5a218b4ea75e7172889ae782ceb7cf359c1cf5498453367617d7bec5290f702edf0f38123c7785f7b9d2dd5","ssdeep":"","tlshash":"0a817df38bd5d6cee080d2de90c57c23d3bf1458fda3742ba42569b8e3368d48562256","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-07-19T14:48:56.334791Z","times_seen":68,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":496,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:24:27 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4678\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-27T11:25:35.422058Z","times_seen":910204,"resource_available":true,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.10.6","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.10.6 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:24:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2433\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6555,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6555), with no line terminators","md5":"0d7f6b4930df680c368db0d604444b39","sha1":"41239565cd5c38258512b07994ed4519b377f3b2","sha256":"58aaf7420e6e102792fc1495be6788297845f3faa42dc59ed27d9bb0944e5fca","sha512":"7b4caee7407b6edf25a24e66ab0eac1398a4c39a937a2d3f92c1ddfc0bdc5f432626069b6f11306f83612399571c16df33ee04b5fbbaf9bb5ca2ae2b64bc4266","ssdeep":"192:urKG4shSuvZL3+ya3vBrPh/9Ckh/xEkmcXV0Ruk8Ie+j2:urj4shSEZL3+ya35rPh/9Ck1xEfIWukC","tlshash":"20d1e86c3695747743fb81e315bf5250a1322789790a8a84fa28d8e328bcd5347c7fb8","first_seen":"2025-06-25T18:35:12.413482Z","last_seen":"2026-07-27T06:49:44.445308Z","times_seen":5822,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.15.0","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.15.0 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:24:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2048\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4958,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4918)","md5":"01c6cc13bbe5e530f2af60671dda2024","sha1":"12887422a77dffb39d8b5091bb41b48565c67601","sha256":"9a2474887781993a37e04b0152ee6ef1518ba84cdae1a0d85721f669dea9b4f0","sha512":"9bee27eb641c07939d28b2585ba7a12ed2b6234d31f26743e21a5201d1b950e6c273216832d37f522f6e76ff1cbbda9ac4d8b03cc5a71fc142825c4710283dcd","ssdeep":"96:BON6AUjqn93zgcf8FD4larNVwbVLXkqfjQezovOA8S2:YN6j493sjFDlNwdXkymOhS2","tlshash":"98a131d41b90fc6735e135c8e11aa771652fc0333d1bb8c1fa22dced98e8a9187a9971","first_seen":"2023-07-31T21:50:19Z","last_seen":"2026-07-21T05:23:48.824706Z","times_seen":206,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewallet.com/de/img/anlaufen.svg","fqdn":"rewallet.com","domain":"rewallet.com","tld":"com"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewallet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Dec 2025 08:39:47 GMT","end":"Tue, 03 Mar 2026 08:39:46 GMT"},"fingerprint":{"sha1":"02:30:98:57:F1:47:44:FC:36:94:CA:59:24:90:59:92:14:A4:D0:EF","sha256":"A5:DD:E7:A1:C7:74:B6:08:92:55:40:22:2A:33:35:95:96:2D:5A:7C:CA:C2:C5:45:E0:3F:E6:05:D9:D3:DF:F5"}}},"request":{"raw":"GET /de/img/anlaufen.svg HTTP/1.1\r\nHost: rewallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptorecoverysystem.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nlink: \u003c/_next/static/media/36966cca54120369-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/904be59b21bd51cb-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/e4af272ccee01ff0-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-matched-path: /_not-found\r\nx-powered-by: Next.js\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::cdg1::mtdng-1769303911866-7c714b76132e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T11:26:20.993676Z","times_seen":17562036,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":50,"dns":0,"connect":1,"send":0,"wait":117,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewallet.com/de/img/list.svg","fqdn":"rewallet.com","domain":"rewallet.com","tld":"com"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewallet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Dec 2025 08:39:47 GMT","end":"Tue, 03 Mar 2026 08:39:46 GMT"},"fingerprint":{"sha1":"02:30:98:57:F1:47:44:FC:36:94:CA:59:24:90:59:92:14:A4:D0:EF","sha256":"A5:DD:E7:A1:C7:74:B6:08:92:55:40:22:2A:33:35:95:96:2D:5A:7C:CA:C2:C5:45:E0:3F:E6:05:D9:D3:DF:F5"}}},"request":{"raw":"GET /de/img/list.svg HTTP/1.1\r\nHost: rewallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptorecoverysystem.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 25 Jan 2026 01:18:33 GMT\r\nlink: \u003c/_next/static/media/36966cca54120369-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/904be59b21bd51cb-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/e4af272ccee01ff0-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-matched-path: /_not-found\r\nx-powered-by: Next.js\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::cdg1::x96fc-1769303911865-522dfa607a5e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T11:26:20.993676Z","times_seen":17562036,"resource_available":true,"data":null}},"time_used":1361,"timings":{"blocked":46,"dns":16,"connect":1,"send":0,"wait":1255,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:32 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 07 Aug 2025 16:24:19 GMT\r\naccept-ranges: bytes\r\ncontent-length: 76764\r\ndate: Sun, 25 Jan 2026 01:18:32 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":76764,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76764, version 331.-31261","md5":"f7307680c7fe85959f3ecf122493ea7d","sha1":"fce0da592a3e536d6d5df5b50cb513398d8c5161","sha256":"43c072c16c9ee6d67acdfa6c6d6685ff1e74eb4237b7cc3c1348ab1c108b26af","sha512":"d115a6f0df1f766fc83a77adeff79da5b0a463c01c13532cf48f29ed53a0c4ef1d87db38b8e492fbc3f97a0d192a9a6f636b837e65fcbeac03bb6f36336ca69e","ssdeep":"1536:UOsj0gqVLsxxVegJ1MvhvVpBJoY+q6G9NjFvzOCvXHYVSGhZJZ6xxsBV:UOsj3sVgmoYp6uRvzHYYsZJ+uf","tlshash":"8373028a852a583dc7fd1134a83c8ff111fba484c64b178c7a7179847b96fd3b4a51ca","first_seen":"2023-04-05T08:37:56Z","last_seen":"2026-07-27T10:45:32.127545Z","times_seen":30723,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f1e6-1f1fa.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 19:44:42 GMT","end":"Wed, 25 Mar 2026 19:44:41 GMT"},"fingerprint":{"sha1":"8F:9B:8F:03:41:B5:80:0E:25:D1:4E:CC:17:8F:AE:CC:07:2D:12:90","sha256":"9C:0E:06:15:FA:81:A9:AD:A3:69:4C:1F:54:C7:64:DA:9D:26:0F:E5:D6:E2:77:5E:AC:1D:27:17:D0:CC:E5:9C"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f1e6-1f1fa.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 01:18:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:25:34 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 35\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1669,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"089a9442fa6faeffeda0150ae182eccc","sha1":"9d6fbca4cc73494c94fd887e307bb7dc8dec2556","sha256":"c6f7dc707ca937c5efef2f23af04755ac0ee5813e21c9061d7ddf719e8ef4b27","sha512":"6ba46119132e27017607e909f550ec81939e19270f22940cab2ed00007f28cd7c970ce700cbb0c33fb33bbe862862bf684245ba1574dfaefe5c771930aeda594","ssdeep":"","tlshash":"0d31f2cdd6e1d7c0dc81d25a2f396cc6510168ba99eb20c564bb8a5432d76ccbb49e44","first_seen":"2023-04-13T03:03:27Z","last_seen":"2026-07-27T08:39:42.660171Z","times_seen":586,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/css/default.css?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/assets/css/default.css?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1041\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8636,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e3547138fb21a6708e8731cfed5d3be4","sha1":"395366968470bf6e8a545ddeb3a2a69c856ae140","sha256":"79fca8b9e341cec8be3997631300e4a50857c7a4e5d00c6796811df5825169f1","sha512":"09351bde403f0341eff0d4e8fe9c2ff64a30dbcd9f33ce5d912647198b4e0458e6bd390cd29bd421e792e771d9b554f1acfe18813fc20c6356279d179a1dd357","ssdeep":"96:8Vdlp2Lc6NCJWF8tyBEZu98FixkkqkuV2ziV+1nKVW7KF+XaPCkmjd/syqviq6XK:CcsIKDk1BauK","tlshash":"a70276c9aed314cd831a6fe2cbb6a060ef4d21f34a4d65dfb450254aec87a9d21624cd","first_seen":"2023-04-13T23:00:03Z","last_seen":"2026-07-27T07:07:18.662213Z","times_seen":502,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/pixelyoursite/dist/scripts/tld.min.js?ver=2.3.1","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/pixelyoursite/dist/scripts/tld.min.js?ver=2.3.1 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Sep 2025 10:53:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 39434\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":141079,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"35a22bea641003807bc6e7ee80eb14eb","sha1":"80bb6fca40db4f6c5d6ff20f078328082997e3c9","sha256":"6c459c688d05bbda53ede4e2aac0862d2f4599efb297cf753129866dba170401","sha512":"f05227d29ef3e35809482aa4223246bde7353ac11ca2ab05c34b36221a24f1cd6be49995d226b56c5b1a3dbe7d9f3b0e983b44a8783fb8c35a53e4f3afe383f9","ssdeep":"1536:knDTjitRV0MXpb3AX1rxGsv31zgdKkWx14lH+:knfjitR+MqFrb1MdRN+","tlshash":"25d33fdd8d0c6b539667f8b07212701be5e4fd9ed6dc07c868a3b99898c8558e2dcbc0","first_seen":"2024-08-20T09:57:00.893654Z","last_seen":"2026-07-27T08:43:48.574986Z","times_seen":14421,"resource_available":true,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/uploads/2022/11/banner_bg.jpg","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/uploads/2022/11/banner_bg.jpg HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:32 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 54936\r\ndate: Sun, 25 Jan 2026 01:18:32 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":54936,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x948, components 3","md5":"de1bdf3a932ef1667bdc4c41e73ebf86","sha1":"e2e820de5da5405feb17d71e7d72820f6f0bfe41","sha256":"1c63aed5f9cf06212442373a1ae4aad7128817ab619a68d4d28560d9d4b4124b","sha512":"f3dea34773ccbdeac3f89414c8cb2293862b0a6d27e8afeb41266911b00e805f7d820990bcaa1c309b46c96847cf0cf47e38cd47579222168c8219947008a7fd","ssdeep":"1536:7VJHEx4EmMEMmWNiJu4utq8t2Ob1NzLTB4:7bkxpdmWN216V1lLl4","tlshash":"9433e012ef094117e41c1fb1e4eb2f383b3492be674eba8f8745473661ab251ec4458e","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-07-19T14:48:56.360718Z","times_seen":81,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Dec 2025 12:53:29 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4949\r\ndate: Sun, 25 Jan 2026 01:18:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-07-27T10:45:34.835199Z","times_seen":309207,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f1ec-1f1e7.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 19:44:42 GMT","end":"Wed, 25 Mar 2026 19:44:41 GMT"},"fingerprint":{"sha1":"8F:9B:8F:03:41:B5:80:0E:25:D1:4E:CC:17:8F:AE:CC:07:2D:12:90","sha256":"9C:0E:06:15:FA:81:A9:AD:A3:69:4C:1F:54:C7:64:DA:9D:26:0F:E5:D6:E2:77:5E:AC:1D:27:17:D0:CC:E5:9C"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f1ec-1f1e7.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 01:18:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:29:29 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 35\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1183,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"99a9e5571c2f5acd9cb910ce6a3f39a6","sha1":"876935939a01dae371583220f75bef15b5185c68","sha256":"5ff2f32ed6905d887f7d771029c1e65b1ef059e92260b548908cabb4e886bf19","sha512":"14cfeeacd8e2f9b67bf2e1f5b2823a98fc60854fca5afd0b10be72ad647ffd38aa4058188451c98e2045628706f0b84dcad508fa901ce146705102fed962de1a","ssdeep":"","tlshash":"ea2163c84370b5c059a74fba9f28a2dc924925f9ddc96ecd10be0538445ff5ed01f009","first_seen":"2023-05-08T16:47:32Z","last_seen":"2026-07-27T08:39:42.595979Z","times_seen":13361,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/css/bigtech-unit.css?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/assets/css/bigtech-unit.css?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 11756\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":65464,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"bfea8dd7f366713b7ebad924889dd131","sha1":"3008e348b06e9e18b18efbfb1df1964f4183eebb","sha256":"5504d6b360996bbe3cacb12fdcc1406020caca240dd79ea8979f7623b8b4ae62","sha512":"129d29761d6e4ed97c749faf16f770b9e29b398f56c59c2bd2612bd9c14b931f537f831ea189119fb4bc1a1be6f2ee3968884aa55c0a1bc9d88d364ef9108432","ssdeep":"384:MK8z3Pfy8r40QWYMuRYknkkFlJvLdDT5DrBJ5mf3mX22SP/8+ARGRwKqwZEDUw18:wPfy8rmWNuRYknkkFZm2S3ARh4lN","tlshash":"f85366acbf111141a337db39a7a67621fe8840d7ca0246fcfed0a204975a6d8457ef8d","first_seen":"2025-11-23T09:47:35.993115Z","last_seen":"2026-03-13T05:01:36.713042Z","times_seen":4,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/js/jquery.countdown.min.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/assets/js/jquery.countdown.min.js?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2360\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5991,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4770), with CRLF line terminators","md5":"e4e4074fdef00e6ccb52c770e486024a","sha1":"6ec0873db87fb3083e97555a36b6acb5b2b1caf6","sha256":"8d31da3ce6c7cbb620633b9b9453220b4170cccce2ff2c0172eddf2847c0a838","sha512":"ed793d3a2a5abe445f074bae5b9f41e01a5cf02b990b8c07ff178f6979e3ee64a806ddd85a773f79973bb47ebcb286c2c172d289767c540dbadc7094a2a42261","ssdeep":"96:UXpMQHIXWxspIb9TMlF9NQA3qAZRzblMJDi4jr2R2fylzM905qO2Jo1yVsqVMHTW:JQHrrTcF953zzb6rffylzM9cqO2JoQVv","tlshash":"f1c1604973f1232265aeb2105d9e4854a338e74be1c7445c78ecd6c87a258bc85bfdbc","first_seen":"2023-03-07T16:43:42Z","last_seen":"2026-07-27T06:47:39.873244Z","times_seen":226,"resource_available":true,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":365,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cryptorecoverysystem.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:02:30 GMT\r\nexpires: Sat, 23 Jan 2027 13:02:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nage: 130562\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-07-27T11:26:11.203618Z","times_seen":268394,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Outfit%3A200%2C300%2C400%2C500%2C600%2C700%7CPoppins%3A200%2C300%2C400%2C500%2C600%2C700%2C800\u0026ver=1.0.0","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:24 GMT","end":"Mon, 23 Mar 2026 19:52:23 GMT"},"fingerprint":{"sha1":"43:39:AF:0A:74:F9:2F:1B:C0:1E:4E:89:21:30:C2:28:EC:9F:6C:67","sha256":"EA:F1:0E:C7:36:18:F3:9D:D1:D5:34:23:44:7D:6F:9D:2F:61:C7:81:09:9E:E9:C8:02:C8:F2:2C:0A:83:B3:A5"}}},"request":{"raw":"GET /css?family=Outfit%3A200%2C300%2C400%2C500%2C600%2C700%7CPoppins%3A200%2C300%2C400%2C500%2C600%2C700%2C800\u0026ver=1.0.0 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 25 Jan 2026 01:18:31 GMT\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12751,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"05a351b182cb4b305362b87682ded41f","sha1":"2d2facb6a3b7a6ba5369b596028fd5a9b9048dc1","sha256":"a3d891c9de84d1386929e3b9999cb6a79360542fdaa0625df68145753b8ba3d6","sha512":"5cf8a12a0285c16250f1cae6a78de0bac70e1f3b7ca6842eaf06b1af58c50c7927ad0572b59fb653df88ff961026b927600bfe2884b09b124c1ed7003deb6d26","ssdeep":"192:DhGih5PhQkh7phy2h1XFaU/jH/dCKSe1rV3HwwVzzbtwpOn:d","tlshash":"f842d0a1083be5145b831cc212ce7d32df4fa244b440a874affe1c9cada7d6a536272d","first_seen":"2025-11-23T09:47:35.941389Z","last_seen":"2026-04-22T15:03:20.980703Z","times_seen":11,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":164,"dns":0,"connect":8,"send":0,"wait":34,"receive":0,"ssl":213},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewallet.de/img/magnifying-glass.svg","fqdn":"rewallet.de","domain":"rewallet.de","tld":"de"},"ip":{"addr":"104.248.241.14","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewallet.de","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 09:04:52 GMT","end":"Mon, 06 Apr 2026 09:04:51 GMT"},"fingerprint":{"sha1":"5D:7E:D0:A0:55:45:8D:DA:A6:E2:8A:6A:33:E7:22:61:6D:29:AB:3F","sha256":"67:F8:33:FE:1A:EB:6A:99:B1:C0:6B:57:DF:9B:4F:5C:10:62:84:F4:E1:15:35:02:EB:43:92:18:0A:CB:B2:E1"}}},"request":{"raw":"GET /img/magnifying-glass.svg HTTP/1.1\r\nHost: rewallet.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nlocation: https://rewallet.com/de/img/magnifying-glass.svg\r\nserver: uvicorn\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T11:26:20.993676Z","times_seen":17562036,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rewallet.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/uploads/2022/11/area_bg.png","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/uploads/2022/11/area_bg.png HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/wp-content/uploads/elementor/css/post-34.css?ver=1754584942\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 304811\r\ndate: Sun, 25 Jan 2026 01:18:32 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":304811,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1675, 8-bit colormap, non-interlaced","md5":"e7b14e3bc56b0ee5752ee5efcf60f979","sha1":"61110475ad90d3a638e3fdac517b0ec323f3f74e","sha256":"63ee44421c67d8decdc510d2c5549b12b7f1ca910eee28ac7756e36cea969bcb","sha512":"c277011840d033b1e1cfeedc673f45d9fd33ee70a7323a92c375be493c2d707cc2ddf70430523bb57079b6fed3b5714cbe5cff8d0f758a598a62e61333b37d6c","ssdeep":"6144:8dGWn1I9bV5XH1FVGdeux7G2HmDytVNSGAxcaQEaQkBNHH/TdOeUZsiFIUF:8U1BTlFwtGUqMLNE/vFk/HH/TNEF","tlshash":"045423fd9687a357813e19293ff7ee402e79ba7814824af21b58784f0f194ea25f05c4","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-07-19T14:48:56.361708Z","times_seen":57,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/css/odometer.css?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/assets/css/odometer.css?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 434\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3620,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b0db2ffb579367350645c5cce8bcb622","sha1":"f52705958f241317f66b5ca2153cee1c1aa8b892","sha256":"6613bec6b1e7bf01e3507ca03d1f4baeeb321d13275fcd99ee7fc85f3025e89f","sha512":"4312b7eec24f918e3fdef8d00e35b3fcbc47477e4eae2f4299ea103e1926466d14d3b60634b539e26132abcf654de1ae13c40e47dc44a482cde7f5ce669618b1","ssdeep":"","tlshash":"ee71f51d1f60132463367406b7d927a0fefcb9525623e59db74aa44bcd03db9c288e17","first_seen":"2023-04-13T23:00:03Z","last_seen":"2026-07-27T05:09:18.2385Z","times_seen":447,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:24:27 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 6812\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-07-27T11:20:31.857921Z","times_seen":333217,"resource_available":true,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":578,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewallet.com/de/img/anlaufen.svg","fqdn":"rewallet.com","domain":"rewallet.com","tld":"com"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewallet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Dec 2025 08:39:47 GMT","end":"Tue, 03 Mar 2026 08:39:46 GMT"},"fingerprint":{"sha1":"02:30:98:57:F1:47:44:FC:36:94:CA:59:24:90:59:92:14:A4:D0:EF","sha256":"A5:DD:E7:A1:C7:74:B6:08:92:55:40:22:2A:33:35:95:96:2D:5A:7C:CA:C2:C5:45:E0:3F:E6:05:D9:D3:DF:F5"}}},"request":{"raw":"GET /de/img/anlaufen.svg HTTP/1.1\r\nHost: rewallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptorecoverysystem.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 25 Jan 2026 01:18:32 GMT\r\nlink: \u003c/_next/static/media/36966cca54120369-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/904be59b21bd51cb-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/e4af272ccee01ff0-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-matched-path: /_not-found\r\nx-powered-by: Next.js\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::cdg1::4tmll-1769303912673-47d5f7a1e78a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T11:26:20.993676Z","times_seen":17562036,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/22f103eff897d3cdc7757c52496e6c102177f72b.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"18.158.107.33","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:33.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/22f103eff897d3cdc7757c52496e6c102177f72b.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://cryptorecoverysystem.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 25 Jan 2026 01:18:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 57\r\nx-version: 8f78827c99f8a70d2cd46ee881b468733ffd9813\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":57,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"471ad8674b65ae0302f71602143789ca","sha1":"8cbb927ffa584a95af053f00149b47d8295719f3","sha256":"1e3f60d29de08e299aa39aadee4c5c47414c0e6108298deb9ec78d14d62ed238","sha512":"717b067945c9b8d6fed624f98c70d1e534d76801934db5975cc13ebd86b1f1b592fb4e7f377e996893b4a7e78cd111044f49990a427bc5c42f2ebce6fa6bf7a9","ssdeep":"","tlshash":"fe90022f05291cba7f3245053c6851cc025404a1518074d6ccec917d064f540c022112","first_seen":"2023-04-19T00:11:12Z","last_seen":"2026-07-27T11:26:42.348854Z","times_seen":3547,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":227,"dns":14,"connect":21,"send":0,"wait":23,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-25T01:18:29.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://cryptorecoverysystem.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://cryptorecoverysystem.com/wp-json/wp/v2/pages/34\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://cryptorecoverysystem.com/\u003e; rel=shortlink\r\nx-litespeed-cache-control: public,max-age=604800\r\nx-litespeed-tag: 620_front,620_URL.6666cd76f96956469e7be39d750cc7d9,620_F,620_Po.34,620_PGS,620_\r\netag: \"30050-1769303910;br\"\r\nx-litespeed-cache: miss\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Sun, 25 Jan 2026 01:18:30 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"bxSlider:2.8.6","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"Custom Twitter Feeds:2.3.1","description":"Custom Twitter Feeds for Wordpress.","website":"https://wordpress.org/plugins/custom-twitter-feeds","common_platform_enumeration":"","icon":"","categories":["Widgets","WordPress plugins"]},{"name":"MailChimp","description":"Mailchimp is a marketing automation platform and email marketing service.","website":"https://mailchimp.com","common_platform_enumeration":"cpe:2.3:a:thinkshout:mailchimp:*:*:*:*:*:*:*:*","icon":"mailchimp.svg","categories":["Marketing automation","Email"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"Yoast SEO:25.6","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Elementor:3.15.0","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"PixelYourSite","description":"PixelyourSite is now probably the most complex tracking tool for WordPress, managing the Facebook Pixel, Google Analytics, Google Ads Remarketing, Pinterest Tag, Bing Tag, and virtually any other script.","website":"https://www.pixelyoursite.com","common_platform_enumeration":"","icon":"PixelYourSite.png","categories":["WordPress plugins","Analytics"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WOW:6.9","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Contact Form 7:6.1.1","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"MailChimp for WordPress:4.10.6","description":"MailChimp for WordPress is an email marketing plugin that enables you to build subscriber lists.","website":"https://www.mc4wp.com","common_platform_enumeration":"","icon":"MailChimp for WordPress.png","categories":["WordPress plugins","Marketing automation"]}],"data":{"size":173482,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8832), with CRLF, LF line terminators","md5":"e3ec55ef9de64f481999df1016f2bd78","sha1":"e23b87e61e08f0338ace06f786cbc9bd74a7f867","sha256":"c97bb4a0fad987d948dde99cdb83f7bd6090e129b979c9d439743608ca655134","sha512":"feb4229960bd9be058bd5b1c49366244975c5414b1c0d6f326e2f7205e0f90d0bfe7e9c1adccaf8892bf31da8002eabf9c7df1cba3c09bd28d3b17dfc0272956","ssdeep":"3072:WiobgNKbpWUIFiLNlZFtzsCL711kvG7XZ7tvM0kwQc0DaReF3SKTlDcLbTP3wK:W2XFiLNECL","tlshash":"50043c617adba43301b752e9a136f71cf2b29157c906ca9077fc07885ff6e902b23664","first_seen":"2026-01-25T01:18:59.532898Z","last_seen":"2026-01-25T01:18:59.532898Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1694,"timings":{"blocked":311,"dns":43,"connect":133,"send":0,"wait":1064,"receive":0,"ssl":140},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.15.0","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.15.0 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:24:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 12552\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":111754,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65496)","md5":"81ada2ab9f577dada9aab78d5b7fe4d9","sha1":"0ba4bdee7f0c051676a1c2d43e70c34499218e89","sha256":"774f6573926146a2f5d575aae197d7fa71246439efef1380a8c0cef6bffd01b5","sha512":"89dfaf2adb3999c1d9eba52c50b2e84063239310e3c838442e3c8c55fd54b28cd6523bf03116fff1bdcc29c263a43281b6c7292c1717c4d80a877b40ea082276","ssdeep":"768:rlnC5Kb3tgnlKGT5sZQ8tQfJjuqnk1gtN:rRTtQxiqnkG","tlshash":"bbb343923d07622a662f5e3f4a87769c53a445c1de437adaf442c403d6fdde1372a823","first_seen":"2023-07-31T21:50:20Z","last_seen":"2026-07-16T13:50:16.107498Z","times_seen":137,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/js/bootstrap.min.js?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/assets/js/bootstrap.min.js?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 22192\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78129,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"7ccd9d390d31af98110f74f842ea9b32","sha1":"a85e681624c91a106a514c31eacf80de817b2cc3","sha256":"f5210fa3e7f0245a4c51eb7f280092c0ef99fdd28c45e17dab8cc5854fdf4fd3","sha512":"a5ac783258178c710f7c2c1c24b4218a063bf8df2bb7a6d5bd62c5c9432ec5286fd7bd17e774d1cc63e63e4666181864fa38a447c581338ca5ec0f563071eabe","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZY:T36WJr9ixi","tlshash":"a873c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-07-27T10:53:34.547606Z","times_seen":18754,"resource_available":true,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f1fa-1f1f8.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 19:44:42 GMT","end":"Wed, 25 Mar 2026 19:44:41 GMT"},"fingerprint":{"sha1":"8F:9B:8F:03:41:B5:80:0E:25:D1:4E:CC:17:8F:AE:CC:07:2D:12:90","sha256":"9C:0E:06:15:FA:81:A9:AD:A3:69:4C:1F:54:C7:64:DA:9D:26:0F:E5:D6:E2:77:5E:AC:1D:27:17:D0:CC:E5:9C"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f1fa-1f1f8.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 01:18:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:26:00 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 35\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2462,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d788b9231ed2028dc29245f76cf0a415","sha1":"84b0e307ec9e553db1b6cca0ce7db506672aae4e","sha256":"1feca2279a6e78133bf577b99e4f3e82896622c255d29017cec5f5cfa93e4d16","sha512":"0b6ffe2a426cdd2a35abc4adee091354eda6f540a15c027b198da4a5c2ba4c80cf5b41a2d825d81e9e00a3df3ce1bc256488294c5a0cf9d34a047d20c24f32a8","ssdeep":"","tlshash":"e45110c5c5b3d38c870d92f61bfb591c01810c5668fa8ab3dacd8f226312280ab4f65f","first_seen":"2023-04-17T17:03:28Z","last_seen":"2026-07-27T08:39:42.705072Z","times_seen":2459,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":61,"dns":1,"connect":11,"send":0,"wait":8,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f1f7-1f1fa.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 19:44:42 GMT","end":"Wed, 25 Mar 2026 19:44:41 GMT"},"fingerprint":{"sha1":"8F:9B:8F:03:41:B5:80:0E:25:D1:4E:CC:17:8F:AE:CC:07:2D:12:90","sha256":"9C:0E:06:15:FA:81:A9:AD:A3:69:4C:1F:54:C7:64:DA:9D:26:0F:E5:D6:E2:77:5E:AC:1D:27:17:D0:CC:E5:9C"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f1f7-1f1fa.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 01:18:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 271\r\nlast-modified: Fri, 07 Nov 2025 05:26:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 35\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":271,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"01efcb4dcb5b464a6859688f7e48907f","sha1":"904f92c480a32d33d7af3f6dd0189573c9f4d2db","sha256":"c120796701b12f5a9869de1fa4f4bfe41cb9127582e27e9fb6e951637a475168","sha512":"1c456d369b62aeb0cc5c757596a328b6b8195255717036344917dce97592081670a5c6faaa5254909b1deda0e3c6cd038721c486730e0beb370a86090781f76b","ssdeep":"","tlshash":"74d0c29881b6e4c14d21c7e03dbc33c1759a22692184109af0421724a98e2ee7a85a24","first_seen":"2023-07-13T04:44:47Z","last_seen":"2026-07-27T08:04:43.55213Z","times_seen":666,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":58,"dns":1,"connect":13,"send":0,"wait":10,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/css/slick.css?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/assets/css/slick.css?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 483\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1776,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f38b2db10e01b1572732a3191d538707","sha1":"a94a059b3178b4adec09e3281ace2819a30095a4","sha256":"de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5","sha512":"c11e283612c11dfeec9a3cb42b8a2acdd5ae99dfabe7ffba40efef0dd6bbe8c5b98ae8383d3eeff3a168124c922097eddd703401ee9ac6122f1ebab09bbf7737","ssdeep":"","tlshash":"c931294845b389468416808d5fd7ca6d2bfff0130829e199ba8d1306cfce7d8a9c26b2","first_seen":"2023-04-05T08:37:21Z","last_seen":"2026-07-27T11:23:02.483751Z","times_seen":72400,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026display=swap\u0026ver=6.9","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:24 GMT","end":"Mon, 23 Mar 2026 19:52:23 GMT"},"fingerprint":{"sha1":"43:39:AF:0A:74:F9:2F:1B:C0:1E:4E:89:21:30:C2:28:EC:9F:6C:67","sha256":"EA:F1:0E:C7:36:18:F3:9D:D1:D5:34:23:44:7D:6F:9D:2F:61:C7:81:09:9E:E9:C8:02:C8:F2:2C:0A:83:B3:A5"}}},"request":{"raw":"GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026display=swap\u0026ver=6.9 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 25 Jan 2026 01:18:31 GMT\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":123129,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"38a77af2d60e899159b3d474c39d54ec","sha1":"165a4e6659cb869b2f8c26687ac2655e65e70400","sha256":"e3d9227855a83c774a895243c0ec352ccbccb0f2c7576d793a20bec647227979","sha512":"66cd889dd57db0c080402825e8276e8019269c8a9ee244d764836059b355d9c2255c07e296cc3b9fc81ac280bbb220c4b3736ec0d2932102833f54785acadee7","ssdeep":"768:yDcDaDvDcDzBDFKDeDODO/Re/zUFhl114KF4zLFa+OgN7wNzaFLXnnGE3GzhFUQC:zO3YRSrslIxerANy3E3","tlshash":"d2c30ea1041b5040ab834cd223cfbf75fe5e92507141d0b9abfdab6baddbc62126835c","first_seen":"2025-11-19T00:02:35.002547Z","last_seen":"2026-02-19T19:45:37.252808Z","times_seen":2237,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":124,"dns":1,"connect":21,"send":0,"wait":38,"receive":0,"ssl":164},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Dec 2025 12:53:29 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1852\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5661,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-07-27T11:21:30.697316Z","times_seen":202873,"resource_available":true,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":576,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-json/contact-form-7/v1/contact-forms/209/feedback/schema","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-json/contact-form-7/v1/contact-forms/209/feedback/schema HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, */*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptorecoverysystem.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nx-robots-tag: noindex\r\nlink: \u003chttps://cryptorecoverysystem.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link\r\naccess-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type\r\nallow: GET\r\nvary: Origin,Accept-Encoding,User-Agent\r\netag: \"30051-1769303913;br\"\r\nx-litespeed-cache: miss\r\ncontent-length: 219\r\ncontent-encoding: br\r\ndate: Sun, 25 Jan 2026 01:18:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":696,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0aa88e3fb6627581f418b273e46cc0a0","sha1":"5a488ea6f229100ed5f9a364d2fc0d70fc7b6761","sha256":"e8692f2b0fa45dd76d6e8f4657b20017d14d73a2bfe1ac29b456ab9e717dd004","sha512":"903bea780fffe7e2454c972fdc70da9da8e8f904d0bcb94667fed15cb32171d6913db48ced8d8249585d61dc65403ea96586e3b533d970999db0183bf9de1692","ssdeep":"","tlshash":"2201f78206ce8dab1e4d2ac8749f8f1356ca94f6dee64c849211c40a51d663be722de9","first_seen":"2024-12-03T06:35:54.489551Z","last_seen":"2026-07-15T00:01:29.582001Z","times_seen":87,"resource_available":false,"data":null}},"time_used":837,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":837,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f680.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:32.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 19:44:42 GMT","end":"Wed, 25 Mar 2026 19:44:41 GMT"},"fingerprint":{"sha1":"8F:9B:8F:03:41:B5:80:0E:25:D1:4E:CC:17:8F:AE:CC:07:2D:12:90","sha256":"9C:0E:06:15:FA:81:A9:AD:A3:69:4C:1F:54:C7:64:DA:9D:26:0F:E5:D6:E2:77:5E:AC:1D:27:17:D0:CC:E5:9C"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f680.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 01:18:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:29:30 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 35\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":677,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"748ff0e7b2f1f22adecad8463de25945","sha1":"aa0d4e6225e9c5ecf65488ac43b9484226a798e8","sha256":"3892ef66f49ce43d49c8719e9277da0e0e821059f0cc239a549f6629cc12b3cf","sha512":"46ab91e8dd016495b59beab5bd52adab9bda22212d86eed166f3e788b5d6efa21b0b84c1689611811f62121d04cfe0955524b3a22bd60fb002927b026631f9bd","ssdeep":"","tlshash":"7a01f4d514bcb1a58b02d3b89f787dc0100a727f729b048190c484a45187adfaa45820","first_seen":"2023-04-16T15:02:53Z","last_seen":"2026-07-27T05:58:18.321598Z","times_seen":3942,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/themes/bigtech/assets/css/bigtech-core.css?ver=6.9","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/themes/bigtech/assets/css/bigtech-core.css?ver=6.9 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:24:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 13155\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":80510,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"32519bddfb6c755fefea1b3caafb92f3","sha1":"93453056bbe76d22d54a75d4b9ad7fa14522afc4","sha256":"c9426fc821e9cd51031dbb8fc8dda2af382037acc23635f6ed32908bd9da09e9","sha512":"4f25ca88d081f6587b1c82eb81dae257311693021b3692f3d5a5d580bdf88ddf7046aac2b3c7e4b3dad544545b7ef90fa29acbf8a32bea6933de79d2193da2ac","ssdeep":"768:zPYr+YIDXjiEV4R1+64tsrOSJo928M4iYGVygBTWiMdjky9wdJQFKEReu8p+Dy5q:zI+64tB4bMoV7ylGupn","tlshash":"367375addb5810cd7323ab687bf45b219e695063de0f06adf191260983cf66c26737c8","first_seen":"2025-11-23T09:47:35.951078Z","last_seen":"2026-01-25T01:18:59.53892Z","times_seen":3,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:24:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 284\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":675,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (489)","md5":"144e43c3b3d8ea5b278c062c202c92f2","sha1":"3c037057a419245849747b4762d09d88cab66fc1","sha256":"9cd63b8cea25045c14623c538d26752518a58c0c682795ce6ad3078976c65a37","sha512":"6a95fcac537f2b1256f2b9e241b92fcebb214372afc841fee2ccd3dd29e8e6cbddafa13f08fd1013ceb6c8478b04c5270aa2e4a3c41aba01a4cef592eee35f15","ssdeep":"","tlshash":"360149a506110045c2820b063adfbe1dad0ae2587c296f63e12fdd2d0cf9e5f21faf49","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-07-27T10:36:54.75479Z","times_seen":80577,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/js/app.js?ver=4.26","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/js/app.js?ver=4.26 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:24:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3333\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11314,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11314), with no line terminators","md5":"6252c5e4cb01fb14115e6572a0782968","sha1":"c353b9a3591e1239ae483f724a1fa192b6d7ae3e","sha256":"c2f2cc27fa8c6d22babd5b47d27176007870e93444ac321ed53dbd24aab669b1","sha512":"30b4ad5eebfe7897bac0ac529b9dbe898101e118dc7e4e2ec2cb1a81799ced04e162786acc396f7e99fe3e3a947db67094b36075139b5bbc2abc7a2e0c041dc3","ssdeep":"192:KPRr+j1EyONPgT8Uz2+DXUAWHmT0tK7Y3tG+VCYo67+ct26z8i1LugrYQvM:QWqyzvzhXUAiK7Y3cit6g8QE","tlshash":"5132b5ec7624b0b502e719eb55ff137675f052fdb891046a14348dbc2ab8cdb2391ea2","first_seen":"2025-07-23T08:23:23.990919Z","last_seen":"2026-07-22T06:40:35.254063Z","times_seen":599,"resource_available":true,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":576,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.15.0","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.15.0 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 16:24:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 11906\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40746,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40706)","md5":"053d1365972f4a448562e4c1155a322c","sha1":"2ba5c7a35ad9f4733bda330dbd35915099af53a0","sha256":"49eabf78b80bf982ee355e31fdacd1e0fc745f7dc4d29c87141c358ca7729465","sha512":"a6231a215dadb902c219710c2a0083f0b4899c16038e6f67b7a27f73fdcf2f8d4e8f66d3591ff953a08a69a33fc04b01c3d406da8f423b9a94a271f850a39370","ssdeep":"768:SRPa/PLR8evxJMEa/sTZG8fVen5qiQ9vEAzBc5GMTSebsvHydWuUEvS75ikdXLf4:SRP4LR8QxJMEaufVlzEAzBc5fTSebsvy","tlshash":"250308563192d4aa419f48f7f4330219b3621dd9b406b59ef2bd6ce2a4b1e8333767b0","first_seen":"2023-07-31T21:50:19Z","last_seen":"2026-07-21T05:23:48.853541Z","times_seen":209,"resource_available":true,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":578,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fcryptorecoverysystem.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1192266161.1769303913\u0026dt=Cryptocurrency%20Wallet%20Recovery%20%7C%20Crypto%20Recovery%20System\u0026auid=604525542.1769303913\u0026navt=n\u0026npa=1\u0026gtm=45be61m0h1v9200044481za200zd9200044481xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115495939~115938466~115938468~116682875~117041587\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-11292302200\u0026tid=AW-11292302200\u0026tft=1769303912969\u0026tfd=3214\u0026img=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:34.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"A8:07:E4:29:1F:DC:18:F7:9D:4E:B4:B1:E3:DE:8B:8E:C7:50:9F:F4","sha256":"D1:3C:D1:40:94:0C:B9:C2:51:D7:CA:E9:9A:B6:25:51:0F:E5:17:F1:6F:FF:2E:58:C6:FA:6A:72:54:B1:96:46"}}},"request":{"raw":"GET /ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fcryptorecoverysystem.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1192266161.1769303913\u0026dt=Cryptocurrency%20Wallet%20Recovery%20%7C%20Crypto%20Recovery%20System\u0026auid=604525542.1769303913\u0026navt=n\u0026npa=1\u0026gtm=45be61m0h1v9200044481za200zd9200044481xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115495939~115938466~115938468~116682875~117041587\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-11292302200\u0026tid=AW-11292302200\u0026tft=1769303912969\u0026tfd=3214\u0026img=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npragma: no-cache\r\ndate: Sun, 25 Jan 2026 01:18:34 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T11:26:20.993676Z","times_seen":17562036,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorecoverysystem.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/css/bootstrap.min.css?ver=2.8.6","fqdn":"cryptorecoverysystem.com","domain":"cryptorecoverysystem.com","tld":"com"},"ip":{"addr":"192.250.227.21","port":443,"asn":36454,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorecoverysystem.com/","date":"2026-01-25T01:18:31.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.cryptorecoverysystem.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 00:19:45 GMT","end":"Sun, 15 Mar 2026 00:19:44 GMT"},"fingerprint":{"sha1":"FB:D9:B4:95:80:59:B3:AF:01:61:FA:D3:55:87:B1:58:4C:84:36:36","sha256":"97:6A:2D:98:D9:8C:47:DC:4A:E5:CA:C4:A1:1E:B1:92:FE:8C:68:FE:CB:0F:1F:12:BA:66:DD:8B:26:D0:CD:6F"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/css/bootstrap.min.css?ver=2.8.6 HTTP/1.1\r\nHost: cryptorecoverysystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptorecoverysystem.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Feb 2026 01:18:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Aug 2025 16:54:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1108\r\ndate: Sun, 25 Jan 2026 01:18:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6289,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6289), with no line terminators","md5":"f5d5a12c24b3914cac4fb07b6b1b43ae","sha1":"d4b7d81c9ab27693293f91ca015e57f1d409fa8c","sha256":"dc2d60d7486cccbae0821f16e0928f9ba9e9084445e6678fc6cbb09b2ccc5ec6","sha512":"373d709bc54e89fd4039da1a1eeeab5d1aced16028e60b90e6a491267915f9d6eae0b594247637724c54850bac4b8f432fad68a4f0a28efefe59fffad5ef3e89","ssdeep":"192:2YxHKDhhRJtZV8EU8Yy5T3LlJtpUWKEJUtP24LTr6ly:zKWL","tlshash":"99d14561c3003dc951a2f7a53e6c6dd23b0002b4e6cc4eb6b62a11e0470dfa587d7eab","first_seen":"2023-04-18T04:49:42Z","last_seen":"2026-07-27T09:56:40.741918Z","times_seen":250,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cryptorecoverysystem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}