{"report_id":"8583beca-12e0-48a2-b6d6-a0e58c136f25","version":6,"status":"done","tags":[],"date":"2026-04-07T02:03:09Z","url":{"schema":"https","addr":"backupcash.pro","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"backupcash.pro/","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"title":"Home - Web3LedgerVault - Secure Crypto Asset Backup Platform","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"backupcash.pro","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-12T02:03:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"node-ya-6.jivosite.com","ip":{"addr":"158.160.53.45","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":1470340,"first_seen":"2023-01-18T14:06:31Z","last_seen":"2026-03-31T23:59:39.105934Z","alert_count":0,"request_count":1,"received_data":705,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-05T22:35:26.697622Z","alert_count":0,"request_count":1,"received_data":703,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"backupcash.pro","ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-07T02:03:14.459765Z","last_seen":"2026-04-07T02:03:14.459765Z","alert_count":68,"request_count":34,"received_data":2138011,"sent_data":15164,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]}]},{"fqdn":"code.jivosite.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":232952,"first_seen":"2012-07-22T02:03:39Z","last_seen":"2026-04-01T18:10:14.070996Z","alert_count":0,"request_count":9,"received_data":1754947,"sent_data":4189,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-05T22:20:18.514512Z","alert_count":0,"request_count":1,"received_data":18375,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-05T22:16:34.770209Z","alert_count":0,"request_count":5,"received_data":246835,"sent_data":2770,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"6ae07297dfbac66721670c40da98ac30","sha1":"55351f07004a6f4854e203e74ed81ef41a0a6b77","sha256":"9df739d35ec2a0758cac0e556bbf87953542112ace4188c9047a55f6be697d81","sha512":"d52b5f14c91f5222e1b33fa3fd1dcb0fcc8af6165b4af5c5398629233da45a165abe5e851339427d532e7ab56159e0ae20007192f615a3772e5f0e84b887c344","ssdeep":"","tlshash":"79c012d4d8c61e00831776928066643b112c5511716e48655b3da7d880b302ae11cc5a","size":183,"data":"","first_seen":"2025-07-04T20:25:19.308675Z","last_seen":"2026-06-24T23:01:36.090715Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"1ea0d3bc1d2574e80d7b6979c7074321","sha1":"c3cd45a21db4ff9bcf4c3ad8e3b82b7b697b1484","sha256":"305d5f6b1ab160ad36550fa076348bb65cb42ba2b86b76454159cbb1642f531f","sha512":"f81e338e74d3f23c56aaef80f737f91557c26f26296d008d093c6783545d015acdfc0cc1adda8985f4cf8faafe4cba37ca732682ccf8eb203091e305ba44b5e0","ssdeep":"","tlshash":"5dc09bc458c75d00c3173991c135543761341661917e5475173da394953311be15cd5d","size":136,"data":"","first_seen":"2024-12-03T16:26:22.913994Z","last_seen":"2026-06-25T12:47:47.814575Z","times_seen":168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"9a11b49d579f6eced1051b61a9533a61","sha1":"aa792511e6e0a8c54a242170c4494254d2d063ef","sha256":"56ca886d3a7d442dc106cc8c53271d08be5410b57d9da3e2bf77de7e35637fb9","sha512":"0b969f25d11dfd89603dc65fc057b8d33886683b6de5088440dca9db088aa3cc33f1b1fbaaeb9280df5938a45cb4ca5ab350b17f44d5d98eefd866c48a631761","ssdeep":"","tlshash":"76c08cd4c8c71900c3133591c036a43b212c1622a27f846a1b3de39880b303ae01cc6e","size":156,"data":"","first_seen":"2025-07-04T20:25:19.344169Z","last_seen":"2026-06-24T23:01:36.11275Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"5c31d0b291c4e2465a70b272b45130fc","sha1":"571d9e894cae34213e7b9b1acc95835af4e63634","sha256":"f046539c7e47304ae2e60b30e0c25c2f631dd1e16720efa9ce029bf9e62204df","sha512":"3dd2a6b0ed8404411c40b0994581c8e685a418f79863ff3e8f00aed9808ce8e62713a21852454b7b63550c263b8f2800bccd9c84dc70dcbd15454255edc2a0a9","ssdeep":"","tlshash":"98c080c444865904c1133cd1c37558af112cd760837d48753b389754457311ae24ccad","size":174,"data":"","first_seen":"2025-07-04T20:25:19.341675Z","last_seen":"2026-06-24T23:01:36.08838Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"d119f5b89956a2e1e571953a47091294","sha1":"5c5876bd803b47b625cbef80232d8bf26d5bb9d6","sha256":"61442b1903004cf174df71f8ada87bc5e76ca48d8c57a98ba7d8abb3e10b95f2","sha512":"cc2ffbbb363ff9ebace0b2bf1925df7c98816794628e821a6e5eb716e58c21e0557d5794fe80c74eb219afd57d1e573d692f896a5ff3c4f10a41f767890d34a2","ssdeep":"","tlshash":"87c02bc088c24900c3273881c037503731341220827d4464163eb3508433017e01cc5e","size":137,"data":"","first_seen":"2025-07-04T20:25:19.318267Z","last_seen":"2026-06-24T23:01:36.120652Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"f57ee968057825960ded8c8faf165e21","sha1":"09b50c9c7b4ceb6e7f339ff27b25667738a0cecf","sha256":"045ba88d9ca27daf1ef5dbc531a2352a420496d524c8fe595a161f56558a0657","sha512":"0e3a50f38341fd289a5f33e4d13c16069e52a7590f930d2ba808ad957a91e4d283aa4073a5f3cd19612ab5b0339cf301469af3a6546ee81c5bf79f46b1f1822f","ssdeep":"","tlshash":"86c02bc00cc30900c7033490c035403b233816e0827d4465263ca354c133107d21cc5d","size":133,"data":"","first_seen":"2025-07-04T20:25:19.30242Z","last_seen":"2026-06-24T23:01:36.08902Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"6cb21876ee46b123366834d3c2286a54","sha1":"9ed9be5e12556584cbd31ecf80cbd9de23dc790c","sha256":"f6ac6459abc34684e3c21cf8b55cd89cd4a2d8d7a923282234279aa6a431d06e","sha512":"72b820fa670b7cf1a0a332a1cdde1bd24e8ef4ec57b3ad16295faa20fcefca0dd1e4bba2b846f09f3bb02f80d14f5fac01ef91cec1653c34687caee76644e121","ssdeep":"","tlshash":"c2c012d8d8c65b0083037692c06a543b512c5911627e44669b3d9798907302ae11cc6a","size":181,"data":"","first_seen":"2025-07-04T20:25:19.312583Z","last_seen":"2026-06-24T23:01:36.124268Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"ea514f9b700d33199b0f3aee32882b5c","sha1":"fac8103b8aa81a9c3faaef6974b32efbc94d4276","sha256":"d35218197f490885811a205f80bbec1093eb2723c429feb447d2dfcf9f0db26c","sha512":"e8395410bce8aa40cb6db392428053051c1cc917972c91efa8ef369ca9d8032068e43093395d13b687e589d3441d59b0bd1cce4fa629e6a7d389ecf7b3efdd8c","ssdeep":"","tlshash":"bac09bd458c65a00c2133591d136543f61382761957d5465163da3549533116d15cc6d","size":133,"data":"","first_seen":"2025-03-12T11:09:58.971567Z","last_seen":"2026-06-26T14:38:58.210551Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"73d899a61f0fad8366a803b05337ef1f","sha1":"bfc28f2d95fb5ad160feea49ad50f692ec36d87b","sha256":"e7f591c161bf3da6726a75bf3050c9e36c9ddea21739b9cd56b892c12b87e803","sha512":"c7cd10d90941b9fb8511e5683fec74b8fa233714370f182e06d88ca773897ac748dd5a638385dc2046094441c3b58e3441be5e8a0dd275ee4ba60a3b1f15c848","ssdeep":"3072:0GOuVDDC+XNUyc868eSGPLEh5MIB8qe0HEw9PH/91wD0hJ2uOsE:0GOQDDhXNP+QB830HEw9Pf91wD0hJ2Zl","tlshash":"4b0429d97295717283eb15e651ba8502f3791844780d84a8b1acccab397d88d02fbffd","size":183647,"data":"","first_seen":"2025-07-04T20:25:19.281149Z","last_seen":"2026-06-24T23:01:36.045619Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1774960823","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a48cc5256a19e79c231ded93d0d501ef","sha1":"01524c79a218b7703f6086588a4188bcbceceab0","sha256":"3e49aa663e6e1789d3b24c60df660fc4ffe253d79297a932049991464888f77c","sha512":"5eb8701900f3a50491ee3aba5b9d0559af63d62c85a740e3df01430e2860116a11fbabe7bc3d97d07e4067bfed8dad4c350fe766293be4385a002068216269e2","ssdeep":"24576:Ddg+rR0648W+9n4FHCuZlhEqYwkP3uaFNx1zUGSGcQBSAgPgYlVqnH7XhHH6mWdD:Ddg+rR0R8W+9n4FHJYwkP3uaFX1zUGSf","tlshash":"b6756bc5b2c5f06203d355e6a03b2005b33a2859340da068bbbcdddbe95698e6377f79","size":1550655,"data":"","first_seen":"2026-03-31T13:30:42.422413Z","last_seen":"2026-04-10T12:31:01.768379Z","times_seen":761,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"b30d025c2535ae71b99ce714556d4ddc","sha1":"01aada84e2c9a8071bc7e42d8e5051c5f6da0cbd","sha256":"f35067b0072a28522732dc2cc95575a2dda4913c05f63aa2abf8c2117d1e92bc","sha512":"421032794673510fe2bae467ab7af4232b45218d4c3af3b17127c7ac12ef9b928fe19050fcd610a48193889aad28639a28d5052aca8ef5859dee6e6939ff457a","ssdeep":"","tlshash":"bfc02bc448c30900c2033cc0c037483f623c5b20c17e4466263ca3549033006d09ccfd","size":142,"data":"","first_seen":"2024-08-20T06:35:05.414875Z","last_seen":"2026-06-25T12:47:47.807066Z","times_seen":357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"50487c500270653f5eb0ac8bd759da55","sha1":"d57e7e2fbb314ffddeab9e1696e5f253c476e729","sha256":"36b758661d5589365fe217d2aecea14a06f76ded72bf46b5ec7f50b26ab3fb86","sha512":"d458358836b011d4c5e57a30de1ea7cad410438c54701c3f6b232127c4d4acd8bad8934928d8e377bb64dcf06ecfcf446138049f87de059705277eb747c69a14","ssdeep":"","tlshash":"6ec08cc12cd66a00c2973890c1b9997b31ac6622827e48793b3ce364887322ed35cc5e","size":174,"data":"","first_seen":"2025-07-04T20:25:19.329995Z","last_seen":"2026-06-24T23:01:36.11883Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"d51550285496a207c25c6c7ef447914c","sha1":"22df306448b9c5c626f1c3981f97a58929772b6e","sha256":"86809eb4df5a409d3526bff26da99700227efcf89f5db109c905f7029e7dae38","sha512":"e9e093b353b6970d35b31dad977a3ca3f5531b0141726636f9d9090cec065f7dac3038c1d1180bf4c67047e1eea7d347b7dad9148f1d72ec07e96a2708e68575","ssdeep":"","tlshash":"a6c09bc458c65900c2133591c0369c376134176191be54e5173da3549533116e15dc7e","size":137,"data":"","first_seen":"2024-12-03T16:26:22.908591Z","last_seen":"2026-06-25T12:47:47.871327Z","times_seen":194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"a957fc76fd4101dd257335330482b24e","sha1":"5c05c9afbb4e21815c145b2cbe89fa7ce48b0eec","sha256":"06fae9d1819a3fe1a29b72cff2205f8ccbcdab790fbf9755293f791f3d8b81fc","sha512":"ddd9f6e59cc6a9258594e6ddcec00339dadfa6bedbf0ceb5cd40fef739e7748cf9d4676b7552b0d245da85b50883417d4d77dc344b4b6a49e4676eb09716e6e6","ssdeep":"","tlshash":"6ec09bd458c75d00c3173991c135543761341661a17e4475173de3d4953711be15cc5d","size":136,"data":"","first_seen":"2024-12-03T16:26:22.88499Z","last_seen":"2026-06-25T12:47:47.857456Z","times_seen":176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"808ff3ea9561e88042a44659d872fe2a","sha1":"0aa7e55cc0f522ccbbeacb6bbd94d5f36a2b1ee5","sha256":"03e526b6ebe9c08030bd3f5197860c59eb7f6ec038fbf1c7249ae70d1907ea6b","sha512":"37214635ebdbae9baf7746329b7e6c0d66505b20f34d2672c03581b366a00b14c259782edcdfa8f099adde4498e5f78e7b7e5e7a93cf538b7e11dc6f58eecc4c","ssdeep":"","tlshash":"55c02bc00cc35a00c3073480c036843722351221827e44641b3dbb50853302ad30cc9d","size":136,"data":"","first_seen":"2023-11-17T22:21:07Z","last_seen":"2026-06-25T12:47:47.784183Z","times_seen":496,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"0814a3a3ece2737d07f82f5d47cf136a","sha1":"92d499e36b99a84c5111ea748fb0814353b962d5","sha256":"3ad9e88a466c1b036d3ef9b828b4024b9d7f49304e1f85c25a1853bea000d3e4","sha512":"756af0ac3b2a0e7f2b9f2b1b97ec0efcd1a84bcf573276678a8ee61265709dafa90527380a94f85576b168a0448643bc3897fe9276abb455128f20a9b0fdbf78","ssdeep":"","tlshash":"c7c09bc458c75a00c2173591c035543b62355661917d4465173db3949573116f15dc5e","size":133,"data":"","first_seen":"2023-07-06T10:22:54Z","last_seen":"2026-06-25T09:08:33.834166Z","times_seen":498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"a593a5836449f1e33b161f0764556bef","sha1":"74dc07dfa334fc6cf6087d98d3a1b60a7fee3f87","sha256":"bfb63d21718a5a07c7450e0a5fd6c4515395c699477fed52dc8f27efa1dd3a52","sha512":"79926d3c0ba301e0fde0d6960169bc0972e1ea192237f43cad29e177a056bd784fc5a632ad1ceade7cdd553c85c913c2c05d4337a16f17cd44984bbfafac5ab0","ssdeep":"","tlshash":"f1c08c8088830900c2073cc0d136483f222c9b28c17d44662638a3a88033106e0cccbd","size":148,"data":"","first_seen":"2023-05-28T02:08:41Z","last_seen":"2026-06-24T23:01:36.116731Z","times_seen":203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"6e5d92233ddba3a89a840a580df773aa","sha1":"bd7604afc877dfe4ddfb0988032bc36e04c3437b","sha256":"521b8823528f79ed198a9166922b45271fb75ccce62018cc18363aecd03b8897","sha512":"b884cc351c88f028a239b058772b8beeb67c6d1f9440faa0b4800beaafe2c5f12059783544fe247b519b0def580dddcab55245a3c6d120c817fda2e03d114f3a","ssdeep":"","tlshash":"5fc012e4d8c62a00930376928065943b112c5522a17e44655b3d9794807702ae15cc5a","size":180,"data":"","first_seen":"2025-07-04T20:25:19.337643Z","last_seen":"2026-06-24T23:01:36.091307Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"c3ba17756b528fb05729e3b39fc56659","sha1":"dba5b2b9e1225f0746a3bea9400fedf154435030","sha256":"b1bf6993ff546c43e95cc3899a04a11bf6c8d170069be62147f5ae5b3046ff33","sha512":"3a003d3e209be3e94e62e1dce19bb76cd1d490793d2613ec969df7dddb2cb299161e146bc4d582b4ef4b44ee14ed250b7d424434503bdbf12cf161ff57b52f66","ssdeep":"","tlshash":"5ac09bc458c65900c2133591c0359c376134176195be54e5173da3649533116e15dc6e","size":137,"data":"","first_seen":"2024-12-03T16:26:22.89416Z","last_seen":"2026-06-25T12:47:47.842548Z","times_seen":178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"ca7ffdaea11ac263d0e83d19e66c1b72","sha1":"4fc614689f63804acf6f9280196e2909e70739e0","sha256":"7b4526d4dbc360ce285133807b464b3bf5517539e8bc453b47261b2ee5208b4e","sha512":"8ff22f6619a625a7862a391a860c8ec7272f21dcd5012a1855593a72d38e5e2da4296ff775a11c67083cda62e1db4800ab4d4d2b3f742b6f2ed52a2f2894db11","ssdeep":"","tlshash":"91c09bc458c65900c2133591c0759c376134176191be58f5173db3549533116e15dc6e","size":137,"data":"","first_seen":"2024-12-03T16:26:22.905697Z","last_seen":"2026-06-25T12:47:47.837734Z","times_seen":170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"6d9aec2cd0e957c0212d62b8da59ef2d","sha1":"2c713af5ac98bc22144ac8acb5ded4a0971ee899","sha256":"77bd82c57f14cdbeaf9b07c84296a5b72f162dc9f7132f61e1b7b4494d59daee","sha512":"fe1703a2fb496d2c178c8c5b40ef96801af168c0076000399d28ddce3cb21e214b5a12787ab67c01fc34ec86a7a483d9358f4f6b2f4f9dd002dac462e6da630a","ssdeep":"","tlshash":"f651520863e76264db6721718f0f201006288187381ecd193bbda3814f0a62ad8bdfba","size":2624,"data":"","first_seen":"2025-07-04T20:25:19.325387Z","last_seen":"2026-06-24T22:53:46.198581Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"dd6d4f87362ffa9266daf49a110fe810","sha1":"6b0f47b11fdc9a514efe1234b2a71f95e3d7d6ef","sha256":"5e7b4df689554400d72371e0367ba8c25cad73c351c43e14db484277427c4ae3","sha512":"a1b899760d192b15ff61fe07cd628a159a7360b8de222b24bd1c834fa02d37e0b65b46292073fd46723b81822f230bb2a35033d34c941f46dd047a035d13ef42","ssdeep":"","tlshash":"3cd0c98c85c68d98c3163541c975843661281aa4a16f48b9373cd3d8687301fe22dd6b","size":210,"data":"","first_seen":"2025-07-04T20:25:19.299616Z","last_seen":"2026-06-24T23:01:36.104703Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"3d29d3c18c4805af49b1e70252041bf0","sha1":"d08e6dbd11c7b365e5c11e88a9bfc01c4ada3f01","sha256":"ede138cbf754d989fc45ec2795a39f3df9841372c019d5c1f8a69d4885460cb9","sha512":"0c6e97b77896a4e72d390d928d0b2ce0ddd47bd4e6afc31c2682f1200720cfeb8d07cc3eba8ef626f9d20e7e705798a0c03bbb75f8b1b32b38a1da3785d15b8f","ssdeep":"","tlshash":"5bc08cd4c8c71d00c3033591c036a43b213c1622a27f84691b3ca398807302be02cc6e","size":156,"data":"","first_seen":"2025-07-04T20:25:19.331528Z","last_seen":"2026-06-24T23:01:36.11947Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"26cb0708f17436468b6eb88418063ba1","sha1":"fb2ba412da83dd7d9c362b2b483c8576509caf77","sha256":"c3632b520c26420c324b9a18ab3dc7471007c6f9239892c014dcbf4960c61b7e","sha512":"1307066876a80eb7a2cb0e4e56315ed5506c70c191ebba665c556b005efa51d48fe49cb79cca8a7edb6959cb12cd68be5ae921f33d7e8183a470dea1fe8f4bbb","ssdeep":"","tlshash":"04c09bc458c65900c21335d1c0359c376134576191be54e5173da3549573116e15dc7e","size":137,"data":"","first_seen":"2024-12-03T16:26:22.937708Z","last_seen":"2026-06-25T12:47:47.773314Z","times_seen":179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"6a87bab717aeeb14dbb45491334868bf","sha1":"ac8145dc4225e17a0470df02983dbb00def4f7e8","sha256":"ff326926978bc85478b0099b3e689602d6b3943bdd6bdd08d5f08f14c1f450f4","sha512":"60ae5205459458a0c53b5ec760248c0c13ec516ca5e2775811df7bbb1feddf8858754c67561391aa44b86688bf800a5132aa04751904f00245cd92cf97dd7e40","ssdeep":"","tlshash":"cec08ce4c8c72900c3033591c036a43b212c1632a27f84691b3ca398807702ae01cc6e","size":156,"data":"","first_seen":"2025-07-04T20:25:19.322492Z","last_seen":"2026-06-24T23:01:36.105864Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"673e48d802b82599ccf92366cb750f6b","sha1":"20987b019988b3c1664a3a6a4088336ff7c9e03c","sha256":"b236a878a9140d8c22869d6d38ae5f4142764c044cc1e2816316d9f4c17e14ec","sha512":"e9667686c7678e931112f76ec435824268585715fc383f934341d528cafb231c73681366bfcfecbb4e741544726fc6145bdd81530e9031104e5d6a7e648e6409","ssdeep":"","tlshash":"29c012d8c8c65a0083537692c079543b612c5911627e44669b3dd79480b303ae11cc6a","size":181,"data":"","first_seen":"2025-07-04T20:25:19.317057Z","last_seen":"2026-06-24T23:01:36.087551Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/VuKQMldiun","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a1d943527a4484c97158bf274c90b8c","sha1":"134fefa8c6580547c25e4d51cea825d26289b1ca","sha256":"e96ec379940f256a19bbf332439ecf961449f9c9629bc8d3faca53892660e3f0","sha512":"18aa132861e271ef19014ac4bc1bfeb905ff06481c0894b3895b6adae768c53d86d584c8e89072fd7ccc44fcda88f0a1521bbb88a8ed628e681f47694e4eb52b","ssdeep":"384:boU+JvepohmPF0jCrArr0aX55Mf7qISOqrebz8sROweqWcPdv:UI/LAjX54cr7sXWcPdv","tlshash":"ec823b6e7959b97743b218f9516f620a733549ebd404c920a401e98d7cb8ace813fef8","size":18118,"data":"","first_seen":"2026-03-31T10:51:25.679349Z","last_seen":"2026-04-15T12:26:29.528818Z","times_seen":778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/6fad5d3/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f87471a3d1fb33be6a51912861776bb","sha1":"8bb52b99066392f10ab336b980dfbe0b8fb4dfc6","sha256":"34e2fac9b502488543160a64f763a23608d196acf4dd0c4fecd57ef957572fcf","sha512":"a363d37884af6c3b20e287e9324a16055968acc28d04f79d7acb9b5f8a0cc67e7edf70d05495a9e9dbe14996e704484d9b710ae06e12bd6d87d9d68b515a54e0","ssdeep":"192:xbPfmk/7Obf14M6dOIpUTPqZ8BijFLeEJK:x7fH7ObdFWOIphZ8wjFCmK","tlshash":"a222d71ee7017f360fa613c3744f7b5376a480e592646c75d89c826943b9bcab217b8c","size":10670,"data":"","first_seen":"2026-03-31T14:01:24.495424Z","last_seen":"2026-05-14T13:06:17.183349Z","times_seen":872,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"f3ab257071af2b1623160dc5888270e2","sha1":"b8f26ed9a2b4d87a9d5c421bb5fe5497808c65fc","sha256":"322015d955a3a6e578e9129779685993dabbfbcefcbbe1a5d17fb3c6054ce2a3","sha512":"cba479a62b15b43e79983bbe84c8ba60fd4e062737c2dbb045747ecce11054da0022aa6bd64c6e11f7a0a7a8b65c3673a6044b78f10f288879fd2577a2d059e8","ssdeep":"","tlshash":"79d0c98848c50628d21b38a18a75a17ab3392954846e446eb62ce79064b3119e54dcae","size":215,"data":"","first_seen":"2025-07-04T20:25:19.340271Z","last_seen":"2026-06-24T23:01:36.106502Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"2ba07767e2d85aced7d10fb6e7fbaccc","sha1":"c1d67bdf33b8f97c55fcdcc6414a01aa2e82909c","sha256":"b7c639e9ac352480d74c34c235f534a1d16bdc9ef5e57c53441f1775f8c05e72","sha512":"ae39571bd9c39cc2a6050b5f6a9ba4ee3d60b4485ff2047cacf8137168e395438f468408844cfb9735816223eb9a2b707aa13281eb79b37ba656cf0c1c202d63","ssdeep":"","tlshash":"c4c02bc00cc20900c24334e0c036a83771381661c1bd44be263cf3508033016d10cc5f","size":142,"data":"","first_seen":"2024-12-03T16:26:22.902071Z","last_seen":"2026-06-25T12:47:47.860041Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"93b3ad26deb05a5f84aac30d650517f9","sha1":"9b5d89ab1f5bd2a8adf69a93998a2a47f7b1dd17","sha256":"55ebdcd7318e5b3b30f2ea8efa7ae862056afd60a590f5c107cc83e8c0978355","sha512":"6ae0996e111b2a928ffd5bb57f8603b86db02514234393e71698ceddd4d26e6b86e82f0d970b759fc4919ba5d524ba17c6d58de9cf8cd7009fd07a51055b2add","ssdeep":"","tlshash":"c6c09bc45cc65900c21335d1d075547762745661917d44a91a3da3949533117d15ccad","size":130,"data":"","first_seen":"2025-07-04T20:25:19.313905Z","last_seen":"2026-06-24T23:01:36.121232Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"65689afb2deee1ec0982fcf00424c27b","sha1":"953670f6e01e24668851a1b4d6e0df884f11e8f9","sha256":"61709a5761425894b4bcbf58c1bae0aae074031656a8622d92beee7eaa71f047","sha512":"b068d2d82538bf5ba8c2f1e891299a851685cf4cad554c8e70390e33673d9ca10a359b2cbdf20a8db4f7d296d0b64df8a05758caa16dc7bb8b96425ac3d1eba4","ssdeep":"","tlshash":"9ac08cd4c8cb1900c3033591c036a43b212c5622a27f84692f3ca398d07302ae11cc6e","size":156,"data":"","first_seen":"2025-07-04T20:25:19.333581Z","last_seen":"2026-06-24T23:01:36.085705Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"de6fa25f73a0766b627540d66ed5d61c","sha1":"47a8d4b1b9f54a433987e68edcb0238a9ef1b068","sha256":"06390544377d0aae4c5dc99fc782ea07e6cb514bfc1178b6a9ccf876155c68eb","sha512":"f12ca4c1a42cb51b6a01cbbac011b91a8831f92e9b260c8c04319ec9958281f9bc23a67462382c2284da9e4beac20fee35972b15f2fef74cbf053e54ba563b50","ssdeep":"","tlshash":"18c09bc458c75d00c3173991c175543761341661917e4475173da394d53715be15cc5d","size":136,"data":"","first_seen":"2024-12-03T16:26:22.89052Z","last_seen":"2026-06-25T12:47:47.872152Z","times_seen":169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"287b5f3afa24d79e35e345e7239f2429","sha1":"ad2216293e8861f1612f22e474a9326211225ce8","sha256":"f30e6d341c183b46f6ddb8f82e6a1f639f2539b3ea969b10cf7149a446d673ca","sha512":"bf61ccf5f2f79795e84ee1bf1fc8f5845f64defa13530b05794c4165ba995f0a9910829594f1dc043e79293ac1f25d905f75b1b7ad72f2c8374b2d11e9c2f948","ssdeep":"","tlshash":"b0e0d8a41581092082cf30a4dd1ea76736361113956e18457e1c5ba85f3277ee1a4edd","size":406,"data":"","first_seen":"2025-07-04T20:25:19.296246Z","last_seen":"2026-06-24T23:01:36.083374Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"c31900c1795cb42daed33901a6178184","sha1":"f4afa40853ca770896de083da1cce90fde5e6444","sha256":"00c6cb4fc95ddff469614afc4a435aabde6acd6ab8e1730ee87a39a7093ce61e","sha512":"d7b6a105513dbcd118eb563322a2c649996b5bd891666cbf3b308dece6cf0495d9d1aeab816233e7e9ac4cb970e2b4b5b3dc7c2ac154cafa09a1aab1b1feee95","ssdeep":"","tlshash":"74c09bc45cc65900c25735d1c035543761341661d17d4479263df3549533116d25cc9e","size":130,"data":"","first_seen":"2023-04-12T21:12:17Z","last_seen":"2026-06-27T18:24:35.266751Z","times_seen":2482,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"fbf3135122373345d9ceb71df3f52bfa","sha1":"d9d636e31367ad494b89a3f72010f56fe41f2955","sha256":"38a3bd88353cbf0ad11cc61074655354cd5364a990415e450eb1f0201b362690","sha512":"9bc3c6c2dc0f52e7a606dd9509c4d8ca475eb36589018d94c3b087d58bc28e5773992822d22ac6fd969983eac24610a48da427118d4dc8dbb415a5b51391f76b","ssdeep":"","tlshash":"5dc09bc458c75900c2173dd1d136543f623c5765d17d4465263db3a49533116d15ccbd","size":134,"data":"","first_seen":"2023-05-28T02:08:42Z","last_seen":"2026-06-26T04:57:57.887272Z","times_seen":453,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"7a5b348f557795380871b3a76d049172","sha1":"067a5a651e2551eec32c5e19c27b7c9eca723481","sha256":"bae0750cad9faa490635db6c1a6babc384e1651673ae2f876af71c33ffb2fffb","sha512":"1f5077ea42aae7348f490e83964404707e003d5a190d2779a25fe5a4f7c69d1d5e1b021b70f61a7dae0645a1f27eb4ecdee94f77e46721053dbd5a5b5dee85a5","ssdeep":"","tlshash":"91f02ba918d1042042df7221d92fc36536391143616f2845be2c4be44f22a7a90b8ec8","size":454,"data":"","first_seen":"2025-07-04T20:25:19.346578Z","last_seen":"2026-06-24T23:01:36.120051Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"26d3bbe2473e9a2a54b2032fc0b50a31","sha1":"f59aaa2d005ebf62b987c7f47791947ba80217f7","sha256":"cafd953d0aaffdab93e2712c95523abdb088876637cccb6c37755fbb7974a015","sha512":"65e4489a8ab49fc663fb874a6e57c965100c2f2bb17d7c32a06d381c1fb7ec8d771023eb6480c9273ce8670134c68e642dd0effa98fc78bb0829e949217c825f","ssdeep":"","tlshash":"13c09bc458c75d00c3173991c135543761345661917e4475273db394953311bf15cc5d","size":136,"data":"","first_seen":"2024-12-03T16:26:22.909974Z","last_seen":"2026-06-25T12:47:47.7714Z","times_seen":185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/QQeeI8uJf9","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a1d943527a4484c97158bf274c90b8c","sha1":"134fefa8c6580547c25e4d51cea825d26289b1ca","sha256":"e96ec379940f256a19bbf332439ecf961449f9c9629bc8d3faca53892660e3f0","sha512":"18aa132861e271ef19014ac4bc1bfeb905ff06481c0894b3895b6adae768c53d86d584c8e89072fd7ccc44fcda88f0a1521bbb88a8ed628e681f47694e4eb52b","ssdeep":"384:boU+JvepohmPF0jCrArr0aX55Mf7qISOqrebz8sROweqWcPdv:UI/LAjX54cr7sXWcPdv","tlshash":"ec823b6e7959b97743b218f9516f620a733549ebd404c920a401e98d7cb8ace813fef8","size":18118,"data":"","first_seen":"2026-03-31T10:51:25.679349Z","last_seen":"2026-04-15T12:26:29.528818Z","times_seen":778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"153d3e7ee6e4866c4e5d63b25de1d1f4","sha1":"c8f5fb49ed21cc8a980f8550c0dd376b4468476f","sha256":"25a6598d145c510d07f992180620ac344e64f704e86b1e12a06d6c36503ff2fe","sha512":"ab36fa8e48cf0f02e6bef61fe0a82c338df576c977d7b27251ead2e7b608f9948cf1242e35effb0b2eaac0bd18eb753a3fff5c44a6c889e3e4b905ea3faa3d5b","ssdeep":"24576:qNKsiGrmha9PrjfJ2mEhX1TiB4SwG3aJSOzjNAJfN:qNKsiGyha9Prjx2mEhFTiB4SwG38SOz4","tlshash":"27656cd5b2c5f4a507e301e6a43b1002a33a2c1a740da458fbbcdcd7a95a58e6337f79","size":1518210,"data":"","first_seen":"2026-03-31T13:30:42.429214Z","last_seen":"2026-04-10T12:31:01.759603Z","times_seen":764,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"0b5dafcee18f6c74361001ef1a036103","sha1":"84f098ffdd74f8c328e80370e6a7f5412b378873","sha256":"e99ef113d711b6e928b2c9ad9edc9911314a12625591103fd7c696d38cc1c010","sha512":"01a84ae5e981ac455afb56038728a3359c6c5c7d4078fdef49cb2780565a2e15e17316a3dc4ce4e561ac4815e010ac95c1eac21860797c3718fecb276681328f","ssdeep":"","tlshash":"b6c0129084c65920c25334908066552a21382666916e55656a2ca7549173116d058c6b","size":170,"data":"","first_seen":"2025-09-03T18:03:04.143668Z","last_seen":"2026-04-22T13:37:20.182631Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"a7226f7304850d00fdd10676a2c26643","sha1":"e9422e0eee6439f811cd0723a85db9b8328179d4","sha256":"9de75a45c792f1238054c7f2aa4b92031f13998840143590c19b34e263c9b7db","sha512":"657545e1a12f5569cb6e580dd39cbd37ef3f1959c331d3624328ae244b222b6d651d7ac4bbf7962475a556a2bc1f765c38330acab8d7f59b46ac624a67e7e8a6","ssdeep":"","tlshash":"2fc09bc458c65a00c2533591c17a543b62351661917d4465163db3549573116d15dc5d","size":134,"data":"","first_seen":"2023-07-06T10:22:53Z","last_seen":"2026-06-26T05:19:51.898834Z","times_seen":547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"a09397505a4620789c2cb6b5d6e865d2","sha1":"97ca3ff3c1cb5126c2cc7dc4b2834899c00e9e55","sha256":"90a1d8a8e6e5c788a0f37b6e2de52e5b7dc07e68065d21ede761e75454c39bd6","sha512":"7abf9f6b4e0907881392898eb749011dbe0f2b7dbf56f2aea3c319174d2fe4c17dcdd8055bf7b5bcadbde7c2f4ef5fce32f595957aeae3aad67f6278235f6a76","ssdeep":"","tlshash":"2ec09bc558c65a10c3573591c03a543761391661a17e44651b3db764953315ad25cc9d","size":134,"data":"","first_seen":"2024-01-31T16:47:57Z","last_seen":"2026-06-25T12:47:47.868155Z","times_seen":244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"3d7191ae7e729143ac4707e42f031e25","sha1":"22978596c152220e44a1c374622302ff30cdf60e","sha256":"399ca8e5b904fe579fd780ad0c69864c0f2083ef8b1210a7e1cd34b7b4fd3cb7","sha512":"4da4f5a0049204696dbeed9455c60c4e253ca739f0136c33ed072773e1fbb0b1c8095c4c27b80d50d175d254dccbc3535e2d39e74bbfb8ecfe6260d46d3a6e20","ssdeep":"","tlshash":"3ec09bd458c65f00c2133d91c135543771351671957e44e9173da354d533117d15cc9d","size":133,"data":"","first_seen":"2025-07-04T20:25:19.294663Z","last_seen":"2026-06-25T12:47:47.818783Z","times_seen":187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"531c95ffc600bc306fe7b6d812a8e1bb","sha1":"613b28e2cde56b36f2c69bf092fa3a20b1f2abf3","sha256":"646def6d84221c0c72837338f7b6ed15e8dbc3680ed9de096f7217e45b32c9db","sha512":"b73e846e61e908e69ed604b1a5543b7dde19f7baf5c878d2c62569a16e996e44841503f00f3daf0dd65ecd2b84de804c3d23dc2f7eda4b635480b861033579ae","ssdeep":"","tlshash":"06c09bd558c65a00c2533691d135547b61341a61917d4875173da3549533116d15cc5d","size":131,"data":"","first_seen":"2025-06-02T11:47:32.701364Z","last_seen":"2026-06-24T23:01:36.085207Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T21:17:42.603001Z","times_seen":16770038,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"backupcash.pro/images/ellipse-1.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/ellipse-1.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 8193\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:43 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=saY%2BKNMtCvhpYIeWD5C7Kh5zb3t2N1PMJiCvcr%2BR6%2F%2FjHBQpK1%2FvfEZ8JyqKo8aBkGDeOhM38AvG9KUrOKyH9dDqSCcvOZMslUv%2F9vPUbCfvEAoP7byKJj%2BouASl3kB2XA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc3c5d7131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8193,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 121 x 250, 8-bit colormap, non-interlaced","md5":"00d4e5fc01c9ea8b0569a6d3678eca09","sha1":"835a59d478df751db868394b738f7f3be6a9b51b","sha256":"5f9d3180c4a98e7ea2c76bdaea709a90ff311e90feebdc383c16558972689217","sha512":"15ab95c87c4eab36da753fe3d4284de3e81700b9612c02631efcd80bed0c70b2aefa528339b4d22f1f025ecd2f9f5ede1afbae786e8b4b476dea6b4639a66ba2","ssdeep":"192:zQPNHqh/nPkJjCwPxCf1wArr6wN/rE3FQrU5aLa4rCK:EPNHqhfWXxowArr6wxrsaLa4GK","tlshash":"bff1af2dbb142e7353a4aebc87ce2e44a622c134a2bfd54e5c8948e1f72c554fd422cd","first_seen":"2024-12-03T16:26:22.386356Z","last_seen":"2026-06-27T08:05:10.895706Z","times_seen":517,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/ellipse-2.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/ellipse-2.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 9089\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:43 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=82bkmzeKQJTjTxZzjb%2BYzZSNs%2F%2FjvFpXxKAyiWVFdZXkXc%2Bd4fqh9i4O4qVXJX0gXgX24nl0AFYGAlP0WpgVLcvVM6ZEyv12xRYERLOdJZFPYIBEF9H54gBtfdL8gtXFXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc3c5c7131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":9089,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 127 x 250, 8-bit colormap, non-interlaced","md5":"a2410e4d287312c29a998c9625fff63e","sha1":"dc078dea24fbf7d6cf0dd6d49b58c9bd5ff1377d","sha256":"58c651018743cde0a222aa7b664305763848a4d047a406648fa82f405189d782","sha512":"61ac3a9cfc9ffd4e5455faf1238697431e8e45c9dc2995619a2f682c11287c54d723817912640faff4419726bac075a537c797a69267103b9a204cddcad5d874","ssdeep":"192:b6Cb9DchWIaitqgB3kic3OCo6j3U71TVX1rLkuLouVq22:bN9ohn50fnyPLkuLouVd2","tlshash":"9f12bf4603263a7881d54ef5e6cb82f204f0d689e9af41ceef9d3555be447323792358","first_seen":"2024-12-03T16:26:22.388742Z","last_seen":"2026-06-27T08:05:10.865077Z","times_seen":517,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/coin-1.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/coin-1.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 3300\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:43 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jHD1Z6pNFBKx7pPGCR4g%2F3Tn1LDv%2FLmJiQmq8a1awApP5z5xT6apHhT7Q73ww0cRC1hy5uXvUiwhd%2FIcI2rCSJ9LfhdIJXN8TozhFNwJILnzoy9geVRiB%2FP1QsfMHJMp3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc4c607131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3300,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 68 x 75, 8-bit colormap, non-interlaced","md5":"53f8f7d0e5d8c94bd7fce3a68f1a84c5","sha1":"a2a8e4ea1bb9e332f987abed6620fe2fe132907f","sha256":"4d554e7641ff6254dd78fb7a952a980ac2fe0548b39fcdd29da30b87fa1f3f7a","sha512":"9c02f187b82b222ed6e41ffc74c06995f59a272011164cd17ddf7bdc6c773b9590d7170755f941691c3d0cfc4f7e446de8822011d088f472e98f83f874ee3bc8","ssdeep":"","tlshash":"40615c85b61f9a64e019e92d7f3880d11110b0bb92b4fea732fec69624b1d36860bd74","first_seen":"2024-12-03T16:26:22.384555Z","last_seen":"2026-06-27T08:05:10.888194Z","times_seen":516,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/brands/item-7.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/brands/item-7.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 2901\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DyI%2FXs4TKBRNXOXDjslOZcrIUEuiQsixOib%2BFf06unx3xJlh3Yg3aHXoEotnFWx6Dw0iY%2BEWLIC0%2BC8WPUYRSswNu4Vo0tJ0BqYvdkAFaHQ78UJe%2F3Z5wSAmTVPEa%2FcvXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc6c707131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2901,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 206 x 36, 8-bit/color RGBA, non-interlaced","md5":"b7cae4a6dd38d6aab4a2d8d52a91071e","sha1":"3a9deb5ca09f8ff2273c1ab383244c4373787a0d","sha256":"563d56c3ebacb8492f2c3c097ca637591b9c2301eab88d4e3d0293fcb6e7de2c","sha512":"a95641797b9265b83a551b6de90ec537279ac162a0437619a0bf00f915d1469fe03a3cb9dd0321c9f45dc680717937b4af3e6afd956c8404dec85f695385fe55","ssdeep":"","tlshash":"5c513b488606de2566ebe8b38393fd7cd12e41fd5109d389979e1974004e8d27176234","first_seen":"2024-12-03T16:26:22.421103Z","last_seen":"2026-06-27T08:05:10.889533Z","times_seen":476,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/css/6fad5d3/widget.css","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:49.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /css/6fad5d3/widget.css HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 07 Apr 2026 02:02:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 25451\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"69ca7048-636b\"\r\nexpires: Fri, 10 Apr 2026 12:42:25 GMT\r\nlast-modified: Mon, 30 Mar 2026 12:44:56 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-03-31T12:42:25+00:00\r\nx-node: m9-up-gc82\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137119,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9fc9d6954f6d982397268fde02ab93e1","sha1":"262c432cce6e7e4df431cc336099586eee01b041","sha256":"8e07823fd662663634edd5b071f26c75a0fb68924f0f922fcfcb0a53faec95b5","sha512":"f048e642883f01f1da0767c8930ab44654d2d82e75164eba14660a921b3c950801a4e04b0394488d99034f2b1ba3baa27ea96f504675f5998488924b69e4ccce","ssdeep":"1536:mL5/TK1y+6W6ErhODuMyp2x2iSXpPyH6F6b+dlH4yUQ65FxPQyifOjOCDn6Ecuoc:6UDyQLUN","tlshash":"26d3e996ead2953ce91e591ac9c5aa3ca63ee102cf330daff344f3d143c66d61276805","first_seen":"2026-03-31T13:30:42.251697Z","last_seen":"2026-04-10T12:31:01.690416Z","times_seen":769,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/notification.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:49.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/notification.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://backupcash.pro/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Tue, 07 Apr 2026 02:02:49 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5808\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"69b1726e-16b0\"\r\nexpires: Sun, 19 Apr 2026 23:57:50 GMT\r\nlast-modified: Wed, 11 Mar 2026 13:47:26 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-03-20T23:57:50+00:00\r\nx-node: m9-up-gc69\r\ncontent-range: bytes 0-5807/5808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5808,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural","md5":"9aa341af370c4e59155717260ba0f282","sha1":"0c1216ecead8d1409557c843d96202c063f3f252","sha256":"1112436abea08c851302bba4d4e37a27e25e5ec26b20474667a3369d41154bab","sha512":"e6663f8406d859a7ae65e6eb9512ed1e79244b8f5b2119823f80fed99c17dd4a086cc17083f3cd70b6dd990c39b3be80142f303a7c2a9fbb9302147e700fa5cb","ssdeep":"96:XYLRSqytFnbfWnHBaSvgEyZMZuiusJ0jQDrrQNw:IMTnbfGhaSvg/inqc0m","tlshash":"cac1297acc3c146fd81e88b53f3bb0c9421c61803a00d8e61c99bb5bd6b2ba975468d2","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-06-27T15:41:11.05362Z","times_seen":16452,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/brands/item-5.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/brands/item-5.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 1631\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2F2%2FmU5FJdvylmJeZPphfmsMe91k2aLJfVNyOF98eHKlyCLyn9pID%2BI7mB5AXP%2BvsxDDBiZKNHljWYrDVH04Ue0CWa2BEUhXDVHPhSorDb56J9uopByQI6BaImfhrHFDVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc6c6e7131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1631,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 97 x 44, 8-bit/color RGBA, non-interlaced","md5":"343610828d6cd2bffbb6f705fed5b679","sha1":"2d71831c4513f746ad9d291c0295db9e7bd91917","sha256":"adc6bfa2e50c97a33131055209ff6b8da262d0573c118fc3b04efdbce0b7cccc","sha512":"48ba8d011e35ff05ccd1015f3abc45c102d873ebd5b0630d910ae50fed500bf9d8c983975664c3fb4387e37d52f9fdc23f48ff46cf65241e92d37fdde59ebe9e","ssdeep":"","tlshash":"fc310ae4af273cf7822ad5378bea1c44989214153127aaf9390c624c456dc8897757e9","first_seen":"2024-12-03T16:26:22.367724Z","last_seen":"2026-06-27T06:29:49.215354Z","times_seen":445,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 07 Apr 2026 02:02:47 GMT\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17689,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"30e76aaeae29f594433bc728a08b4d8f","sha1":"ac1b677b4d702295e7802802376ddd8c84acbc13","sha256":"395e51e3dc84faf99710da8cf316e573703addd6eb598e1b334eff76653e820d","sha512":"93b1661d34210abbdb2c6cca46bb229254b615ba07c05dbcadb65199b9d1e61e18dbb4302236e89188ddc34be20528f503f6140358f82385b1f0e621f93ec4d8","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kV:8KYXuM0p2+g7GQK","tlshash":"b1828892002ba400ab971dc233cf7f3aaece10896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T05:09:40.151737Z","last_seen":"2026-06-27T20:38:32.956256Z","times_seen":4592,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":89,"dns":1,"connect":7,"send":0,"wait":18,"receive":0,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/QQeeI8uJf9","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/QQeeI8uJf9 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6195\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: br\r\netag: \"69ca7049-1833\"\r\nexpires: Tue, 07 Apr 2026 04:02:47 GMT\r\nlast-modified: Mon, 30 Mar 2026 12:44:57 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9-up-gc234\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18118,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18118), with no line terminators","md5":"6a1d943527a4484c97158bf274c90b8c","sha1":"134fefa8c6580547c25e4d51cea825d26289b1ca","sha256":"e96ec379940f256a19bbf332439ecf961449f9c9629bc8d3faca53892660e3f0","sha512":"18aa132861e271ef19014ac4bc1bfeb905ff06481c0894b3895b6adae768c53d86d584c8e89072fd7ccc44fcda88f0a1521bbb88a8ed628e681f47694e4eb52b","ssdeep":"384:boU+JvepohmPF0jCrArr0aX55Mf7qISOqrebz8sROweqWcPdv:UI/LAjX54cr7sXWcPdv","tlshash":"ec823b6e7959b97743b218f9516f620a733549ebd404c920a401e98d7cb8ace813fef8","first_seen":"2026-03-31T10:51:25.679349Z","last_seen":"2026-04-15T12:26:29.528818Z","times_seen":778,"resource_available":true,"data":null}},"time_used":1241,"timings":{"blocked":552,"dns":314,"connect":60,"send":0,"wait":93,"receive":1,"ssl":213},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-CGpQ-zyW.css","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /build/assets/app-CGpQ-zyW.css HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: text/css\r\ncontent-length: 10315\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OC5ODRdiTCCNsiFwOZHRTOFR4%2B%2B%2BZ23fGGj62l4knLM%2BklhcNWt4mAX97HyQ1C5KuINY7cAcRzsVH6ovEGYAUhmUyM6PZUCybC9PZo9qSiMJSwiKlpBPqyplMRRq9DB2rg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9e8573bc2c587131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67446,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b4635d66b7452f2367418b65e9686a39","sha1":"b2a98e450873a29a315717cbc654b07c0b8dc84b","sha256":"b597f96abb9f1e4d4a146bbc845325f1988bf5bb0d33e9cdaae5f66bd3be788c","sha512":"74eaf86fda3babe100d6b84579596faa782740eabdacbd1a199ab7e48e6037b7be0d606d507890bfe541e92d59b7be5d8f30db32beaa94f82010d0bbab2ecef0","ssdeep":"384:k2fkzJxw1dtB3aDj6HaqczHM7my0nTh/y/T/HZNUrAOSK3vvOiGD4nkCKHIw:0vw1TB3W6z7ZNUrAOt3vvORD4nkZ/","tlshash":"4463213d6b90003b7c6390f9d698fa5de61bb0c1df3a5aaabc8211209bd63f35c57614","first_seen":"2025-07-04T20:25:19.249827Z","last_seen":"2026-06-24T23:01:36.041767Z","times_seen":46,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/spot.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/spot.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 10823\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:43 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B7busI5soybeduzcTxUjsrQZVge38TQm9fx%2BrmFfZHSMxX1csYaI2a5wFPU%2Fs4vg3S9L97KicaoosF7iwyoQJD1%2F43%2FFtS1ci0IvBGrToumoVRAP3dZE77vGEU3AWlJvIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc4c657131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":10823,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 306 x 191, 8-bit colormap, non-interlaced","md5":"7ddaec1353ae8ad10568c356ed43e15f","sha1":"87b17e0a2c9706e2029e557f975a90807f985bbc","sha256":"03b9cba4b79d88cec49718b5dd4663ef99ec0648bf312ff2a4dbd44529821e89","sha512":"5a0c051e64ee35995bfd367b3428a8affbbe2431924009958f80cb8f6fd8d519ecad4137e9d915ecaf6437a6be30a69bbe7b161fbc04396f973b11332b0731af","ssdeep":"192:HiJDZbBi2t8nk3z0VKOSFnMC3guGJphWEJpogGmonFHEATG:HSBD8nk3zH3PGJphWEJpogKFkF","tlshash":"bf22d0d4a04def08892b5f8b2226da3561df535fe1250fb25e6118d0b40d4fec2735ea","first_seen":"2025-07-04T20:25:19.283416Z","last_seen":"2026-06-25T13:33:37.794678Z","times_seen":417,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/brands/item-2.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/brands/item-2.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 3464\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iFdu8rOkhwKxhV1%2FqhcqPYIr2B4%2BmxoRaZ5Px%2BMIjD4nd0s4589LGAptBWnjHvWttalkzhbWZD4B8H6tfvTqKPm2%2F2Y0KR8QK8NgUS2dToFjxSvbhvpvYVRMI%2FEpZFBkSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc6c6d7131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3464,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 194 x 60, 8-bit/color RGBA, non-interlaced","md5":"150b1dd3c9ed5e94193d8a089114b8e0","sha1":"2b4cd54a69280f5ccc96d613289726e8a944756b","sha256":"ef3822fb6c16fbfd51fb868fdf7bfe44eb73a6a08f720c5056f65ce57ca74eae","sha512":"d4df18c5eee33a2f2241201d6aa7c42bc9bcf8597b7480534e1d1fd33c89591b8b68d821c1fb94d9cb430b5e36cccbe45d4957015a464ed37b840b1335ab5d56","ssdeep":"","tlshash":"78614d4776d0450ef45ea251ae82b7d1f4fa5f38b2279cd4b47aa03acc09dd9c097a10","first_seen":"2024-12-03T16:26:22.415688Z","last_seen":"2026-06-27T08:05:10.87522Z","times_seen":483,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/brands/item-4.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/brands/item-4.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 2847\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3t8rgPN%2Fxaug4wWMdeLGQVmU7QIRGsMxRinSfWs7%2BNegp8l3bzn9ZUGmYQnAPA%2F89DvXhs15MCIrJAB8SANJm8%2F3Y4yXzi8DnbrIuTY8dtbMObzbFuZCZOfNegR1ecsYag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc6c6f7131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2847,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 154 x 34, 8-bit/color RGBA, non-interlaced","md5":"d1c0995c14c5d9c20add14a4c6fa0b00","sha1":"de1ce5e9186b465750ac180a1d48579cd57b0dfc","sha256":"025b3f7e35e1ef612d16c2e3254f3fc2764cb660e6ec40411ec51d93d1621c16","sha512":"372931d1b2f90a68f284db84c536917ece723b2a2273b1ebe1d4174aa40b3042b1b0720322c06a6dfbad03d1ef1748d4cdd5efd98b45c32ed19668d684b5b1a9","ssdeep":"","tlshash":"6d513acc8064d978b2635011bd4caa8404e718b2f985384ba42e8268d38cc2e34c7fbe","first_seen":"2024-12-03T16:26:22.365691Z","last_seen":"2026-06-27T08:05:10.866784Z","times_seen":483,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/brands/item-6.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/brands/item-6.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 2862\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X56k8qy%2BURGyyro2g4IuS%2FBM9YSfas0%2BVscPxaAzzaJuFKyMKqJiqbRQd%2FmoNkS32aEw7L38ym%2F67q32xxVqahhK6vdJmHFFvge70BtM2V8amXfHVQ3%2FoJ3fxtzaQ%2F2lSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc6c717131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2862,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 178 x 34, 8-bit/color RGBA, non-interlaced","md5":"1e58985d34e2487cd4938065dce36ccc","sha1":"d989faf08f38ff1c760f07ed5e9c0d6723de342e","sha256":"36ff1ace52f798558c3382eadc34a9aa9794459130f948d8978ccfbece00a15a","sha512":"c04765824ab4efb6468597d3ff11d70b4080ada7652d844b4f86a13c9053662df4ac52ae254789d34b3008d7b7d76ceb7ec206ee56c647529c6b353dca439144","ssdeep":"","tlshash":"42514bdab1df157ca01ab56b3944191a30a484ac2c85780b72c73df8d15c0a6525fb26","first_seen":"2024-12-03T16:26:22.419076Z","last_seen":"2026-06-27T08:05:10.858411Z","times_seen":482,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/globe.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/globe.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 3753\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DFwvCYr6Z4dVQDZCK%2FWtWSJzEMpgNedcpq%2FYQ09fVyVNw8QAmlF1EAknnUAx6Oq22i2Ab8HmoBuw3JNIFJVSLq07B5082Ge%2BmItu3XRsVdZUwehL1Y37U%2F%2FIucO2WO4mWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc3c5e7131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3753,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 107 x 104, 8-bit colormap, non-interlaced","md5":"3ebfb76aba65ba06b960c330ea5978cd","sha1":"0fd9ef4ad7f944c0419f9113088e58abb8bcd37a","sha256":"f84514c87d0542f1deadf327d1eed886df5f903159a035c2f7835623ab111aac","sha512":"1538fbc486a39b35847bccad81b65c6b5b6187cdce21b31505c7c0d406706b340d9a7ab883c161ffb04ed0fe7de602f51d6ba8e20dcc6a37c749e369f357e2b8","ssdeep":"","tlshash":"0a716c77f316e324d2ec4771645187c7b81c883dd543c9c8583d957beac7b994240235","first_seen":"2024-12-03T16:26:22.381022Z","last_seen":"2026-06-27T08:05:10.873664Z","times_seen":520,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/bitcoin-2.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/bitcoin-2.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 2725\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:43 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0laXSO5Ovl9PrvCWX3Js9oJbcAAHQHSjIjnjlNAhJwKo7yQXFzD610X6X1vOYE41JePCUjEqg4HTRuO0p2zgdaA6N57T7Cgka5E0ryg41x2MO%2BRJ3XgO5xJApnkLLGAJwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc4c667131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2725,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 73 x 74, 8-bit colormap, non-interlaced","md5":"53652fb82fa5e4fa40e8e7f9eca76f37","sha1":"53f3e8812ab40a46b67ffac8f9b0b664c76d4f3d","sha256":"aecb88c787e0ce314f86d30435cced277c2786730e2d962514ed9dd0449f1b5b","sha512":"84b710719770656396b369c68079bfdc50d75415c8b913e2823d606fff48109b8a7a3cd7d7435490a745c5f02c55d1f06e649782c10d197af40e583a198bc66d","ssdeep":"","tlshash":"13515c4638379d7ee3c43b7e0e2d4662142f023a68cac51a5a56eed58bfe00061f1583","first_seen":"2024-12-03T16:26:22.402949Z","last_seen":"2026-06-25T12:47:47.706073Z","times_seen":465,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/brands/item-8.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/brands/item-8.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 2241\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ZSRYycE57Y%2BupW%2FCImrZRv8qJ5L1jI7xvKXIXPKlLFTD7VV4tWplm14eIZysiDsVHPCg26SirTgYY%2Btj6mOMmnB6fyjX1eQLjPaA7vuDEf6SOSxUk5jwvX17sZLG%2Be8XA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc6c727131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2241,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 154 x 36, 8-bit/color RGBA, non-interlaced","md5":"9e10c7024b49623d2977cd1409f72ac5","sha1":"553b32193ceee392b8dd2d3495d0040e7cfb3f7f","sha256":"a03188d6bc5231c45f58605d7895441cc89bcfea62bbcae89388e2fd7310b749","sha512":"30725fd01c3c7516cb4805037254b1632a16ffcdb20527488c68e9001c9c79c0f6878f5768ed1c766512f778c8179f655fb753c6de88d12041d0385e742334d3","ssdeep":"","tlshash":"414129bf060f737f834de4171e4fa0f232ba259b94a55641a9caa740385a0f02b83166","first_seen":"2024-12-03T16:26:22.371476Z","last_seen":"2026-06-27T08:05:10.87947Z","times_seen":483,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/brands/item-10.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/brands/item-10.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 2620\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IphstDUY7ZPxj2neIdY6Fp3ekkiPQ%2FCbqqStDg0rDgOfMWI4a%2FEC1jrC5rxw6Px%2Fn5VZJKC1k85XHQJogXdtbM75Bzeby%2FXMcY%2BXX1CQhuGsVQRMF7%2BlcsSWkkZIubUS%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc6c747131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2620,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 153 x 40, 8-bit/color RGBA, non-interlaced","md5":"e969e5e4b1a71f337aef65b877648208","sha1":"21bc8818827cc8576b1413d19a5ae791c586714e","sha256":"d4f1d6330da8406fe1cfc5e4a9d0f51f047a46d226817bd162948676c36a5188","sha512":"75112c07d2d5f0bc790be94e15db508fade5dcf6f86fc59da4cc60358c9c6c7340c95c10bcb4dc78a3fce296aa3e0d9bdeee612f3778bca4a35b3064bca462b1","ssdeep":"","tlshash":"00514ceec1289d27f9b89f5d13a00d290f64e76223ab3d7a3c84160d777185cab490d2","first_seen":"2024-12-03T16:26:22.422731Z","last_seen":"2026-06-27T08:05:10.853961Z","times_seen":481,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/VuKQMldiun","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/VuKQMldiun HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6195\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: br\r\netag: \"69ca7049-1833\"\r\nexpires: Tue, 07 Apr 2026 04:02:47 GMT\r\nlast-modified: Mon, 30 Mar 2026 12:44:57 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9-up-gc72\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18118,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18118), with no line terminators","md5":"6a1d943527a4484c97158bf274c90b8c","sha1":"134fefa8c6580547c25e4d51cea825d26289b1ca","sha256":"e96ec379940f256a19bbf332439ecf961449f9c9629bc8d3faca53892660e3f0","sha512":"18aa132861e271ef19014ac4bc1bfeb905ff06481c0894b3895b6adae768c53d86d584c8e89072fd7ccc44fcda88f0a1521bbb88a8ed628e681f47694e4eb52b","ssdeep":"384:boU+JvepohmPF0jCrArr0aX55Mf7qISOqrebz8sROweqWcPdv:UI/LAjX54cr7sXWcPdv","tlshash":"ec823b6e7959b97743b218f9516f620a733549ebd404c920a401e98d7cb8ace813fef8","first_seen":"2026-03-31T10:51:25.679349Z","last_seen":"2026-04-15T12:26:29.528818Z","times_seen":778,"resource_available":true,"data":null}},"time_used":1149,"timings":{"blocked":509,"dns":274,"connect":71,"send":0,"wait":90,"receive":1,"ssl":201},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://backupcash.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 02 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 409015\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-27T21:16:05.254768Z","times_seen":220389,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":66,"dns":10,"connect":11,"send":0,"wait":9,"receive":13,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://backupcash.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 02 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 409015\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-27T21:16:05.254768Z","times_seen":220389,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":71,"dns":0,"connect":22,"send":0,"wait":16,"receive":2,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/6fad5d3/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:49.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/6fad5d3/locale-en-US-json.js HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backupcash.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 07 Apr 2026 02:02:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3431\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"69ca7049-d67\"\r\nlast-modified: Mon, 30 Mar 2026 12:44:57 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-04-06T12:44:17+00:00\r\nx-node: m9-up-gc233\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10672,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10645), with no line terminators","md5":"0f87471a3d1fb33be6a51912861776bb","sha1":"8bb52b99066392f10ab336b980dfbe0b8fb4dfc6","sha256":"34e2fac9b502488543160a64f763a23608d196acf4dd0c4fecd57ef957572fcf","sha512":"a363d37884af6c3b20e287e9324a16055968acc28d04f79d7acb9b5f8a0cc67e7edf70d05495a9e9dbe14996e704484d9b710ae06e12bd6d87d9d68b515a54e0","ssdeep":"192:xbPfmk/7Obf14M6dOIpUTPqZ8BijFLeEJK:x7fH7ObdFWOIphZ8wjFCmK","tlshash":"a222d71ee7017f360fa613c3744f7b5376a480e592646c75d89c826943b9bcab217b8c","first_seen":"2026-03-31T14:01:24.495424Z","last_seen":"2026-05-14T13:06:17.183349Z","times_seen":872,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/bitcoin.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/bitcoin.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 4358\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:43 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hpEFh07MzBLwH4bKVCu%2BBvK%2Bk%2BR2puWPVe%2BE%2BxMcXLTk8m6%2Fxr%2FODsnkNLcf6Wp5U9%2B3hAXAmOziU0JTROgpR%2FEerHYhihO5nmuvX4rnthuew2YsJyygVKXkpRfFIchCuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc3c5f7131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4358,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 97, 8-bit colormap, non-interlaced","md5":"e4506ff1445aecbf9674103cda1c019e","sha1":"45fa57690cd03838cd1cc7d40653cf0cde59d67a","sha256":"99b75681fdb03e68c762059e0ecd00196bc84a727eca75e2c94670e9a3771d34","sha512":"d68136b909fe553283f00331290aa3cbc9e34749cfff6744e924f06e2c8fa5ad99d48b95db1a09f9538abcf9eb8e84850d3f17ee1357171969886b9106ed602c","ssdeep":"96:NoDOFoNnnPByosGcwvslWqS2kpQU8FhXqd1TY3wVNRX:3oZPQgcPlPS92nC1TY3oNRX","tlshash":"8b917ead07a2e1d117286dec61289395139e750cd75cbd280f04dfbc55903aedd157cb","first_seen":"2024-12-03T16:26:22.382561Z","last_seen":"2026-06-27T08:05:10.887636Z","times_seen":516,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/trusted.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/trusted.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 10033\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:43 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HvLBcW%2BHrnTX3E3Ey0SVBo6QwKe6Kn3jb%2BfWIe8IC1WXxu2PJoTjfn9Eh4gECAu4fYYLBPpdEmPMRZCeYNaeWumoPhRpupXvDqrpF%2BtE2OFMYrbpRktePisd6Fj7T5g39g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc5c697131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":10033,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 237 x 188, 8-bit colormap, non-interlaced","md5":"efdf07eb6c9527e9488a4a686bf2a8a9","sha1":"dd5d7135ae22a5898c2023d13c57964d75153316","sha256":"2f97f47801ec4215c428e32e3e8156bfbb4bb12866e79d7340c5bd2becedd4a9","sha512":"8b49063456ef0dbe0de55a41efbab9f56c8883e42f32f37cc43981b86084b26bdab26b26d2c942cef72a8fa964062243c1af6dcbe37e2cc4a89aaf0440259271","ssdeep":"192:V7gguqUN8o4y4rU/m38u7WLGrWlA/vV/yB1pc+k:hLuq/9vY/m38u7WLGrWlAO1pBk","tlshash":"ac22b0d7dd10c305f8ef33608b9cae788ef6ae280a1351f7644e15711ab56b41f60a49","first_seen":"2024-12-03T16:26:22.40842Z","last_seen":"2026-06-25T12:47:47.730713Z","times_seen":467,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/brands/item-12.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/brands/item-12.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 2312\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KRPPjK9Sydi1y3oanunXAID8X3mK2x6rB4BPhHBAKc7mP6fShs%2B7UIhTX7OC16hLsmklntdq1vlUc%2FpxvPOWE76O7JD%2FKAfNj08pMql%2B5oKsBuxq8lBbtH3b50weJDfH6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc6c767131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2312,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 187 x 42, 8-bit/color RGBA, non-interlaced","md5":"870d166c8fb352aa7890e387ec05fcf2","sha1":"2fc77674a9fd2da48612908ae7f470e5d4a2bad1","sha256":"038673a1e98d22bd488fd918e9a97ee5caa5f73ddac8b7dbc748b5bb802b8b5f","sha512":"783120e08b02c67505bf3deb78e6d6175dc0fdb44cf7c512561fc3b74e2dadb99b33e070301111f3f5d8446bfbf2e1d2eea9070705f7e42f12aebde6d4f4dbe2","ssdeep":"","tlshash":"61411afd0255e13b59204af4363a9b249a9fb32931170229c0ac2f3f367dbc9008d2f5","first_seen":"2024-12-03T16:26:22.425809Z","last_seen":"2026-06-27T08:05:10.880053Z","times_seen":476,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/outgoing_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:49.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/outgoing_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://backupcash.pro/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Tue, 07 Apr 2026 02:02:49 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5014\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"69c28d30-1396\"\r\nexpires: Sun, 26 Apr 2026 23:25:22 GMT\r\nlast-modified: Tue, 24 Mar 2026 13:10:08 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-03-27T23:25:22+00:00\r\nx-node: m9-up-gc81\r\ncontent-range: bytes 0-5013/5014\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5014,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"7bf3e4962a5ecf1f8cbcc2ff3428f531","sha1":"f75c694461a643d2e096ae8d0f6c1a9d19602eee","sha256":"d44244617bf21df7a137694fa762d5cab3b82cb9fae8f33de5917977b02b2a11","sha512":"53fb17ca3361636acb0b80107f66810150a8bbed9aa5f878c2b1fb5a23ddf7fd349b30eb082b05efb3c0d08dc5383d30ef15d0ca99ad98d62e0a9a335112ed6a","ssdeep":"96:nKEOyBuK+1D2sMVx9FX7+0YQQinefV/1gr/EaadKXdGdimO1:K2QhGvYinsLE/SUdUime","tlshash":"5da1399616202262f6090cbf124ec2f4e3996f6b39044726b67cd290f46ffa25366983","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-06-27T15:41:11.002137Z","times_seen":16451,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/trade.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/trade.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 9662\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:43 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fyBcM7odvnePx6tg2AwMOTMUxt4jIda81beIx2pwbUH9JVQHE8pQYda3z0rPWtOtBTIODBZxuW%2FQ8GcDyNJ73I85kWjIEcmYIEWH5xsXWHqRheuIR68W718xNPXcpyJrRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc4c647131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9662,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 268 x 208, 8-bit colormap, non-interlaced","md5":"3c7cee4ebaf82dc3dc39c48f00798771","sha1":"40cbcc6fddce9819273559bd04653cdce7a5545d","sha256":"47a888bc02f31a9f0162c3bdb9462153d29db54ba754f5e1668ab008ecc38720","sha512":"65a68a0403a385d765708c898b85a6504c3a8d2dca14298293a2b49722722f2828354d0137453799e7454d3c9e0e93a6e9ad30fe81244c952074f1e8c30e9887","ssdeep":"192:0iyD9KCMRjI1zWQAGzSHZxEHaq8Qjk1ntRYzW5aXf06c26:0iocRkh/AGui6q8skBtRiW+f76","tlshash":"db12b062b87a5795ee3b5dbf2445f040c5324cec41e4a519a6302133b93fcc19458ebe","first_seen":"2024-12-03T16:26:22.401267Z","last_seen":"2026-06-25T13:33:37.789088Z","times_seen":478,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/brands/item-9.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/brands/item-9.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 2900\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZiOV4lymjShC%2BBh7xRznumOPXkGQsK2AxMHQtEDdB5JN7rlDeTYF7uTrPWu0o5X1eh4TU5ceWG%2FRsUEWgVj7UkVZ7fHuOOw6W1pJxXDOShfggJAEMMbcwoKS%2BCHS%2FxL3Rg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc6c737131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2900,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 182 x 38, 8-bit/color RGBA, non-interlaced","md5":"63d3e3665e680525abd91ca053f96c97","sha1":"e99f89896954ea3e0722b61a0e5e9f3887e0d9e0","sha256":"6cae3bc2c8e8123733dba1735f041bc4521277250e0d500bdbb7e475543e0aa1","sha512":"996254e5f5be80ff11f05ce7bb85c1d1fc4c3043fb313409cfd5eaa1aa369e05404673485a6da6e88d8787cdd62e2f377ff3b46c01df2447c652fa5b4960ebd2","ssdeep":"","tlshash":"a3512a5659153d26e6c34aae2a840a257f828f37e00f4ed229293196db67080bb6d720","first_seen":"2024-12-03T16:26:22.369579Z","last_seen":"2026-06-27T08:05:10.86235Z","times_seen":483,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://backupcash.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 02 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 409015\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-27T21:16:05.254768Z","times_seen":220389,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":112,"dns":1,"connect":20,"send":0,"wait":8,"receive":3,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/favicon.svg","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 412\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aOMkUSlHF4t5DlDmXU2c5ncC3jGPi40zwu757uleKt75vI5LjFyFuZxy7FrboPD2f4yx8NBWwsR5TWinK%2F%2FcOPT%2B0uGBTwajwcvA0%2B4kExkn%2BfeWHsTFALnWjo%2BvXUzbsA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9e8573c16c857131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1261,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"14ead6ee3731113ea61bf18e047d5b7a","sha1":"a0f5ca0654ee174e5b3d8cc29063afb3e34a7abd","sha256":"ac0eab914f8247a68858ddd856b7694f24e5e25616cbd656c0fd495fee28615b","sha512":"328aa74a071504e41400016dc3b92470a6ee9cec555a31f234eee918061ef766099a6b44018a80357c6832980ab28b10f32f1111a5daa69714abbbc5ce40a5e5","ssdeep":"","tlshash":"2c210229d6d95413d448c299ea40f42f315d95c35f84c210b8e8272c7ba38f72b8b37c","first_seen":"2025-09-03T18:03:04.120427Z","last_seen":"2026-06-24T23:01:36.067571Z","times_seen":29,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"node-ya-6.jivosite.com/widget/status/2664419/VuKQMldiun?rnd=0.7387714820621485","fqdn":"node-ya-6.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"158.160.53.45","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:48.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/status/2664419/VuKQMldiun?rnd=0.7387714820621485 HTTP/1.1\r\nHost: node-ya-6.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nOrigin: https://backupcash.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://backupcash.pro\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\ncontent-type: application/json; charset=utf-8\r\npragma: no-cache\r\nserver: foxy/6.0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\nx-powered-by: foxy/6.0\r\ncontent-length: 80\r\ndate: Tue, 07 Apr 2026 02:02:48 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"64770e846c2469269f9726496ac3697b","sha1":"e7824e351dc61667ec44b39fd0b2c30db7d3f756","sha256":"713ef7fc76006f67a3c25a2ddcd9e333d574a5354cbc530d7cb2ba598cd25c0b","sha512":"d0d0f3ec05e73f85828019305c38fdeb978ba094c88be5afb50716069ab75892dbc706e028a3da4bc4b5d5bad8790cec3bf08381390d236592b9ee7ea0ab6442","ssdeep":"","tlshash":"a4a0122a0511a00643108a60d2c726090120110121919424e1a1500071a71d004fd007","first_seen":"2026-03-21T00:42:13.226849Z","last_seen":"2026-04-07T02:03:24.463495Z","times_seen":2,"resource_available":false,"data":null}},"time_used":834,"timings":{"blocked":406,"dns":330,"connect":30,"send":0,"wait":30,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1774960823","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:48.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/bundle.js?rand=1774960823 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 07 Apr 2026 02:02:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 342089\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"69ca7049-53849\"\r\nlast-modified: Mon, 30 Mar 2026 12:44:57 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-04-06T12:42:34+00:00\r\nx-node: m9-up-gc98\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1550655,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"df8e42ba639e9d6a965101e6b57a5645","sha1":"1297f0e7bb9164a57bb7a1c815605fab837473e8","sha256":"fa75ce8b118cc9ac9909dd25ae0e7cb34f591b615b6d23628b3a2e97b933235a","sha512":"ef536a4bb5beba642cc2e389294784075fb82be7a2f676b9eaf6878c6fff784ca77bb03ecb4a97bba83f8a8bb28a9681131484d67b8bbce5aebb79d8ab8709c5","ssdeep":"24576:Ddg+rR0648W+9n4FHCuZlhEqYwkP3uaFNx1zUGSGcQBSE:Ddg+rR0R8W+9n4FHJYwkP3uaFX1zUGSY","tlshash":"ec254ac5b1c1f46502d355e6a43b2009f23b285e7809a064f6bcddcbfa6659e6233f39","first_seen":"2026-03-31T13:30:42.386549Z","last_seen":"2026-04-10T12:31:01.660882Z","times_seen":762,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-07T02:02:46.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:46 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 14 Nov 2025 09:47:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ier0%2Bxy0p%2F3JkhEgdzVQUt0r06hW9y9PtNAdgjZDGwzRtk6Ughrw2Y57QOBvEx8pMsOiiO9UCP3W%2BhL40%2BelcPEQK6fzrc3%2B%2B%2B8jMo%2F1eztC6u5VMHNItA4M7U1Vx7fkVA%3D%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e8573b94affb4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]}],"data":{"size":77372,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (609)","md5":"f767ebb76a18e1a6144688682024d83e","sha1":"533803fd5664d92df055a1be7741ca559eeb86fb","sha256":"19c6b2be5b555b52ca6bb82ef58f6e15d8a0e6c44d92ba5fec7a8fc28a15c61e","sha512":"fc4d95fc79c5a1af3cd17813e8003a7b923173808e3ba7001710700bc39a53c5a5109d0cfbaa37b5991519f2143df5b361b966322735346ed6cf958133a8a003","ssdeep":"768:3PevChKilCQ7U1cSd1BTi/+cOuzpmIZAuNQ/xOvTjv9lA6gZ1TL:4Cod+59mlN4/vaTL","tlshash":"6573966812f1117711c381a2fb72bf2aae94ca47c62f895973ec86c6af87c468d53354","first_seen":"2026-03-21T00:42:13.228314Z","last_seen":"2026-04-07T02:03:24.987603Z","times_seen":3,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":44,"dns":27,"connect":1,"send":0,"wait":175,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-wHqCoHq-.js","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /build/assets/app-wHqCoHq-.js HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 59033\r\nlast-modified: Fri, 14 Nov 2025 09:47:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5zMy7ABZCgprav7Owfazd4jvIx3cCGwkAa8CIpaKvewectqMBJPIgT85KbocqoII2oYVpZ83wO%2BdLnCX9DCSj9L49KyFQI%2BcmR4%2FFkti04twOqI2%2BzAVPuLFt0QEanplAw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9e8573bc3c5a7131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":183647,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (24889)","md5":"73d899a61f0fad8366a803b05337ef1f","sha1":"bfc28f2d95fb5ad160feea49ad50f692ec36d87b","sha256":"e7f591c161bf3da6726a75bf3050c9e36c9ddea21739b9cd56b892c12b87e803","sha512":"c7cd10d90941b9fb8511e5683fec74b8fa233714370f182e06d88ca773897ac748dd5a638385dc2046094441c3b58e3441be5e8a0dd275ee4ba60a3b1f15c848","ssdeep":"3072:0GOuVDDC+XNUyc868eSGPLEh5MIB8qe0HEw9PH/91wD0hJ2uOsE:0GOQDDhXNP+QB830HEw9Pf91wD0hJ2Zl","tlshash":"4b0429d97295717283eb15e651ba8502f3791844780d84a8b1acccab397d88d02fbffd","first_seen":"2025-07-04T20:25:19.281149Z","last_seen":"2026-06-24T23:01:36.045619Z","times_seen":90,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/support.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/support.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 8640\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EmbL9EdNPLkA6mIyxQt7zW%2FkCI%2BYTq0WUCWQGsIKF2IcWQubtFqAjGg%2BdLU3OC5caTUYdQHmAJWcDjFiMZcRQMCwFYE1nskAQVxwi6pJ0AjMkkpkjwLtXY%2FlGeeMaQQrxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc4c677131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8640,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 305 x 161, 8-bit colormap, non-interlaced","md5":"393bd5b4c8837f1fbe3382bfec934ed6","sha1":"a2e7b7ade50efbe98112dc51a500a7d70eaedd18","sha256":"e5a42e7e09852178345a6461f067edac20a0fad87ad5c19e41c8b636ae3327aa","sha512":"59c42ecaac87689471857989a3e423b05962228f15a8768a69848f8d06d56cbfc574992debd8ee74e4caf5fc2aaead3e3f4f67b4b424137e1fe031eaafa5a8c5","ssdeep":"192:k4B8okr8hfOcYJqPzAeV+ht+b+naDyyaPF7rNL5xkEcVc3yX5KpeNNK7uzu:BNkr8hKqLAeV2to+naDfaPFXBL9cW3kW","tlshash":"e302b023ef8964d178e6717c059a7a5ef8f435487a0fbb7301d19550342a43daac2f4d","first_seen":"2024-12-03T16:26:22.404807Z","last_seen":"2026-06-25T12:47:47.7455Z","times_seen":475,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/coins.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/coins.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 3513\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:43 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VYTktaNJVW2PUxFM6T3%2BLCRKRbcBsH4nuzPT8Q24e%2FblRAqgXjU8ByLJTlGu%2B9e5vCfb1%2FZdKfDzcpcvEBh93JonSwm7lxm99%2FURC7Lyh3nOTOvRcabfWDo8pTlnCaFlQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc4c687131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3513,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 78 x 78, 8-bit colormap, non-interlaced","md5":"9ded23612ed2cf036b8c502631cdc27c","sha1":"42de435caa13d1bee5e12c87ac281234cf14ae80","sha256":"631fd12a56aeb434549777db3a1944df17fe2b88347be3754e0c88f9380b448c","sha512":"7cc073525da453d9c18bc33cf44a29548e74ac6a2ec75383accd62c66da255922b38e83b873bf300ff6a43e8babddcc31c240d09b59b68460c76f79d6950411f","ssdeep":"","tlshash":"ec715d62f70b7d09dd26caf64b31146bf25262656c0b496b93f8d097a86210236e718d","first_seen":"2024-12-03T16:26:22.406578Z","last_seen":"2026-06-25T12:47:47.730051Z","times_seen":468,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/script/widget/config/VuKQMldiun","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /script/widget/config/VuKQMldiun HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nOrigin: https://backupcash.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 07 Apr 2026 02:02:48 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 705\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: gzip\r\nexpires: Tue, 07 Apr 2026 04:02:48 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9-up-gc229\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1405,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JSON text data","md5":"370cf730b502a8dfd315e3a4dafc9383","sha1":"ded81553112766670aef21f82294f7f24f3c7861","sha256":"3eb47633b51c578362ade6672acdcaafaff5bced1c74435291da7fe97a05611e","sha512":"e8cfad44cdcd902fbe8ce3fb06d4f3876f15821616fc2715cfd5be4b881378a140814fcdb0e580402651f62527a76a32dc524305af782b6a8b43fcc579fd3f82","ssdeep":"","tlshash":"962111a60c4858674985bec7a11bae07383c9266ee814eb4dbd49c3c10563d5131b64a","first_seen":"2026-04-07T02:03:24.476195Z","last_seen":"2026-04-07T02:03:24.476195Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/agent_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:49.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/agent_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://backupcash.pro/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Tue, 07 Apr 2026 02:02:49 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 3760\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"69b1726e-eb0\"\r\nexpires: Sun, 19 Apr 2026 23:59:53 GMT\r\nlast-modified: Wed, 11 Mar 2026 13:47:26 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-03-20T23:59:53+00:00\r\nx-node: m9-up-gc91\r\ncontent-range: bytes 0-3759/3760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3760,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"8e9a165c4cb185ffd0b2658fa088e43b","sha1":"195873e5e8bbb2f5ecc32d95f90d6fb75817a649","sha256":"ff81aad05612f90cf97c238f219765884e5cbf49351d8dc96a4a063c598c3f43","sha512":"6ef9fac16ac2835ecb95ab077270293a95a3597fd28fb053b32cfeb6b0a72b52c0ee51b0504a463ac9db1d8a3b2c6c41f113012d6364d16feb8e01821a3221ff","ssdeep":"","tlshash":"c771295c69348528f80b31b89f4b765ac1512c19a8f2ddd4a62818e7377b36a678820e","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-06-27T15:41:10.985059Z","times_seen":16451,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/rocket.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/rocket.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 9382\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:43 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oun3Gc03IA3tPTdQTqjIJeMR3%2Bs17dWxb%2FZqGnCQ%2BFwwmPmgp%2F%2FxOoeFsWNbHyVIArBAB0cazOsORxB5BhnVwFU%2FzgD89KNskw5QKURt%2Fug5tVRnmW3eldx193FCGYp91Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc3c5b7131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9382,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 190 x 190, 8-bit colormap, non-interlaced","md5":"707a79c292684e9b5f923454698ba2ba","sha1":"891cb10727d95009f8a0ae716e52299aad057ede","sha256":"a03285eeb5d6f97835a4fe1674db232f80f3ab6d01c2cb61bd387a7b0a7a2472","sha512":"38c84ebb9e67c8c838a05e108c75c174587ef8ff80433c3e1af3a807438734c9e88cb65153ce5d08f6252e1b99ffb9461169ae9c13a60be34b016f5c71835e94","ssdeep":"192:8ooL+JyS/T49F93GH2+7ilWQ7bRQVP/4KHiC3Nd+yK7lre4:loL1SUT93Tsal7bRQF4KHNrHK7lS4","tlshash":"8912bfea80d9f4e5c2302af71450a727529c90c035b19e4be2ab5615783b2be14e76ac","first_seen":"2024-12-03T16:26:22.379427Z","last_seen":"2026-06-27T08:05:10.892366Z","times_seen":518,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/icon.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/icon.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 2379\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BxNPkOcQmh%2FgRgfR5Wai%2BLmrSYrwY7UWGlXH1CA8NOs5KRIkqmDfElmmBDiMbFju817q%2BWYdQ6PMoXPez150Om2jDwt9%2B%2FPXlqG3ZnUH1z8Pj865oa14AVqi8x0BMZq78w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc4c617131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2379,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 49, 8-bit/color RGBA, non-interlaced","md5":"e6bd6ddfaa17f736ecd7f570827b3486","sha1":"040e975eb4c8c979415663613b6f4562a4c475fa","sha256":"8197b15b5d84ebad1c40f807e5f2cd8520076fab2df968ef922e556cb00bb8a6","sha512":"3124b9297311d678a9a0c485668a794bdc5820fb9c5c152ad9b86466dbc39162452238ddbe705dca8c2b3129510c5e811eee7b453cef63ba192450d9ab4ee89c","ssdeep":"","tlshash":"12411b1e5fbb8f2e6c60839f83fe93cf11b7494c9888bb00403593e19208d597a54a8b","first_seen":"2025-07-04T20:25:19.257103Z","last_seen":"2026-06-25T13:33:37.788601Z","times_seen":375,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/Web3-removebg-preview.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/Web3-removebg-preview.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 151418\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:43 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vNpA7kTbm6DLeKjaTsqCK5osHLHvY8ktkZ9m5Ez1i2l5KoItkSGjadymv3hjtaEHFCjLb9ROvSc1glLG5sred2LytOIlXdKtiIQ7yHYmiOok5qLz0x6T7tZ6Ik%2FgoBpejA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc4c627131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":151418,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 601 x 415, 8-bit/color RGBA, non-interlaced","md5":"c4d37867f4b8f86b8777d31c3c0d11ca","sha1":"3360e480a4122baba0da3a59fe3fbe8a6e024199","sha256":"eca74dc4682cc245b7f85669d0002439057363f97f94553f99b7979d67826462","sha512":"d520a2ddec4dd5d6b16281e25724bca0633e1f198ea9ae3d705da9e86d2ce282714e92db3663bf70f4d2a9ba66ecc69e2a0fa6e64f5765b397d107ee01574f8b","ssdeep":"3072:FovnvUY3XwR+gRxAnv/RwxfJd802nTBXShIdiT6GpmM8KQaetNfTwMtuPv3p6:evdH8BzAv/RUfX8xTB4IdC7pmM8KQaAn","tlshash":"b0e31200f2c4c963ccea26506ca6cd5b60e77794c6b6afd59989337664cef6d9030e8c","first_seen":"2025-07-04T20:25:19.276615Z","last_seen":"2026-06-26T15:13:43.057095Z","times_seen":370,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/brands/item-3.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/brands/item-3.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 2987\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8eyFzqnuNzi63Sg2UKANfA4A2EeqiFPGpikr9YefCiE37Hchh1OyXszZnW3rH7tBzRM%2BaFpbvmgIqgVhhXGzIgl4iyE0r78FqxN7uaAfx%2Fe97skXK8dLa7DLjWf393n52w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc6c6c7131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2987,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 188 x 36, 8-bit/color RGBA, non-interlaced","md5":"2c831ef2783a43a4a4c00276aafe6ad4","sha1":"2d1b9aa8ce2a99041e5a9c57ad80b75f7b25b776","sha256":"3bbb499d32174a425e86e1eb6dcc5f39240e6c33c61692b3235a048d94b7a846","sha512":"8c54bc545566ef9a49ef8f76e9f05967e2350953a4d16e0b31d0411c87f706f095b0210966636c16907a310a72e9651afc465abfa8a09ddd660965647286c655","ssdeep":"","tlshash":"29515dea2308831b14ec44d1ccbcdfc76e1f254606adf0736f11902611c17e45bd11ab","first_seen":"2024-12-03T16:26:22.417275Z","last_seen":"2026-06-27T06:29:49.210215Z","times_seen":447,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/brands/item-13.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/brands/item-13.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 3283\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GaXGYC71DkfsrNJN0624s1VqwUx%2BR38sRhUda1Ts0fVfZ64Lqb2aCrHCrIrKiBNMIf8VUODlO2%2FwC4wdcCseYmBogWQqDuRjR5n0OR1wBVgBCJllbPu%2FpDVxj2Ine5NqcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc6c777131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3283,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced","md5":"a5b7a3596a5a9bf9a0f6d98434f5872b","sha1":"952a2cfde97a073c15f5f98a0708c06cdf6869a4","sha256":"011b438c658d3c1bb9f01f6e6dd244bd40e4409b0266979efe771c1a92dd94f8","sha512":"f4a271ccc6f788e8afd6a8b1031cd941467084929a47ec2243a10e584fb4abdc5322cc76999548ad3bc3c2b43f09fdbcc68653fc4bcba3ef234cff25d25e91e5","ssdeep":"","tlshash":"6d617dbec551f1beb0eded62376913280d73c9cda2084133e5f4d4dc321b0488668a4c","first_seen":"2024-12-03T16:26:22.427381Z","last_seen":"2026-06-27T08:05:10.894109Z","times_seen":477,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://backupcash.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 02 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 409015\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-27T21:16:05.254768Z","times_seen":220389,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":8,"receive":6,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@tabler/icons@latest/icons-sprite.svg","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@tabler/icons@latest/icons-sprite.svg HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=30, s-maxage=30\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/plain; charset=utf-8\r\netag: W/\"44-1xb2HfJAJYxfzJR06IZ4HVchJpU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\nx-served-by: cache-fra-etou8220101-FRA, cache-hel1410029-HEL\r\nx-cache: MISS, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 66\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T21:17:42.603001Z","times_seen":16770038,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":13,"send":0,"wait":51,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/build/assets/app-B_l4pjL9.css","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /build/assets/app-B_l4pjL9.css HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: text/css\r\ncontent-length: 3849\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JMKl%2FkPTzbMQf90j6UPmlLYY4r5nTIdWYTz4RyhL2xYuXSmiWIwpo3E0VQ9zmSSlHwUzyph92ucmIv%2BwMgecncIj3D9YhB7zy%2FFeDNZMUbshtRlSPDM79yzKOZ2sibFPBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9e8573bc3c597131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13173,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13172)","md5":"ff283908c35a664e15b664ff19f87541","sha1":"d16d35f95b4ef495a80d69efbe760108dec892ba","sha256":"34df391b0decd1e5a1646951402fd03e1577a9b70c2adafa038b20c4252cb340","sha512":"3dd4ec1219da0e9a4f1af6a2b773ca9e07e69998cac945deffd034f8f71d455c1a611643cef5f18d2c6b769facf8a6171a2e275781e798341da521aabf39d35b","ssdeep":"192:fmUJbiKnehJTJdKSme+jeH1ZpbwAr3zL4vIfb6913ZvOvY:+UbehJFdKW+SVZpbzr3zHfOZmvY","tlshash":"974210a85300282753130f3647758bb4ed74488247d3ce6e91c0ad98c6fbcb9136f6b9","first_seen":"2024-10-25T06:28:56.946596Z","last_seen":"2026-06-25T14:59:57.117907Z","times_seen":157,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/globe-2.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/globe-2.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 21409\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:43 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O33BaLiFpU%2F8IDK5ZaRsl90DsreoOmFxicyfp4vo3gMwX%2BQ347Hl62aR8JSWXuiJfYZ5vb9k35Eg4mCnvDvacceTnStrPEVWbDILMCn9E4U%2F0TDAmWdsh0SfvYwzTq8ABA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc4c637131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":21409,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 416 x 305, 8-bit colormap, non-interlaced","md5":"721447068b433fed58142efebf0c9afb","sha1":"8156058ad68dc6d51daf693217acde940e2b84a3","sha256":"3cc978e1872e4a037f316957b211f4c1bc0cef7c4eed8ebbc83507c89e96c73d","sha512":"d8290048f067da34736c52bc01beba11f2e308d5755b2516941ec258bb5618946db6fb06dad8e37ffe237ea6befb351e9b4cc687d63041e4db9f1dd25b15d714","ssdeep":"384:wwRmTlVXX6AEvElN1HHfdIB8H380WxxLnrCBRsb9km0+J12mMx4lQ4Bh5xLajSDO:wFTlVIvE31H1f380QFyRS9kD+3PM2lQZ","tlshash":"15a2f1e14dee2299812d72f24f98711dbcdcf7862a432f45d79d21b62601a3234ac60a","first_seen":"2025-07-04T20:25:19.265982Z","last_seen":"2026-06-25T13:33:37.792744Z","times_seen":402,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/get-started-recovery-phrase.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/get-started-recovery-phrase.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 1468425\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S2ebNLy4o14auq8EBjjkar9qApOZCMZC10YS2E78cKAMxiP%2F8iG8FunOv8PQmhezsLI1QOLOzAcmus9C2gfHVFgBCQhVleLTy4O0kKLG9ekSk5I9bzxxoVfZ9ciuoTMcuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc5c6a7131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1468425,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1432 x 806, 8-bit/color RGB, non-interlaced","md5":"09af3d784a23d6fcf2c6b87b8e308f95","sha1":"39ddd5e5addbacebd5a809671adc24546f55f8d7","sha256":"1a7d347aa2070dc1e30a6f81ee47f27ceecf1c30ea517f5b01781a584bc2ba63","sha512":"20ecbf0e65a19f32cdc3d14a77cc99aa882545be091b1375dff205a2a86672df94e28a3a07942a6b4ee36d25c6d869b99a83d113a052373385f4be595468a2e1","ssdeep":"24576:Vzd/tfLcjQQJRhNsHXXPy6sEFRSZUkyZFUJE+Qx:9xtfLcjQQzsHXX667FRS6noJEx","tlshash":"d525339a7d06d9e7f742c3a47f1a6e0e20c7d61f0b31cabe4890214d13ae67866797d0","first_seen":"2025-08-04T07:01:28.337589Z","last_seen":"2026-06-25T09:08:33.819353Z","times_seen":292,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":252,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/brands/item-1.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/brands/item-1.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 2590\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xrggOxNMv5pUwJ67B6W0BHas9zqHz1eiBOeYClTOj0Oo52bBcVmIVY%2BuO4OXVXaIh6WYp3o%2B0rTWfcT%2BQuaAlJs5kKUfiGnkQcqQ1JUUy07IOnt9f0m2jFlSY9tqwtx%2FCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc6c6b7131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2590,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 194 x 60, 8-bit/color RGBA, non-interlaced","md5":"58a7ee87a92c6a6b651d43fe01c33b55","sha1":"439da7f0d16c3c730986ed71974a334822b214d8","sha256":"1a14de2eef17d489690cd8394300c718e616b61ebf46f1ece49b45ca376620df","sha512":"fcfe4ca60137cb158fc5f5105d917b1bb3e0bc69b2a98523b083eac5f7e2a4a4840b875a704ec79ad1e9cd1a2d5d2f8165cdc21ad217c3706b2983756e792adb","ssdeep":"","tlshash":"ea511aea1138127ca54d074eade1319ff526b475893e5db0fec3a2fe50da503c2a6622","first_seen":"2024-12-03T16:26:22.413967Z","last_seen":"2026-06-27T08:05:10.878928Z","times_seen":483,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backupcash.pro/images/brands/item-11.png","fqdn":"backupcash.pro","domain":"backupcash.pro","tld":"pro"},"ip":{"addr":"104.21.90.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backupcash.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 18:14:54 GMT","end":"Mon, 29 Jun 2026 19:13:35 GMT"},"fingerprint":{"sha1":"A4:BD:31:BC:CB:70:8E:71:BC:4B:65:35:C6:7E:E4:19:17:46:F4:10","sha256":"88:16:34:67:B6:E1:90:90:77:C6:7F:BA:05:76:D9:0E:22:27:27:47:D6:A8:E0:66:04:10:F9:E4:BC:5E:2C:84"}}},"request":{"raw":"GET /images/brands/item-11.png HTTP/1.1\r\nHost: backupcash.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backupcash.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 02:02:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 2766\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 07 Apr 2027 02:02:47 GMT\r\nlast-modified: Fri, 14 Nov 2025 09:47:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OTo8uhD%2BZ4J5sLZM7Cbv6ZzM0JBYuTYoGx8LLZXJ4C77LqRVAleo8XbKJ%2B7O8C5jDUgkEjUtkqVz53JtTjW22saWXL9%2F0%2BpQdRvuGBEtc2rsfXklQxJk5NRnH34kh6dIDg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e8573bc6c757131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2766,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 181 x 32, 8-bit/color RGBA, non-interlaced","md5":"cd0159fd7a72155bb7de40309800a9b9","sha1":"39feaa84604e62e23e4fa6f90058a2b8ae10b212","sha256":"b4e2387e01d4fd21ddca87ab71f1543e34a613e489a91eb5cf085dd5649df869","sha512":"dcd63c568c0ca1a60993b253ce3362d242aa71ed4a9b94b9f521a745dc940fda207db4f35e6f327c135da074c29c1e719f8549478a928f1befbdf3e2ed8539d7","ssdeep":"","tlshash":"cb515ba0432df4baac29560127f6a0bbb41e122e0461ab276e7f481061981dc3c4ebec","first_seen":"2024-12-03T16:26:22.424234Z","last_seen":"2026-06-27T08:05:10.890092Z","times_seen":477,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"backupcash.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://backupcash.pro/","date":"2026-04-07T02:02:47.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://backupcash.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 02 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 409015\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-27T21:16:05.254768Z","times_seen":220389,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":65,"dns":0,"connect":25,"send":0,"wait":19,"receive":4,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}