{"report_id":"b176b0b3-fd95-4710-ba53-6455cd134f7c","version":6,"status":"done","tags":[],"date":"2026-06-05T02:41:21Z","url":{"schema":"http","addr":"cappcutpro.com/","fqdn":"cappcutpro.com","domain":"cappcutpro.com","tld":"com"},"ip":{"addr":"92.113.23.112","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"cappcutpro.com/","fqdn":"cappcutpro.com","domain":"cappcutpro.com","tld":"com"},"title":"cappcutpro.com","dom":{"size":68756,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20709)","md5":"a867124c517c5d1ab1c5794ec8db1f86","sha1":"4e4c629a38276279e68233b2087f5c67cc398f55","sha256":"1c10dc596d799de5fda74c701948116306a4e4657e72ca99c7411201944b00e8","sha512":"97b872607a80fdee988d87892fb34583cfeffbb7ef54c735d61104197dca34e730a0f1d5328a1d1a67c462a41c6aa21f1ee58e3f6555b37a875d139a4a584c25","ssdeep":"1536:mGcmRiBmgT0cTrnbO27kX5ypDz1nT8tZobXemlUVuXwam+AELCs/:mGcmRiBmgT0cTrnbO27kX0MZobXemlUC","tlshash":"0b6397a197b04cf5797f833b5e44a2185527e912ca097bd5f0f3d294658cfa20ae3b0b","dom_hash":"domhash5637e7c3062fddc4a7a2ccf8b73fe8d4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cappcutpro.com/","fqdn":"cappcutpro.com","domain":"cappcutpro.com","tld":"com"},"ip":{"addr":"92.113.23.112","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-10T02:41:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-05","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"cappcutpro.com/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"cappcutpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"cappcutpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cappcutpro.com","ip":{"addr":"92.113.16.89","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"domain_registered":"2025-02-15","domain_rank":0,"first_seen":"2025-10-17T01:53:59.496119Z","last_seen":"2026-02-01T04:52:52.897048Z","alert_count":17,"request_count":8,"received_data":208007,"sent_data":3982,"comment":"","tags":null,"fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"WordPress:7.0","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cappcutpro.com/wp-content/plugins/hostinger-reach/frontend/dist/blocks/subscription-view.js?ver=1780579644","fqdn":"cappcutpro.com","domain":"cappcutpro.com","tld":"com"},"ip":{"addr":"92.113.16.89","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"31e721c0afd86b7f3c50cca662f23460","sha1":"215078af4fd48c720a6ca524d975b2ca3af0068d","sha256":"667da1c391bbfb7329c602236d14c37de0206b094aeda3bc2d96cbdb507f1e01","sha512":"a2ebfee58909388354274fffe880acaa56f3f4d8c8766630eba3dc8bcf7340eff758551f8f55e85f156f8c5c0ca0ed579a05be93f63ada536c8af1c782e24b46","ssdeep":"96:hrwZ5uNvcMwCpN5xYOG/drE3NYbvRHd8Ac3k/zVQegZFPSy9EVNuO:FwZ5EvcZCpzpWdoYbvNcU7SegZFPSy96","tlshash":"b5c1a7c8b8e2f4b503ab74f5806f144ff2359958f8488851c258d8e5bc795af8623fad","size":5795,"data":"","first_seen":"2026-04-01T00:43:42.861018Z","last_seen":"2026-07-26T03:46:21.306037Z","times_seen":4221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cappcutpro.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"cappcutpro.com","domain":"cappcutpro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"38b0ddce81f0b6512ebc1cf253fd3ce1","sha1":"b85adbbc64ada7a05ee16369c75e1e12c86d4610","sha256":"1754babdd48b6d746e2b35bd6b0fe7e890d9bf74d1b4020e8149c56055b6462f","sha512":"98db71506034a32aa34ffad0f4e6014dbf04cb9f434dab51a18b76ed1d2f82c658d3d64f6d3bbcb18ac39950b28beaac20b1c2bbc1f54e71d78556237cac6dd9","ssdeep":"","tlshash":"9a61869ae7763cdbb2f900f2697a0d47eb614435d6c8d438c9bea3141cb5893c274b46","size":3250,"data":"","first_seen":"2026-06-05T02:41:22.53264Z","last_seen":"2026-06-05T02:41:22.53264Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cappcutpro.com/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=96a846e1d7b789c39ab9","fqdn":"cappcutpro.com","domain":"cappcutpro.com","tld":"com"},"ip":{"addr":"92.113.16.89","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"be31fdf0c1b991d4ae62d43750c29004","sha1":"2741b37b0171acf8ea67d90ab0927259adf9d66d","sha256":"caf7ad56bd767d2bb8c5b78dfd3c2c4e005e7d01abca7314fbaffed99c7df69d","sha512":"6bc44dd8afdcb3d01143df983b3a5c20300b0a1e9e5cf7d24d04544b2a186d8b1d0d684164489fb0eba865c4d0247001a0e37b1af65b432f03b6e3d02999f71d","ssdeep":"","tlshash":"bc517578336075b5caff4384f224d538b365dec1440b28017d2926df26aefa181e1f6a","size":3053,"data":"","first_seen":"2026-04-07T19:24:43.304892Z","last_seen":"2026-07-26T02:55:08.526119Z","times_seen":6815,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cappcutpro.com/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","fqdn":"cappcutpro.com","domain":"cappcutpro.com","tld":"com"},"ip":{"addr":"92.113.16.89","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"introduction_type":"importedModule","is_inline":false,"md5":"f0866401d2e6bf0b38495c9f278cf96a","sha1":"78a648d27819f61c8b8678d64632d2c35ac6801f","sha256":"726ac59577c8aeeec94c61bfb7791a709e401b5d871d35c39a65cd948f6124e3","sha512":"7889b5b5b511b2d7af4752fb4d4ae4edcf96b18351224867e39c5dbff54fb6fadf3e18a40bfa35cd803d34426e95623768e64a132282f1813525a7d1844f101f","ssdeep":"768:oqEYJ8Mc56JH6u0HpQPu3iU7bwUCD2XZjVV300FKKh:YYJC0cHWujsIl39KKh","tlshash":"37031af8b2a8703183ef50b5503f040bf3366968588d8068ba65d4eb68f454a51f7fbd","size":40106,"data":"","first_seen":"2026-05-21T20:58:39.683163Z","last_seen":"2026-07-26T02:55:08.527903Z","times_seen":7454,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-05","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"cappcutpro.com/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}}],"urlquery":null}},{"url":{"schema":"https","addr":"cappcutpro.com/wp-includes/js/wp-emoji-release.min.js?ver=7.0","fqdn":"cappcutpro.com","domain":"cappcutpro.com","tld":"com"},"ip":{"addr":"92.113.16.89","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-07-26T03:55:21.581948Z","times_seen":309070,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cappcutpro.com/hostinger-reach-subscription-block-view-js-extra","fqdn":"cappcutpro.com","domain":"cappcutpro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c57a0a892836720ad9450ce8d857e686","sha1":"269159e74616f3bee476e823bae4faab6202a72a","sha256":"f9eb7832135c00e76769df9e0c79decfe6caba41ef59e62b08bc07b323aff395","sha512":"5b20fc80245db7b331997171ed8b92bb187fa7a0bd96584e68a871992487cb2a8156c794a7282840099e8d95c4325a21e0385acdc14bc0e61dc4699cb75e26a1","ssdeep":"","tlshash":"39f07d91ce655aaa154e577a1eab554e00a44f64c3113d89d9dac0800064799994b6d4","size":582,"data":"","first_seen":"2026-06-05T02:41:22.53366Z","last_seen":"2026-06-05T02:41:22.53366Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cappcutpro.com/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=96a846e1d7b789c39ab9","fqdn":"cappcutpro.com","domain":"cappcutpro.com","tld":"com"},"ip":{"addr":"92.113.16.89","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cappcutpro.com/","date":"2026-06-05T02:40:59.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cappcutpro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 02:59:09 GMT","end":"Wed, 02 Sep 2026 02:59:08 GMT"},"fingerprint":{"sha1":"81:3E:D1:C6:FB:55:A9:70:21:4F:3C:15:32:49:FC:52:C0:5C:94:86","sha256":"92:70:CF:56:23:D7:C4:5C:CE:BA:1A:54:FD:3B:13:68:BF:7C:C8:AC:36:C6:68:E6:46:CD:19:61:15:E0:E9:8B"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=96a846e1d7b789c39ab9 HTTP/1.1\r\nHost: cappcutpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cappcutpro.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Jun 2026 02:40:59 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1003\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Jun 2026 02:40:59 GMT\r\nlast-modified: Thu, 04 Jun 2026 13:27:03 GMT\r\netag: \"bed-6a217d27-d04a17b874c3bad5;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 66a5401c20a093bbe5b25986a89f415f-fra-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.491\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":3053,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (3052)","md5":"be31fdf0c1b991d4ae62d43750c29004","sha1":"2741b37b0171acf8ea67d90ab0927259adf9d66d","sha256":"caf7ad56bd767d2bb8c5b78dfd3c2c4e005e7d01abca7314fbaffed99c7df69d","sha512":"6bc44dd8afdcb3d01143df983b3a5c20300b0a1e9e5cf7d24d04544b2a186d8b1d0d684164489fb0eba865c4d0247001a0e37b1af65b432f03b6e3d02999f71d","ssdeep":"","tlshash":"bc517578336075b5caff4384f224d538b365dec1440b28017d2926df26aefa181e1f6a","first_seen":"2026-04-07T19:24:43.304892Z","last_seen":"2026-07-26T02:55:08.526119Z","times_seen":6815,"resource_available":true,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"cappcutpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"cappcutpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cappcutpro.com/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","fqdn":"cappcutpro.com","domain":"cappcutpro.com","tld":"com"},"ip":{"addr":"92.113.16.89","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cappcutpro.com/","date":"2026-06-05T02:40:59.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cappcutpro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 02:59:09 GMT","end":"Wed, 02 Sep 2026 02:59:08 GMT"},"fingerprint":{"sha1":"81:3E:D1:C6:FB:55:A9:70:21:4F:3C:15:32:49:FC:52:C0:5C:94:86","sha256":"92:70:CF:56:23:D7:C4:5C:CE:BA:1A:54:FD:3B:13:68:BF:7C:C8:AC:36:C6:68:E6:46:CD:19:61:15:E0:E9:8B"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1 HTTP/1.1\r\nHost: cappcutpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cappcutpro.com/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=96a846e1d7b789c39ab9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Jun 2026 02:41:00 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 14863\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Jun 2026 02:40:59 GMT\r\nlast-modified: Thu, 04 Jun 2026 13:27:03 GMT\r\netag: \"9caa-6a217d27-71e88b2b372211ea;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: dfd5703ef12d9b50825069b72218c06c-fra-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.214\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":40106,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (40105)","md5":"f0866401d2e6bf0b38495c9f278cf96a","sha1":"78a648d27819f61c8b8678d64632d2c35ac6801f","sha256":"726ac59577c8aeeec94c61bfb7791a709e401b5d871d35c39a65cd948f6124e3","sha512":"7889b5b5b511b2d7af4752fb4d4ae4edcf96b18351224867e39c5dbff54fb6fadf3e18a40bfa35cd803d34426e95623768e64a132282f1813525a7d1844f101f","ssdeep":"768:oqEYJ8Mc56JH6u0HpQPu3iU7bwUCD2XZjVV300FKKh:YYJC0cHWujsIl39KKh","tlshash":"37031af8b2a8703183ef50b5503f040bf3366968588d8068ba65d4eb68f454a51f7fbd","first_seen":"2026-05-21T20:58:39.683163Z","last_seen":"2026-07-26T02:55:08.527903Z","times_seen":7454,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":234,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-05","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"cappcutpro.com/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"cappcutpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"cappcutpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cappcutpro.com/wp-includes/js/wp-emoji-release.min.js?ver=7.0","fqdn":"cappcutpro.com","domain":"cappcutpro.com","tld":"com"},"ip":{"addr":"92.113.16.89","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cappcutpro.com/","date":"2026-06-05T02:41:00.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cappcutpro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 02:59:09 GMT","end":"Wed, 02 Sep 2026 02:59:08 GMT"},"fingerprint":{"sha1":"81:3E:D1:C6:FB:55:A9:70:21:4F:3C:15:32:49:FC:52:C0:5C:94:86","sha256":"92:70:CF:56:23:D7:C4:5C:CE:BA:1A:54:FD:3B:13:68:BF:7C:C8:AC:36:C6:68:E6:46:CD:19:61:15:E0:E9:8B"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.0 HTTP/1.1\r\nHost: cappcutpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cappcutpro.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Jun 2026 02:41:00 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 4891\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Jun 2026 02:41:00 GMT\r\nlast-modified: Thu, 04 Jun 2026 13:27:03 GMT\r\netag: \"58ea-6a217d27-8c0bdde8c5297bad;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: a706e8b3e614a4bcff882801bd407600-fra-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.164\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-07-26T03:55:21.581948Z","times_seen":309070,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"cappcutpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"cappcutpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cappcutpro.com/favicon.ico","fqdn":"cappcutpro.com","domain":"cappcutpro.com","tld":"com"},"ip":{"addr":"92.113.16.89","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cappcutpro.com/","date":"2026-06-05T02:41:00.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cappcutpro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 02:59:09 GMT","end":"Wed, 02 Sep 2026 02:59:08 GMT"},"fingerprint":{"sha1":"81:3E:D1:C6:FB:55:A9:70:21:4F:3C:15:32:49:FC:52:C0:5C:94:86","sha256":"92:70:CF:56:23:D7:C4:5C:CE:BA:1A:54:FD:3B:13:68:BF:7C:C8:AC:36:C6:68:E6:46:CD:19:61:15:E0:E9:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cappcutpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cappcutpro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Fri, 05 Jun 2026 02:41:00 GMT\r\ncontent-type: text/html\r\ncontent-length: 1626\r\nlast-modified: Mon, 03 Nov 2025 15:02:42 GMT\r\netag: \"119f-6908c412-8d915d62ea84ede3;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: a70b4169c5870ca8268d30b8cab1ab1b-fra-edge1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":4511,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (371)","md5":"b16e9097fc7d3af8ebfcfce7aba0a42d","sha1":"2af3c8408b8445fe81d9a7c8d7cc8e8a05bf80f5","sha256":"e7db95c97a5d45787cc3e40cbcb93b748fefc65bc14e162c746e37f979861729","sha512":"53a7a2c276fbc5159231c162eb863504448515f1a078832b81f1bffeedb1c82932810b66748fd4111d1b8fb866622a5cc63e79e497227b611c90886ba45d3f3b","ssdeep":"96:tr+ulojsBwJG8YqVcqHL/GSrrLc1VhrJuzeK:tyoasBwJG8nVjaSeVhrJgeK","tlshash":"0891f88f25f381452603c99037f9b61499554007f685eca8bdee9228cfc4b8a41e3bdc","first_seen":"2025-04-22T08:45:29.599713Z","last_seen":"2026-07-26T01:40:03.769445Z","times_seen":37623,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"cappcutpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"cappcutpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cappcutpro.com/wp-content/plugins/hostinger-reach/frontend/dist/blocks/subscription.css?ver=1780579644","fqdn":"cappcutpro.com","domain":"cappcutpro.com","tld":"com"},"ip":{"addr":"92.113.16.89","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cappcutpro.com/","date":"2026-06-05T02:40:59.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cappcutpro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 02:59:09 GMT","end":"Wed, 02 Sep 2026 02:59:08 GMT"},"fingerprint":{"sha1":"81:3E:D1:C6:FB:55:A9:70:21:4F:3C:15:32:49:FC:52:C0:5C:94:86","sha256":"92:70:CF:56:23:D7:C4:5C:CE:BA:1A:54:FD:3B:13:68:BF:7C:C8:AC:36:C6:68:E6:46:CD:19:61:15:E0:E9:8B"}}},"request":{"raw":"GET /wp-content/plugins/hostinger-reach/frontend/dist/blocks/subscription.css?ver=1780579644 HTTP/1.1\r\nHost: cappcutpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cappcutpro.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Jun 2026 02:40:59 GMT\r\ncontent-type: text/css\r\ncontent-length: 1076\r\ncache-control: public, max-age=2592000\r\nexpires: Sun, 05 Jul 2026 02:40:59 GMT\r\nlast-modified: Thu, 04 Jun 2026 13:27:24 GMT\r\netag: \"1321-6a217d3c-643f410637e794ac;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 8e1438b31a9143e7fa9cfd6c41a648b3-fra-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.487\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":4897,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2155)","md5":"5fac60d808023a5d921ec4f5a3522b48","sha1":"a080a8db4eaff734081b246e439d834fe2f030b6","sha256":"f87844badcff0d962c5d6a2cd01be4e0bb6b4b073bf318d8286c318281f27eea","sha512":"eac48c7045135c51ef0456e08ee7bc6bf59a820f8dce15b96cddaba4d6f13f4cc71c0c173cd7e91da3fd3df4afabeac8a2acbe1621af7e1b70de122906c93a96","ssdeep":"96:MUTgmMv1f0a9fECVheqS/8Mk/K6VacCtTtMcZs2q:70mscfpwNg58","tlshash":"57a1b03651387fada11b84710fd1458fa398862fd00a16f6cca5d1a0d3cafa11ddbb8b","first_seen":"2026-04-01T00:43:42.843413Z","last_seen":"2026-07-26T03:46:21.274806Z","times_seen":4004,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":507,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"cappcutpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"cappcutpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cappcutpro.com/wp-content/plugins/hostinger-reach/frontend/dist/blocks/subscription-view.js?ver=1780579644","fqdn":"cappcutpro.com","domain":"cappcutpro.com","tld":"com"},"ip":{"addr":"92.113.16.89","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cappcutpro.com/","date":"2026-06-05T02:40:59.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cappcutpro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 02:59:09 GMT","end":"Wed, 02 Sep 2026 02:59:08 GMT"},"fingerprint":{"sha1":"81:3E:D1:C6:FB:55:A9:70:21:4F:3C:15:32:49:FC:52:C0:5C:94:86","sha256":"92:70:CF:56:23:D7:C4:5C:CE:BA:1A:54:FD:3B:13:68:BF:7C:C8:AC:36:C6:68:E6:46:CD:19:61:15:E0:E9:8B"}}},"request":{"raw":"GET /wp-content/plugins/hostinger-reach/frontend/dist/blocks/subscription-view.js?ver=1780579644 HTTP/1.1\r\nHost: cappcutpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cappcutpro.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Jun 2026 02:40:59 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 2430\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Jun 2026 02:40:59 GMT\r\nlast-modified: Thu, 04 Jun 2026 13:27:24 GMT\r\netag: \"16a3-6a217d3c-574eaf57ad9b0b20;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 68e1e88c0334b68b701d048f98d416d6-fra-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.493\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":5795,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (5749)","md5":"31e721c0afd86b7f3c50cca662f23460","sha1":"215078af4fd48c720a6ca524d975b2ca3af0068d","sha256":"667da1c391bbfb7329c602236d14c37de0206b094aeda3bc2d96cbdb507f1e01","sha512":"a2ebfee58909388354274fffe880acaa56f3f4d8c8766630eba3dc8bcf7340eff758551f8f55e85f156f8c5c0ca0ed579a05be93f63ada536c8af1c782e24b46","ssdeep":"96:hrwZ5uNvcMwCpN5xYOG/drE3NYbvRHd8Ac3k/zVQegZFPSy9EVNuO:FwZ5EvcZCpzpWdoYbvNcU7SegZFPSy96","tlshash":"b5c1a7c8b8e2f4b503ab74f5806f144ff2359958f8488851c258d8e5bc795af8623fad","first_seen":"2026-04-01T00:43:42.861018Z","last_seen":"2026-07-26T03:46:21.306037Z","times_seen":4221,"resource_available":true,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"cappcutpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"cappcutpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cappcutpro.com/wp-content/themes/twentytwentyfive/assets/fonts/manrope/Manrope-VariableFont_wght.woff2","fqdn":"cappcutpro.com","domain":"cappcutpro.com","tld":"com"},"ip":{"addr":"92.113.16.89","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cappcutpro.com/","date":"2026-06-05T02:40:59.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cappcutpro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 02:59:09 GMT","end":"Wed, 02 Sep 2026 02:59:08 GMT"},"fingerprint":{"sha1":"81:3E:D1:C6:FB:55:A9:70:21:4F:3C:15:32:49:FC:52:C0:5C:94:86","sha256":"92:70:CF:56:23:D7:C4:5C:CE:BA:1A:54:FD:3B:13:68:BF:7C:C8:AC:36:C6:68:E6:46:CD:19:61:15:E0:E9:8B"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfive/assets/fonts/manrope/Manrope-VariableFont_wght.woff2 HTTP/1.1\r\nHost: cappcutpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cappcutpro.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Jun 2026 02:41:00 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 53600\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Jun 2026 02:40:59 GMT\r\nlast-modified: Thu, 04 Jun 2026 13:27:02 GMT\r\netag: \"d160-6a217d26-772ea935716f36d3;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 8f7f6f0636ecdca17e7db0eb5d97ebbc-fra-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.162\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":53600,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 53600, version 1.0","md5":"a8ebc7eb54efacfda66d0a2531058ecd","sha1":"5b56dbe3d3eabe178719988f4fee76d9d4ad7079","sha256":"ce340d48531930f3f2c8b7c47d149f82c9f4413548dd216e0f4d9af94a87c374","sha512":"bde7ef9fa476ae2bf7220afadc1285dec21f1a51718f3633a82cd4d08ac0adafd02acf01db82b3c263ab8a87e2cb18a03830f302d664f4441629ec24678bf2ac","ssdeep":"1536:GcCtX6JRTj6XLzm1OSRKt9Vo3IGC9pT/UTQ+z/y:qX6DWXPmwSRIVPGC9pTREy","tlshash":"203302d1f44038206c75e3fbddecfb9434ea81aaf53945d384a658bc0f8056addb0264","first_seen":"2023-11-30T06:19:19Z","last_seen":"2026-07-26T01:53:18.991348Z","times_seen":12200,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":212,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"cappcutpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"cappcutpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cappcutpro.com/","fqdn":"cappcutpro.com","domain":"cappcutpro.com","tld":"com"},"ip":{"addr":"92.113.16.89","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-05T02:40:58.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cappcutpro.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 02:59:09 GMT","end":"Wed, 02 Sep 2026 02:59:08 GMT"},"fingerprint":{"sha1":"81:3E:D1:C6:FB:55:A9:70:21:4F:3C:15:32:49:FC:52:C0:5C:94:86","sha256":"92:70:CF:56:23:D7:C4:5C:CE:BA:1A:54:FD:3B:13:68:BF:7C:C8:AC:36:C6:68:E6:46:CD:19:61:15:E0:E9:8B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cappcutpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Jun 2026 02:40:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.3.30\r\nlink: \u003chttps://cappcutpro.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 11 Jun 2026 13:27:51 GMT\r\netag: \"2138-1780579671;br\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 276f101a074b17e390518f3e02e633ae-fra-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.488\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"WordPress:7.0","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":68760,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (20709)","md5":"9d7e7024883643df20f6d405aff4da44","sha1":"24e52fdd4bff84fbf7045164ee3cf28caf6a9bc9","sha256":"48a62754106d57ce7e5deb73384ce7fad10594bfe390b14a05a8f73e90db6bde","sha512":"a2493d85adfbe073403109bf926cdc83f312d60a72afa692bde2e6f1fdeeda5320fab6a650b6d869d4266d12a58dd6ae37f0e08d8eb335622af05705139aa333","ssdeep":"1536:DlcmRiBmgT0cTrnbO27kX5ypDz1nT8NZMpm4wvSAIXuTVlAELCsL:DlcmRiBmgT0cTrnbO27kX00ZMpm4wvSw","tlshash":"346397a197b04cf5797f833b5e44a2185627e912ca097bd5f0f3d294658cfa206e3b0b","first_seen":"2026-06-05T02:41:22.531548Z","last_seen":"2026-06-05T02:41:22.531548Z","times_seen":1,"resource_available":false,"data":null}},"time_used":745,"timings":{"blocked":95,"dns":41,"connect":20,"send":0,"wait":555,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"cappcutpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"cappcutpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}