{"report_id":"deca5ea7-e7e0-498a-b061-f56c6ce70569","version":6,"status":"done","tags":[],"date":"2025-09-24T22:55:44Z","url":{"schema":"https","addr":"uncrcwap.cc/","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"uncrcwap.cc/","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"title":"Uniswap | Trade Crypto on DeFi’s Leading Exchange"},"submit":{"url":{"schema":"https","addr":"uncrcwap.cc/","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-29T22:55:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":8,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:55:14Z","timestamp":1758754514,"ip_dst":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.20","port":44920,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-24T22:55:14.525454+0000\",\"flow_id\":1950773991893301,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":44920,\"dest_ip\":\"104.26.12.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":915,\"bytes_toclient\":3158,\"start\":\"2025-09-24T22:55:14.518453+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:55:14Z","timestamp":1758754514,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.20","port":45216,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-24T22:55:14.528073+0000\",\"flow_id\":1990261921217833,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":45216,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3083,\"start\":\"2025-09-24T22:55:14.523561+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:55:14Z","timestamp":1758754514,"ip_dst":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.20","port":39640,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-rpc .publicnode .com)","source":"{\"timestamp\":\"2025-09-24T22:55:14.537493+0000\",\"flow_id\":533885755785070,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":39640,\"dest_ip\":\"104.20.24.117\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058806,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-rpc .publicnode .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-rpc.publicnode.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3097,\"start\":\"2025-09-24T22:55:14.524142+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:55:14Z","timestamp":1758754514,"ip_dst":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.20","port":48388,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-09-24T22:55:14.540163+0000\",\"flow_id\":978481442858476,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":48388,\"dest_ip\":\"104.26.14.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":922,\"bytes_toclient\":3168,\"start\":\"2025-09-24T22:55:14.533996+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:55:14Z","timestamp":1758754514,"ip_dst":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.20","port":39644,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-rpc .publicnode .com)","source":"{\"timestamp\":\"2025-09-24T22:55:14.606664+0000\",\"flow_id\":4655590546039,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":39644,\"dest_ip\":\"104.20.24.117\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058806,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-rpc .publicnode .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-rpc.publicnode.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":924,\"bytes_toclient\":3239,\"start\":\"2025-09-24T22:55:14.596599+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:55:14Z","timestamp":1758754514,"ip_dst":{"addr":"172.67.68.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.20","port":50956,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-09-24T22:55:14.611256+0000\",\"flow_id\":1023460487869664,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":50956,\"dest_ip\":\"172.67.68.151\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":922,\"bytes_toclient\":3167,\"start\":\"2025-09-24T22:55:14.603360+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:55:15Z","timestamp":1758754515,"ip_dst":{"addr":"18.203.203.140","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.20","port":38192,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed1 .bnbchain .org)","source":"{\"timestamp\":\"2025-09-24T22:55:15.024857+0000\",\"flow_id\":902859953705432,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":38192,\"dest_ip\":\"18.203.203.140\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058795,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed1 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed1.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":928,\"bytes_toclient\":3168,\"start\":\"2025-09-24T22:55:14.954840+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:55:15Z","timestamp":1758754515,"ip_dst":{"addr":"18.203.203.140","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.20","port":38208,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed1 .bnbchain .org)","source":"{\"timestamp\":\"2025-09-24T22:55:15.032066+0000\",\"flow_id\":1255949215113087,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":38208,\"dest_ip\":\"18.203.203.140\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058795,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed1 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed1.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":928,\"bytes_toclient\":3168,\"start\":\"2025-09-24T22:55:14.958335+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bsc-dataseed1.bnbchain.org","ip":{"addr":"18.203.203.140","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":2973508,"first_seen":"2023-08-09T23:52:32Z","last_seen":"2025-09-22T03:15:06.207298Z","alert_count":0,"request_count":2,"received_data":7443,"sent_data":1013,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"uncrcwap.cc","ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-18","domain_rank":0,"first_seen":"2025-09-22T09:54:30.520905Z","last_seen":"2025-09-22T09:54:30.520905Z","alert_count":200,"request_count":67,"received_data":6780029,"sent_data":29503,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"binance.llamarpc.com","ip":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-02-07","domain_rank":2101135,"first_seen":"2023-09-18T00:31:06Z","last_seen":"2025-09-22T02:47:44.056928Z","alert_count":0,"request_count":2,"received_data":7661,"sent_data":1001,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"app.uniswap.org","ip":{"addr":"162.159.140.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-11-26","domain_rank":119835,"first_seen":"2020-07-01T14:05:55Z","last_seen":"2025-09-22T09:54:31.009493Z","alert_count":0,"request_count":1,"received_data":387964,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2025-09-21T22:32:54.705622Z","alert_count":0,"request_count":2,"received_data":512,"sent_data":846,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-09-21T22:12:58.070161Z","alert_count":0,"request_count":1,"received_data":239256,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bsc-rpc.publicnode.com","ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":2142410,"first_seen":"2024-05-08T23:22:55Z","last_seen":"2025-09-22T03:15:06.087712Z","alert_count":0,"request_count":2,"received_data":6039,"sent_data":1005,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-09-21T22:12:58.000435Z","alert_count":0,"request_count":2,"received_data":798857,"sent_data":892,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:55:14Z","timestamp":1758754514,"ip_dst":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.20","port":44920,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-24T22:55:14.525454+0000\",\"flow_id\":1950773991893301,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":44920,\"dest_ip\":\"104.26.12.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":915,\"bytes_toclient\":3158,\"start\":\"2025-09-24T22:55:14.518453+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:55:14Z","timestamp":1758754514,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.20","port":45216,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-24T22:55:14.528073+0000\",\"flow_id\":1990261921217833,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":45216,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3083,\"start\":\"2025-09-24T22:55:14.523561+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:55:14Z","timestamp":1758754514,"ip_dst":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.20","port":39640,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-rpc .publicnode .com)","source":"{\"timestamp\":\"2025-09-24T22:55:14.537493+0000\",\"flow_id\":533885755785070,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":39640,\"dest_ip\":\"104.20.24.117\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058806,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-rpc .publicnode .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-rpc.publicnode.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3097,\"start\":\"2025-09-24T22:55:14.524142+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:55:14Z","timestamp":1758754514,"ip_dst":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.20","port":48388,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-09-24T22:55:14.540163+0000\",\"flow_id\":978481442858476,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":48388,\"dest_ip\":\"104.26.14.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":922,\"bytes_toclient\":3168,\"start\":\"2025-09-24T22:55:14.533996+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:55:14Z","timestamp":1758754514,"ip_dst":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.20","port":39644,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-rpc .publicnode .com)","source":"{\"timestamp\":\"2025-09-24T22:55:14.606664+0000\",\"flow_id\":4655590546039,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":39644,\"dest_ip\":\"104.20.24.117\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058806,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-rpc .publicnode .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-rpc.publicnode.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":924,\"bytes_toclient\":3239,\"start\":\"2025-09-24T22:55:14.596599+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:55:14Z","timestamp":1758754514,"ip_dst":{"addr":"172.67.68.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.20","port":50956,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-09-24T22:55:14.611256+0000\",\"flow_id\":1023460487869664,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":50956,\"dest_ip\":\"172.67.68.151\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":922,\"bytes_toclient\":3167,\"start\":\"2025-09-24T22:55:14.603360+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:55:15Z","timestamp":1758754515,"ip_dst":{"addr":"18.203.203.140","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.20","port":38192,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed1 .bnbchain .org)","source":"{\"timestamp\":\"2025-09-24T22:55:15.024857+0000\",\"flow_id\":902859953705432,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":38192,\"dest_ip\":\"18.203.203.140\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058795,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed1 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed1.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":928,\"bytes_toclient\":3168,\"start\":\"2025-09-24T22:55:14.954840+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:55:15Z","timestamp":1758754515,"ip_dst":{"addr":"18.203.203.140","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.20","port":38208,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed1 .bnbchain .org)","source":"{\"timestamp\":\"2025-09-24T22:55:15.032066+0000\",\"flow_id\":1255949215113087,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":38208,\"dest_ip\":\"18.203.203.140\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058795,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed1 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed1.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":928,\"bytes_toclient\":3168,\"start\":\"2025-09-24T22:55:14.958335+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","size":60819,"data":"","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-07-22T02:15:25.012458Z","times_seen":31748,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/4c9ed58e-fdaa-4d37-a8dc-867f963cab03","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec26a722169cb2cef03353fcf8dd144a","sha1":"6eec6673abcde3d29547796a38361256d9efde1c","sha256":"01861fcd47bc63bb7be76c480bad4c6cc987c8996ab0e023a4e692b68c94b05c","sha512":"c885e5d94bd96fa4a573524356e0ca7398b1489f5a39fc1120cf7f4e469950630ad3e9f48dd0392acd36da390c27a4be1e81da943d1d9ecd48890d1691e416cf","ssdeep":"6144:Ufg7z90bnvLZqnWTI9esVTMuyEvtzXNglxQP92L:VzBe6kEdOxQoL","tlshash":"bf740980b261b07247da24e10477540af339e96c744a40acf6a8d8fb7dbd589957ff38","size":357754,"data":"","first_seen":"2025-07-12T22:38:09.13306Z","last_seen":"2026-06-28T16:47:47.454007Z","times_seen":5087,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f7b978ab1d20cc3564289cab75399953","sha1":"baaa11da4e8118bf7649232384fc3094815f1182","sha256":"69ee7b9ca96c53939c40cb2bc277eea81dfcc68ba8910bad63351e69f796e28f","sha512":"3fd125e3dfe72eb1a0fbf1f632e59ec164f23d7e0463005764acef0a1882b28ecc2fd7ee220ebc8e75b8785f7ed62228c1a21281fdefaefb087918767660b781","ssdeep":"","tlshash":"81f0b41d2be532b625bf21a2d5474c8abe104523b062cc0e7c2d91c51f96e2534f5aaf","size":517,"data":"","first_seen":"2025-08-11T19:04:11.252642Z","last_seen":"2026-03-16T18:49:07.166872Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/b540f4d1-39c5-436a-99de-7c9a67aa3bf3","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfc92b89155ffb3a7bf36d8c2c079528","sha1":"5d9ee145265892305d5801db441d37216723d7a6","sha256":"bcbcae1b880d35342090bdfe105193a9169f30d7b10b1cfa5a25a7517380314b","sha512":"cf73138edfeb7ddbd562d0ef35c89fb2b9dfdd23ed8af12aa1e819e073e51f0f46d439ef9e72ee2f54ee854ba39031ad50a3fedb1b3b8e65733f834aa83e4cbb","ssdeep":"24576:detmTJ7y9d3hddbscZA63U/9CkLnOZy8EFlfgnDDOG3CJmVp8noZfGsvMgoXspR:detUEfvT9kdGz","tlshash":"5026a774f117c8614eb25a96f332eca0c1b66f87466a1254b45defb9738eb2e00d3139","size":4839048,"data":"","first_seen":"2025-09-22T09:54:42.960343Z","last_seen":"2025-10-09T22:22:34.309982Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/f3f796a2-f639-48e5-bf6d-e6478f085dff","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"05997da4a9c3d58ef33a7cf3d716af57","sha1":"3a7a7913c31aa2787a11dc6ba6fb5b5f2c525ac1","sha256":"e268ded9f58238c3885b4e0e83ddf10ea9552c488dd25538c8569ec2beff7eb9","sha512":"83413571115e6b39abe7e3b6573a81b3198125b35ae13e31d14c7cb3c81790b24a11cd81531a58922386bbf6e2d41ab6e449fc3206c8b7f20932820cdf58aefe","ssdeep":"49152:D+2KKNjyR5WP4CQjNn9GU6lCLsSPOnLUfJ8KZTcbQQqG7r8aQO/iSJNHoRO2sxSQ:RD8ew45JV","tlshash":"20f591496bf660358213f0795e6f8801b234a40b2949ed5c7e9c92f09f4953c8bf6fe9","size":3517001,"data":"","first_seen":"2025-07-12T22:38:09.134446Z","last_seen":"2026-06-18T09:20:21.342859Z","times_seen":4173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-07-22T12:23:24.32486Z","times_seen":730391,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-07-22T12:19:11.253778Z","times_seen":235569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":735973,"data":"","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-07-15T21:03:46.662531Z","times_seen":8481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"uncrcwap.cc/Basel-Grotesk-Book.woff2","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /Basel-Grotesk-Book.woff2 HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:55:12 GMT\r\netag: \"16f4c-68cc0141-120158;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 94028\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PNi%2FkdVibkBUFCPv1tIJCYcx9%2FVcAvhm1WZSVstlyGL89BVU0rHnpFRluMX4m%2FtRbTuLEVaaNq9Zg6fRcsCmJBlzmlCX7ioK8iGR\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de399956783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94028,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 94028, version 1.327","md5":"87eae89ced6d8d61ba3a12d7222b9faa","sha1":"9eb5db96a7a8556ac2927a99bfc668ebc229dcc4","sha256":"453ff5217212a09f55acd96b891db5f1f7728b4d87d363931495579cb9eaf0ab","sha512":"d578c869fcf97543fbd9d7c4bf577083e0cd48a8b5a9216b47f3ae3dfed853692e9ae7983c47ab9e5e87f790732375e3781136f513bb5e2f48f5dd16cdee677e","ssdeep":"1536:4Iwl5NQFH4ZeX3+Xb95yMaDb7CzZmVdyyC7Oa8r1GUq3AVJpbBrO/lLJRN68LZmR:4ISfQFHQeHUDAPem28mQVJpt69LJt4Aw","tlshash":"8d93126fb640933b971dbe093443156184e63d3502fab14afe52f0eb64ab7c201ef819","first_seen":"2024-02-11T18:33:29Z","last_seen":"2026-07-22T10:35:13.069916Z","times_seen":1534,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/background_connector.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /background_connector.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:55:12 GMT\r\netag: \"45c3-68cc0141-120156;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 17859\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FhDKwvWuPqq1Nyued8M7QgYUwbmJ%2BPFBuYy%2B99tIzmCeH%2BlsRixA3%2BAzMzjYguf7x2TdN5fyXca%2Ber99oyIE9CYBG9a5pGuzVJK9\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de3a3962783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":17859,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 674 x 144, 8-bit/color RGBA, non-interlaced","md5":"6585b5bc487addfaff28b3b6123184a7","sha1":"44422f7b0d55d74e9c2e91195ea746e704b78849","sha256":"98f7a427e5f80aa3a177d2d186f3dd2d5e5554958f15b76c41d85160fa903dcc","sha512":"299190447359a3cfb85ba4a18566c32c5c9d46fec5364f60a177e7f88aece6dd6c8eef56ca5dbe905584856610bbca98f2aa9c1790e3dab7e99361bbf384c5e5","ssdeep":"384:hzLHPuNWqBvCTI1G/OHX/hZsWpDYKG+rAYWGJgx56N:hzTbo4QlvrBGMA0ga","tlshash":"9182d058ec8d80f5514e72a9fbc3876cafd7b8e19d0d40ce00aa49ad2793688797d4e1","first_seen":"2024-07-25T00:40:09Z","last_seen":"2026-07-22T10:35:13.002287Z","times_seen":921,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance.llamarpc.com/","fqdn":"binance.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:14.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llamarpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 08:03:47 GMT","end":"Fri, 07 Nov 2025 09:03:27 GMT"},"fingerprint":{"sha1":"9C:C7:46:E0:04:44:8D:56:AE:49:1C:77:2E:C5:79:4E:1B:65:13:C6","sha256":"E9:C7:AB:36:D0:99:3A:66:DA:CB:32:87:CD:4F:AF:FE:68:21:18:37:F4:2D:E4:3D:27:91:EE:AF:2C:CB:6D:B7"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: binance.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://uncrcwap.cc/\r\nOrigin: https://uncrcwap.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 22:55:15 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,POST,HEAD,PUT,DELETE,PATCH\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CWJXmzfIUaMSTmYA%2FTHywjXmbODR2ALqEurR7n4WOwlzp2WQRx%2BVScuoaVa%2FkEMsKpPouEkh3aQgfj0hSCdAYqxziELpm3Sdj%2FstPyhsxyUz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9845de44ecf55694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T12:24:29.314996Z","times_seen":17449677,"resource_available":true,"data":null}},"time_used":686,"timings":{"blocked":66,"dns":2,"connect":1,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/WormholeModal-s_xX9mjw.css","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /WormholeModal-s_xX9mjw.css HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 17:16:31 GMT\r\netag: \"755-68cc0141-12014e;br\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 516\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 538714\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A9CSHMtysReDzd8qI83Qcq2A1uu%2FcF4sd2%2FNMF6%2B0p%2FsEA588Mo5JGoqOM5IuJ0GL6%2BXe79dISKaIi%2FiLlUo12iQZgIYJLxobkCI\"}]}\r\ncf-ray: 9845de105e00783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1877,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1876)","md5":"3a365fe1a8047a50788133520b2a7d25","sha1":"48ae303b4665b6fb5d085ff42ca9fa96de3a44ed","sha256":"cc15c597a470570b5b452abf62472315b31c8747ed183240c52b02f3fc507c6a","sha512":"8e30e9c687fa67f374c88b6acf8386975eecc4b324dddf32e5d1e3010c83951621dc3860dfdc820c80ae2d10194fd0aa685adc9fba4aa306190b82409969855b","ssdeep":"","tlshash":"614155d466b0b35e7e3ec81ad5bb4aec9134640ace7135ca259468321be79f30733848","first_seen":"2025-09-22T09:54:42.888652Z","last_seen":"2026-07-10T15:56:02.97709Z","times_seen":45,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/jquery-3.6.4.js","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /jquery-3.6.4.js HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"4d3bad-68cc006e-120169;br\"\r\nlast-modified: Thu, 18 Sep 2025 12:51:58 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3735109\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5eVvdEzsKed1EZr3HVG4voe%2FyJ7DTDFMfO6VvwPjqNfB3oNKFSznlJlETlnFsGZ5%2B%2FplEvawwAmXMS%2BAkUbqNQG1w8Y1aHeMAAzr\"}]}\r\ncf-ray: 9845de106e0d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5061549,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"77284249e6f0b1a55d973fa13a1fd5cc","sha1":"dd80f58186475b408052a42211a46011ed9954f6","sha256":"cb388241090101c5c28d51c11345cb98c9b26056436cb1396968b49669123dba","sha512":"f947f57d9c14049c7666959cc4cf5072bbf488a175b86163b134c7dc5adcf4cde8f02cff08f865c320d6858349bdfb9a0797d744a0e0a00f94ca86df2f29120f","ssdeep":"24576:vTFdDjGDv0sCccq06b/YWmLkwsOukzMSPbg+lsVo5/q:vTvDjGL6cl04GkwdNZnq","tlshash":"602512c16f47d0918f02588dc8ebac9ae8448c159d8f97766a4cfcca3759bb0c1d72e6","first_seen":"2025-09-22T09:54:42.920082Z","last_seen":"2025-10-09T22:22:34.280758Z","times_seen":17,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":317,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/logo-17.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /logo-17.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:55:12 GMT\r\netag: \"8440-68cc0141-12017d;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 33856\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GICl0ZvWpb4rfsSLIXxZ0qNXrSzsixVlmN3m6wuuxEZYjSqLmUAWCRLsk1FT84HpvFJaco%2FGGGOfcETALYmvFacP2bTBvVogMhlp\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de397951783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":33856,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"4961beb6befdda1e13fe9693957f6602","sha1":"8ff27533f8b95daaad597ba4f90c9461d9057d14","sha256":"488ed9e5d7ca087193df45676173c580b2fb8b9fd40ab90619f910029cc1ae28","sha512":"17de15b18457e95c1fdaa235b29ba91d3f4c92422a3fc78f188b17b79e7681229c8338ab298696d33fe8b917484a6993e2ae57ab8cd7b8c2dc8ea8021e75f2e6","ssdeep":"768:CFrRpNm8eqvBT/en9zux/i2tuWLeRVd6j/h2p1vGh:CFrZDeqJT/enEx/itNRpZG","tlshash":"1ce2f1e325f382965c1ea601c71efacbe91ad21b657c3017a565fc8f4082ddf3a1409b","first_seen":"2023-05-02T10:51:38Z","last_seen":"2026-07-21T07:36:15.793282Z","times_seen":581,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/secureproxy.php?e=/prefetch","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:15.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"POST /secureproxy.php?e=/prefetch HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://uncrcwap.cc/\r\nContent-Type: text/plain;charset=UTF-8\r\nfetched-ipaddress: 91-90-42-154\r\nContent-Length: 2668\r\nOrigin: https://uncrcwap.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: gacfxdn1x7=cq74xBiKleDy4GY\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 403 Forbidden\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncontent-length: 40\r\ndate: Wed, 24 Sep 2025 22:55:15 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t0YdcENhsaCHO14nymsyNP7hkV8izlRIsgsIF6iWYyocaHcznU7tkCItc6%2FSWWYB7kxzkXrBXoGJJ1Bp4sK95vXhGI%2F0PhxEPmZg\"}]}\r\ncf-ray: 9845de49da1f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":20,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"667890a91cf9e192cf6014685671d62f","sha1":"f9da20f35d6cff24ed280b2a69688372552c4861","sha256":"3bdc6a2dc7297a0abbe493d89e5fcb83575b7d57c2517a832c6010e84dab190f","sha512":"3d116192ac8f7e4d4011d3a62177758b12803c16d77d936b20e6c4766cca519e3f4665500e5567e170a46446d8da5d493b1f685316050b2ae18a2245220f9894","ssdeep":"","tlshash":"f17000820002003080c000e202232ab28028a03000302280800b2208002a0000200203","first_seen":"2025-08-08T12:49:51.290746Z","last_seen":"2025-10-28T18:59:57.871311Z","times_seen":637,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/93709e686c1ae13f534560d6ff9667c888a960e5.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /93709e686c1ae13f534560d6ff9667c888a960e5.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:55:06 GMT\r\netag: \"eac-68cc0141-120155;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 3756\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iRzCWfuEX2sDFW1NetNyqVI0PwwInLmz79yBeWj06dUqccEY1mxNwF%2BLGDa%2B2X6s6UFd9r79pW3Rgw3kwDjWqwgpucS77hObU3vv\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de109e16783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3756,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"1f19c59e756a4ecc807ba2d7ba0d0b96","sha1":"93709e686c1ae13f534560d6ff9667c888a960e5","sha256":"17d020f8f4e1ddd6878ceaaa2e1f14c7f9280ccb21d5160c9be353758beabcf8","sha512":"9d478ac83d75a0045420ec9b6600bce964c6dbf0e0c48be1b3e9d0b6ed9b4bdb08f426828c106636ded8fec12d53b531851603f68a4335d1318df796e17155ef","ssdeep":"","tlshash":"e5710ce743f08ba34f1bd666a5091bb824112cfd9016065fb3fecad10ac60e76eac701","first_seen":"2025-06-21T11:36:35.046099Z","last_seen":"2026-06-16T02:15:33.752071Z","times_seen":204,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/logo-23.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /logo-23.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:55:06 GMT\r\netag: \"735f-68cc0141-120183;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 29535\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qHukcTSu0ySzSXejkvjpkkiSVI1oNbuyUnxhcKeFWyWGJs0KTYcd4jQSpYayMnaxANyat6uA%2FxvbfCVMBoCqUN4j%2FtOdAQisORiJ\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de109e13783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"77e75417ed8c7c5aca51a5369f42f866","sha1":"013879d818ab50e5f6852bf6b1244e9b79b2966b","sha256":"e26cda269d5fbdd8e1bdbd101eb709af78d00d078a014379d6f3512c1a920099","sha512":"74779e61409600f2dc93dacd5c67ed027280edb583f04a391e63e9fb953a6927b9c19999ad905f18e9860d8604f7d7ed3eddcbef96da6c55ecf98f4beba1f8b0","ssdeep":"768:r2bR+pfpsNBM5rdb8YA0GnKOMbBA+DUzax4xwl8MtTjZs4:CbROfpsNOAb9cBR4zP2htfp","tlshash":"30d2e1da87c41eb641170a7a818d2c60e1326bec896e5725fc9d380a4f83b519ad7f4b","first_seen":"2023-10-18T06:53:31Z","last_seen":"2026-07-19T16:21:50.517071Z","times_seen":708,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-24T22:55:05.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 18 Sep 2025 13:10:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ItjH2%2FJZNh%2FGNTSMSPkm2kfHEEx5fARxkSVALap8dRVNh7cYcNZ6CngJt8KNIRgxH8KaXMpZoHvKCv2Z819qvMfe%2BGvO3DoENw6\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9845de0e3a0adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":538830,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14647)","md5":"e913aba615ca9ee56b7e1b36a268b5ef","sha1":"35015b305c5543ca311c271adf0df179126aae60","sha256":"6219feebb4f8ebadb92fcc1d0be5b0c99dba2a4cb81e875f7101fc0e03c5d60d","sha512":"6545e0cfe7b971d1f739541d64958e76194975e8bb940ec5b4fc005e13db7dc171ead3a4fbe794b579155d6f6d77face56237339efde5d9bb0a38dd54f665afe","ssdeep":"12288:uhyVNq3viucW4ktpPtvLq42KEtR7U/Mk2tbtu:J1C","tlshash":"23b4c631f220330a5363c38b71e28b4ed232a549e727a57cff94502e97dd8761d62ad9","first_seen":"2025-09-22T09:54:42.935486Z","last_seen":"2025-10-09T22:22:34.235458Z","times_seen":13,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":23,"dns":5,"connect":1,"send":0,"wait":139,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/UniswapX-bg.svg","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /UniswapX-bg.svg HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 17:16:31 GMT\r\netag: \"439-68cc0141-12014b;br\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 602\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 538714\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2RUsQu31Pf7mxNEc6qR4r5TRqHiT7jBFbJM3Cdgf4qfqtcQTOnI2XbhvX2r%2FbM3Mg65G0Tpyn7HH%2FNdGe2i0Tj3qcDX%2FetkKtSv0\"}]}\r\ncf-ray: 9845de109e19783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1081,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f267c66237e845d0dee4ebc68b7e03e3","sha1":"fa667e181a2ab25bb6fcc03de60ff3f6db7994bc","sha256":"4ff00279c084c1d8c2f99723abaf1a63d934e14edcf64b6bb810e1e4078a9e30","sha512":"e10e9800daa5c9f9c1b5fce86bb47f2e305798de3117eaf6ed0381db5f59d7eae480dbff7a86da433f1da831fbcda5bd16f58329633493e39a49fd308225f989","ssdeep":"","tlshash":"741142e873f169489cd48712fba5a4a22113a0f7b0004b1dc00e16291326595ac26ed4","first_seen":"2025-09-15T12:31:14.581463Z","last_seen":"2026-07-19T16:21:50.541488Z","times_seen":148,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/12a02c5318e135d26212cb8405b87189d96c9bf4.svg","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /12a02c5318e135d26212cb8405b87189d96c9bf4.svg HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Sep 2025 09:53:44 GMT\r\netag: \"441-68cc0141-120151;br\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 432\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 219681\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6JgjDTDkF0S4IYg4WHaFF3GQAhnUz1IiFA%2Fvmi9vd9PauJfZhcCri5EBKr8rncOZID0QWnictVBlOZRxYhLv6DPp0CbmraKx4rgk\"}]}\r\ncf-ray: 9845de10ae20783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1089,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ecf225ae5ef1d05e789f68adf4da8724","sha1":"12a02c5318e135d26212cb8405b87189d96c9bf4","sha256":"71658caee30cb204838ee342104d9cc4008bdc40598fad0e4b6b894f9a18c00d","sha512":"c0686014d519899e6f9618ea612ccdabb2de4a8281050f78bfab5d5fc53d83e92cd337bcbfde9a97156a12a5f0cf8eeba5e34e1e92599577f510b913cf9124db","ssdeep":"","tlshash":"eb11c0f388d0434cea8c77796f5cdc8ee626247d1953a20155a10b08f49813e6ec57f7","first_seen":"2025-09-22T09:54:42.905745Z","last_seen":"2026-04-21T03:04:25.55909Z","times_seen":38,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/logo-8.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /logo-8.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 17:16:37 GMT\r\netag: \"41b5-68cc0141-120174;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 16821\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 538715\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NBhhEM9ZasT2xh7mNJ3yDoGXeO6rmDKkyh41b35KcPVZs80%2B3HUCloCKRD3RbWx1z3kQjG7p3XHBDAxs0ZH4gqo%2BQ250mmIKzAAV\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de395942783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":16821,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"86121870cff072b86d09b08f6ff027d7","sha1":"3a06d97c7e8e1c0569acbc9e34f5e7d12d6c8d91","sha256":"8fc8782e9c8b6a814213dce8176c9c5fddb080bdf8288f824f9e579051890fb1","sha512":"0707522c3180480a3811ff89f6f4dfc1122f98d38f166ec499503cebfe79938ce5f2c38a16c8cddf1f0cacf09e5cf8ec170cbb525edee47edcbf7c821af23a0f","ssdeep":"384:bXmcpBuy8+en6b04md+DDPM8Nl7KNWeV6PabJn/nNK:bBpBu9+ey0/dSDuos6ybZ/NK","tlshash":"8772d0a642c853043419ff7e8fbe2f940244904e335ee69cd7ee85ce386a8a5d044f9b","first_seen":"2023-07-08T21:25:30Z","last_seen":"2026-07-19T15:20:48.607188Z","times_seen":376,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance.llamarpc.com/","fqdn":"binance.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:15.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llamarpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 08:03:47 GMT","end":"Fri, 07 Nov 2025 09:03:27 GMT"},"fingerprint":{"sha1":"9C:C7:46:E0:04:44:8D:56:AE:49:1C:77:2E:C5:79:4E:1B:65:13:C6","sha256":"E9:C7:AB:36:D0:99:3A:66:DA:CB:32:87:CD:4F:AF:FE:68:21:18:37:F4:2D:E4:3D:27:91:EE:AF:2C:CB:6D:B7"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: binance.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://uncrcwap.cc/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://uncrcwap.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:55:15 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nx-cache: false\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xAZ5izfl6QDJHpcHDGiQVUg%2Bgt9KvRN%2FkgmeRi4Llw%2BzxvIypWoLCxlQSmzT%2BNZmiuzQmpjQUhV%2Fr2cqm6TClLqhNqD%2FovPNl3LQuYHi7lVk\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9845de47be5e5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6374,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fa3dbe9e7a67f351ee2d52c99850bf9c","sha1":"294cd26f4c0198841057707ed0b44b3cf616e5a8","sha256":"efe3b5e2a041edfb73e010d9c7b8321b7c075c78f0b5d972fe7783da8844f87b","sha512":"d46f4edc8d511404ba6bb32a1a375a1a1c66b24a11f072dbe332243df7b1489af0816a8506fb648a97dd28b0c5ceac714915bc46221ef78d12e9a8a5f1d51d45","ssdeep":"24:YUtXa257vaoWH3eGZsthXvUzZ5+hdex1qx1xxNU6xvQaNBtXX60jv:YKam3QytxvU15+doY1jNNTt9jv","tlshash":"52d108f098c98e50f19baa81b798bc9400213caf7fdf8f40415cf8b6a0f54a176a448f","first_seen":"2025-04-07T11:53:19.749574Z","last_seen":"2026-06-18T09:20:21.245055Z","times_seen":5257,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/BuyForm-CM0wS0LQ.css","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /BuyForm-CM0wS0LQ.css HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 17:16:31 GMT\r\netag: \"1398-68cc0141-12015c;br\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 968\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 538714\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=grq5rNNKuhE0y0GY6LpkXVvFFCIqknKbJJ7YBZ9bZs98MGR41LnGeCSlU%2BxjbNyEK4aInY3G6aW06j9ko5zte3BFFerQkOqO6UG7\"}]}\r\ncf-ray: 9845de106e0b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5016,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5015)","md5":"d480590c7fbdc637614b030f2b62e77c","sha1":"89d2b211268fe5a28b83e70df93ff67d5c6bb93f","sha256":"2c7146414758c4a317a59cf3fa093103f7adbf15f49150d319d66f2978b87eb6","sha512":"56b010e809580521d8f4078426642cbae62551d549f96ff2b38b69c98c7bb8e183d7bc695d45e72f3bd03bd2734b7b4ee0e74e14eb2174fe59e03eeb087f2fda","ssdeep":"96:iDJGAzP+mZ7/+ttE9j1ef3JFCJFiJFzJFD0PC/6h8sh/wrTJYs+5lxW/BDtQZpFs:u1h/+tS4ZF8FcFtFMc6h8+KZBCfO","tlshash":"dea159e83ab1b76d7e3ed91ad25b0aa88135304fdf7174d66a8018311ad7af70633818","first_seen":"2025-09-15T12:31:14.555768Z","last_seen":"2026-07-10T15:56:03.076384Z","times_seen":51,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/wrapped_bitcoin_wbtc.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /wrapped_bitcoin_wbtc.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 17:16:31 GMT\r\netag: \"f511-68cc0141-12014f;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 62737\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 538714\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bYAwKZKYmTUKpNByBRND8llx93JX6Qzyw8q9rbHjYQ59ap3itmXgtHLHC7vP2HXuwQ9el8hWgZG%2ByDBOfNn6LzwbLmFz9HwQIJTo\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de109e12783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":62737,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"acea503241f6c55548e458e71dbab192","sha1":"459756e39556b2efe47ab348dad5925b7e47a073","sha256":"5b8ec23d8f953f38e943b4412e4d288aa31336a2ad8220ec157febee815a1111","sha512":"eab2dcf099712a0851076700ae664a927fb169004fe4bf5744217aa1408f536761258b86e9f5e9cfffebf5a7b7fdfeb78cb43153165e7d5a1563a6887e000a39","ssdeep":"1536:rrzxuV2hOVIJy+VzScP1ZNh8Vf7cqkq86Iv+eI3y2H45:rQ4hEIy+Vztfhwn86Iv+NN45","tlshash":"125302729fc1d4f111ce1b809f9498fc0d997596c5ae1be2c2fba9a6e00a7fb40158b4","first_seen":"2025-04-06T10:35:33.746692Z","last_seen":"2026-07-21T06:12:37.716677Z","times_seen":159,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/noise-color.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /noise-color.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Sep 2025 19:03:54 GMT\r\netag: \"ad94-68cc0141-120185;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 44436\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 445878\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3S43zl%2FLiXTYipGlemmU83g%2BP%2FKRQvpDFLpJs7SabLMoAu16bP5AMhqIt%2BcYEfmttJINEALwOxbZHkQULvhrNsMAOQB0ILbvayBw\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de392938783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44436,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 123 x 122, 8-bit/color RGB, non-interlaced","md5":"3649826259be4160b55524eeebce11f4","sha1":"c8bc913d4d480afa6860ba05dd309718727bb0de","sha256":"6003b3233b7ccdb7fd5c479ca8edf17003f8b4abf440c231c3d11eb1b8cbbb5b","sha512":"e94f6a0e24d834a6e81cd2bb2202085a06a105bda7bf1f8e1c7e1eec37639d133c7ac9cf3f5b2178b643d30be99aee19f053ea40b2ae65aa011d297077e10886","ssdeep":"768:bD1uZnqcb5hlZZJ/aeFTmmVK08y0uMuWCp8f09VBLf3s2hFxcnMmPi2IUoBoPAnu:bQlTnZvjVKSLPWCp8fUBLf3thFxMM/Vc","tlshash":"9013f1bd114d87c3b72bd13a7f77655448f982c323ca5b4717864656f8a012009ae7bb","first_seen":"2024-02-18T16:35:41Z","last_seen":"2026-07-19T16:21:50.485714Z","times_seen":639,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/uniswap-wallet-icon-m7sQ9t4N.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /uniswap-wallet-icon-m7sQ9t4N.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 17:16:31 GMT\r\netag: \"2da3-68cc0141-120149;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 11683\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 538714\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tNkibxlKn6pXEPA%2FMUpGZSB11cJYheDnXj2O8aZQvWcmHqJblBbxfSUvEgl%2FAwiz0MTiUrzQUpYn6i1Hb0BmIJ1LQ2OUkgB4YawB\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de109e1d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":11683,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"71f99a4ff9273db61ae5a78afaf0c184","sha1":"9bc8b4a2a89608d27c5ab5fa629209bc10239e78","sha256":"a6647237e0386ee3c56b7f26427ff79be9a8d0dfa627718ce7f21c569ce9bbe9","sha512":"b889b3217a1378ba8ac7ee4408bb77cdb7005d169c7129d56ae6c002f177cc0306b68b9a3aa546c62fd54da217c85551ef1df88fa5f54d9acf319517fed5ca98","ssdeep":"192:lFaHkOBWybJr+AlC3/S3ZVB10MnBdSI0yH61B8FHHC7gYHxE1N1bvqbcYAwcy1E:0kO8ybJrJ6/Sp+SBdGIEB8FCcYOLqbcT","tlshash":"7532b08f1b519cda5f09dd52ac91050fae1c61862dc8f8d3d859885e1d25dcb00e3af8","first_seen":"2023-06-17T03:33:29Z","last_seen":"2026-07-22T10:35:13.07602Z","times_seen":1457,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/logo-9.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /logo-9.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Sep 2025 09:53:50 GMT\r\netag: \"243c-68cc0141-120175;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 9276\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 219682\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cJ1CU8CV3vo30u9gWTIYu%2BrsRFV1XMhAlKMjyJxpspxwy3UYS5x1X3xyZt8pAanqrx0cUbK7sIodvFKVs4a1%2BZ3xl8lNfrZ5D3Gq\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de395945783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9276,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 181 x 181, 8-bit/color RGBA, non-interlaced","md5":"bb400a72232101f48b1a16e52ab18fda","sha1":"25ee99942134fca6167e3beefcd377443ce1273e","sha256":"6d14601d0b1109046e366592b8c0f256ffb075f69180b65dddd97ae665d49f9e","sha512":"86479d8136144517d960978e01640b6f935b1056297846f5e2e136e5f37b671054aa067e9fce793db0f7eebb8b7fd420f3ec5be89dca41baa6e695ead9e8e500","ssdeep":"192:Yj9GF6d6C44reHkPWsuT3skx6kY+ur1GtuoPVS3OgmgHCNEZsK:Yjwsd6n4qwWsxw6C2AMoMOgmgiNI","tlshash":"de12af851657c48d77302a070e062be6337c02264b5bd368badb85a7bd43a25e63df47","first_seen":"2023-05-01T22:39:41Z","last_seen":"2026-07-21T10:31:56.785455Z","times_seen":1518,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/Basel-Grotesk-Medium.woff2","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /Basel-Grotesk-Medium.woff2 HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:55:13 GMT\r\netag: \"171bc-68cc0141-12015a;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 94652\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QzqkEs0lQyPh5339mahmfSS9EhpBc4%2F%2BDO5DNt1Zw7Nc9L9ASQQYPRYpSXtA46VcL4NNNjSwCvXTVsHl4iF%2Br0H2hmM%2FXWlF1Pca\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de39b958783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":94652,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 94652, version 1.327","md5":"978f9a82b98233f132507526fce0361a","sha1":"d1c00da9e0b0a0eefa04d6137e07158922567725","sha256":"f7e0fd66d9a817915317bbc685cd42d14a7c5570a505fdc2d1c62d511dfec9e3","sha512":"16ebf10613d0d679d1129ad4b3142cd7d9fbd84ed62278b396344bae73935f2e875954380ae33b981fa55ac4139dd8f34501b2d17b73ef419cd4e1a325582151","ssdeep":"1536:4d/SpdBjYGRVrmEYrDeAaQO8wOEP7gA/EXN/JUIfMaJqzsi8O3KFshK53z5Xn:4khYaVyl+NywDPNM0IZJBi8Oy1","tlshash":"e393129c3525bfabf23914365a90e36036110612fa9457ec72af34090b2fd778e607e9","first_seen":"2024-02-11T18:33:29Z","last_seen":"2026-07-22T10:35:13.027734Z","times_seen":1399,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/secureproxy.php?e=ping_proxy","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:14.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /secureproxy.php?e=ping_proxy HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://uncrcwap.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncontent-length: 24\r\ndate: Wed, 24 Sep 2025 22:55:14 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7i%2F%2FmxYhli319fLvU86c8vrRDgkoR1jYpW9NCef1zYf2XjmmJ08GgYJpz7imxwWVAxvEO%2BkbhG3cG8PEenL7BZ8Nbz7HsD9wQ5qx\"}]}\r\ncf-ray: 9845de43b9d4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-07-22T00:42:11.321095Z","times_seen":8945,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/SwapDetails-DbfZkw4o.css","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /SwapDetails-DbfZkw4o.css HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 17:16:31 GMT\r\netag: \"504-68cc0141-12018b;br\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 386\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 538714\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FxMZ2bs1Vw5O8ChslaKnHOZ4EKcIfB7L0PleO%2FUBitggoty%2FbVcjIzaW1NrrDgSz2q6dHPLKz622WnkBPZryZRiUtYn0rEJDRU2L\"}]}\r\ncf-ray: 9845de106e07783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1284,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1283)","md5":"056b0ef1acc09cc99a145ea9844cd397","sha1":"f54b09536a08609bc0c559b77a1e944cfdd50744","sha256":"b513a7b29ac4927f4da9fff5d513fdbf8c8611d62929a923f4bd4a3c3ec6398e","sha512":"708eaf34bbef9da74e63767023b07779be77187861d602f45a016adc597303b2ce7a6ddbbe0c21b0ee2ff4e5924a8b7cd64cb20205a96e1b728f890134b97a10","ssdeep":"","tlshash":"3f214b79b2f037156e26cb162593cd8dd1b83147cf773146ba446d2000966e70f33d5a","first_seen":"2025-08-28T02:09:36.965467Z","last_seen":"2026-07-10T15:56:03.135079Z","times_seen":76,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/UniswapX.svg","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /UniswapX.svg HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 17:16:31 GMT\r\netag: \"2e5b-68cc0141-12014a;br\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 4294\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 538714\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HG0DkEdyl1YFDXpB%2Fd6lulLVEDlolG7rLyCU%2BRu8sZEWnp7An5rzdW6sfiM0tSCNelOPzgQ8QRM2lnHzBkixg6XRnndU5hLN66yn\"}]}\r\ncf-ray: 9845de109e17783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11867,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a5ab088c5cb58a222d43b67d1a502c4f","sha1":"3a1dda06eaf78c4123731101fed33226334e48b2","sha256":"f3c6aa4bbc51a93b089b2245bc3acba1df207d556d7d43393a96078fa21b8a88","sha512":"31d791c8f8863ce83b52a8b6ffde5627b6f26cc3ffdda29ef38f9a23a71a5ae3510bf29d6c75d255beaf00cc12ac268e89192de9b594f53533365fccd049a8b8","ssdeep":"192:qImWzkT1qs+UcJ+7n7yDKm5W3eC/aYzJWV78sZx0RmDxAK9YUnCvRq2jMqDAfyD4:qIpo1qs7ckD7s9C/aYgV78sZx0YDxJCy","tlshash":"1c32a9ec677753f4e586a2e15e251cf83e1950f37eb4e538c3a82d85b60a0bd8814ee1","first_seen":"2025-09-15T12:31:14.551814Z","last_seen":"2026-07-19T16:21:50.480604Z","times_seen":160,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/TradingAPI.svg","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /TradingAPI.svg HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Sep 2025 09:53:44 GMT\r\netag: \"2e6b-68cc0141-120146;br\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 4029\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 219681\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OksPduHTBphfEsOFE8pWPLDzGjBm1yFD%2F3aRLApMS18xV%2BZrDfoQ1qnwEkHH4IqkXg5kGjv4IBJ%2FFxzHx0Ywv2RRvXOr8Huxepue\"}]}\r\ncf-ray: 9845de109e1a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11883,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"21fcaf4fc215f22a5b7d1ab24942141c","sha1":"3b7233a7a48a7d8d06403ee6aff3a13e04dbda42","sha256":"67214e5303afbb3b4eed7d9be7f848418f2fc5b0b8418ae6106efae9ac78dcd9","sha512":"ca67b7cd6d4bdf9ef09ae9fa1cd77a650b8df7d7ea8d0d9201c92dbabaaf9e03cdaf624695742eca095bb79b8cb9b83c2fd67fff67edb33c229f7b3462da0e50","ssdeep":"192:4Lr6b3s9vN1yirWj4Ne+fvDiDWXG6nmjnigB2n9676q4CnzW:4yQvXJrW8Ne+uCmjid967Du","tlshash":"083275ed173410d9ce8a81dbf411a8acb157a1fa2a545f00c3ddaf1e7649c9ce8d98c3","first_seen":"2025-09-15T12:31:14.553073Z","last_seen":"2026-07-19T16:21:50.528234Z","times_seen":160,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/logo-19.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /logo-19.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 17:16:37 GMT\r\netag: \"4732-68cc0141-12017f;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 18226\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 538715\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N4PYUVBSuGtm3vl8HaE2Tgs%2FzZl76bdk9X3I%2FvBRSLHA3DeFpfAdaAMQxFkgz95Ga3A3bi9Rg5VqxB5qp18otiJjAVAR0gY7Jml%2B\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de397953783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18226,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 245 x 250, 8-bit/color RGBA, non-interlaced","md5":"545b7362a2937dc583c8a98c6165d349","sha1":"445685e512403256ecfffd4b16f2156d13cf39ae","sha256":"4f655046ceab0e1d4cf2bff7ce67dff0f88a19be78f2a5fa6ea4df974a4d9ab0","sha512":"19a34ef3c1f184f0bc088c475009c777ffdd37473d92be0fe48a2820e6fac418608681b9def65efd2af20c4e858bfe843ae8c99eac6a9cd5fc378b33479c47e4","ssdeep":"384:8C46bAi+c9YgJFViVx8/hat7NlhT5sj92eMZcWsAqaFSrtgzi:vZ/J9Ygcsktxe0cwYgu","tlshash":"5382e0239a3abd61265eab6f973119fb034bf5da40cae76813f840dbc1311e44439cb2","first_seen":"2023-09-22T03:47:32Z","last_seen":"2026-07-19T00:49:18.566872Z","times_seen":383,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/logo-20.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /logo-20.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 17:16:37 GMT\r\netag: \"26a2-68cc0141-120180;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 9890\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 538715\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I8M7UAk9t16cx3lUKsWny5Sq0vciw%2F49H0PpLiBq%2F96M4p0EFWZByMsazpD7a0NpNhAT%2BWuzT0dhCJCbKjU2WoDoEHudDTckdvZQ\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de398954783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9890,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b75cfcff6c91e443011489cf22a537ef","sha1":"fc4ba4ea1339deaef9ab49cd73c8c0c9e715d13a","sha256":"5937d1ec581330f33dfca842b5837f1e42bbbf2ff9dc14feed7af1ffd3a5ec9f","sha512":"60032ca5eaace4c529534645a407332c090a00b90837add5f12b428a7e8861fac212d34916b044bb53fa08d44144bbde4093d7a04557f4665840080b26e4a8cb","ssdeep":"192:qWM6xOAGtJLIzHK/IgR7N+tWfxPYqNonMbWsQVMsx0S:vML4zHK/H7N+tlqNUOS","tlshash":"7312bff573eee0e9d7849a5763a8a092a9111e937c55fe286bd8cb1cf6300901cad334","first_seen":"2024-03-17T17:43:08Z","last_seen":"2026-07-19T16:21:50.590367Z","times_seen":351,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:14.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/ethers/5.6.9/ethers.umd.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 22:55:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 125841\r\ncf-ray: 9845de42dd1f2efa-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62ad87d5-1eb91\"\r\nlast-modified: Sat, 18 Jun 2022 08:07:49 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 113698\r\nexpires: Mon, 14 Sep 2026 22:55:14 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=U5a8QBsuJy8mkz3GbKd5bZ%2FMJhGldZ24CdyFhIzxcvbsDbYG%2BTgjal8LihZtzqCWNPJxl1Rc4zpW0DsK38Tun%2BznL2t%2FjYxW%2FOaiMHMLIR8ke8x3XfXkx%2Bu859i9O571DqQQQqKn\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":735973,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-07-15T21:03:46.662531Z","times_seen":8481,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.uniswap.org/images/512x512_App_Icon.png","fqdn":"app.uniswap.org","domain":"uniswap.org","tld":"org"},"ip":{"addr":"162.159.140.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:07.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uniswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 19:52:09 GMT","end":"Thu, 04 Dec 2025 20:52:06 GMT"},"fingerprint":{"sha1":"B8:31:2D:37:A1:5D:BA:F2:A0:75:85:AC:E8:C9:5D:C8:4F:0A:FD:27","sha256":"25:D8:0F:A4:01:1D:E4:C8:A7:48:A3:EE:4F:91:AF:43:5C:D4:40:C1:14:74:19:CC:07:64:0F:74:FC:F8:0C:8E"}}},"request":{"raw":"GET /images/512x512_App_Icon.png HTTP/1.1\r\nHost: app.uniswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:55:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 386611\r\ncf-ray: 9845de1729eb712a-OSL\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"80e2cba29c0164c4e81d7a7dc08a12e6\"\r\nset-cookie: __cf_bm=XgrYyxk_AE8ewjWQMbzhH2ytyO6uYBkQi5Q5KSwmRfo-1758754507-1.0.1.1-iR7LJzCozJnn4QUukNCsQ67q6GoqNDyzVFv1KhbSodEspDrCkQXKqY8qy6qIe_un3RBJfHUbDRaJzs0IsORcPWW950iJatQ.turHY37Qhpc; path=/; expires=Wed, 24-Sep-25 23:25:07 GMT; domain=.uniswap.org; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2gwHEQjJGgZuWo4ut5VNQJ1Akw4DusETF5YwUD8PTHF9xNp9I6knRQZfJ7NdC7mf16o0AnelqAPLS2GIpxv%2BNupBzmsHEFj%2BPrjVfTI6%2BwH6IimfdItWDVyBKJoXRalcqA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'wasm-unsafe-eval' https://vercel.com https://vercel.live/; style-src 'self' 'unsafe-inline'; img-src * data: blob:; connect-src * data: blob:; worker-src 'self' blob:; frame-src 'self' *; report-to https://uniswaplabs.report-uri.com/r/t/csp/reportOnly; form-action none;\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":386611,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"87e1ff3cd8b01195164e4a54807468a0","sha1":"c00846cd185ce838814895d9db4e10cfa5339996","sha256":"814824e1f29a34016526c9a1005799fafd1c0cfdd2a456e7485743a83b37b949","sha512":"873121a6ce08fb4a9821db08d624b1294e383b02b75776368840a39e478bd40ef468373399641119019c56b8b9114d20459d40ef34de685a9d2bff97eb53fe19","ssdeep":"6144:c+qZ1293LH0m9Q4cVh+c6iYv8nD6vwoPN5gwce9c8qH0vG//8QE1s:Vqn2Qma4cV4cXY0nD6vw25OHH0e/kQP","tlshash":"018423e523a8f16f51273f660fad2328857a2d348394ba1a07b1fddc6ec38051d436a2","first_seen":"2023-05-01T16:05:20Z","last_seen":"2026-07-22T10:35:13.070485Z","times_seen":2270,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":24,"receive":20,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/logo-3.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /logo-3.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:55:12 GMT\r\netag: \"4309-68cc0141-12016f;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 17161\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gXe%2BXyjXv3bgfmvhjJJCoeKJqyW4VIB9anvoedVyjvHS3%2F6f8npwetSZBS%2FqIxM5CTM4ZVEj8zWwO3R6eGEMwAtAOzliQI8Ss70A\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de39393c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":17161,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"3597955d504ad2f825e23ea1db2e9b08","sha1":"6a011bd74f60c472117be7a7554fa00799c828dc","sha256":"4652c59b44f17e13a5cec8246ab3285cc951d4d70c4259cdc02ce65d93e07d1d","sha512":"713edce8b11f05431b3ee5431dbebeb955b05b12e4bae4f0fca10cd90f75ca9c81acfe6a866d830573f9f7a0fcd57fa201811a31d334e2380b287cc4e4e6334e","ssdeep":"384:L70PX8qRih051OXCu3AXWWIKswAiWJg9n8JJZaoRna0XUal2Mlw2:LQXs05EXCu3AGHCp9n89ao1aaMSz","tlshash":"0f72d0fb24886fd8c78cd838e7340474a190a5645a863a16777addf1106e9f48bd722d","first_seen":"2024-02-18T16:35:41Z","last_seen":"2026-07-19T16:21:50.494269Z","times_seen":375,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/logo-21.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /logo-21.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:55:06 GMT\r\netag: \"5595-68cc0141-120181;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 21909\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nnBBWI0QA0yXAe5oyLl%2BBOfTkz8V4hBgU5wrM%2FNYzm5Gat71BVMcha6nc0Gvl72NygIBzWenqgK9lPI9uWjVw8PSKpycLDjrLRS%2B\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de109e11783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":21909,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"88d6fe2e9f01143ea7e308af24c16a34","sha1":"8c350b8219206aab258d026b822da994b0c1a752","sha256":"1c2ecfc8c08a821a4839f2ae0df1d8796a8df233939b537b4e26514fa4f91196","sha512":"a44a19c6bc1974304723b8ac921b711c6c49ef42f95f75db0c1c6c0b8bf22fe066eefbf7dab05625525a53e439f39f1463a85baa22d32dc0f6f237fabd87de55","ssdeep":"384:klNl53tEgE8yQ+4qH4arOcw7KvD8+5M+VVAFDAmY48TPdLFYG/olwubBL:oNlEf8R+tYf7KvD8+5Msa9uDsvbx","tlshash":"d1a2e109616fb913b04fd01b8f6c449a7c253900872df01674a7747aa82fc17fd32728","first_seen":"2023-05-02T10:51:38Z","last_seen":"2026-07-21T07:27:05.550243Z","times_seen":1010,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/Unichain-bg.svg","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /Unichain-bg.svg HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 17:16:31 GMT\r\netag: \"17cf-68cc0141-120148;br\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 460\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 538714\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KlRyEOlUDzKZ4o3rp6fYtzrGeXTSD1JZLmc1q7%2FYRu1T6Uo6rpFXKQFpWNbYlGpOIdklgeCQXE%2BO4yyfTA9KovbhWVtNL8GxlA2f\"}]}\r\ncf-ray: 9845de109e1c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6095,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"be38207049332009258755e543feb9d4","sha1":"6465865c79ae73e323dd5191ef9900ca617dfb09","sha256":"576b546a4fd04309c54f3f9bf082c983e4bdb6b54adf2f5816be8547919c945a","sha512":"43fe6446b5bbd78828af1ffd10a1c17b95e9506b73b092bdaa91624f1872d4fef0439ff255b73173b3cdf5e842ce23bf334b4205741aa7b98439b072e72fcf0f","ssdeep":"48:QCs+sIs6snspsbstsvsysMsesosasNs7sJsHsVsfatFscsCsAsLsdsXsZsTsmswZ:6YXDwEWKdPprVjUjGjgjSj8nkmDBd","tlshash":"62c1645d361c5824e795dff1ab1e721c236f54a182d171ec1c027a714638d3a6affac8","first_seen":"2025-09-15T12:31:14.565086Z","last_seen":"2026-07-19T16:21:50.453671Z","times_seen":147,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/metamask-icon-DTYYyCXh.svg","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /metamask-icon-DTYYyCXh.svg HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Sep 2025 17:42:22 GMT\r\netag: \"10a7-68cc0141-120184;br\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1202\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 191563\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P%2F%2BpLMbYLmXtgLeAvpKrXc%2FT2YEQVoK2LAyRq8aTTAIbweO%2FL3x8Hs3nVjEwUJoHGtjqE5G8WWzEhpPSdC5mYp4NXbslHl%2Bld3Hz\"}]}\r\ncf-ray: 9845de109e1e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4263,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"801a9c289da055ef8693ba23dc23a5b2","sha1":"613bb24797cd5699e173e1cb435036b6b9acf897","sha256":"2b925827f2af14b240785c2756240c9b92db6a65d5aae7d64cf1bf951f7e2f0b","sha512":"8196d6d98ee17c244c6f2fe7b3c0b7bbb11450ee3477aff705a1c2e7d017afb2e2ce8ecf7ef3118d3cc057546c396a2523b0d2298f3297d86ba79d90a04efb70","ssdeep":"48:a8cBLnuWJA/V12VpnnBmwnyM7QvIdLx/yCGw3Z6GFckDX6e8juiv7SWklC+RWZDl:ACifnyM7QE9V+eXL8yaAWZDvt","tlshash":"639122a9b3459a7cf2214b70d726773630371ce66c68aa144dfb1a3449811eeae3fdc4","first_seen":"2023-06-17T03:33:29Z","last_seen":"2026-07-12T16:05:22.24833Z","times_seen":352,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/500aa8eb21d1bf3c4217977225fd7b9ddb02fd4e.svg","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /500aa8eb21d1bf3c4217977225fd7b9ddb02fd4e.svg HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:55:06 GMT\r\netag: \"f2a-68cc0141-120153;br\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1055\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PHmVgLs5Ky%2F2F%2FKK4%2FVcXlc2PZzcn382xiDTFw%2BvOuT7WgAu9aXhMOT%2FnBz4mNdhqPP8cu9MJwzoV8NBGHaDsMHkbNaLWkgVtpTc\"}]}\r\ncf-ray: 9845de10ae22783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3882,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"416dc77797274dbe975abc9267283083","sha1":"500aa8eb21d1bf3c4217977225fd7b9ddb02fd4e","sha256":"67ab1cd97ec73386f4b563e63b121a24d7187ce96e63afa0dc345a61f31ee828","sha512":"b123854b7748583770f0354f1aee3568c6ed885139bb359ffdae5300c43bf82aadd5b0903e342db80a17d424842c69504d16e7f0435a211ce12929f8bcabb216","ssdeep":"","tlshash":"f581d18c1ab49cc8898041de6f64d6fab8f6c4b3aa54c818f7e54f6d04d889eec1d196","first_seen":"2025-09-22T09:54:42.930304Z","last_seen":"2026-03-28T15:47:25.661729Z","times_seen":37,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/logo-7.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /logo-7.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:55:12 GMT\r\netag: \"2e27-68cc0141-120173;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 11815\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RWLCsje%2BWXziovWLkDpiS6n%2B%2FW3B2MPxBIzAvK8C%2BQYMzVn%2BoFMw0m0n34p44idkBXcSHOPYvOLzodjYyIHko%2BkRyH9CIllphfxp\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de395941783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11815,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"42d0a1b9cb789da4e757e29944002d7c","sha1":"ad30229c11f062b23b70e37e96a863e3d2af701e","sha256":"1891aa6964b441a4a84a63c97550aba96fd06ac9a455cf3943203518e4495354","sha512":"f6fa85fccff404acdbc81fa7629e7baae2caffc5ed66f45f03737fb7bb73a022c3d916318421ce3fefa53c81bf17509feb82ba1df31871c0a2ded0823c47e3ed","ssdeep":"192:MscNV3xNBArEhD4o3gL9q0pDbCVnwKPFXJrKYkuFdnYG6nMkoDcuWdj:eVjBArW4owLAmbCVwKPFsInv6nMj4uW5","tlshash":"e132b0e236f99fe374f9f5b7c2209b281e21c5b452c151e998c68e0898de72074f8e04","first_seen":"2023-05-02T10:51:38Z","last_seen":"2026-07-19T16:21:50.423326Z","times_seen":409,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/6ae23e442001d429a79e52daee9b95fc7ef6fd2a.svg","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/index_1.html","date":"2025-09-24T22:55:13.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /6ae23e442001d429a79e52daee9b95fc7ef6fd2a.svg HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 17:16:37 GMT\r\netag: \"2a9-68cc0141-120150;br\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 343\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 538715\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J5bXtCPTOblyorxipkXyjJyo9ouR8hSvwNIGRWfI2u1GkgQUeOvoTtg1lI9ZgKTRlzICM5a3i%2F5P%2B8REvi8xniAOovXmlWaVoAFD\"}]}\r\ncf-ray: 9845de3b996c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":681,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e60bf929dda657360572998cf7841fe","sha1":"6ae23e442001d429a79e52daee9b95fc7ef6fd2a","sha256":"6dfc276a191f266ca9de1b14ce373c89e0837467da011ac92cd83862243a4113","sha512":"4eabe5678dc52e99649261cdaacb75f9fa01125a1f458d443be4c9b8d5e3cc9a05b79bd5724bdc8cba7440de4a58b96f4bc713e918a36526c9b258bb58e43877","ssdeep":"","tlshash":"dc01f2f0932854ae151f1b27be24bd506b3931b83750b4d8e91d1a38c132e6ee65b490","first_seen":"2025-09-15T12:31:14.582594Z","last_seen":"2026-03-28T15:47:25.66459Z","times_seen":29,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/logo-13.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /logo-13.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:55:12 GMT\r\netag: \"16c93-68cc0141-120179;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 93331\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9mnESai%2FVYqOmcK1FLGIXRuD1TPBTc3oX%2FLimBvhU19usedN6PkO15JdZUJ1dM3%2BbpZPXsmmluxPD8FFTQC3o2F2ylbWTQdxddq1\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de39694d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":93331,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"52b20a8c7394bcd058d6441a018a6c1a","sha1":"5e379bc0dc371fb8bd716d2f37a5ec612fa5acea","sha256":"1d3e074e2799d124697f8e0ea99903fb3ad8e86dd5b97ff2a9da75cc14608abd","sha512":"8864ab68d6b194678fdab3af043c464299cc066522932775e71ed531ebd6e69283efe7c54ff41f60977b98c8ec8307fcabc6fbc26eb5f365a150d017738f5890","ssdeep":"1536:x4exiMeui8vG2mI6WklCOdUwH0+ohi8jczJzOmmkdK0gNGE8CoJTk:xPxem+IvXOdUwH0+o+OmZ4OCo2","tlshash":"ed93123f5165c6c044f39e8f4ff89e124619e65cca5777b2944c00c7da2abc272a89f6","first_seen":"2024-03-17T17:43:08Z","last_seen":"2026-07-09T20:49:32.480832Z","times_seen":306,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/logo-15.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /logo-15.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:55:12 GMT\r\netag: \"b676-68cc0141-12017b;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 46710\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0rN2ObIa5sG6KtZQ6YWzz76nDSOzBfLb50NIm%2BmlYBw273nA1Eje0EYzD8qSYnR8%2BdFK6jGx9t16FAveBylzj3UD0YZgHmnM%2BhyD\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de39794f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":46710,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"98c63bb299803022a18ed616c7c8a8e9","sha1":"513fd01f839aa4ed05a51241623aa38ede683180","sha256":"22f5b3efbdb6032c76456b77e294183cadc69c53672d9517cb78a6b79c662c11","sha512":"b480206ffea1cae84717b39bbd5fa3f53c3a5b0d563af2ef58485433df236680ff1be9e55a6a932a158ba3d3472ada70d45b55ac01e25aec4a4061e22671b8ff","ssdeep":"768:hWfl5/JziAIwMVski6CeIn31ku6D89mTrXMVJDSmNJkAZWXLrg6SbUboAqfrlr8I:haziAIZWT7eInGzQArXy2mA4Uw6DoBBz","tlshash":"7323023bf0ca6e19cd65f1393a040814b86bf4a32187d56ce7add1ae0c4cd3ed86a59d","first_seen":"2023-10-18T06:53:32Z","last_seen":"2026-07-19T16:21:50.440631Z","times_seen":407,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:14.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:55:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19621\r\ncf-ray: 9845de41efdc569c-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65384d58-4ca5\"\r\nlast-modified: Tue, 24 Oct 2023 23:03:52 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 116622\r\nexpires: Mon, 14 Sep 2026 22:55:14 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OJbqLQWBw3amNlulUC7ZY%2FEexBJC1K0YLNdalC%2FXR3NOudBdBdpGhwYi6YpoHEc7HsCOjxcGxEW38iZ829f9LBssluW62e5ax2nJETsbORuAanT3461sIqwOyJPzgeR95q1a8yoR\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-07-22T02:15:25.012458Z","times_seen":31748,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":16,"dns":0,"connect":1,"send":0,"wait":12,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/OpenLimitOrdersButton-DD6LeAdD.css","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /OpenLimitOrdersButton-DD6LeAdD.css HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Sep 2025 19:03:49 GMT\r\netag: \"23e-68cc0141-120186;br\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 243\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 445876\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fb366Q8mBLyGLKhgrfX3x4H7yH9W0WLg720RMpinf9wDqYrONwJmh28b16T0GxYn7tkCQFQ%2FCq%2FWKLDjF1iVjpp2%2BrEyahBOv4Nx\"}]}\r\ncf-ray: 9845de106e08783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":574,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (573)","md5":"48a97e4e2264adecd1e6738e8ce7a5a9","sha1":"d288c962b00bd89b104ff4fc3b1d38e7fcaf7522","sha256":"cf0493462bd601a092fe1ba7b55326606c70083a52c231650da35a814547185a","sha512":"e06394a77a5f94eb43148ebd0ce1a903ff6ea4a411c23372485420a157e82f2c2b3ca6d97ab7c3a898ba18a10631a3f7832c0447c913951a7a7f365dc709427e","ssdeep":"","tlshash":"f0f02b9142f0b75e5e7fde0155f54b4d6030584fcd7579a93a08ad210ae55a30f33888","first_seen":"2025-09-15T12:31:14.563788Z","last_seen":"2026-07-10T15:56:03.006198Z","times_seen":58,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/usdc.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /usdc.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:55:06 GMT\r\netag: \"6731-68cc0141-12014d;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 26417\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HIId84%2BfoZGnKf4HgbDeyD7CVX4v0nuP4EoOQOiNM5C6DR8PsH9np12VRcVpV60KY3RgeHW1emNOVWcynLWxp207ld8RiZEYq47p\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de109e10783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26417,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"76c6fe8560fc7f0dc487edfe08cc5fbc","sha1":"5a87d585db1fd7b5bba9261366ebdda0e25523cb","sha256":"79deff2c3654a94ca0e483276831da515205010bf553008862a677b6108aeb22","sha512":"40b4b30feffabac2477e8aa695b4a7e4d9427e4abe38ffdeef9845280a945f0d64770d6ae13003420420e8647a9821ba95bb252983068dde6d01000b4d04f8dd","ssdeep":"384:peufZxlYncJ946u1CFK36U19IxAU0YhSyp1OofPiPdvVbFmO+28gdHLS34:pZYncDYEFK3f19CR4y7Oo3iPB8a9","tlshash":"fcc2e1d1c8a7d2deec4b1823b514eed561b57e69ff163488e4e42a38b6f5c40086389b","first_seen":"2024-08-19T17:21:32.593297Z","last_seen":"2026-07-21T06:12:37.76591Z","times_seen":316,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":138,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/logo-1.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /logo-1.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 17:16:37 GMT\r\netag: \"43a6-68cc0141-12016d;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 17318\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 538715\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aDUwg%2FqZMKlSoel3I%2BaYbGenOiYATKpC5G074U51hB9MJ4c9LXyOPmMVHh55EZbuzreEfUoUYBVVC8CfE1lvp%2BXFY1daQUlwClPx\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de39393a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":17318,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 250x250, components 3","md5":"57ebf93ae36214e88e8f3b306a3e5e77","sha1":"034f619c7de0127855b130df0ce41d97115ed6e5","sha256":"b15190409f28ef8cf96040716a717196f91a563f280c2650c42a8449798525bb","sha512":"32ec5f93ac2c5f6029fac811759eec80601554b6a82e2969b7c988dcccd9a000acf69665ed3db1893593cffdcdf4189a41cdf9bdbdcac5bd3ea58e9f3cd2daa2","ssdeep":"384:Q25K9JiiqA+pWoWWsrYir7IGo1XSn47qW+YB7:Q25K9Ji5A+pWoWRUi3/X4uq","tlshash":"8d72f1cdee7c945a4057327425af32c9d1cafca452d1ece99e4700065bfcbe6512243d","first_seen":"2023-11-01T00:48:01Z","last_seen":"2026-07-19T15:20:48.604877Z","times_seen":423,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/22e7431edb728c4c97c65b617352ed05c50eafd5.svg","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /22e7431edb728c4c97c65b617352ed05c50eafd5.svg HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Sep 2025 19:03:54 GMT\r\netag: \"549-68cc0141-120152;br\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 573\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 445872\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O6vQ4ujkVBa2Q8g4jyBja3b8S4XzAj%2FRMTAr0dh0%2BINtowTHsHf54%2FEmCh2QjNGOD0D%2BYCLaRlmzf7By0ZL1xjcykuALmDcGhwNp\"}]}\r\ncf-ray: 9845de109e1f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1353,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2073cf8261aea7f06cefcb8c29185c1c","sha1":"22e7431edb728c4c97c65b617352ed05c50eafd5","sha256":"a58f257362611dac0f751b9c90c3fdb6a27f5d1dd43d9b70d28df233483fa0eb","sha512":"a4e49e15e7185227c52035ad042616de8f12ee885526670be19cd8038325e775f40490d7e269173f925f8d8c5640a8155c59acea213d5a175067266df26fcff4","ssdeep":"","tlshash":"902111f2e7e012c2d706d3f0179da828567724f2272aee0cc6740a54f2d122d8aa1855","first_seen":"2025-09-22T09:54:42.921511Z","last_seen":"2026-04-21T03:04:25.564266Z","times_seen":38,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/favicon.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:07.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Sep 2025 09:53:45 GMT\r\netag: \"6e0a-68cc0141-120161;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 28170\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:07 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 219681\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LIsuKT5h4ymaVP%2FdoF4V4eaHpuUXU8Vy%2BKUUjlkxxJTVP6fqgT8%2FSNzyycPsyv%2B57pIQY6LWYgGR3tCSZQMROaSzuQo%2FleOzzLMC\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de170eeb783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28170,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"d887735262e1941853fc29ae03487bdc","sha1":"329cef5701394b000e8fce0c26300e6df2bf50b0","sha256":"e1501668d96ded5bfc98fc0f573b2feb6cadf57b932e47c960f65aea6fdc4827","sha512":"a6913e28ef2e866b870b842f0143075e88fa3e110f20a8dfc1d4d061fa185199b4f9b990faa6df8cf5592f9722e51aaf2edb924ed2965cfd30a230ddd0b13acd","ssdeep":"768:6pN6iAyTlrEkznFJM6Pabn23na47cxhobU+dK:6pN6lIlICn1PS2q9xhWK","tlshash":"09c2f144632f0c03074a9ea2b51175008672ea3be2e62d7dac7e85323868b79b773f44","first_seen":"2024-05-27T20:46:31Z","last_seen":"2026-07-22T10:35:13.061549Z","times_seen":1284,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:14.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 03:22:08 GMT","end":"Thu, 04 Dec 2025 04:21:53 GMT"},"fingerprint":{"sha1":"E6:3E:4F:B3:FC:53:DD:27:D8:25:AA:72:59:23:FF:63:FD:4F:1C:73","sha256":"B4:1F:47:61:EC:D3:B5:F8:B4:5E:F2:BF:CD:E8:CA:5A:7F:1E:80:E0:D8:8E:F2:70:3C:14:BB:81:DE:13:23:9A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://uncrcwap.cc/\r\nOrigin: https://uncrcwap.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:55:14 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9845de44fc5e5fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":494,"timings":{"blocked":191,"dns":1,"connect":1,"send":0,"wait":109,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/eth.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /eth.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 17:16:31 GMT\r\netag: \"1663-68cc0141-120160;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 5731\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 538714\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I0kYdZKGfzNKaQgetg5Zg4t6wetYIbEUAYN2j5LnMz7INLL3HG403LiNvBgL5YqK7RuGwBrEkLEKcOWk9xzHewcjij5TTwF5Jm5z\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de106e0e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5731,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"c8761e3fce3fc4d4a5af20afcd2bc017","sha1":"c6174dcb72edd8c6a666d3a24af3839fbd81c49b","sha256":"b5584df7563d0d4cda477390e834a776e2aa8137b0a764ab5378d16802dab26a","sha512":"0ee2ca2c7f50d466595c9490ca7d63ce283ff3754f78da66c3d407e91673c045d04af4acb677fc034f89ff5ce08db48d99879469c8cbec78ebd36e2fbb5b6f53","ssdeep":"96:B3jTJLHDwP6FtBm7HNL9rTsl+P7yHzCZbLb/B9DH/XXjWerct3VNqr/9Tlder1Z5:phyvxsluMAjDfXXjETsrVTa1Z5","tlshash":"cbc19e4d28e90fccea8049b18120c2d4cd6663a93f769c956bc95814e7be170cdf9bd0","first_seen":"2024-12-01T12:07:21.275378Z","last_seen":"2026-06-24T13:21:02.027653Z","times_seen":341,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/logo-22.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /logo-22.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:55:06 GMT\r\netag: \"ba8-68cc0141-120182;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 2984\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FKU4ypHyMU96trVFz82KmGSpncI03F8TDlc%2BFTgJkb2xJ6TtiNCGzy9Q80A9j%2BJzLz1tIbGd1Jcukg1TbrZX3e%2FwEXHpX%2FnIRDGw\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de109e14783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2984,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"2214386a20472bc5fba9309f1a90645f","sha1":"f94e58b4bc1a36eabd8e3ed962677d467e2d25bc","sha256":"c253d7c5d4203783e31bde1d33e143f6a9ce1defac24ab5e06948847696b80a1","sha512":"aaacd623488dabe41c1d5fe0424fdc1d7a482c45ef7c3568ae2aedea576a9f668529eb02ef3fdae31d3298cd2e895d19e951d31a08042714c9ba0b6f28b5f7e3","ssdeep":"","tlshash":"05513a665172494ed6f27c3bebb89b26ddcc5c7810992ea24153b076bb347c0e483435","first_seen":"2023-05-01T22:39:41Z","last_seen":"2026-07-21T17:36:21.82831Z","times_seen":932,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/polygon.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /polygon.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 17:16:31 GMT\r\netag: \"74a6-68cc0141-120187;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 29862\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 538714\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yMri3vKnWvvtIB418kYOffiW6nbT8z0DZ6tnu2wuKRP8xsLkfjHcoy4PybkrF%2FZQPDyDgtptsFI%2BO92oZyKjp8njIjVnrn2Fk9GF\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de109e15783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29862,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"4a19bf1cf0c3c3c8c8793327445d4e98","sha1":"102b1c01c82bbc740c990ecdd48f326e6c56a9ac","sha256":"0190aae09fd38e895aea84ac3fb5444aa805a581d4f4225a944fbd725ccc0708","sha512":"1186fb76e97f6cc258fbf14b3f886ad220488c33fb06a13925a2ed67c4b3e53ae53eb623728d081890544b33f69990c07d6f2985da279768e40cf42e9d4675ab","ssdeep":"768:4Yudoc8WsAEp+P67SNdotCoddwRoA9H5SNhXGc2/wQ:KdoxOm/7SIJDw2SZqhXGc2/N","tlshash":"17d2e15cd16664bbc69e0668e76f5e3d21b239602bf01f706da33a0cb8a43744cf45d8","first_seen":"2024-07-25T14:34:46Z","last_seen":"2026-07-17T15:25:18.322977Z","times_seen":66,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed1.bnbchain.org/","fqdn":"bsc-dataseed1.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"18.203.203.140","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:15.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-dataseed1.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://uncrcwap.cc/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://uncrcwap.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:55:15 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: 0d1ce25a73f1c9abe1c00ff5cb83824f\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6374,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fa3dbe9e7a67f351ee2d52c99850bf9c","sha1":"294cd26f4c0198841057707ed0b44b3cf616e5a8","sha256":"efe3b5e2a041edfb73e010d9c7b8321b7c075c78f0b5d972fe7783da8844f87b","sha512":"d46f4edc8d511404ba6bb32a1a375a1a1c66b24a11f072dbe332243df7b1489af0816a8506fb648a97dd28b0c5ceac714915bc46221ef78d12e9a8a5f1d51d45","ssdeep":"24:YUtXa257vaoWH3eGZsthXvUzZ5+hdex1qx1xxNU6xvQaNBtXX60jv:YKam3QytxvU15+doY1jNNTt9jv","tlshash":"52d108f098c98e50f19baa81b798bc9400213caf7fdf8f40415cf8b6a0f54a176a448f","first_seen":"2025-04-07T11:53:19.749574Z","last_seen":"2026-06-18T09:20:21.245055Z","times_seen":5257,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/logo-12.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /logo-12.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Sep 2025 09:53:50 GMT\r\netag: \"a2b-68cc0141-120178;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 2603\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 219682\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GwGLJQHbiUxAKR9HcuRgPiqqPzqK74UxKiMtSaXzYBGHUHg4s7nJN0Xws8LdA0iUlNspa6EJcEOcqwdpHeZzShakWFN5250g0lV0\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de39694b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2603,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"f486c70ac032abd8d07f8ef8053b6c92","sha1":"a213404b5140683a9541186dbb64af637f8e19ab","sha256":"df526914090fafe0585f8cae603ee6885dbc2769d3cb4248b49262f0d2d53cb7","sha512":"020b19bae09c1cfc0d0aeca49391e236147110be6ce0377a4e9f3dd1629257d7aba055b3da251e57b9fc38fe2bc7796cdd7b8bc649ab6dceb8f43993067e1e96","ssdeep":"","tlshash":"a7513aee8ac1ddfeb667434903a5cc70803887270a71d96f3909d041687d926f053746","first_seen":"2023-11-01T00:48:01Z","last_seen":"2026-07-17T18:33:05.864827Z","times_seen":368,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/logo-16.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /logo-16.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Sep 2025 19:03:54 GMT\r\netag: \"e6d9-68cc0141-12017c;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 59097\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 445878\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r6hehMAhX2K1xzoJBQ4LFaVXqyr2cJWQMiRv3whyzrFYBBwye4ATwdBlyT40p16eHrXyQEsDQDpp%2BSSNVWuc248OI0cb%2FUBkCoVW\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de397950783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":59097,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"92883104c8e598abfa1ce65f696558cf","sha1":"f9d41ab8fb7ef64a7c886c85c504fca9738fb930","sha256":"161855015d0324bad79af26ac0366206709427952354648f28ffa944150118af","sha512":"76c02c146a0c6080dae80b2c65995b8675acc5a7d58de714f4949a2dba0d16e8812bd31def9e6cc74b717881b7f1bfaa2cb8e22bd104d9513fa881b9cb575a1e","ssdeep":"1536:fW7YReBgUHlcReev6xcZxGjmSwPMnaKljFxbGK02m:fW7YReuUHlcTv8cZxGyFPADNbQ2m","tlshash":"7543f18c114f22d5ed38c071b31a9a889c5857aea33edf811e99bdcdb4099456cbf918","first_seen":"2023-06-17T17:36:13Z","last_seen":"2026-07-19T16:21:50.433072Z","times_seen":402,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/ProviderConnectionError-B6J63CRf.css","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /ProviderConnectionError-B6J63CRf.css HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 17:16:31 GMT\r\netag: \"66a-68cc0141-120188;br\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 473\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 538714\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i73KejUxv4zrKfKKN1GRg4vFBSEnRfVMWgCAjnNXS5lvWFXCJEJR7MTvm2aJBBkc08B3VGkcJYc6hlE5cH9PeBVpGrhTuo2DmKGf\"}]}\r\ncf-ray: 9845de105e04783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1642,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1641)","md5":"c5590c6f8687e8da8c5b5cf5939b26de","sha1":"9db095f851b2c0694f5425b62c9b44e2daa71f68","sha256":"c7c70e9dc7e23874ac182c9148c60061884161208bee76b86bb99da977b20065","sha512":"0037f20b302fbd7220e9471aca29e2e2d954dc7b9bd24d8a2ca8536aaba76ae27080773677258ab226da566d8bb95c8aa56a6b0d4b12a35d1e68a900616adbc9","ssdeep":"","tlshash":"7b3154a13af1f77e2d3fc80091e64b6c8131648fce7274e81a102a200afa5b32b37059","first_seen":"2025-09-22T09:54:42.881011Z","last_seen":"2026-07-10T15:56:03.097429Z","times_seen":33,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/logo-5.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /logo-5.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:55:12 GMT\r\netag: \"3e8d-68cc0141-120171;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 16013\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h6IXPZ0hrkx%2By4gy5KxRf0gGSPiSwOk5OMut4nb1JjJWIdbomNF3qlaAzLU9cAWiY7NZp0E5Juletp%2BreCT7UpUen2scm5g8vf6y\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de39493e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16013,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"cc8995bc38a5c200c7c094ea37c18caa","sha1":"dd72029f9a9ce183e6e38d1993d808644b30c363","sha256":"3ae9c7df1ee8748d5766cb2a3b797b2eb49648f641f84612c453a6edfca99393","sha512":"6652ea9c870f5252180ef34ebac5928d02187ea3f715a3ccb49e52462c72cd9943ed67cdd011fa5597ab255321a0fa2b17e99105f7c338c3ef5aaf49576ad349","ssdeep":"384:151a8CoaQRmqTEdnq3C445KNRbtJGh3rVc0A0GQuSKquU82fOjftu:1hCojmqVC44kNRRJAVkZGH70Fu","tlshash":"8272cf391d4a8ea8e0996fc6237b3493cc944b1a0f6ba1230507b54fb3d5e19184acfe","first_seen":"2024-02-18T16:35:41Z","last_seen":"2026-07-19T16:21:50.512953Z","times_seen":335,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/logo-11.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /logo-11.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 17:16:37 GMT\r\netag: \"3522-68cc0141-120177;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 13602\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 538715\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NjMS636ru%2BaPTIMYNuGzvv%2BNSz6hWpelFyn%2FVk6PN2rrJR4hwrRQdKbIs6h14Ocst1K5pInafL4vnrDCnHLafZowLtP3uYykUA0F\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de396948783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":13602,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"f8da792729856b00e8c2d8ae4c9079e2","sha1":"1b8c6f190b7968744753fe4e1602a2d94ea9e7c2","sha256":"f69a1f18629ccfffbc35fa5db02273d96cfce301c5912ae7a5248c6a5c961e9b","sha512":"6c2339d07db0256628f0cb9f35749fc90a73df2f49d219285a06450411fd11938de74af4314209e5687510fb69dc31400d41c96f2bf4e7e4d9ce89e2a459f828","ssdeep":"192:SGGQ6/tWdls2y3NGGFOrO+dBL2+TDEpjxNThnhmcWZubW+bKjWTBKhHZ:pGQ6QXs2WG8wOYBzUHGUFbKjiBKh5","tlshash":"ea52d0f43aa9ccd4c28e168a4e030204b16b8cfb5d3ec7c6f9818449ed5e7ca8554be3","first_seen":"2023-05-12T13:39:04Z","last_seen":"2026-07-19T15:20:48.533039Z","times_seen":380,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/ReceiveCryptoModal-VYhKLsR9.css","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /ReceiveCryptoModal-VYhKLsR9.css HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Sep 2025 19:03:49 GMT\r\netag: \"157d-68cc0141-120189;br\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 896\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 445876\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s56pXcbr9ZUCo8%2B3TlnqVyCNjzJadmflEA8OdbvmZDA59iBBMqQ%2ByXLkg6hZdZLvQZSHuGXsfIHBGrkdki1IyJGKuiVEmxhYv0cm\"}]}\r\ncf-ray: 9845de105e05783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5501,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5500)","md5":"d197c302ed1797fbb217cc090fe3df98","sha1":"0a7459dfb176725a81a04be66b5e1fb8583f09ff","sha256":"3e87f16d06c7dece56aa26d09bde92dc2db232bfaf3368ed4bee211492970a3a","sha512":"8f9fca93f4827388cc51f7a59b2929b1bafed56597f56894b7b0701204ff19f8a8de6fcaacce6f67f1b3789858d32967a951814cc167b771243ce68ca5616e35","ssdeep":"96:P+tWqwBJf/+tyl3rD6RAw6h8QW/bxJFCJFiJFzJFmh6Prm8ByPXcGFHO:7vf/+tt+w6h8RDF8FcFtFV5ExFu","tlshash":"25b10be83aa1b75d7e3ed95ad66b0af84134704adf3274c7699428321ad3df71a33804","first_seen":"2025-08-28T02:09:36.970234Z","last_seen":"2025-11-18T02:17:43.116926Z","times_seen":36,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/binance-icon-D48m0040.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /binance-icon-D48m0040.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 17:16:31 GMT\r\netag: \"169b-68cc0141-12015b;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 5787\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 538714\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N6GspihsfXVAr18DHZuTWh1v%2BiAkJzL7N0FksLDG878aSUQ9nSMVmMOxQHEb5%2FrUtuKI6XPaLQwn2XVcHxbKBogWM8GkxgyA3cAy\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de10ae21783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5787,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced","md5":"18ee50953d4e0932efa158af9cd32677","sha1":"b769121e38e0b5ee0395a19bdff9c0e5e919489f","sha256":"b9dc2ec12a3db8e774a65f5f5606a4907be888972bb321698f201ef9a7bd3273","sha512":"91f90ef43c219d85eca10f7d51a4c07cb6883c0cdd6b5acd2300eef4633cdca5a2c493c59e7247fd97b8f183e166e5bcd38b68f837228ddd143c1e49dc187707","ssdeep":"96:2nSK8J94OBgE573SXpsxaIzoKQzSbyEgCnYVfGkfz7VY/A4kO5tJwHPG/EOQOPfY:2nSpJustSXixaIzoKQECS8beXI0EOQOY","tlshash":"5ec1afd133c3288aa2202936762622d83d9797bb8d03ef772d842d9e80465a6609a144","first_seen":"2025-09-22T09:54:42.917868Z","last_seen":"2026-07-22T10:35:13.085854Z","times_seen":890,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/index-Bb7939ze.css","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /index-Bb7939ze.css HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 17:16:31 GMT\r\netag: \"6d86-68cc0141-120167;br\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 4557\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 538714\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ybsHOcr4%2Btefx5oIAW07GOlGz9jMPmzQqfUhN7CVUn59HdzbR%2BtN6jMmTWKWdvTiAiXF190ovz2WSAXxQxF0Tgv2BMam6ZfHF%2FJe\"}]}\r\ncf-ray: 9845de105dff783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28038,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (28037)","md5":"1203f41c428ce70b359beccb47621ff8","sha1":"0cb733ee4991120d7ea3e136c7a298be07ee4e4a","sha256":"3753f702f06a9bbe30ada0a021c9c0bbb0a78b7ea43937dd6f83e0c2ee324490","sha512":"1fa133c720e269251184bd7a2373a91663ce1b394ee402e26b2f63ad487f7533e60c8203604c1f781cdcd39e0ce6d453ae5b3a65bca91df6c2c3f5ca0a57ad4b","ssdeep":"384:vHRIcloXcowa6h8Xzbbn8l8/+tuftZEiMBwo:pHloXcowsb8l8/+tuftZEiMBwo","tlshash":"9bc25c993ab0b77d7e3fc81ad5e71ab84138304fde7275e669906c214ae6af32533404","first_seen":"2025-09-22T09:54:42.912818Z","last_seen":"2025-10-09T22:22:34.253696Z","times_seen":24,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/Fold-Cz84ld9R.css","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /Fold-Cz84ld9R.css HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:55:06 GMT\r\netag: \"1603-68cc0141-120162;br\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 1111\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qyz2QXlBT9Wl9BvGgGbMs1sx5wxLnz1xcA8F%2BSuWonqtlRjenC8qZS9JfGRvrP6EA%2FrV8WYWsED75iDi6eKp1g0FE%2BqQQCwQwROz\"}]}\r\ncf-ray: 9845de105e02783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5635,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5634)","md5":"5761ea34f437779881030f2ba2cca343","sha1":"c07b2435225ebc394dd97ce28edba28f3a621545","sha256":"37e5ab45cefbf42ba476eefbfcd37dbeea035699ed10d415098e29574b05deb9","sha512":"cb616d09b525410235cb54208287bdb1ba78c5d0a4577d42a9eda967524a86502fc10180ff4108201200cbe50ab25a5bfc78c1bd8965b047cb3c6cb963c62d78","ssdeep":"96:ZbaPXUv38UeWgFyy9O548ZpC0/3FQqxhbt+6JF5RjE2d8tugLx2bVd0R7UzG/Byq:r1HfC0p4kFrjSuoXpBL","tlshash":"56c12f6a79b5373eaa3fc807c1c216ac6234244fdeba76f559845c240afa1e3763344c","first_seen":"2025-09-15T12:31:14.584888Z","last_seen":"2026-07-10T15:56:03.063766Z","times_seen":51,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/UniwalletModal-9aWmDJul.css","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /UniwalletModal-9aWmDJul.css HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 17:16:31 GMT\r\netag: \"b67-68cc0141-12014c;br\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 611\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 538714\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qEuWAGPoSAW0RGTuQzZAtoHBfa45N40GSxCpoAF4jnqhFhQlrgfJS1moIsThUl6mfcRyxzuvngXkEXnuppvax7nZGfuL7Ckwk%2BvX\"}]}\r\ncf-ray: 9845de105e03783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2919,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2918)","md5":"104eca5cb0c1bc50cf0129425bbd096b","sha1":"edba35b34d5a59bb18e36491346a44eba54c8e4d","sha256":"7d81459bf9c22b98944652695339a82406a4c544325e2c20f7c7b664e1aa3352","sha512":"573709389ce13791152957fe5200b0d195f2abf14051bc060e76cf37abf4fb32fa6f16e9561c7fb9f29e11fa0c6f9603c24902643627b6d0c107a2b69e43ef6d","ssdeep":"","tlshash":"2f5136b8b6f0bb5e3e3aca1aa5574e989178314bcf3730867a845c2105d6af70a33d05","first_seen":"2025-08-28T02:09:36.925799Z","last_seen":"2026-07-10T15:56:03.060588Z","times_seen":76,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed1.bnbchain.org/","fqdn":"bsc-dataseed1.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"18.203.203.140","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:14.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed1.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://uncrcwap.cc/\r\nOrigin: https://uncrcwap.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 22:55:15 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T12:24:29.314996Z","times_seen":17449677,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":110,"dns":1,"connect":34,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/logo-4.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /logo-4.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:55:12 GMT\r\netag: \"2083-68cc0141-120170;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 8323\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dOj%2B4SLJZITkbI4BEtkVmn3uA%2BtM3JPc2OjKXOeUJzmrUyyAWT6fPdXiW7I18Py1QklArGM%2BFTrFGBEgiixllunTD%2FciGiIpIx%2F%2B\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de39493d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8323,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"1daf4f0d02afd5015f1da5c451632087","sha1":"f6cd7f1ea4bf53335c555bc637831985bb68df2a","sha256":"85a7f2e4fcea23860e37a79fa93f6326c3cc825fce46fa44b0689baa02f058f5","sha512":"67a8ec4f83ce5acb3260e771a994710ad7f02a40b9f31e0b649eb14b8392d920afef105963cd99fc84685cf2881eeb8dd373a89e219e321b5fd415b13d0ba184","ssdeep":"192:piGsypVgX2EMxom1qgke1QkXNHXREN5RlRDW9s4jOX:wEg7VmshfkXNHS7RB","tlshash":"c502bfe5a3ad24139ee97db5b338e4034b1726417c9dd480f82e4f0a8430a6f45df912","first_seen":"2023-08-28T14:42:38Z","last_seen":"2026-07-19T16:21:50.477738Z","times_seen":368,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:14.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 03:22:08 GMT","end":"Thu, 04 Dec 2025 04:21:53 GMT"},"fingerprint":{"sha1":"E6:3E:4F:B3:FC:53:DD:27:D8:25:AA:72:59:23:FF:63:FD:4F:1C:73","sha256":"B4:1F:47:61:EC:D3:B5:F8:B4:5E:F2:BF:CD:E8:CA:5A:7F:1E:80:E0:D8:8E:F2:70:3C:14:BB:81:DE:13:23:9A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://uncrcwap.cc/\r\nOrigin: https://uncrcwap.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:55:14 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9845de44ac465fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":398,"timings":{"blocked":136,"dns":1,"connect":1,"send":0,"wait":124,"receive":0,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/LimitForm-BvkHmgjp.css","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /LimitForm-BvkHmgjp.css HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Sep 2025 09:53:44 GMT\r\netag: \"ac9-68cc0141-12016a;br\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 656\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 219681\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2roIKL9YyMCa3iARj6x2b3PJzudwiDHzxg6YKqhDL31Ocsk0C%2BRsfotFgCQ3Wu1KpKSZYFT%2FWRXj5CgxsoHGBgLdfa86SgBkCa1r\"}]}\r\ncf-ray: 9845de106e0a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2761,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2760)","md5":"f6bafa65cf48b947fe36fb284613843a","sha1":"e16da0622b5a8669dbb55f359d4c4b90c12d1032","sha256":"8c4d851eb69ff1bb098fc52093a1f47aa3d9475e633be016ad030edd94687ecb","sha512":"c39c6c4d2b899cf0f992632d72280ecb3fb3dd333512460555564a4e0d0909477f9390197abf46a51c9c4b55567abd4aae3f5097845737677d7c22b799175bec","ssdeep":"","tlshash":"275146d42ab1b3ad7e3fc816d1a70bac8134644ede7174d62a9028311fe69f71633548","first_seen":"2025-08-28T02:09:37.013154Z","last_seen":"2026-07-10T15:56:03.016865Z","times_seen":60,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/LiquidityProvisions.svg","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /LiquidityProvisions.svg HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:55:06 GMT\r\netag: \"2e50-68cc0141-12016b;br\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 4511\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qxZV4YfZBl9L8LCT5p9B18kg7XZyjZ0Ab2hZ1nT1BUVmxSxwrpjd73YYEktmouf8jsXwCZYVATTUTRbHNcXRFol41OTJorTGgaEN\"}]}\r\ncf-ray: 9845de109e18783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11856,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"77b29247e671093f9fe8120237551ae3","sha1":"13e8be780e522ee46274022837935e7909f8b49e","sha256":"be3f9101df5592ab7c6d49aa367bf829653dbf7229a42bef0d62869ccfa6f6dd","sha512":"b99f92bb9007a1fb33eeed648b30869dce94215c4da295ba672efcbda5735298abce3105a18520817e2db644c2d3094c99004a0171cb9b784aee5a2c82e7d49f","ssdeep":"192:gthUGCYayJ1pZYh1TT0AhzfMaII+O5z+f3JMdmXqdiYTnIoOGiG0GV:gtbHjkB4KzfMpnO5EJWT8bGiG0GV","tlshash":"7b3208cc2bf855acf488d2e9ef4a509e351f64f7a6528f14c34c2e26246649d9e21ccb","first_seen":"2025-09-15T12:31:14.596468Z","last_seen":"2026-07-19T16:21:50.462499Z","times_seen":159,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/Unichain.svg","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /Unichain.svg HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 17:16:31 GMT\r\netag: \"f35-68cc0141-120147;br\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1116\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 538714\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2H9nmqQIkCw1Y3RrET0wUne97u2r6e9T0xE7kXo7Sr7Ulv6hlmxXQFhTEJPdVUOzgh0Ga2GPLBy%2BaeqI6ryO6FBCemeJ3y%2Fu4Iqy\"}]}\r\ncf-ray: 9845de109e1b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3893,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1131ec4a24d4a9414251801e25184b99","sha1":"52f7f615d98a045e850f6b3309d1d12cfe574099","sha256":"573c398c3a4c8ece91b05c518fc160041b8f9151c7fff0ed26aeec3934868842","sha512":"b9d10e8e93bc084ee8b8e59f5f1187a55dd0346555d18011fec8ef442fc014a8f410f81cae525282b3a30d8fe05e597253764aa7d92cbf8806af5567f0b3f4f4","ssdeep":"","tlshash":"e081bd5c2304486af3a40ba8c74564e9222f91b083da64d84d473b7e1d3897e6cbf7cd","first_seen":"2025-09-15T12:31:14.561052Z","last_seen":"2026-07-19T16:21:50.532717Z","times_seen":157,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/logo-18.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /logo-18.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:55:12 GMT\r\netag: \"1704-68cc0141-12017e;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 5892\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yvdqf9dYCehDSHVDpeaKnA6NmkFSXfTV%2F5M%2Bs4b4gtytsJlRSUEiQ7t33eGc8i516%2F5yfaNkr6ylaYl7UkfMTFdSV0v5iqZ7hSEX\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de397952783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5892,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x250, components 3","md5":"47d61f9d7dd491b2f534e74dd87bc561","sha1":"b2fa8fdaed0bbc67a4dac4c964bd4c7497614c32","sha256":"acaa5d7f5438d6bbb03986cfac8c4727f092c3a5330c1b37f79e5072fcf3b677","sha512":"5776dc3aa14d8efe2209eb281cd4a08c7da083c97423244ea8daef5ccd4d9f6a81898bb73e2153da1492bdff914032ed6efddc8d59bfd2818491675c9bf5e217","ssdeep":"96:X894vw/sLbbb+GCySbbgyxpbbV+mHAIL19D+oUMVvLYsDjLH/B9N0yW:sFsLbbbSBbbgapbbLA+9zvLYkT/i","tlshash":"ccc12a271e138636f41ca9715bc0332d80591a258bc36b348c7c23bfb3bd1572c42da6","first_seen":"2024-02-18T16:35:41Z","last_seen":"2026-07-09T22:10:07.062738Z","times_seen":307,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/index_1.html","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncf-cache-status: DYNAMIC\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZU1UVy3Xa1cMPpDoDbIY7ifOhhlkUmre2SU%2FcY0eh0aIUZeOPw5jCCM2QNhY5eyCUEl6daSvfIAXHpCjxX8ItxJbltXDGDzFAbSZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-ray: 9845de39f95e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5224,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4462)","md5":"dbfc194323ba0d4f0e3ed8d76e7aaa89","sha1":"b440938cd50ef1b0f043d9c8c94e73b8c224bda9","sha256":"6e38e15ca0ead80aab7449e8ca97ebf9707350cd266fdb39d63120455b7500eb","sha512":"cf4796782f34d10c2630c436ee9d82b95b98fb219776fcb13e60d11c51a85bb388ed4ea3e6412c14d6dea9f373c95ceb0e6efd0ee883e999896f171dce08a7ab","ssdeep":"96:chNa7cHtY6XAe8e3vMK64F4T4x4bCK34YIQf7+eoeneot/VPb14M4I2ubBClMEtA:cNa7cNYep0C6mrwhf7nVPxlG2z","tlshash":"62b143326015783f3a1389ace131b32d9253e71cdb26868ea6fc66702bc5da1ccb34d4","first_seen":"2025-09-22T09:54:42.924651Z","last_seen":"2025-10-09T22:22:34.273948Z","times_seen":20,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/logo-2.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /logo-2.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 17:16:37 GMT\r\netag: \"2cf8-68cc0141-12016e;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 11512\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 538715\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cNrzqeKvKZ%2BeXAhHBk9OSv%2B8BOghk%2BvXVSEb%2Boa9UEQ8RzbC%2FgVeqAeGOFwWVlYTV7gnJxHRhyxBkF%2FO37QVBFH08gfsoPoYdkGx\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de39393b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":11512,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"f2e1323545a9463a27f88c14a210b309","sha1":"1e65b7856aa2eebec70d658943e35c014e52d7b6","sha256":"70094a36b469eabdc9897a2e6875da24ddcbe9998c63f153670aea847cae782e","sha512":"de5404a69cf308bb897179fe60d8a90756419d17c674db82c847f17341b7db982ed6eb05501276ce86a51f6a9888ed33b823ce96b4279b253299a47c3fb2bf30","ssdeep":"192:t7KCWEPSHLDKHWucIRze8qrOhwcUKpOH4+k0Zt0IgaTp8fMB5Ar3XSHY:t75WEPjWoFe8qrO6Kpn0nfTafMfOH+Y","tlshash":"bd32bfc4c8a17f44ad9595660cf0a4a414218b8ac9c07d2177eab0fb3bb6245cfe77ec","first_seen":"2024-02-18T16:35:41Z","last_seen":"2026-07-19T16:21:50.559722Z","times_seen":331,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/logo-10.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /logo-10.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Sep 2025 09:53:50 GMT\r\netag: \"5381-68cc0141-120176;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 21377\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 219682\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=maSwYDMXUROqUTa2wyr09QI5%2FTLN%2F4IDvWPyPjTCzWxu8a4us1uydIJJISz%2Fj7%2F0WxU5o%2FvFHmBb33xNMKjf13aNdXSCTd%2BKfFZ3\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de396946783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":21377,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"2e823e2aef730eaf7e5890880654ff89","sha1":"1e001acd8e7508c5d9d24e167a97ef2a861ddb28","sha256":"c74a7e867400257c72027517b2816666c9a564be622cc6043345a51910cc3078","sha512":"7e8296ef4fa3a927b8218e0ae16039bd331195c15ef9e52ac0e6864c06a69e9c4c7d5adda6ed342d0683700ef934806739a84c582ef9e9b6625c974d93fa3797","ssdeep":"384:gGMtFAuwK03rjak5k7/WcKwmuszm8Lu+foiL87Ej11jUZjXDaG86OjydFTbISyje:gGsCfK03zkhKYsy8LuaoiL87WjSp86Ue","tlshash":"13a2e1475d2824418be2e3b52badf4d071ae9f501a1318c2ee4d762ae159ec1ccc72b5","first_seen":"2023-07-08T21:25:31Z","last_seen":"2026-07-19T15:20:48.621627Z","times_seen":426,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/index-CadEfOmi.css","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uncrcwap.cc/index_1.html","date":"2025-09-24T22:55:13.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /index-CadEfOmi.css HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Sep 2025 19:03:54 GMT\r\netag: \"c79c-68cc0141-120168;br\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 9926\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 445878\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8SXyINCTOsaik0pzP6RyGd1kTFRoyNOn%2BLz5nH6gmnMFH8%2FZlnDe0bPIwRIJaHBL%2BlDAx0Z69ZDmuGtRn836%2FLC8uGC5ISXxnVUB\"}]}\r\ncf-ray: 9845de3b996b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":51100,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (51096)","md5":"3c57996ef21f84d16d0e5220dba81f5b","sha1":"b35571e5c78e6f7f12d6492634445b2e0705396b","sha256":"71ea8112b69f8813106aac43e9773497597ea5db197daded6e3f87cfdbae9fb1","sha512":"7eb8e03bf0ca75b6f7aa07f80f264f0934da5a0cd09c18eb1bf94cccb6999563925759bea975025b51c9e959d3aa65577a49670af7809a5f06b829207d2408af","ssdeep":"768:gKr7AzSZz/gv9sMmN4hilnFkyo+Z7p0XjVLyy+mwECi5aTDMJ7:gTSZz/gv9sM9o8JLyyVwA5avMJ7","tlshash":"0a33a671f326d87fbc3355bf929cf8aca315a185ef340fd8fa21621166c2ae30516a15","first_seen":"2025-09-22T10:02:49.63253Z","last_seen":"2025-10-09T22:22:34.275054Z","times_seen":17,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/Chrome-Cj1tS4-P.css","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /Chrome-Cj1tS4-P.css HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:55:06 GMT\r\netag: \"911-68cc0141-12015d;br\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 597\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ul9NdMxBoA8%2Fvf%2FJpptyz016ldHEHeaWg64pEEJ6Mg%2FKhxzdCPElHwNRgkOLo3VsszIjcysA9Iy8U8VWqMBXW4mMIvn5JQ7BG4g7\"}]}\r\ncf-ray: 9845de105e01783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2321,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2320)","md5":"b906c451daa706ea5fab44bd51a1beed","sha1":"3b77502aa5f0c4d3b4b379ca7e1baa366960c47d","sha256":"054e09be4d3c0c8ba5d023c92bd0f5cdd7a823a76c1d4e23db1b674f7de06cfe","sha512":"02682da4dc84a577984861656b64ff6615088424e7c920d7ea7bb6104ae0116e2b8d9cbea5a31929f91929da6d1423627bd2ee6c4e3e0f3cc49c7196b1a066b5","ssdeep":"","tlshash":"5e41c2953ab1fb6d6e3ed912c29617bc8170144feeb674d90a5068201afa5f31733588","first_seen":"2025-08-28T02:09:36.998619Z","last_seen":"2026-06-16T07:50:01.624665Z","times_seen":37,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/SwapLineItem-CNJ9cZnj.css","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /SwapLineItem-CNJ9cZnj.css HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 17:16:31 GMT\r\netag: \"482-68cc0141-12018c;br\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 346\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 538714\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ngLGwWr2u2g1Br%2B7Qo64h8lAGnbnrBvHxbrSOIYRBpt3SxoSoBeEFM%2BQDFVk21rY2ey1mxXkubQhi3Te0%2FiJKwE9vr3lQzFsgTC2\"}]}\r\ncf-ray: 9845de106e06783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1154,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1153)","md5":"cadc5c69e6d0813caa853a627291c9b1","sha1":"f08074286d199b9de1196403493bc1769ebad895","sha256":"4cf7d8476c85685fb5d25ea6c5e31a3a9fd8c4bd3ed2b2d345a13807c14e4a22","sha512":"3a2e822ec6f6db693ae7e18d438b9c5e7787a9881da3eedcb59d699ea51da45fb66b7ab68b4b288cd301b2f67de4b9ca780660b19ca6a81eb3c90ce803df2095","ssdeep":"","tlshash":"e9213579b2f07b056e26cb262593cd8ad2b83147df773146ba44ac2000866e70e33e5a","first_seen":"2025-08-28T02:09:36.93772Z","last_seen":"2026-07-10T15:56:03.075717Z","times_seen":76,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/CurrencySearchModal---Iji430.css","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:06.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /CurrencySearchModal---Iji430.css HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:55:06 GMT\r\netag: \"1b0-68cc0141-12015e;br\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 206\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:55:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v8v8n4%2FQcYla4xMXRjOKTicGBEzyhuIxa7c99YbcjSDDCaXX8FimOrdcCy7NW77CHHNLCJyQVBg23X95JuCPoCU7wFwN%2Bpr0xkhN\"}]}\r\ncf-ray: 9845de106e09783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":432,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (431)","md5":"9ad1313fbe3f92498a65a74b9509726c","sha1":"3b5329e8f122a0519a85414503c201aedc5414be","sha256":"85eb3cedf4cf3c594ee29b315fce18ea6228797c27e84a1efb899f2a7fcc1bd7","sha512":"aeae9443670c80f1af49e437524a9964ed3999c1dc238ab5abce5651494d6fff5f504635aa919a34745ab753eb60481684cb44522bdd8a563c8a6ae0cc0396d4","ssdeep":"","tlshash":"75e0e53192f077494a2ace061591ce4e6174a407cfb7720d2b24fd2001660830f379cc","first_seen":"2025-08-28T02:09:36.917518Z","last_seen":"2026-07-10T15:56:03.003165Z","times_seen":76,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/merkletreejs@latest/merkletree.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:14.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/merkletreejs@latest/merkletree.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.6.0\r\nx-jsd-version-type: version\r\netag: W/\"3a393-ow5VcB3yNddBHZ9Yv78eUVMKtdU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:15 GMT\r\nage: 1634\r\nx-served-by: cache-fra-etou8220102-FRA, cache-hel1410025-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 54223\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":238483,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"67ce418e4d67b79b2e9d44050119f0d6","sha1":"a30e55701df235d7411d9f58bfbf1e51530ab5d5","sha256":"726fc8775a8aa08138293a5955dd14f9c2cb8b566f1c577f5d39c986bceab3a9","sha512":"827ddbae75068bcb5c45b95a5a33e8ef5f1f09cc8d5e580e17eb5370959970e8c0280d7edf8ed5e180390397c44ae8ff5861db566fa855bff17a52558a178956","ssdeep":"3072:6cBV39NAtLr/rq8orpLppLQ8CsPYx7F59U:6m9NAtvLYQVsQx7FLU","tlshash":"b7343bc63685a0a583da71a8043f990ff176e827404cd484e924f8f59cfce9956abf7c","first_seen":"2025-09-15T18:44:44.033997Z","last_seen":"2026-07-11T04:16:11.452106Z","times_seen":2066,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":79,"dns":0,"connect":27,"send":0,"wait":27,"receive":32,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/logo-14.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /logo-14.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:55:12 GMT\r\netag: \"2301-68cc0141-12017a;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 8961\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wWatdvnEbxS%2F8U6VvYKS%2BuCnmenBxmOnFAp7Cxqj1vuWHXDkRpWJhPPhpcb42AqPf9URm8x%2B8bUlSQVH%2B0oSs3imJDR1q5LZ0wSP\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de39694e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8961,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"adbc6ade45395dcada8d4b6362396f5a","sha1":"ead4877f5b40a9515d6dee7325403037464fcb84","sha256":"4ec7314859d8f24e680372a6584968d4ea2b0dba1a7c7dc32ccc2be6fa6883a6","sha512":"c47dc4d65497c0e220aaebf87f0edc9233becede4f4e8090ff7197627f3823d059a5f34f54b272018bbd35d867790f47e04b3c2765e733c2b3ad33519e9ed65d","ssdeep":"192:0toxw1G92GxIdnUvqXu7/wCq3AgD85NqPX3l4HLGIvlxkrh:JwGxISb74CqrDkeqvlxmh","tlshash":"7702af88c098375d6df36c3111e6b514977fba270bc83daa511fdf0ea4461c894e6a42","first_seen":"2023-05-16T12:20:21Z","last_seen":"2026-07-19T16:21:50.535812Z","times_seen":268,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-rpc.publicnode.com/","fqdn":"bsc-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:14.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 11:56:08 GMT","end":"Sat, 15 Nov 2025 12:56:03 GMT"},"fingerprint":{"sha1":"31:3C:77:7B:BE:98:B6:33:D7:F2:CC:B1:EF:40:DD:58:1F:8A:11:5E","sha256":"5E:C2:76:10:E4:FF:4F:6E:20:07:C4:39:82:E5:E4:0C:AD:00:FD:04:61:90:DE:6D:B6:6C:07:0C:26:AE:A5:16"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://uncrcwap.cc/\r\nOrigin: https://uncrcwap.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 22:55:14 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nserver: cloudflare\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9845de450eb256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T12:24:29.314996Z","times_seen":17449677,"resource_available":true,"data":null}},"time_used":422,"timings":{"blocked":89,"dns":0,"connect":5,"send":0,"wait":131,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-rpc.publicnode.com/","fqdn":"bsc-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:14.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 11:56:08 GMT","end":"Sat, 15 Nov 2025 12:56:03 GMT"},"fingerprint":{"sha1":"31:3C:77:7B:BE:98:B6:33:D7:F2:CC:B1:EF:40:DD:58:1F:8A:11:5E","sha256":"5E:C2:76:10:E4:FF:4F:6E:20:07:C4:39:82:E5:E4:0C:AD:00:FD:04:61:90:DE:6D:B6:6C:07:0C:26:AE:A5:16"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://uncrcwap.cc/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://uncrcwap.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:55:14 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 2\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: 9845de45df2156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4903,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"de9a73a1a5dae05a90d288aa0fa0f5ee","sha1":"36dae6ae5e5144371d9c123a13fbff7926c28b72","sha256":"ff1536d46de0319a8cb1eff2085d79c0df6983c4b809f5b255e2dfdf9775b6bc","sha512":"ba8288272049f23c9f595a3768604632fb22598fef29ead5a5eb91024acdf9eb2a8d7f74f3a1fa8e63d31efe087d119212e2c420f04ca158d99ef53cd95a49c6","ssdeep":"96:oigW53TB2SzrZYpTbDaOTkSO6mdSInccYGS9FzelVLC:r5TB2SzAT/7kSRRrze3m","tlshash":"45a179f0ee02c891f1be4768f2ddbe0461383726eedc5a4604b45a991ee5a51bd0dccd","first_seen":"2025-01-16T17:05:36.089407Z","last_seen":"2026-06-01T14:49:27.19234Z","times_seen":939,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/logo.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:55:12 GMT\r\netag: \"5595-68cc0141-12016c;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 21909\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P%2F%2BxbbEklLEOn3lXaSJaawmqn%2BZztjkvPCWoROm3vI9RFZjukElj81M7b018lEJ%2BsqWqHsxCSHJ3CvebSZPiK4f5CmocAUVAPz03\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de392939783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":21909,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"88d6fe2e9f01143ea7e308af24c16a34","sha1":"8c350b8219206aab258d026b822da994b0c1a752","sha256":"1c2ecfc8c08a821a4839f2ae0df1d8796a8df233939b537b4e26514fa4f91196","sha512":"a44a19c6bc1974304723b8ac921b711c6c49ef42f95f75db0c1c6c0b8bf22fe066eefbf7dab05625525a53e439f39f1463a85baa22d32dc0f6f237fabd87de55","ssdeep":"384:klNl53tEgE8yQ+4qH4arOcw7KvD8+5M+VVAFDAmY48TPdLFYG/olwubBL:oNlEf8R+tYf7KvD8+5Msa9uDsvbx","tlshash":"d1a2e109616fb913b04fd01b8f6c449a7c253900872df01674a7747aa82fc17fd32728","first_seen":"2023-05-02T10:51:38Z","last_seen":"2026-07-21T07:27:05.550243Z","times_seen":1010,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/logo-6.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /logo-6.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:55:12 GMT\r\netag: \"735f-68cc0141-120172;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 29535\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fwHrngEtFU6CgIaENz7jvLfA9QhsHPwATIZiXAg6coCiUS%2FdJJtd4JnYKMECncMPljpP2DAWRSRSnS0tGld1Mj3w288%2FZmPbHfe7\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de395940783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":29535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"77e75417ed8c7c5aca51a5369f42f866","sha1":"013879d818ab50e5f6852bf6b1244e9b79b2966b","sha256":"e26cda269d5fbdd8e1bdbd101eb709af78d00d078a014379d6f3512c1a920099","sha512":"74779e61409600f2dc93dacd5c67ed027280edb583f04a391e63e9fb953a6927b9c19999ad905f18e9860d8604f7d7ed3eddcbef96da6c55ecf98f4beba1f8b0","ssdeep":"768:r2bR+pfpsNBM5rdb8YA0GnKOMbBA+DUzax4xwl8MtTjZs4:CbROfpsNOAb9cBR4zP2htfp","tlshash":"30d2e1da87c41eb641170a7a818d2c60e1326bec896e5725fc9d380a4f83b519ad7f4b","first_seen":"2023-10-18T06:53:31Z","last_seen":"2026-07-19T16:21:50.517071Z","times_seen":708,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uncrcwap.cc/e77dabfada86ed1c3b850a800b435e9fd1a6a8c4.png","fqdn":"uncrcwap.cc","domain":"uncrcwap.cc","tld":"cc"},"ip":{"addr":"172.67.164.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uncrcwap.cc/","date":"2025-09-24T22:55:12.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uncrcwap.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 15:49:47 GMT","end":"Wed, 17 Dec 2025 16:48:26 GMT"},"fingerprint":{"sha1":"36:4E:52:75:F4:4B:37:33:D6:3D:B2:37:EA:B8:F9:C6:55:6E:C6:BF","sha256":"0E:C6:5A:C0:9C:C4:5C:52:F0:CC:0B:B6:AB:C8:1F:D3:78:DB:39:E4:61:C7:71:36:91:0E:00:66:86:FF:17:11"}}},"request":{"raw":"GET /e77dabfada86ed1c3b850a800b435e9fd1a6a8c4.png HTTP/1.1\r\nHost: uncrcwap.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uncrcwap.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Sep 2025 09:53:50 GMT\r\netag: \"f72-68cc0141-12015f;;;\"\r\nlast-modified: Thu, 18 Sep 2025 12:55:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 3954\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:55:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 219682\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tizLiyBJgqDK8YtO60WYFNWgbiefK7HWP9xbwNUYi3U5UWfmPe8uLSLK0Qn%2Bk%2FH92x0TNDF3dA4HyaHKSh7afIvCC7sdmFySK0FI\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9845de395944783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3954,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"de9d1e4c3a37f48edf1cd6308885ca02","sha1":"e77dabfada86ed1c3b850a800b435e9fd1a6a8c4","sha256":"cc1944a3d800b5cbede23e8acdf984598757033c891d54fbfdaab6f0644b4e32","sha512":"19c51085749a2a683a526327dae33eb16ce17c257fe737faa06a39a023785d5b610f4e1d6975f3c27ebc693559a421a09f178ec483e8db9e53f8eb4c0aaf201a","ssdeep":"","tlshash":"28814b3fe938cb1533e0a09d3ff777143797a46c630524ca820f08b8491a8247e7a6e1","first_seen":"2023-05-02T10:51:38Z","last_seen":"2026-07-03T14:38:56.305587Z","times_seen":247,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"uncrcwap.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"uncrcwap.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}