{"report_id":"e6effad0-9f07-4363-81d8-5fea7caa256c","version":6,"status":"done","tags":[],"date":"2026-02-06T16:11:51Z","url":{"schema":"http","addr":"nct-x.com","fqdn":"nct-x.com","domain":"nct-x.com","tld":"com"},"ip":{"addr":"104.21.11.145","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"nct-x.com/","fqdn":"nct-x.com","domain":"nct-x.com","tld":"com"},"title":"Novacrypt Trading Inc Ltd - High-Frequency Crypto Trading","dom":{"size":13423,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"953232e9e67227ccd20556beb3f7114c","sha1":"a56221168b18c7fc4993dbc321f7eef4b0b29508","sha256":"4a6af84e58c1aed81be6fe5fbeb7db41574ae337b71eee837cc299dce8d48671","sha512":"c8a44e94bb7e13a10bedbfe1444ae8a93691d1a8beab3c37c76650e749b854bca9288916a7e90d1e100380083d49014283423b53084e29eaec8d1176e93c397c","ssdeep":"384:RDKvByPFLPaNYVj92iFdTjkEWqOuaIVFH:WByNLyNYVj9HFdMEIPAH","tlshash":"2b522068b2f12173019382d265e28b7bbeb4e903da5a0164b3ed4bd50fe3c84dd0756a","dom_hash":"domhash7972fcde4642f21157830fb7179adba2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nct-x.com","fqdn":"nct-x.com","domain":"nct-x.com","tld":"com"},"ip":{"addr":"104.21.11.145","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-13T16:11:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"nct-x.com","ip":{"addr":"104.21.11.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-22","domain_rank":0,"first_seen":"2026-02-06T16:06:47.812603Z","last_seen":"2026-02-06T16:06:47.812603Z","alert_count":0,"request_count":6,"received_data":137772,"sent_data":2623,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nct-x.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"nct-x.com","domain":"nct-x.com","tld":"com"},"ip":{"addr":"104.21.11.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-07T05:11:32.485514Z","times_seen":362759,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nct-x.com/script.js","fqdn":"nct-x.com","domain":"nct-x.com","tld":"com"},"ip":{"addr":"104.21.11.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"40572746b8c273bc65a8e4ef9d48eaff","sha1":"e410ec263815494fd7e7c1307f410a6962a277c8","sha256":"faa00292ca5c0bfa841cc3dc10ceccdaa46296728c27f16350d4540d42a4440f","sha512":"03a164bc84bb9cf16cbe08bb5addaa183a6e34a8e0b46f752997ab7513afa49f2b1f5ccb36e6e59250fa434d6d64be4726c2a2acb6e36bc7f3adbf46df900b1a","ssdeep":"96:NyE6FzvFgeB6xp+SW2xnOxnpl9BcRag9zNMyjVhA6HwqUF8ZuRYrXYmnDd7R:NypbeWgOxcRX9zN1DqlF8ZuRYrXjlR","tlshash":"33f1fc9a223a10604ab7b3b7eb97529dfa392013700586497f9cc7410fb1950bdb3eed","size":7963,"data":"","first_seen":"2026-02-06T16:06:51.706769Z","last_seen":"2026-02-06T16:11:52.067749Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nct-x.com/api/images/faviconn.jpg","fqdn":"nct-x.com","domain":"nct-x.com","tld":"com"},"ip":{"addr":"104.21.11.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nct-x.com/","date":"2026-02-06T16:11:24.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nct-x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 05:43:32 GMT","end":"Wed, 22 Apr 2026 06:42:02 GMT"},"fingerprint":{"sha1":"CC:A9:E1:3A:C9:1C:4F:B5:D0:00:DA:FF:C4:BD:BB:F8:46:34:71:1E","sha256":"24:06:E9:3F:B8:59:8A:44:3D:45:F0:E2:0C:9B:1F:A7:AB:51:FE:D6:35:CC:86:AE:24:22:19:47:51:51:0C:53"}}},"request":{"raw":"GET /api/images/faviconn.jpg HTTP/1.1\r\nHost: nct-x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nct-x.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 16:11:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 45116\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Feb 2026 16:06:25 GMT\r\nlast-modified: Wed, 07 Jan 2026 10:10:18 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 299\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ig63Z7fbxF2uuano92W3vnRYFx%2B0ZLdnIWOgCWXQ4gRtAtdTRrQ%2BYf6F4WOXgPMdcsR8u%2B2v2Dyfm02j%2FYQ2Hvv872%2BHpqM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9c9bec553d2c568f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":45116,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 310x322, components 3","md5":"7ea0c62608aff247d889046f7c4f811b","sha1":"da232b48f7c31cee90697b7099ef9ff8fad180fe","sha256":"4f1c6ad23bc3a964d395bfad9b43eb9ad26e035b115b53a6bdd6e8f309fe6872","sha512":"e58f10f760003d90b6e605591967c30351c07a1718adaf9a8591a414c57c2533ea99905d3ed844759fbd27073624e41177bd770a770ba9607795f867fe68eef0","ssdeep":"768:xtsiDDPYnFKTtVKEyAm9ymoGsMJOBtWPW+UBXi9cYCoSj7qYGPi25BTKOXN67g3:XDDDgF4VKEh0JTvgbRi9MyYqN5oE4g3","tlshash":"9013ceb10e730f25f8fc4ba949820fda08a0bb66fb5f5e15515542d4cd1aee920e98f2","first_seen":"2026-02-06T16:06:51.708192Z","last_seen":"2026-02-06T16:11:52.065228Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nct-x.com/","fqdn":"nct-x.com","domain":"nct-x.com","tld":"com"},"ip":{"addr":"104.21.11.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-06T16:11:23.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nct-x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 05:43:32 GMT","end":"Wed, 22 Apr 2026 06:42:02 GMT"},"fingerprint":{"sha1":"CC:A9:E1:3A:C9:1C:4F:B5:D0:00:DA:FF:C4:BD:BB:F8:46:34:71:1E","sha256":"24:06:E9:3F:B8:59:8A:44:3D:45:F0:E2:0C:9B:1F:A7:AB:51:FE:D6:35:CC:86:AE:24:22:19:47:51:51:0C:53"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nct-x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 16:11:24 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 07 Jan 2026 20:15:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2F7Vbk8XSRExXJsN79q1ChyC6hSgjETs3ZRCsJOD1FEM4HCmm69cEAQllwB1dojTXMxh7hmq969jxbcq2tTK1S8fB0%2F6YAg%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c9bec527b74712d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":12239,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"c4551a61118604b1936b732e84494815","sha1":"fc4428a48df0eb42c2569386c5cb1491b7e4e776","sha256":"ea12830545fb5c208c7927b5214fbef9b39d17d154cdafdbde3dea5af76eedfb","sha512":"7c8e4312b4285cb6204ffe37c43ae4981367bc28e51c00ee396c7f017a4a37eecb04bdec73d503ad96f00ac89238092a3464239cb95194c5dab5b6fe7b239e88","ssdeep":"192:O7hBo/W2nk4HtMcfFlpV4D4zKbvUcfMsV:O7hBo+2k4Mcf7pVW4zKbvUcfMsV","tlshash":"e142a778a1d261334277c2d66a618bbafee49103d68a522033fc579b5ff3d40ed17452","first_seen":"2026-02-06T16:11:52.066021Z","last_seen":"2026-02-06T16:11:52.066021Z","times_seen":1,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":20,"dns":1,"connect":1,"send":0,"wait":119,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nct-x.com/styles.css","fqdn":"nct-x.com","domain":"nct-x.com","tld":"com"},"ip":{"addr":"104.21.11.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nct-x.com/","date":"2026-02-06T16:11:24.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nct-x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 05:43:32 GMT","end":"Wed, 22 Apr 2026 06:42:02 GMT"},"fingerprint":{"sha1":"CC:A9:E1:3A:C9:1C:4F:B5:D0:00:DA:FF:C4:BD:BB:F8:46:34:71:1E","sha256":"24:06:E9:3F:B8:59:8A:44:3D:45:F0:E2:0C:9B:1F:A7:AB:51:FE:D6:35:CC:86:AE:24:22:19:47:51:51:0C:53"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: nct-x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nct-x.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 16:11:24 GMT\r\ncontent-type: text/css\r\ncontent-length: 2451\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Feb 2026 16:06:25 GMT\r\nlast-modified: Wed, 07 Jan 2026 12:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 299\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R77huDxCfNEud1RCzaYS%2FIz1HghOZz6LBH8q3muN3N6uqj9i3LN95c89Lhe9IHjLghbcZS0K4fwYngEPi1moMR8TbgkVIRs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c9bec546d23568f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12980,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"27da7e844c0499966b1a166765c9ce0c","sha1":"c304d475f2e2181774d240a0a9e9ca2573af393c","sha256":"8d1f434e3a5aac29e42ce21d87de3f9d5ddc5a8d446dc652986b4a7f21e59c5b","sha512":"2c968f2ad777495c1d8274e95e9cdf0275be6191c78fb641bccc5ebdbecf372e1e9dd41a69cd1f0c1c7043b13bdb9481dc0d53a976ee3611b001d0286a0e7f2a","ssdeep":"192:omsCQxnNVNfeS3TfQnAkL3soaKyheIfDEDun9BKS5UIBhFrHQ3DEKAUz0bOn:3","tlshash":"ad42535c661161566633afb9abf6871ee3c4a063ce06433d7bda52404ff12b452e2f8c","first_seen":"2026-02-06T16:06:51.701427Z","last_seen":"2026-02-06T16:11:52.066937Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nct-x.com/script.js","fqdn":"nct-x.com","domain":"nct-x.com","tld":"com"},"ip":{"addr":"104.21.11.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nct-x.com/","date":"2026-02-06T16:11:24.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nct-x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 05:43:32 GMT","end":"Wed, 22 Apr 2026 06:42:02 GMT"},"fingerprint":{"sha1":"CC:A9:E1:3A:C9:1C:4F:B5:D0:00:DA:FF:C4:BD:BB:F8:46:34:71:1E","sha256":"24:06:E9:3F:B8:59:8A:44:3D:45:F0:E2:0C:9B:1F:A7:AB:51:FE:D6:35:CC:86:AE:24:22:19:47:51:51:0C:53"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: nct-x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nct-x.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 16:11:24 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2096\r\nlast-modified: Wed, 07 Jan 2026 12:27:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 299\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ey2M%2B8JbAva%2BljXKxp0ooIRp4GuB93%2Fx5J5xqPhiSscZmX4RMdcw1g4wqsWy2RfTp%2FCQrrxFR4GAbfktmtsTayzQINQFtM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9c9bec547d26568f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7963,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"40572746b8c273bc65a8e4ef9d48eaff","sha1":"e410ec263815494fd7e7c1307f410a6962a277c8","sha256":"faa00292ca5c0bfa841cc3dc10ceccdaa46296728c27f16350d4540d42a4440f","sha512":"03a164bc84bb9cf16cbe08bb5addaa183a6e34a8e0b46f752997ab7513afa49f2b1f5ccb36e6e59250fa434d6d64be4726c2a2acb6e36bc7f3adbf46df900b1a","ssdeep":"96:NyE6FzvFgeB6xp+SW2xnOxnpl9BcRag9zNMyjVhA6HwqUF8ZuRYrXYmnDd7R:NypbeWgOxcRX9zN1DqlF8ZuRYrXjlR","tlshash":"33f1fc9a223a10604ab7b3b7eb97529dfa392013700586497f9cc7410fb1950bdb3eed","first_seen":"2026-02-06T16:06:51.706769Z","last_seen":"2026-02-06T16:11:52.067749Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nct-x.com/novacrypt%20logo.png","fqdn":"nct-x.com","domain":"nct-x.com","tld":"com"},"ip":{"addr":"104.21.11.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nct-x.com/","date":"2026-02-06T16:11:24.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nct-x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 05:43:32 GMT","end":"Wed, 22 Apr 2026 06:42:02 GMT"},"fingerprint":{"sha1":"CC:A9:E1:3A:C9:1C:4F:B5:D0:00:DA:FF:C4:BD:BB:F8:46:34:71:1E","sha256":"24:06:E9:3F:B8:59:8A:44:3D:45:F0:E2:0C:9B:1F:A7:AB:51:FE:D6:35:CC:86:AE:24:22:19:47:51:51:0C:53"}}},"request":{"raw":"GET /novacrypt%20logo.png HTTP/1.1\r\nHost: nct-x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nct-x.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 16:11:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 54085\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Feb 2026 16:06:25 GMT\r\nlast-modified: Wed, 07 Jan 2026 10:20:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 299\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gxdlW%2FUkRg9vTivm3EKMNKV09eucclI2L%2FguDFVphX7w%2BO1D71Go9EvOvhWAW0lS9wh8B0zPvxKGVdVHTST28tZCqqF1J1E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9c9bec547d24568f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54085,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1242 x 384, 8-bit/color RGBA, non-interlaced","md5":"13154820ba8836565352d987cec0f659","sha1":"c2c42a19991d2a2951e24c5cf7f3984b1b78c97e","sha256":"a38a4957c76cea4dfabde481efd8387bfb681c6192ff217f641493f8d290cf17","sha512":"5243e8c52d8c03d14b1c31746237f45c9a182716e96553ae5fa88ed5657ea049c59c6fb17b0589014eaf51f9ee53d1073f3228c4431410e2e0d96b205ae1c1fc","ssdeep":"1536:sAuKYT+1TfTpWxrJRJ3UOamvi0DIKVm1x:PuKY4T7kxNvamv9Tix","tlshash":"f433f198ca9c197ede0f953786575f4a46b1bef70c0cc3614fa1bd194893b91ca702a3","first_seen":"2026-02-06T16:06:51.703346Z","last_seen":"2026-02-06T16:11:52.068737Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nct-x.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"nct-x.com","domain":"nct-x.com","tld":"com"},"ip":{"addr":"104.21.11.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nct-x.com/","date":"2026-02-06T16:11:24.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nct-x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 05:43:32 GMT","end":"Wed, 22 Apr 2026 06:42:02 GMT"},"fingerprint":{"sha1":"CC:A9:E1:3A:C9:1C:4F:B5:D0:00:DA:FF:C4:BD:BB:F8:46:34:71:1E","sha256":"24:06:E9:3F:B8:59:8A:44:3D:45:F0:E2:0C:9B:1F:A7:AB:51:FE:D6:35:CC:86:AE:24:22:19:47:51:51:0C:53"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: nct-x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nct-x.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Fri, 06 Feb 2026 16:59:24 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JIdU9SzxAIVAb8uXFGb3epwSB2oE5jWOdtUjbk%2BTMQ49H2krYg%2FVfW3t7ct66QSyhr4rV1TYUQphOZcxyiYhe2WMw%2Frsr70%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 16:11:24 GMT\r\ncf-ray: 9c9bec547d25568f-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-07T05:11:32.485514Z","times_seen":362759,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}