{"report_id":"ea114bc2-2333-4f9a-b5d8-d766a0cd989e","version":6,"status":"done","tags":[],"date":"2026-03-14T12:08:29Z","url":{"schema":"http","addr":"grok49k-cryptoslate.com","fqdn":"grok49k-cryptoslate.com","domain":"grok49k-cryptoslate.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":0,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"grok49k-cryptoslate.com/","fqdn":"grok49k-cryptoslate.com","domain":"grok49k-cryptoslate.com","tld":"com"},"title":"OmniPact Secures $50 Million to Advance Trust Infrastructure | CryptoSlate","dom":{"size":308833,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65186)","md5":"eacfcb629e7ff17ade79708eb86f7d72","sha1":"716dc8d2c0caa14a92f56b739e6f06acf11c67fe","sha256":"c3fe3053382c9efe317ecfa391244cd614765c35d20fc0e2ebfa50c2cd56d5bd","sha512":"8061234db712b54985503185c0fcd30a6b1d3afc7332feaa9fa0d1c3a70b5f4d22f6f5bd3177a737bce00be05b658217ac10bfad78537f59ad6460d436925ddd","ssdeep":"3072:Q5/abLtDKDBDh9hWcqcDKDBDfS3rT1e9eziAi:Q5/abLEWpPemAi","tlshash":"1a6433f2196ca02b87fac1d4f930ef69e241861dcc8786dd67fc438c47e9c56b999218","dom_hash":"domhash1c1da9a88dd00164d75932c225b99312","first_seen":"2026-03-14T12:08:34.357795Z","last_seen":"2026-03-14T12:09:48.936866Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"grok49k-cryptoslate.com","fqdn":"grok49k-cryptoslate.com","domain":"grok49k-cryptoslate.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":0,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-18T12:08:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-14","alert":"Phishing Block","trigger":"grok49k-cryptoslate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-08T22:19:32.591288Z","alert_count":0,"request_count":1,"received_data":11282,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cryptoslate.com","ip":{"addr":"104.25.91.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-08-04","domain_rank":45723,"first_seen":"2017-12-13T08:51:45Z","last_seen":"2026-03-10T17:23:46.060313Z","alert_count":0,"request_count":1,"received_data":1152567,"sent_data":573,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"grok49k-cryptoslate.com","ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"domain_registered":"2026-03-13","domain_rank":0,"first_seen":"2026-03-14T12:08:30.164305Z","last_seen":"2026-03-14T12:08:30.164305Z","alert_count":10,"request_count":10,"received_data":2122833,"sent_data":5126,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-08T22:15:01.701196Z","alert_count":0,"request_count":4,"received_data":85228,"sent_data":2152,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"grok49k-cryptoslate.com/","fqdn":"grok49k-cryptoslate.com","domain":"grok49k-cryptoslate.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"8e97e26f6649ae53ee5c226d080c1b6f","sha1":"a6629873663a59457f804cf75d6cad5074f125b2","sha256":"9cd1315fc74685fddc7bb9e52cc5b6d7461b4f5f804d26a832983995ffe5f8d8","sha512":"64d48950f5e9fefa785542ad5e241cb8f3dc713b36acce7ad7e95674b75a2cad17ebd7ffc9e103dcab17e05934f4693026b6af2060df0339dba9c067a0a0f7eb","ssdeep":"","tlshash":"b690041c1314c7351cd347414501d4411d05145f403d477c1c0374c35034c445411d50","size":47,"data":"","first_seen":"2023-04-11T00:43:32Z","last_seen":"2026-08-10T01:59:07.586423Z","times_seen":5537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"grok49k-cryptoslate.com/wp-content/uploads/2026/03/xai2.png","fqdn":"grok49k-cryptoslate.com","domain":"grok49k-cryptoslate.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok49k-cryptoslate.com/","date":"2026-03-14T12:08:06.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok49k-cryptoslate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 12:33:33 GMT","end":"Thu, 11 Jun 2026 12:33:32 GMT"},"fingerprint":{"sha1":"9D:E7:88:5E:01:87:A6:EE:A9:9D:43:60:1B:81:2F:3C:38:D9:7F:97","sha256":"C1:71:60:12:55:60:D2:9D:C3:B0:EF:E0:5B:6C:2F:D6:F7:34:CF:1B:CB:CD:DA:F3:44:58:4A:D3:97:07:AC:3C"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/xai2.png HTTP/1.1\r\nHost: grok49k-cryptoslate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok49k-cryptoslate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 12:08:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 25 Jan 2026 23:10:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 79773\r\ndate: Sat, 14 Mar 2026 12:08:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79773,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 529, 8-bit/color RGBA, non-interlaced","md5":"8c9938045f61127d87c4e3a32a660ab3","sha1":"b84936dd9fb67c2a7bb9d7c28d3e3a69b18e7232","sha256":"a757a53c6e66e32bcb26d7a2fdea8373288b9985b39efff5722c44542abf7dee","sha512":"2763c72e49121ee88988ff16a6ada343522248ecbbb9511b489064a7347cabb065392c8253ac8fc3a313537b6c91b25c167ed4a6e50eb39fcb37da7818035fcb","ssdeep":"1536:vD947AxWBXPpkRj4a5SUQaycm8jM4Yov0fclucqtAPkjXfm7gqbww8b:WGWTkRsyS5ayndJfquFtAPAXfmsq0w8b","tlshash":"0d73021350e0f6ae317a9799cadf1838ae4b5a1e35a75dfa6c45c4cf2a060402cd1e3f","first_seen":"2025-10-27T05:31:26.766124Z","last_seen":"2026-06-28T10:12:22.215725Z","times_seen":29,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-14","alert":"Phishing Block","trigger":"grok49k-cryptoslate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok49k-cryptoslate.com/wp-content/themes/cryptoslate-2020/icons/android-icon-192x192.png","fqdn":"grok49k-cryptoslate.com","domain":"grok49k-cryptoslate.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok49k-cryptoslate.com/","date":"2026-03-14T12:08:06.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok49k-cryptoslate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 12:33:33 GMT","end":"Thu, 11 Jun 2026 12:33:32 GMT"},"fingerprint":{"sha1":"9D:E7:88:5E:01:87:A6:EE:A9:9D:43:60:1B:81:2F:3C:38:D9:7F:97","sha256":"C1:71:60:12:55:60:D2:9D:C3:B0:EF:E0:5B:6C:2F:D6:F7:34:CF:1B:CB:CD:DA:F3:44:58:4A:D3:97:07:AC:3C"}}},"request":{"raw":"GET /wp-content/themes/cryptoslate-2020/icons/android-icon-192x192.png HTTP/1.1\r\nHost: grok49k-cryptoslate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok49k-cryptoslate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 12:08:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 19 May 2020 16:45:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5236\r\ndate: Sat, 14 Mar 2026 12:08:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5236,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced","md5":"c1ed8ea9572bf75bcdd8381d406cd25c","sha1":"d2250090d3a046eef0a9e5f755e0ce2f6d216326","sha256":"36f23493e5075a616258c0cf474fb02bf3dacfd5fc30af8c2f1239d1c98d535c","sha512":"5f7b6f102469af3d368bfc26725043dfeb309679f8b128b63188988d22e336703edb168241079bd8f99831f5ad1a4b54cd8378237f137ee8dc188f1284bf8185","ssdeep":"96:PyhwxkNNo+elbOUKJNSDEkUayw3sty8Ld4v+O0YK/CwbK9s4GWFLCo:3xk4+elq/JNfvwYpd8Q/ui4GW9Co","tlshash":"0bb17eb6b0506561df0883769c28118f735c4f1c5a71612e7a13526a6df947ff6fc231","first_seen":"2025-11-19T23:58:42.272585Z","last_seen":"2026-08-07T09:10:04.515484Z","times_seen":60,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-14","alert":"Phishing Block","trigger":"grok49k-cryptoslate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grok49k-cryptoslate.com/","date":"2026-03-14T12:08:06.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://grok49k-cryptoslate.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Mar 2026 15:28:54 GMT\r\nexpires: Fri, 12 Mar 2027 15:28:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nage: 160753\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-08-03T22:48:02.319545Z","times_seen":7902,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":148,"dns":0,"connect":21,"send":0,"wait":27,"receive":5,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok49k-cryptoslate.com/wp-content/cache/autoptimize/css/autoptimize_5c70f501ae51a6d594d3c6bf2da42586.css","fqdn":"grok49k-cryptoslate.com","domain":"grok49k-cryptoslate.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grok49k-cryptoslate.com/","date":"2026-03-14T12:08:06.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok49k-cryptoslate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 12:33:33 GMT","end":"Thu, 11 Jun 2026 12:33:32 GMT"},"fingerprint":{"sha1":"9D:E7:88:5E:01:87:A6:EE:A9:9D:43:60:1B:81:2F:3C:38:D9:7F:97","sha256":"C1:71:60:12:55:60:D2:9D:C3:B0:EF:E0:5B:6C:2F:D6:F7:34:CF:1B:CB:CD:DA:F3:44:58:4A:D3:97:07:AC:3C"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/css/autoptimize_5c70f501ae51a6d594d3c6bf2da42586.css HTTP/1.1\r\nHost: grok49k-cryptoslate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok49k-cryptoslate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 12:08:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 Mar 2026 18:01:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 143639\r\ndate: Sat, 14 Mar 2026 12:08:06 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1009535,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (56168)","md5":"4d3083f7c1b6a6c2e12d30bdd52f8943","sha1":"849b3670f39a8701dd87ba7c5536b2de1534eba8","sha256":"1fe7fed8316be8921006bb5bb8f139aaf94a4996083910fbe4fa5e89df555b77","sha512":"f0bb59abf807c7f3609430fe0f3f25405b12c169431af65b0b1475da40ae3e34271de01b2b6db56f40a562b4cf4c7ad6a4330420c0400701af0ed20eacada87f","ssdeep":"24576:3ZLwm1KA9kGDj3Cyg5lrceb0qTx9VO6k2u5SOV+UQ3Zo/0kPliGoo42utW2XCVGs:yO6k2u5SOV+UQ3ZaiGooZutW2XCVGs","tlshash":"6a25e8126c50603b78674d7b79c8bfa862b5c612c60206fcb131d40a7efa99e71af357","first_seen":"2026-03-14T12:08:34.371009Z","last_seen":"2026-08-03T03:02:24.454145Z","times_seen":36,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-14","alert":"Phishing Block","trigger":"grok49k-cryptoslate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok49k-cryptoslate.com/wp-content/uploads/2026/03/xai1.png","fqdn":"grok49k-cryptoslate.com","domain":"grok49k-cryptoslate.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok49k-cryptoslate.com/","date":"2026-03-14T12:08:06.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok49k-cryptoslate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 12:33:33 GMT","end":"Thu, 11 Jun 2026 12:33:32 GMT"},"fingerprint":{"sha1":"9D:E7:88:5E:01:87:A6:EE:A9:9D:43:60:1B:81:2F:3C:38:D9:7F:97","sha256":"C1:71:60:12:55:60:D2:9D:C3:B0:EF:E0:5B:6C:2F:D6:F7:34:CF:1B:CB:CD:DA:F3:44:58:4A:D3:97:07:AC:3C"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/xai1.png HTTP/1.1\r\nHost: grok49k-cryptoslate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok49k-cryptoslate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 12:08:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 25 Jan 2026 20:03:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 432895\r\ndate: Sat, 14 Mar 2026 12:08:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":432895,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 559, 8-bit/color RGB, non-interlaced","md5":"796db8d8d1a6a3e5d09edcf43a769090","sha1":"6d1fac06be6a391e919ee27410ae61dc987fb59f","sha256":"b9c24a6354bb8aa9283f814a53e0d07ba38ea143f3e2f4f5af3a7db952640d9b","sha512":"83caf857d80d853eda0c29bfb940b72455f753a628fb025ef1944469c201978cb541ef98f297496de0264069a82a55307c7720b673f54a0b1aef5504b1e0fa92","ssdeep":"12288:CNMcsfTwpKSif92YjeSXMBKRgIAvcBHj6zs:CmcsfMp5ifD9XO7csY","tlshash":"f694235b164da97019621238633c29acf347c0bfc8aa9c620cb5c63f7dad62df316d56","first_seen":"2025-04-22T21:45:54.217609Z","last_seen":"2026-06-28T10:12:22.218151Z","times_seen":34,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":140,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-14","alert":"Phishing Block","trigger":"grok49k-cryptoslate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok49k-cryptoslate.com/wp-content/uploads/2026/03/xai3.jpg","fqdn":"grok49k-cryptoslate.com","domain":"grok49k-cryptoslate.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok49k-cryptoslate.com/","date":"2026-03-14T12:08:06.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok49k-cryptoslate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 12:33:33 GMT","end":"Thu, 11 Jun 2026 12:33:32 GMT"},"fingerprint":{"sha1":"9D:E7:88:5E:01:87:A6:EE:A9:9D:43:60:1B:81:2F:3C:38:D9:7F:97","sha256":"C1:71:60:12:55:60:D2:9D:C3:B0:EF:E0:5B:6C:2F:D6:F7:34:CF:1B:CB:CD:DA:F3:44:58:4A:D3:97:07:AC:3C"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/xai3.jpg HTTP/1.1\r\nHost: grok49k-cryptoslate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok49k-cryptoslate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 12:08:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 25 Jan 2026 23:09:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 60675\r\ndate: Sat, 14 Mar 2026 12:08:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60675,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 1024x576, components 3","md5":"48ad0df4269b119352170a3781617e0c","sha1":"2b74a016fa5ccfcf37f6d0f06945eff7e5eefbf6","sha256":"e79af51d0b1922e6ceca1840ebe4ff2b53f2af23156995857978af8f051a6515","sha512":"659efafa804ca57de7cd7689028eb7b9ba9822c758b6bac0995fbe07a640ff780631db71dd0a43f942f1e015067763bee098494385e47a59bfbe9d2f02e02bba","ssdeep":"1536:2YPw6v8RfmCwX9GOm/eBiqe7HkwV+eaCvJDfCp/wevy+06v3l:Z4uNzNwnHkwV+/gJDstnV","tlshash":"8853021eb9309786ebd64df0c7715f8a63333f2480f68ca4e6359a79b9049e4482d06b","first_seen":"2025-01-22T06:05:51.033603Z","last_seen":"2026-06-28T10:12:22.211292Z","times_seen":36,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":178,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-14","alert":"Phishing Block","trigger":"grok49k-cryptoslate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok49k-cryptoslate.com/wp-content/themes/cryptoslate-2020/icons/favicon-16x16.png","fqdn":"grok49k-cryptoslate.com","domain":"grok49k-cryptoslate.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok49k-cryptoslate.com/","date":"2026-03-14T12:08:06.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok49k-cryptoslate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 12:33:33 GMT","end":"Thu, 11 Jun 2026 12:33:32 GMT"},"fingerprint":{"sha1":"9D:E7:88:5E:01:87:A6:EE:A9:9D:43:60:1B:81:2F:3C:38:D9:7F:97","sha256":"C1:71:60:12:55:60:D2:9D:C3:B0:EF:E0:5B:6C:2F:D6:F7:34:CF:1B:CB:CD:DA:F3:44:58:4A:D3:97:07:AC:3C"}}},"request":{"raw":"GET /wp-content/themes/cryptoslate-2020/icons/favicon-16x16.png HTTP/1.1\r\nHost: grok49k-cryptoslate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok49k-cryptoslate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 12:08:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 19 May 2020 16:45:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 448\r\ndate: Sat, 14 Mar 2026 12:08:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":448,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced","md5":"3d041397481846b1b8f47620b58f9bfa","sha1":"6378dd65cf45acf3a29c7769f607cb41f3413919","sha256":"897cea21fd87b61b4ced02fa94e4e118fd6e8c66e260ce52ef34863bd32573fd","sha512":"2cf58856f3bc3cefc2431e41d575db577a7429a5dd9236886b12e76757165637ffa29ed13f8607b09d70a93f94bdb9a1d07ecd4f2d13fe30ce0186f08879dc82","ssdeep":"","tlshash":"8cf0bb9f3661f074c023002941844f31dc35d6004dd940e0c81be719b67e4d480c5d00","first_seen":"2025-11-19T23:58:42.356066Z","last_seen":"2026-08-07T09:10:04.542359Z","times_seen":47,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-14","alert":"Phishing Block","trigger":"grok49k-cryptoslate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grok49k-cryptoslate.com/","date":"2026-03-14T12:08:06.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://grok49k-cryptoslate.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Mar 2026 15:28:54 GMT\r\nexpires: Fri, 12 Mar 2027 15:28:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nage: 160753\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-08-03T22:48:02.319545Z","times_seen":7902,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":103,"dns":1,"connect":21,"send":0,"wait":26,"receive":19,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grok49k-cryptoslate.com/","date":"2026-03-14T12:08:06.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://grok49k-cryptoslate.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Mar 2026 15:28:54 GMT\r\nexpires: Fri, 12 Mar 2027 15:28:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nage: 160753\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-08-03T22:48:02.319545Z","times_seen":7902,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":150,"dns":0,"connect":23,"send":0,"wait":23,"receive":5,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grok49k-cryptoslate.com/","date":"2026-03-14T12:08:06.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://grok49k-cryptoslate.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Mar 2026 15:28:54 GMT\r\nexpires: Fri, 12 Mar 2027 15:28:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nage: 160753\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-08-03T22:48:02.319545Z","times_seen":7902,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":98,"dns":0,"connect":24,"send":0,"wait":22,"receive":6,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok49k-cryptoslate.com/","fqdn":"grok49k-cryptoslate.com","domain":"grok49k-cryptoslate.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-14T12:08:06.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok49k-cryptoslate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 12:33:33 GMT","end":"Thu, 11 Jun 2026 12:33:32 GMT"},"fingerprint":{"sha1":"9D:E7:88:5E:01:87:A6:EE:A9:9D:43:60:1B:81:2F:3C:38:D9:7F:97","sha256":"C1:71:60:12:55:60:D2:9D:C3:B0:EF:E0:5B:6C:2F:D6:F7:34:CF:1B:CB:CD:DA:F3:44:58:4A:D3:97:07:AC:3C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: grok49k-cryptoslate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Fri, 13 Mar 2026 06:51:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 27960\r\ndate: Sat, 14 Mar 2026 12:08:06 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":308977,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17941)","md5":"2e0db030ae7694d6078972c46857958b","sha1":"5f229371f4eeecee5c000a18cf46dca1e68ca26e","sha256":"9ed518d822434f104d3983fe7007c3adde35dbc6d561b0b6792eb82ec6df619d","sha512":"e18d87bbe4b66c2802a5062a0fd62b1ffe37a69fee9b697292912588e12c77f3cb2a2b1e027b5e7eb1799df3e29a2f7b3d4ecc845a1b12c138a4705a00c545bf","ssdeep":"3072:98WGK+DDnDtDQdQX+oeDnDtDZslcajRv21W+Wv:98WGK+fXD2WNv","tlshash":"696432f619aca02757fa81d5f870efa9e101961dcc8786dc67fc438c4be9c46b99d208","first_seen":"2026-03-14T12:08:34.381606Z","last_seen":"2026-03-14T12:09:48.94285Z","times_seen":2,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":160,"dns":28,"connect":30,"send":0,"wait":82,"receive":1,"ssl":99},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-14","alert":"Phishing Block","trigger":"grok49k-cryptoslate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Arimo:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grok49k-cryptoslate.com/","date":"2026-03-14T12:08:06.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Arimo:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok49k-cryptoslate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Mar 2026 12:08:06 GMT\r\ndate: Sat, 14 Mar 2026 12:08:06 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10596,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"aa24bf32bf6a8ff0f90aaa34b5ce7c84","sha1":"886dcd867074a0f2aab5b9080196060070f9afc0","sha256":"3b4d0f801e12d9417bf0eb9bc3280d502eac595357f832cec96648c4bcd2c929","sha512":"e031a103482e4aff33b1f4d2316049ca4fe198f3687f4b58e378766b7275486d642d46910a000c5feb213f1cf83a5e15067ab9539c273b0260b82885e5543cce","ssdeep":"192:VYFWLfOsSwv38D1YmWkYOzSXvQ88MYjWtxO2S6vJ8lTYcWuCOVSpva8Gq:i5GHAd2XV","tlshash":"5f228ba5145bd4409e870cc277cf7e36ae5e60556440c1baaffe08ccac9ac224395b1e","first_seen":"2025-09-28T04:47:35.11734Z","last_seen":"2026-05-17T10:03:26.414585Z","times_seen":198,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":150,"dns":0,"connect":21,"send":0,"wait":36,"receive":0,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok49k-cryptoslate.com/wp-content/themes/cryptoslate-2020/images/newsletter-hero-modal-01.jpg","fqdn":"grok49k-cryptoslate.com","domain":"grok49k-cryptoslate.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok49k-cryptoslate.com/","date":"2026-03-14T12:08:06.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok49k-cryptoslate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 12:33:33 GMT","end":"Thu, 11 Jun 2026 12:33:32 GMT"},"fingerprint":{"sha1":"9D:E7:88:5E:01:87:A6:EE:A9:9D:43:60:1B:81:2F:3C:38:D9:7F:97","sha256":"C1:71:60:12:55:60:D2:9D:C3:B0:EF:E0:5B:6C:2F:D6:F7:34:CF:1B:CB:CD:DA:F3:44:58:4A:D3:97:07:AC:3C"}}},"request":{"raw":"GET /wp-content/themes/cryptoslate-2020/images/newsletter-hero-modal-01.jpg HTTP/1.1\r\nHost: grok49k-cryptoslate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok49k-cryptoslate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 12:08:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 03 Feb 2026 18:39:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 215853\r\ndate: Sat, 14 Mar 2026 12:08:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":215853,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1536x1024, components 3","md5":"128b1c670f65a70366ebdead2cc72961","sha1":"c2c3b69a5db36b820db35789b1f64f8023f8c4d0","sha256":"c4c5638aad380d8c5787d5af40de47ffc04325186069c355ac293f815e54da17","sha512":"8711b40675d1b07421e7898d26e82a72112038ea92e7dcc55a34aa214fd566a67d7fe939851040824376f3b622d4b21f4d7861987ca3aacfe7e99387d3afcd10","ssdeep":"3072:zDYgOd7SKom2+pEDW1rrGCQ3slkdBp6xxIktKDVhtuDFIA675xT9bt+zMmiLiUmV:nYgueiDTSyHIktKDkW73XAeLiKrbWp","tlshash":"f924129fd1cf4ee308816ab1cf5e4d1bf8937d8a48930d04766dc4d6ea236c9e786502","first_seen":"2026-03-14T12:08:34.387721Z","last_seen":"2026-08-07T09:10:04.488248Z","times_seen":44,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-14","alert":"Phishing Block","trigger":"grok49k-cryptoslate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok49k-cryptoslate.com/wp-content/themes/cryptoslate-2020/images/cryptoslate-icon.jpg","fqdn":"grok49k-cryptoslate.com","domain":"grok49k-cryptoslate.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok49k-cryptoslate.com/","date":"2026-03-14T12:08:06.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok49k-cryptoslate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 12:33:33 GMT","end":"Thu, 11 Jun 2026 12:33:32 GMT"},"fingerprint":{"sha1":"9D:E7:88:5E:01:87:A6:EE:A9:9D:43:60:1B:81:2F:3C:38:D9:7F:97","sha256":"C1:71:60:12:55:60:D2:9D:C3:B0:EF:E0:5B:6C:2F:D6:F7:34:CF:1B:CB:CD:DA:F3:44:58:4A:D3:97:07:AC:3C"}}},"request":{"raw":"GET /wp-content/themes/cryptoslate-2020/images/cryptoslate-icon.jpg HTTP/1.1\r\nHost: grok49k-cryptoslate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok49k-cryptoslate.com/wp-content/cache/autoptimize/css/autoptimize_5c70f501ae51a6d594d3c6bf2da42586.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 12:08:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 23 Dec 2025 18:02:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3671\r\ndate: Sat, 14 Mar 2026 12:08:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3671,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"14682f9406d311d01b51b6ede052079d","sha1":"103777809b9fd42ff676c73d8ac4ef7257b969a0","sha256":"cbb00b970d1ed69ad337dddf635a435aacc39c8f61aa772fbaea4d4dc7371ef6","sha512":"e625a41de71b12b727ffc6b622b6c8087f18c73956b68b5be993cd69104b6f2b3f9807c529c9d01e1744b2c514bf52d0f90ac3fd699a0818744d951092808735","ssdeep":"","tlshash":"fa712b996b14c516fa7c127956db87912f23d62112d6873523c53f3c4fbb904ac254e0","first_seen":"2026-03-14T12:08:34.389732Z","last_seen":"2026-08-07T09:10:04.492462Z","times_seen":44,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-14","alert":"Phishing Block","trigger":"grok49k-cryptoslate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok49k-cryptoslate.com/wp-content/themes/cryptoslate-2020/images/chainwire-icon.png","fqdn":"grok49k-cryptoslate.com","domain":"grok49k-cryptoslate.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok49k-cryptoslate.com/","date":"2026-03-14T12:08:06.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok49k-cryptoslate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 12:33:33 GMT","end":"Thu, 11 Jun 2026 12:33:32 GMT"},"fingerprint":{"sha1":"9D:E7:88:5E:01:87:A6:EE:A9:9D:43:60:1B:81:2F:3C:38:D9:7F:97","sha256":"C1:71:60:12:55:60:D2:9D:C3:B0:EF:E0:5B:6C:2F:D6:F7:34:CF:1B:CB:CD:DA:F3:44:58:4A:D3:97:07:AC:3C"}}},"request":{"raw":"GET /wp-content/themes/cryptoslate-2020/images/chainwire-icon.png HTTP/1.1\r\nHost: grok49k-cryptoslate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok49k-cryptoslate.com/wp-content/cache/autoptimize/css/autoptimize_5c70f501ae51a6d594d3c6bf2da42586.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 12:08:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 06 Nov 2025 20:33:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2703\r\ndate: Sat, 14 Mar 2026 12:08:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2703,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 46, 8-bit/color RGBA, non-interlaced","md5":"1e44dcbfbbbc036a1bfea30a2390e453","sha1":"cde7d5625e6ee5104286647b8defce2a8a9e697f","sha256":"69f43007e7c0786a005de741c752c61d8c391e8fa0fbf50ed9e613a8fd0a6904","sha512":"17f793d8f5bc1f602675ac5be7dbdec0e232f2da8507b0a7ef563ceb0c1b3c8589e2fdd828b7dc26b5c1ce4cd7e2831bba5e76df9a40a5f3dc5ea051cde9eb16","ssdeep":"","tlshash":"c8516ba6d258213f00ff70adc0ee0884de646238f174a9d1de8a67707c08a1ce74e997","first_seen":"2026-03-14T12:08:34.391746Z","last_seen":"2026-08-07T09:10:04.47067Z","times_seen":44,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-14","alert":"Phishing Block","trigger":"grok49k-cryptoslate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoslate.com/wp-content/themes/cryptoslate-2020/webfonts/fa-regular-400.ttf","fqdn":"cryptoslate.com","domain":"cryptoslate.com","tld":"com"},"ip":{"addr":"104.25.91.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grok49k-cryptoslate.com/","date":"2026-03-14T12:08:06.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoslate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 09:35:26 GMT","end":"Fri, 24 Apr 2026 10:35:12 GMT"},"fingerprint":{"sha1":"94:97:B1:D3:B0:58:A1:D6:52:6C:7B:EA:76:CE:D5:FB:61:D7:A7:55","sha256":"79:6B:63:70:C6:1E:94:A9:AB:17:89:EE:F7:DA:F0:B5:9E:08:7F:9A:A9:36:26:4C:5D:3F:C9:55:BB:72:25:AF"}}},"request":{"raw":"GET /wp-content/themes/cryptoslate-2020/webfonts/fa-regular-400.ttf HTTP/1.1\r\nHost: cryptoslate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://grok49k-cryptoslate.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok49k-cryptoslate.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 12:08:07 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 12 Mar 2025 00:01:23 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nexpires: Sun, 12 Apr 2026 13:52:09 GMT\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AefaWiPIhCPm93JU%2BUloY9Rn5uwdLLGVXzmely1a8vv14Uo8PwHSacodVoPnE2suvvh2jFMaON%2Fl%2BtQcCVeZ4ekx2QCJG40NOFbhAx3h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\ncf-ray: 9dc329727edfb27a-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1151848,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 10 tables, 1st \"OS/2\", name offset 0x10cd88","md5":"b4be0ef0d06bff0ab6a6d3f4cd0ae90e","sha1":"db47c9155bc0988a1644087a246f559ea95450cf","sha256":"63f33185fd547ec758c8dbefe4b031513d473a5225b39d313afbf9100f54a334","sha512":"56546c37809af1b46d50612d126351549413a26a81845f57526ec5b77f383b2b2badd5ac4352dd8e5c1fbc59e67f9376b2c0f130c0608edecff3ac49a4a9b6b4","ssdeep":"12288:v+aKXUy8WXzGKsFn0LI5nQrRFjW/go/WQIHco3h6wbbZlk+ZanD1p7:vxQUyxgF7nOFq3yZlk+Qnhp","tlshash":"3d25098367caad0ae4277e7456801e0f3351612c4355c227fecb19eecabe8d5da35b90","first_seen":"2025-08-12T13:23:09.793673Z","last_seen":"2026-08-07T09:10:04.502624Z","times_seen":62,"resource_available":false,"data":null}},"time_used":687,"timings":{"blocked":73,"dns":34,"connect":8,"send":0,"wait":542,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
