{"report_id":"f8d1a70b-9031-45fd-bfae-58c3951dc3b6","version":6,"status":"done","tags":[],"date":"2026-03-18T17:22:57Z","url":{"schema":"https","addr":"crypto-refunds.com/","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":0,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"crypto-refunds.com/","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"title":"Crypto Refunds – Get Your Lost Crypto Back, Securely.","dom":{"size":84529,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11055)","md5":"efc5ceb7d32a46dcfa84badb4575e82a","sha1":"3eb4ca00ce6c417c1e30f15b86ea485ee0e2fc65","sha256":"3588d3ec53749bfe26658e3ed23725b784687785ed127cd2350c9f5a79e5ca48","sha512":"1cb2b9668619808af3c22c6ff1244d7fbf75fd1dd6af35e4db63926392b7f3d2b3e5071a258a4ca9cde25a4503ea74b04305e99b4564800e9e5b541fe5f90181","ssdeep":"1536:tE4bypEeuMJFIIZno32HoKbQRm68usg8qXdk7/hl11EddGMy/G1B1Ph5R:O4mmMJFIIZno32HoUQRm68usGdk7H1Kx","tlshash":"56838321796a282a327f03cfd123b70c50ceeff5da55a6f5f1f7412092b4ca176926a4","dom_hash":"domhash561744e85bb4d4a13c17a0b5b1f976fd","first_seen":"2026-03-18T17:23:04.451169Z","last_seen":"2026-03-18T17:23:04.451169Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"crypto-refunds.com/","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":0,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-22T17:22:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-15T22:16:12.279722Z","alert_count":0,"request_count":7,"received_data":338345,"sent_data":3862,"comment":"","tags":null,"fingerprints":null},{"fqdn":"crypto-refunds.com","ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":46,"received_data":1072778,"sent_data":22447,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Elementor:3.32.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-15T22:19:58.945817Z","alert_count":0,"request_count":3,"received_data":171200,"sent_data":1748,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.4.4","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1e87433534214c42bc5e80a6d96f9f9","sha1":"56269ee46b410ad42b3dc1281ff85ec0b5d6bba1","sha256":"d09012005a283292d543b53dd988d15275c61904c97ebc45de2110b3d2f7d9e1","sha512":"01e58eafae7f22a4714814e5bb4d9472358eacfbf7e04c9d7a0a46e90ed0bf064f1ad1378055927d556f7c9ed5ecfa3e5a4c6cd4e08bb38a15fb58e3c64c3c69","ssdeep":"","tlshash":"f3316a66724a5d3a045ec2b72b4b6aafb26695cf9441847c7039fecf0560dd123e23b3","size":1846,"data":"","first_seen":"2025-06-08T21:36:43.872332Z","last_seen":"2026-08-09T08:00:33.179851Z","times_seen":13960,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.32.4","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed844a75bd2d74e3b64454dbfd440ee2","sha1":"4752da699b014fd519214fdbc6a93a3d6001edee","sha256":"4e33012a7e35a968355090bea6b8f31ecbd88b9d1660e76b9908d556d9e640ef","sha512":"d7dc3acacf33b697d0841f92473f7e508e0cb2cb9458f836c4bd972edd35449ef2a50c850588e8c69b3748b56870d79a36f4574445cb5394b5631950a6dc152e","ssdeep":"96:B87AtsNuAZDXQ6jqj9vXzl8OW6mVMcbMejl3tGVfLUVscj2KobV7bDbT802:LsNukQ6jq9OVM6MeHGlQTvog02","tlshash":"47c154941a54fd2b21e135d9e41b9734663ec0333c1afdc1fa21dce955e8ed183aa531","size":5707,"data":"","first_seen":"2025-10-05T16:15:06.677014Z","last_seen":"2026-08-09T15:20:18.995476Z","times_seen":10965,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.32.4","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b0e51ea66f635185c33794622ae99e5","sha1":"4cf69c28e752122dc5f53770043265a1ec06c4ec","sha256":"d21670e3126d50e07f581fb3ef34b2c33cf9891a0011a502a6879bdb3f843089","sha512":"13bbefc216990339886ae3e0ff29145d8260aefa865c2e7ea469f6bbc6a160200b08607b5fb8a0bd767fc10508dd087ddd77259b27fc56ad55629b56e7084508","ssdeep":"1536:ZGuxmDuqHrrUN3KQ5RSSYeAjA6c9CSTwk83FKm184cR8+esOAexXKh83YNQAzeLB:26SOEAu","tlshash":"8743e9863652f4b70beb44dad03f450af25708a4a40da4d4bfe9dce594b0d8a133bb79","size":59579,"data":"","first_seen":"2025-10-05T16:15:06.664289Z","last_seen":"2026-08-09T15:20:18.997007Z","times_seen":10968,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-08-09T14:49:16.328696Z","times_seen":340114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-09T14:36:50.220618Z","times_seen":310722,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-09T14:49:16.34329Z","times_seen":1011724,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-i18n-js-after","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"34fc29539ac7acd4b0d6d8d465566a99","sha1":"0def9e3f8f1aefb9e8d9ac17ba6e3a1a8dd7305e","sha256":"1ebca58df1ed85f449d2937c0a8478c8eb6235c610d27c091794958a7ec82b15","sha512":"5886a5aa28bafda6d9b2cbe6e407bc125bcad4d209f7dfdaf32feab08c2171184077e7fc1d87ea5a25d863c6b127d761dd2a13567edfd59daa0eaae7d66f2809","ssdeep":"","tlshash":"b21112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":906,"data":"","first_seen":"2025-12-06T23:31:56.873649Z","last_seen":"2026-08-05T23:44:33.17939Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/elementor-pro-frontend-js-before","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b516fda673a07075303a27a6a5e2d5e5","sha1":"e3e572ba9d248ea99031e94ad23e26efe79825fd","sha256":"21fef710e7e1fa00884d44932b58ec14a3401fddc313807a873e0298528c026b","sha512":"7f3b798b8e1c51b6ae1b36fc49efe05bf74c7fe444bf15f2d11cd0ba0a542885f4484d4580469de7cd1f3fd5c581e71bf79f0c6e826528cc534ae40100a52863","ssdeep":"","tlshash":"c5419e96da215e2483eda7f861d63a6f88800332e5c4ba4d5799e07001f7dddf0463e3","size":2161,"data":"","first_seen":"2026-03-18T17:23:04.511915Z","last_seen":"2026-03-18T20:05:00.855122Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.32.4","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"473c356dc1375b89a89396fdabc64357","sha1":"dc6f1a64100bbd009708a9ec40244abebe85c4d8","sha256":"a60e22996b3d94aa0e93c90794942d627d01e95fb3b144ea833d60c80fa803cf","sha512":"3338f5d0a801b88532ad3b764e46b3359e408c9b4218cdb7112659f1ea73139977024bf118b4bff06af0ee938a8579f6c7f8a21ebf94eed548607b62397e4249","ssdeep":"768:Vj1cI21yHLRd1M4ZBOh0hbuNFXCz1k8MtJR8RjDKv//Dpl1XkLVgbpM+MpKEnzBv:3caRd1MMBOhSmF7tJR8RjD8/mLVliEnN","tlshash":"36e209523296d4a2069f48a3f4331119f3769dd9b80af095b2bcdce6a471f877362b34","size":32362,"data":"","first_seen":"2025-10-05T16:15:06.575149Z","last_seen":"2026-08-09T15:20:18.9976Z","times_seen":11072,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/pro-elements/assets/js/elements-handlers.min.js?ver=3.32.1","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e703ba9afa170cc3375e74e51004c0ed","sha1":"ea6ae4c8a369b823f3a67e98eb541359ee7c0a76","sha256":"ae0ba39eefd6a2d0c3316019404685adeed50f31db022223d19953f3e1cb84b9","sha512":"2dbae32a1e045f24d02a0c6e7ec53061908b22a54bcd889e8297ee63fa8a8787d811fc822a2c044ec9aa40910418d74414af1f9950f3c18c5c5910446ae95672","ssdeep":"768:C5/bt9JJD1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdVdFgm:CVt5D1+WE9A5yLcWJ9mBtIoERuWfRMBg","tlshash":"6f13a511716aca6945cf84abf463164fb7225cacf413f0e67afc8d82b464e87a394731","size":44670,"data":"","first_seen":"2025-09-30T20:29:17.495625Z","last_seen":"2026-08-07T04:13:08.962728Z","times_seen":1327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e434b0b4f43ec7216073eed1f3ffb51","sha1":"8d8a4ab1ed63889095bdf38ba646319b639feabc","sha256":"dd0ec57abf154d52c161fae92db6014f042417d9660679097ae55287041ec52e","sha512":"20978b9f1afc586c91351ef67791224fb5469004a1ebb5af608a05f643103a358e605d2c54cdba2174bc35c266ec963690d5d1fc3f80a045f4c33fc5f67b9ab7","ssdeep":"","tlshash":"6d110cf3b3dd907fbaae6d66193402cd6a1c90735c100a5bfeac3575cc8042538b1d40","size":922,"data":"","first_seen":"2024-04-08T18:49:14Z","last_seen":"2026-08-09T14:44:38.01274Z","times_seen":217971,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/elementor-frontend-js-before","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bb8ede3300997e185b808bed0a7b3c5","sha1":"2be2712e7fe1a5bce24d720e524b61f0b3a9ed42","sha256":"72873bc76fd478fa06f369d55e4f7be476e4de1a6b951d8bb943d110097e1cf2","sha512":"8ae9d4efcd93c49f40a8f7c12de2ccbecab2dffb558f06f1965fef20cdddf623e4c4d66201ef94f8680cfd0450d44e2e483d578d95eff484f719111d84ec1bab","ssdeep":"","tlshash":"5c718121fa086dba83e2dbb43923be17686c0121d041bae5f4bc487c04f69263207e97","size":3615,"data":"","first_seen":"2026-03-18T17:23:04.51456Z","last_seen":"2026-03-18T20:05:00.852499Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","size":5661,"data":"","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-08-09T14:44:41.269396Z","times_seen":203902,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"83e9b29f0086bba50d653f1cb8dedc3c","sha1":"f8f89387c9aca9d524bb638eae457d4659efca52","sha256":"2ac3af00c283c0b2ae6108fa83a2053e51274a2a812fb063916cbe19bc4f96b5","sha512":"c8018876ee96b4600ae32342ec6d21b452ad4109d605fb838f146b734de274ef5e37179567a2c67ec828dc1b673364637fc82e7dfe8f7adbb18e20555577160c","ssdeep":"3072:pJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/Yvr:pJLC4dkEUYnafpl9v8cIWybV4y+oGMMG","tlshash":"fce3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","size":143709,"data":"","first_seen":"2023-03-14T09:12:04Z","last_seen":"2026-08-09T14:44:42.484396Z","times_seen":104113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/pro-elements/assets/js/frontend.min.js?ver=3.32.1","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b77664ebade4127a4534d187d1bfe44","sha1":"e46448f4d96507dbb1b98e1607b79cacddddfa26","sha256":"f0484fe31f9121c5a76875d2726b841b6d9fc5802d9c8bad0119bb21a888f851","sha512":"2ef6042eeddd5bc9c3ee0f588954c3d29adb6f28112556696eac3ccfd68114ae3c6bb0b8a7732a18fd59e31a16f35df8126f31716f2f9430db091e37b9977d22","ssdeep":"384:Czxpy+EVxFm6cKJskdHd7taQtHuGJswg/i+TSQDTWmMo7YtDTVHJiMqkoh+vFWNJ:Czxw+EVxFm6cKikdHd7taQtHuGJswg/J","tlshash":"67b2d9023163ac7a50cf815be467420e7b374895740570ed7abc6cdba5b8e9a33ea335","size":24288,"data":"","first_seen":"2025-09-30T20:29:17.485827Z","last_seen":"2026-08-07T04:13:08.939785Z","times_seen":1329,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.4c8abccc3e268b0767b2.bundle.min.js","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c716c7ca8e115f42b8cf9b56e47059a1","sha1":"108629ca2b57c2aefe267369a14ff33bf5f3f40b","sha256":"1041bfe58302b006d1db0b545fcf851ba8e8220975ebf4686d2cdaacd0656e87","sha512":"290cac96b6c22f3e59e41dc6cee3661f7da90b507344b8c19bcf2481e2de8f78fdca02a959e136c7135cfcf3ce5b41e6660692be3157782f87e7f3459122fbbd","ssdeep":"192:DwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoGg:kHzqxOPV5lxodXLfpvD/NtakRhPZT8ck","tlshash":"5d02310a34c1982db58b58ba3532432866a8014de1018f6db1bf78fb85a6d82377b7f1","size":8525,"data":"","first_seen":"2025-10-05T16:15:06.578247Z","last_seen":"2026-08-09T15:20:19.012721Z","times_seen":11720,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/elementor/assets/js/image-carousel.6167d20b95b33386757b.bundle.min.js","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d1965074516e4cae135b5a1b7faf9dd","sha1":"c76e1ae1611033b2f401fafee19438f43198427f","sha256":"83cc7bd65f572be77ed1411ae2876f3a70c74e495e6461cd503c59fe149f45d7","sha512":"ead406a1e0d8a5bb821d5493d3aeb4cef9b2fd62f9872eff4fd2bb3e7eb8c9ec916c50f0b3c49ba45ab269ca5f5c0aad5227600690ec98626b26c00640008d9d","ssdeep":"","tlshash":"e9f05cf43062987a9d5b45c66c47096df9581cbad601715176f7086023a5fa433586ac","size":448,"data":"","first_seen":"2025-10-05T18:41:07.825327Z","last_seen":"2026-08-09T15:20:19.006099Z","times_seen":1318,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-09T14:49:16.337032Z","times_seen":926942,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/pro-elements/assets/js/webpack-pro.runtime.min.js?ver=3.32.1","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"43abd82aa881007971771ac49d630bda","sha1":"2f5ef2649aa46e4b5d287fcb1dcd7e2978794867","sha256":"08dbf7f9cc229ef82c0510efcd13959cae41e3194cc9f598623bf083eaa91dbf","sha512":"38f1d6d468b4e604c7e243fb549f815b160d07980ea78803af551cc33feb22a343bc21c1ce6d3810c3ba62bfad8d0fb3b67845bcfea6d106100af968e9c02ac6","ssdeep":"96:CFbdxwrudvR4x4boFkEO/HfOYAWY4N53hsstJQPCl2e/VtFVKdpYQGK0Vz38k2:CBTXdve4boFemUN537MPa/pMdOQ8Mk2","tlshash":"0dd154980548ad2b26e43ad8b19b6b741a3dd0323c5ad991e611eddc18fcfd183ea532","size":6248,"data":"","first_seen":"2025-09-30T20:29:17.493917Z","last_seen":"2026-08-07T04:13:08.942228Z","times_seen":1322,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","size":5314,"data":"","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-08-09T14:44:41.249477Z","times_seen":200839,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce07b601fcdcceda21e0ec1e29cd7843","sha1":"70b3e9b91545f3e698eda29b86b94b6c1e09da18","sha256":"301faf6a4276723224bb1e5049ee7ce5441c1ce8e21407620628752a078bdc62","sha512":"f89f43c1a2c38839662ac50c07608922890d8bbf2b317dcdb362d05101937eb30923b95f4cd1c8bdb898814750bf2003c9a23bfbe7ede95822ca63ebb47aa8eb","ssdeep":"","tlshash":"7671969ae77a38dbb2f900f2697a0d47eb614435d6c8d038c9bea3141cb5893c274b46","size":3791,"data":"","first_seen":"2026-03-18T17:23:04.516126Z","last_seen":"2026-03-18T20:05:00.853833Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/elementor/assets/js/nested-accordion.a29d85d5aa492aef7142.bundle.min.js","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bc59b0a8e27fe07145352de4493d8f0","sha1":"a3fa0a9404d5b9aba523dd4f68ba5b67e050d24f","sha256":"6e319420a70ce28b2b1b30490e6974e9da445ac60d8036e50176a96af283085c","sha512":"03af89afe304efc7eb72099f1c0e3016f7e01d3c5b2549bd4bb22678a082dc870430d45ea5cdd109317e8e757168ff26669e373f17ee05c81a16521393bc41de","ssdeep":"192:FtqOePaTNydsPHlrf6Sewvu3HCQo4LqZy4b4LMPBWP/Y/id8AxcRigwC6yF0eAdU:FtqOus/lrySewmXC4WHqMPBWP/Y/id8P","tlshash":"6b12b512701d61a249cfdbef76060e2a552100e9f42d759c3478caef76b8b8297fa235","size":9827,"data":"","first_seen":"2025-10-06T00:47:38.693792Z","last_seen":"2026-08-05T03:35:40.392652Z","times_seen":596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://crypto-refunds.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:29:56 GMT\r\nexpires: Mon, 15 Mar 2027 05:29:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 301960\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-09T14:46:48.648594Z","times_seen":255402,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":81,"dns":1,"connect":32,"send":0,"wait":8,"receive":2,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.4c8abccc3e268b0767b2.bundle.min.js","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:37.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.4c8abccc3e268b0767b2.bundle.min.js HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 17 Oct 2025 16:29:09 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2542\r\ndate: Wed, 18 Mar 2026 17:22:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8525,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8485)","md5":"c716c7ca8e115f42b8cf9b56e47059a1","sha1":"108629ca2b57c2aefe267369a14ff33bf5f3f40b","sha256":"1041bfe58302b006d1db0b545fcf851ba8e8220975ebf4686d2cdaacd0656e87","sha512":"290cac96b6c22f3e59e41dc6cee3661f7da90b507344b8c19bcf2481e2de8f78fdca02a959e136c7135cfcf3ce5b41e6660692be3157782f87e7f3459122fbbd","ssdeep":"192:DwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoGg:kHzqxOPV5lxodXLfpvD/NtakRhPZT8ck","tlshash":"5d02310a34c1982db58b58ba3532432866a8014de1018f6db1bf78fb85a6d82377b7f1","first_seen":"2025-10-05T16:15:06.578247Z","last_seen":"2026-08-09T15:20:19.012721Z","times_seen":11720,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3.32.4","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3.32.4 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 17 Oct 2025 16:28:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 961\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10470,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10430)","md5":"1e2dadd4cde1563daf59f1ca945a78f8","sha1":"4f6ee360b09e76ae7fc530b397b91fafdacb6d3b","sha256":"2c87889a86e672cd654dd3e433091b01c3691385c5d6e0d24fb7eff0f5e31f9e","sha512":"8187c92d1c9b6a97414068620e39db6b113bb0b3cf6b3f547b7cc8439c10b97cc2b78545863875f00c4cabdd20a77b4bc0368958ef2dc1b6dbd547641d42b070","ssdeep":"192:lKTrGZCLG+tl+A0zb+W6s5h6R6AHReKuLj6hXvR0:ly10","tlshash":"9622d4817d53814e1aff641b141b254ca1c9d4dee9bbecd5e8a6630386fbdc83b31928","first_seen":"2025-10-05T16:15:06.544647Z","last_seen":"2026-08-09T15:20:19.001394Z","times_seen":4212,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 17 Oct 2025 16:29:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4248\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16471,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16214)","md5":"a2431bc290cf34e330e11ec4cfce1247","sha1":"32a53342901fef5f4f4dbb26a555e730f84437a4","sha256":"c57e64fcb72bddafa9c38de574441c3e69ac6c961df96b0cad34da83658bd196","sha512":"87aef045472db25020faead697ec02813ba38d4e313caf437b4ca5cadbb7a7495805ac0b74e5de60cd84ccecab290b76d003eb1fadfcdaa70e650a597658ada9","ssdeep":"192:IbgmUJbiKneTT4bHZ+SKbnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:IdUbeTMbHZ+Vnh2AVfHfA4XYz","tlshash":"fa7234681340282753274f374b71cbb9d9b444d24b93896e91c0ee88d7b6cbd236f6e9","first_seen":"2023-04-05T10:48:11Z","last_seen":"2026-08-09T14:46:12.323163Z","times_seen":140485,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.32.4","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.32.4 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 17 Oct 2025 16:29:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17961\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59579,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59538)","md5":"1b0e51ea66f635185c33794622ae99e5","sha1":"4cf69c28e752122dc5f53770043265a1ec06c4ec","sha256":"d21670e3126d50e07f581fb3ef34b2c33cf9891a0011a502a6879bdb3f843089","sha512":"13bbefc216990339886ae3e0ff29145d8260aefa865c2e7ea469f6bbc6a160200b08607b5fb8a0bd767fc10508dd087ddd77259b27fc56ad55629b56e7084508","ssdeep":"1536:ZGuxmDuqHrrUN3KQ5RSSYeAjA6c9CSTwk83FKm184cR8+esOAexXKh83YNQAzeLB:26SOEAu","tlshash":"8743e9863652f4b70beb44dad03f450af25708a4a40da4d4bfe9dce594b0d8a133bb79","first_seen":"2025-10-05T16:15:06.664289Z","last_seen":"2026-08-09T15:20:18.997007Z","times_seen":10968,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/elementor/assets/js/nested-accordion.a29d85d5aa492aef7142.bundle.min.js","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:37.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/nested-accordion.a29d85d5aa492aef7142.bundle.min.js HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 17 Oct 2025 16:29:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2747\r\ndate: Wed, 18 Mar 2026 17:22:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9827,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9787)","md5":"6bc59b0a8e27fe07145352de4493d8f0","sha1":"a3fa0a9404d5b9aba523dd4f68ba5b67e050d24f","sha256":"6e319420a70ce28b2b1b30490e6974e9da445ac60d8036e50176a96af283085c","sha512":"03af89afe304efc7eb72099f1c0e3016f7e01d3c5b2549bd4bb22678a082dc870430d45ea5cdd109317e8e757168ff26669e373f17ee05c81a16521393bc41de","ssdeep":"192:FtqOePaTNydsPHlrf6Sewvu3HCQo4LqZy4b4LMPBWP/Y/id8AxcRigwC6yF0eAdU:FtqOus/lrySewmXC4WHqMPBWP/Y/id8P","tlshash":"6b12b512701d61a249cfdbef76060e2a552100e9f42d759c3478caef76b8b8297fa235","first_seen":"2025-10-06T00:47:38.693792Z","last_seen":"2026-08-05T03:35:40.392652Z","times_seen":596,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/elementor/assets/css/conditionals/e-swiper.min.css?ver=3.32.4","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/conditionals/e-swiper.min.css?ver=3.32.4 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 17 Oct 2025 16:28:55 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 699\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5486,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5486), with no line terminators","md5":"f8ab0c98754e13666d2cd378bd023dbb","sha1":"a5226ce1f5dd1eaba7a6d2490eb081bfcc861a0c","sha256":"196f351ce1a780302b50e7b2404023102d7f555aa518d62ec678829c4b7b1185","sha512":"4d78e7fa90bccdf3ac5c09bae6cf94f7f249df6dabb23a510962d1b96072de072a6f81ada0e70f9087a6c38d909aaa42fb5350f7c8d1fa7f90be7578fb2698be","ssdeep":"48:VbD0j9UWW1KebuS9OwVFd4Rd8JN6JnDYQ1I1kFYFsFaFbdFvFblFaFbpFvFbX:Vf0RH1f0qYm6qg3B703VN","tlshash":"adb18c823f830123635f4e67292357bda2280dc44997b6aad2e1ac87e2b5cf5375f854","first_seen":"2024-12-17T09:11:11.376513Z","last_seen":"2026-08-09T14:44:42.417563Z","times_seen":86147,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 17 Oct 2025 16:29:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 38152\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":143709,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65279)","md5":"83e9b29f0086bba50d653f1cb8dedc3c","sha1":"f8f89387c9aca9d524bb638eae457d4659efca52","sha256":"2ac3af00c283c0b2ae6108fa83a2053e51274a2a812fb063916cbe19bc4f96b5","sha512":"c8018876ee96b4600ae32342ec6d21b452ad4109d605fb838f146b734de274ef5e37179567a2c67ec828dc1b673364637fc82e7dfe8f7adbb18e20555577160c","ssdeep":"3072:pJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/Yvr:pJLC4dkEUYnafpl9v8cIWybV4y+oGMMG","tlshash":"fce3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","first_seen":"2023-03-14T09:12:04Z","last_seen":"2026-08-09T14:44:42.484396Z","times_seen":104113,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/uploads/2025/10/metamask-300x167-1.png","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/metamask-300x167-1.png HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 20 Oct 2025 22:18:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5105\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5105,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 167, 8-bit/color RGBA, non-interlaced","md5":"d7681b4374293b2cd43cbd2f45718d22","sha1":"19d10b7049852c766eb2e7ad98187877a0b41263","sha256":"e0c2b74705e34dcce3808846465a4f0b6714f95221cfa101f0a96c68772c3207","sha512":"05541f9c8b8bc7ad00fd07c51fb471deed7d1a9341f709d796eeac6c856a5e78317df63b0e1e30705cb00000c6a57f298b2720a90f5e132abf8e7674650b3d5c","ssdeep":"96:4Lojfr83qEUws0uchb08vZa04iCODreqGU9fiCY9I/NLSsmZ781B7DILOHXfs:4EjeqCs0ucRaxOOq/9aCY9e25JuxJPs","tlshash":"98b18c99734be873f39a557a235411bd16539ca00316ab208ae337b17bce03c8991d7e","first_seen":"2025-08-05T21:53:19.098089Z","last_seen":"2026-03-18T20:05:00.835264Z","times_seen":6,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://crypto-refunds.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:29:56 GMT\r\nexpires: Mon, 15 Mar 2027 05:29:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 301960\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-09T14:46:48.648594Z","times_seen":255402,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":56,"dns":1,"connect":7,"send":0,"wait":8,"receive":12,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.4 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 03 Dec 2025 08:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4949\r\ndate: Wed, 18 Mar 2026 17:22:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-09T14:36:50.220618Z","times_seen":310722,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/elementor/assets/css/widget-image-carousel.min.css?ver=3.32.4","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image-carousel.min.css?ver=3.32.4 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 17 Oct 2025 16:28:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 163\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":382,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (342)","md5":"b04fcc9c53832698d727a04b7f98ec1f","sha1":"d48047a0bb8b34c5585d6db0ed96a3aa1c25a547","sha256":"1893b6803bbc40aebd2a091a66f3571d0fdcd004a97838aa4317877759cd113a","sha512":"2cc8630213eeb8db3943e3881a0118342a6acf675352f874460463e45c913c5f845dd3762ecac35b1b5da96842747372d85f5fc399821756892949205291385f","ssdeep":"","tlshash":"76e0df443a8398735c2e2f2a78af152830d88ca4da138b40cae31915e3f34f0233fa1c","first_seen":"2025-10-05T18:41:07.716837Z","last_seen":"2026-08-09T15:20:19.015453Z","times_seen":1258,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 06 Feb 2025 17:27:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6812\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-08-09T14:49:16.328696Z","times_seen":340114,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/uploads/2025/10/blockchain-network-pattern-1.jpg","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/blockchain-network-pattern-1.jpg HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/wp-content/uploads/elementor/css/post-6.css?ver=1761291367\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 17 Oct 2025 19:04:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 242358\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":242358,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1024x1024, components 3","md5":"6df2be9002d4bdbcb5194f468ba8db5b","sha1":"68d42c7729ca27a8f405a74ed4ef5600dea5ba21","sha256":"a3ba0228f6b306c69f4e219d7e27a72f21b94783f0efcbc7ba33ab05f4e18ca3","sha512":"4c07a56001a8654e72ecf685b64daf3665a937e626ea165e2b8d5bacbd8e53ed1ae481b47bf58b35f8721bcc3b5f252ea546b1fc48a279c31b76af892473ac75","ssdeep":"6144:bR8bIDqHbLXX8k1XZeKr/9mbSgHLguaZuQndjOzICr5Nq:t8bvbDXj1XZkbSkLIZuQn1OzpTq","tlshash":"92342370ca94208eb399bad2e3065507ce402d0ce31ac92b58ef2c7e7bb5c971bf5215","first_seen":"2026-03-18T17:23:04.466296Z","last_seen":"2026-03-18T20:05:00.822254Z","times_seen":2,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://crypto-refunds.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 16 Mar 2026 19:50:51 GMT\r\nexpires: Tue, 16 Mar 2027 19:50:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 163905\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-09T14:50:00.045559Z","times_seen":258120,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":21,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/themes/hello-elementor/assets/css/header-footer.css?ver=3.4.4","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/header-footer.css?ver=3.4.4 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 17 Oct 2025 16:28:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1261\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7182,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7179)","md5":"86dbb47955bb9db9c74abc72efb0c6f6","sha1":"66e008f8d28438934133a914efc7a40bd9fbad5e","sha256":"5052c28c33de995612b9c064753ee989d1e7755027e2b80292148728f444ec8d","sha512":"4a17290a195e7ead6048fa07dde958455f508f57d3c147f49cdfd32db655b8bc19e0b476611bca8b1a1a7eaf4df88185a861b74aab65366175701809defd6105","ssdeep":"96:3dOg5c2yhjF8MsobtKv1j3ykM0UfU5nJzyC2sy6ZM3zzirdae64Qf3mfOOeZhYD:F/9j3EU5n1lJy6ZNZaL4nh","tlshash":"88e19f67f8f2317813378223a7d047aea07ac10dd807aba551ebc31b05db45227a7f69","first_seen":"2025-04-10T05:14:02.600959Z","last_seen":"2026-08-09T14:55:17.212791Z","times_seen":48317,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 18 Mar 2026 17:22:36 GMT\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100764,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"9e6b9ba92c3c07c25c3a64a82c98afc3","sha1":"3ddff674c5f9cd149de491cf5df81c1074eaf397","sha256":"3d675aa2a0daa5e5b0080f14f3335f2d7a15275badcc418deba1e740a5ea55ab","sha512":"097289d7ac1a663cb14fa54e87356c82d88f82ae9574fa4cdd23333e1a98d3e9241d11fbb3d3cf34b52bfa7aac3d625d2bccefeb40fae26970f0e20d0b4751ab","ssdeep":"768:yDdD9DADNDgBDUKD7DnDdAgTQgUUhaWWHncXgLUahdPuOJ+gaULUIIV1ClghUULD:GZQDSVUvWtALyl83uRf","tlshash":"e2a30e91041b5440ab834ce223cebf35fe1f92507141d0b9abfc9b6baddbca6526835c","first_seen":"2026-02-19T22:36:20.76028Z","last_seen":"2026-08-09T14:42:18.755436Z","times_seen":17338,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":62,"dns":1,"connect":22,"send":0,"wait":34,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/uploads/2025/10/shakepay-300x167-1.png","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/shakepay-300x167-1.png HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 20 Oct 2025 22:18:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4846\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4846,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 167, 8-bit/color RGBA, non-interlaced","md5":"4b9485753a18c3c8acdcccc5f94a8e1e","sha1":"db076484683ad3af6cc3d79a0cf8bdf412cb08b5","sha256":"a45b1ab54c2265dd5f674e674c1e84b541d21a4156d519cffe23debb72321455","sha512":"c905a574d23fd3755f54d910f92ea5fd0a911d097170c9f10eda1de3671b59777fe81c83c39175d845e11c6cda3b3d28918410284051a321e9ca3b3d427444e9","ssdeep":"96:4LMd7qd9TvyLw5RYHjMp0gsozSHKuSwJ191yRcTusIBTDOIkfOSagGt5HQ:4b/OOzsARGuDTTkfONi","tlshash":"baa16d7d71f7c0675dc4e2613056d10ad3e91048a925a50f6ae9b5adc1c9c8c5e8cff1","first_seen":"2025-08-05T21:53:19.523015Z","last_seen":"2026-03-18T20:05:00.823985Z","times_seen":6,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/favicon.ico","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-09T14:49:06.175541Z","times_seen":147741,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/themes/hello-elementor/assets/css/theme.css?ver=3.4.4","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/theme.css?ver=3.4.4 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 17 Oct 2025 16:28:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1126\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5097,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (5092)","md5":"a480d2bf8c523da1c15b272e519f33f2","sha1":"385993a72c83ebbf0e0db1ed05112d35bfdaf22b","sha256":"9a7cfe03ec7638180859c5cd93ed18a75c0b4519c01849e2b6b2e2c90a0dea2f","sha512":"ef9f08c2afde47cd53f433079b3bd85c66d5a4f1049f75e472e8f03c5b410854e5d4e98727f5cb56ef8a96d2f9f7a9adcb192203ed1c4677840beb92ae5da05e","ssdeep":"96:yE4yyDOT58u6gYRbFdYrZGu3bcgcMNn7MNluMNITMNd0MN77MNbKz:y4yDhgGbMrM6cgjMB","tlshash":"15b1643ef8d1307c293b9b02bac5ab8d646c872ad35309e8db998b59819e750781334d","first_seen":"2025-06-08T21:36:43.869263Z","last_seen":"2026-08-09T14:55:17.221578Z","times_seen":48365,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/uploads/elementor/css/post-30.css?ver=1761291367","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-30.css?ver=1761291367 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 24 Oct 2025 07:36:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 439\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1524,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1524), with no line terminators","md5":"0c483dbe196d5c56b4d09b73937390cd","sha1":"67af1572d5d997872d6cc084b8cf164a0f5949de","sha256":"0c571fd0e1ef5445418f81facd3527b1f042a485c458a38cfa540a1026d467ed","sha512":"ce04a74f7ebd83f2bdf0b48b0ed096443786b1be64c3fc65074fcca538245803800a8a44e6e681f17da03a1d4c4928b2867a2c16d8e2c1425a23399ca5614de6","ssdeep":"","tlshash":"5d3198643c53926a723f480f9003f92c35a98ccfc4af6adaf848a017b8fbd557350616","first_seen":"2026-03-18T17:23:04.472899Z","last_seen":"2026-03-18T20:05:00.845214Z","times_seen":2,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Work+Sans:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Work+Sans:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 18 Mar 2026 17:22:36 GMT\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22545,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"90b5370af6eeb2a9734ac6d72fa2f01a","sha1":"15af301ac413b32b236b9ae893a7e18a16060f97","sha256":"66c8d0076560061497275ec0fc85f01d3db6a620c2ceeab863dd94de3b784876","sha512":"31e28779f83e2dae62ef6b9a742d16fea803cd0ae2599b628c2c459be399c65d907db0b316e7f307cd326011d25ab98ef60c4370919873eb913323c649d695f9","ssdeep":"384:cm3L3O3smePBm9EamwdHmf6AmSLFmRQumUZ7mD203p6jH6tQ7uRv:ZL+wp6s","tlshash":"c6a2de51047aa154da431dd673df3e36ae9ea1907044c578affe2888ecaec2a637570c","first_seen":"2025-09-11T21:51:50.383584Z","last_seen":"2026-08-09T14:41:13.352441Z","times_seen":1804,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":84,"dns":1,"connect":10,"send":0,"wait":35,"receive":0,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/pro-elements/assets/js/webpack-pro.runtime.min.js?ver=3.32.1","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/js/webpack-pro.runtime.min.js?ver=3.32.1 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 30 Sep 2025 08:38:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2625\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6248,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6204)","md5":"43abd82aa881007971771ac49d630bda","sha1":"2f5ef2649aa46e4b5d287fcb1dcd7e2978794867","sha256":"08dbf7f9cc229ef82c0510efcd13959cae41e3194cc9f598623bf083eaa91dbf","sha512":"38f1d6d468b4e604c7e243fb549f815b160d07980ea78803af551cc33feb22a343bc21c1ce6d3810c3ba62bfad8d0fb3b67845bcfea6d106100af968e9c02ac6","ssdeep":"96:CFbdxwrudvR4x4boFkEO/HfOYAWY4N53hsstJQPCl2e/VtFVKdpYQGK0Vz38k2:CBTXdve4boFemUN537MPa/pMdOQ8Mk2","tlshash":"0dd154980548ad2b26e43ad8b19b6b741a3dd0323c5ad991e611eddc18fcfd183ea532","first_seen":"2025-09-30T20:29:17.493917Z","last_seen":"2026-08-07T04:13:08.942228Z","times_seen":1322,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 03 Dec 2025 08:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1852\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5661,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-08-09T14:44:41.269396Z","times_seen":203902,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://crypto-refunds.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:29:56 GMT\r\nexpires: Mon, 15 Mar 2027 05:29:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 301960\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-09T14:46:48.648594Z","times_seen":255402,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":86,"dns":1,"connect":28,"send":0,"wait":8,"receive":3,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-18T17:22:34.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://crypto-refunds.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://crypto-refunds.com/wp-json/wp/v2/pages/6\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://crypto-refunds.com/\u003e; rel=shortlink\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Elementor:3.32.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":79228,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11055)","md5":"4c20b9d14b07139c091e7602608ccaef","sha1":"94e5b8d905ec0e2c927ebc6bf6b6492e9dab410d","sha256":"354d5adb86fd90b1c69acb29e1522b440369c48c0e6e9d2703a8ab07a8b8cff1","sha512":"b3696d9040c802a018c1c014fb4104cf069cd8fd4b5f314d0cae5ea9221f4a4a94f10df43745f7f7c50a0cd9b933ce5893cefe0f0d8569b37cb793de8b81749f","ssdeep":"1536:uxBvypDe1CN3II5HIXWnIqbwKGac0sc8qXdk7/hlEl1EddGMy/G1B1Ph3a1:kB60CN3II5HIXWnI0wKGac0s6dk7HEl3","tlshash":"6c73622179ae282a326f43cfd123770c609eeff5d555a6f9f1f7412092b4ca136932a4","first_seen":"2026-03-18T17:23:04.47608Z","last_seen":"2026-03-18T20:05:00.829918Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1851,"timings":{"blocked":479,"dns":263,"connect":106,"send":0,"wait":889,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/uploads/elementor/css/post-5.css?ver=1761291367","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-5.css?ver=1761291367 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 24 Oct 2025 07:36:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 473\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1626,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1626), with no line terminators","md5":"772c71ad20ecfd6befd0535a88e547a1","sha1":"f18924f0d58acd8937f88dedfc8ce2b6b330062d","sha256":"fd7daca0e937283dee841adb33600ec8644a87db5ce79fe8a836e8433982ce40","sha512":"876e242fa451b3aa8e511081cbec5bb6dc885ee2030a7150f73e3f2d82357972656bdf3c732bf9319538be69fae7a96ec8189b474f00de59d27fd92eee641775","ssdeep":"","tlshash":"3d3101167e27e432a077067fd2c3a42c041cc49fa25e8adab41d8709f8bfa466269657","first_seen":"2026-03-18T17:23:04.477392Z","last_seen":"2026-03-18T20:05:00.831188Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/uploads/elementor/css/post-131.css?ver=1761291367","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-131.css?ver=1761291367 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 24 Oct 2025 07:36:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 970\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8717,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8717), with no line terminators","md5":"d0df1729cef015eec038df85705907d3","sha1":"d690d36b3e3cf27b2b1c90224dee850b7daf5b7e","sha256":"22b2d4604a2bf948a630231b3bc05ddf540f29e76a291e7b2ff0411130c06f1b","sha512":"82523d1895c3944691fa689ae3c2a449658dbc948cc4c116cbeee02f88b104939abba65e14e8f63353cb928d3e44d3f7fcdfb1cda56f11d5b8778ea2480e696b","ssdeep":"192:QdZ+DK2t0OT+JuYwTI4NJpJlN96It0NLIJ4kRtJG9ep8:s27+JcI2JpJltJzJl8","tlshash":"8a0244817c53911e76bf202f5493b89c2519cccee87aaad7f8044263f87ae5377b0624","first_seen":"2026-03-18T17:23:04.478797Z","last_seen":"2026-03-18T20:05:00.84938Z","times_seen":2,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 28 Aug 2023 17:14:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29744\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-09T14:49:16.34329Z","times_seen":1011724,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/uploads/2025/10/bitbuy-300x167-1.png","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/bitbuy-300x167-1.png HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 20 Oct 2025 22:18:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6032\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6032,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 167, 8-bit/color RGBA, non-interlaced","md5":"8dcdc43d8e1db423c4b6dc6d4e9b6d00","sha1":"ff93b56d76f785e2648a700125a87021827b37b6","sha256":"bf697b405af466473977ea8ff549d765ab4cb0988caa83bde08f20666f1f2425","sha512":"5b4e3372ba2a45327ed9bcebc1b9d24d98f0e9767c1a77d7ed5823167e76ba730de179a84e2a3683a6c047f86ea30aa3b69ce14405c9495d2b4991967b9fc51c","ssdeep":"96:4Lv1vFm3ZJKj7wp4OtYJ1wLrwl3lGn9v+scCuhK3IrEEWwUrd1HwqVDWo2LiI/cN:4r1vFeZJLuOt6wwQZcCu5bIrHvWFLYDR","tlshash":"45c1aed47b7430c0fa8774f7a11948e821d0ba534a9fcf5a42935819db23bf457f0288","first_seen":"2025-08-05T21:53:19.419645Z","last_seen":"2026-03-18T20:05:00.827159Z","times_seen":6,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/elementor/assets/js/image-carousel.6167d20b95b33386757b.bundle.min.js","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:37.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/image-carousel.6167d20b95b33386757b.bundle.min.js HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 17 Oct 2025 16:29:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 256\r\ndate: Wed, 18 Mar 2026 17:22:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":448,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (408)","md5":"3d1965074516e4cae135b5a1b7faf9dd","sha1":"c76e1ae1611033b2f401fafee19438f43198427f","sha256":"83cc7bd65f572be77ed1411ae2876f3a70c74e495e6461cd503c59fe149f45d7","sha512":"ead406a1e0d8a5bb821d5493d3aeb4cef9b2fd62f9872eff4fd2bb3e7eb8c9ec916c50f0b3c49ba45ab269ca5f5c0aad5227600690ec98626b26c00640008d9d","ssdeep":"","tlshash":"e9f05cf43062987a9d5b45c66c47096df9581cbad601715176f7086023a5fa433586ac","first_seen":"2025-10-05T18:41:07.825327Z","last_seen":"2026-08-09T15:20:19.006099Z","times_seen":1318,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/elementor/assets/css/widget-nested-accordion.min.css?ver=3.32.4","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-nested-accordion.min.css?ver=3.32.4 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 17 Oct 2025 16:28:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 728\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5164,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5124)","md5":"ca5e13e7463f8c75243dcce32e3dd78f","sha1":"53516c6ec35a57aa5f36fe2b037116ef468f007b","sha256":"0306540902ad91f4d939034f4a19814da2cacd7a64e5f26d2803cbae3cd00bfb","sha512":"e84290a2dd88d00193910ca00bcb43ccfa5a833173190b7b8eba20db5a9a8dd27c79a6ca3009befe1f58c3f4c21105687d5d8ff634926476202bccb89e4316a2","ssdeep":"96:B89y7aME5lVHfU1xF0s52QkkhG7sY9yDryr5ZOtmosx/K4i64+W4WWz3WzdWzx/p:H7aMEvVHfU1xF0s5NkkhG7sY9yDrU5Zb","tlshash":"a0b1edc0780f416a242aee840bc65f3d11b014e1dedeb55caa579d1973edba29ee0834","first_seen":"2025-10-06T00:47:38.71043Z","last_seen":"2026-07-24T10:22:26.898724Z","times_seen":429,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/pro-elements/assets/js/elements-handlers.min.js?ver=3.32.1","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/js/elements-handlers.min.js?ver=3.32.1 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 30 Sep 2025 08:38:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10188\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44670,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (44626)","md5":"e703ba9afa170cc3375e74e51004c0ed","sha1":"ea6ae4c8a369b823f3a67e98eb541359ee7c0a76","sha256":"ae0ba39eefd6a2d0c3316019404685adeed50f31db022223d19953f3e1cb84b9","sha512":"2dbae32a1e045f24d02a0c6e7ec53061908b22a54bcd889e8297ee63fa8a8787d811fc822a2c044ec9aa40910418d74414af1f9950f3c18c5c5910446ae95672","ssdeep":"768:C5/bt9JJD1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdVdFgm:CVt5D1+WE9A5yLcWJ9mBtIoERuWfRMBg","tlshash":"6f13a511716aca6945cf84abf463164fb7225cacf413f0e67afc8d82b464e87a394731","first_seen":"2025-09-30T20:29:17.495625Z","last_seen":"2026-08-07T04:13:08.962728Z","times_seen":1327,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://crypto-refunds.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50316\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Mar 2026 14:52:26 GMT\r\nexpires: Fri, 12 Mar 2027 14:52:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 527410\r\nlast-modified: Wed, 10 Sep 2025 16:23:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50316,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-08-09T14:41:13.3008Z","times_seen":23492,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":125,"dns":6,"connect":7,"send":0,"wait":8,"receive":2,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4678\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-09T14:49:16.337032Z","times_seen":926942,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/uploads/2025/10/coinomi-300x167-1.png","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/coinomi-300x167-1.png HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 20 Oct 2025 22:18:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9552\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9552,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 167, 8-bit/color RGBA, non-interlaced","md5":"0751efc1a8a3e7144c11e811f9ee6b6b","sha1":"64bc8ba2c32ba31adf05289681d5b30396e9b4b4","sha256":"96449b248f4e2bfcee8d65ed8dafcf22dd51fe7efbad68627cdc3887d6a2264e","sha512":"76c0145c72db33cc4a44b0c77cdec00128e5f5ae41937d5f00fe90c7b019362ad705ce31b9668ea47c8c5a8986fd31190f09d527dce91cfe546b5dada10313da","ssdeep":"192:4WW3BU6GmsBMGNCk7fJ9KHDnyPmo3YI1976Hov9KmLslPZ4hkMOyqH:SU9qGNCkT13YI76Iv9cl+tG","tlshash":"2812afc787f5d10a9fdb4474344d8fdf809b32e124e60211e954b99d797ee8b704142d","first_seen":"2025-08-05T21:53:19.208251Z","last_seen":"2026-03-18T20:34:03.784771Z","times_seen":8,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/uploads/2025/10/changelly-300x167-1.png","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/changelly-300x167-1.png HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 20 Oct 2025 22:18:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7710\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7710,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 167, 8-bit/color RGBA, non-interlaced","md5":"1e4102806f9ef0290a696f5d29e51d8f","sha1":"8244b1f8d26a6d227044646c5366a7a8d9853c81","sha256":"257b26ddc9faad8837c62223d8ea921b913a65158db9aea5d12531382ee48570","sha512":"a9bf3310a8ab1baaf4146532b842622ab4a03d4e4a78bba5949a90a5c9279d38249cbc417f9feaf3ce077caae0871858b18d95797712ba5059693e40a7a27041","ssdeep":"192:4RO+Nlqc+tgAnk8cru4jaDwERqb0IksFVeyD2Aq7Ts:cO+N1KTmu4itTmei2/7Ts","tlshash":"fff1af3f64feb828e19284ba8146104fc419690cdebf3680532d9ea629c4932dde7373","first_seen":"2025-08-05T21:53:19.429768Z","last_seen":"2026-03-18T20:34:03.741417Z","times_seen":8,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.32.4","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.32.4 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 17 Oct 2025 16:29:09 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2320\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5707,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5667)","md5":"ed844a75bd2d74e3b64454dbfd440ee2","sha1":"4752da699b014fd519214fdbc6a93a3d6001edee","sha256":"4e33012a7e35a968355090bea6b8f31ecbd88b9d1660e76b9908d556d9e640ef","sha512":"d7dc3acacf33b697d0841f92473f7e508e0cb2cb9458f836c4bd972edd35449ef2a50c850588e8c69b3748b56870d79a36f4574445cb5394b5631950a6dc152e","ssdeep":"96:B87AtsNuAZDXQ6jqj9vXzl8OW6mVMcbMejl3tGVfLUVscj2KobV7bDbT802:LsNukQ6jq9OVM6MeHGlQTvog02","tlshash":"47c154941a54fd2b21e135d9e41b9734663ec0333c1afdc1fa21dce955e8ed183aa531","first_seen":"2025-10-05T16:15:06.677014Z","last_seen":"2026-08-09T15:20:18.995476Z","times_seen":10965,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://crypto-refunds.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50316\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Mar 2026 14:52:26 GMT\r\nexpires: Fri, 12 Mar 2027 14:52:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 527410\r\nlast-modified: Wed, 10 Sep 2025 16:23:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50316,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-08-09T14:41:13.3008Z","times_seen":23492,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":91,"dns":1,"connect":7,"send":0,"wait":11,"receive":2,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.32.4","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.32.4 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 17 Oct 2025 16:28:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 119\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":254,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ea91284b60b06465029ae3388af97b6e","sha1":"6f4f5957b6770ee4e67119c25e5245daff828ac3","sha256":"22e526f3adc681d8d33a6f77d9545742775bd8fa8f4d9e105d3f4139f701bc37","sha512":"f88d9358e59e53825d68b67de54349dc835cf971f0651ba0b0ddb1ee8cf6c107506da39126d9cc56f2178a7a152a83543dcf246e562619b2a7e04f100dea9707","ssdeep":"","tlshash":"33d05e40342743c2301f596926af2aae38d00ddce246cb90ece1666257bbcc83776120","first_seen":"2025-10-05T16:15:06.601574Z","last_seen":"2026-08-09T15:20:19.029724Z","times_seen":7373,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/uploads/2025/10/undraw_credit-card_t6qm.svg","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/undraw_credit-card_t6qm.svg HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 01:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1274\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5740,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1c76cf3759c7390b9afb4211a6babb21","sha1":"791af91065b7442d2145654dc9db4f43aebe9db6","sha256":"a74d584238ced7a9d724bee1fe72411b8aa7054902bbf6de4afdb1066ae7d4ba","sha512":"dbf84b48f6f398b966abc42e7976f955cbe15617cb6b37593499226264d0e77a85f62503859ad480add807a1a1d7890624d0eeae215cbbae23976a4a98270295","ssdeep":"96:+JTP13ArY5CmawdewvQ0Hze9CdwxZifpifHifWiftifvifDifUifyifkif/if4iR:GjCrY5CbDSIfJw","tlshash":"34c1ccff356481f948c483ce63e76685087db0efb1a00ae8a74511815d24beb7bfc669","first_seen":"2026-03-18T17:23:04.493044Z","last_seen":"2026-03-18T20:05:00.847862Z","times_seen":2,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 03 Dec 2025 08:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2119\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-08-09T14:44:41.249477Z","times_seen":200839,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.32.4","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.32.4 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 17 Oct 2025 16:28:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 154\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":600,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (560)","md5":"bebf33eb86f69f08345550f2ee7d0b83","sha1":"0481d46617ad6adaf1f1efb40a56ec6961329195","sha256":"79e658a25383947f817a034282e7b6841b3452a9395d6371dbd391736d214a1d","sha512":"21aaafbbf60c76a5e0e86782fcd69ef4ab9e4e76f1cd7c78b55007b9300ff33e763985ab53aaa482df85355fae3fc20d89261978f21196694dee75dd942b7d20","ssdeep":"","tlshash":"b3f012237e4b94aa783f195b1087337c74944ec893a0a8d8e9fa91436df4ca27334622","first_seen":"2025-10-05T16:15:06.700878Z","last_seen":"2026-08-09T15:20:19.000798Z","times_seen":7911,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/elementor/assets/css/widget-icon-box.min.css?ver=3.32.4","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-box.min.css?ver=3.32.4 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 17 Oct 2025 16:28:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 425\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5846,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5806)","md5":"bb192f92581bb2a3ac3d510b57172002","sha1":"c63183daacedc9c7898fbcf7ecb7e6f8c27f7d63","sha256":"fe23d2111a92e9891e77852ed2e897d729d1722df40dff122361636bd02c605c","sha512":"cb7c24f3c3691b5d68441f161b2b9ce07d5c74f51448a9fc054e5f184b87cedd60354a5557d132d05d469990ecf09031321da08a2b3750ff28a5490722c5d169","ssdeep":"48:B8yAtZryDP/ey5d5iFe+5b5s6e/5w5r7eE5x5icsbeRh50J5jp0weJo58m5Yse9x:B84CyjJTbaREr23J1/f","tlshash":"8ac1a60539a7a1025a3f501b0a87141cb56548d8ecebade7f861ef019bfbdc62b52c7c","first_seen":"2025-10-05T16:15:06.603911Z","last_seen":"2026-08-08T08:17:54.728975Z","times_seen":1651,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.4.4","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.4.4 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 17 Oct 2025 16:28:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1581\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5456,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5455)","md5":"af4b9638d69957103dc5ea259563873e","sha1":"1d048e10f67e855fcef131c910f5e46972181596","sha256":"2f01a854a759c0a6a6911634e4ae5283b86a054908e4587c1fd17561fe4ce3cf","sha512":"434169ae8237d9417f43ee48a8ed3a372c64f73d5e189f5f23656f92a9f2d3c494e07875829341a971ac7aab68472033e8dca833bc37f53a83159fde9a512365","ssdeep":"96:vS+FXXYXqXXXNuoSA1C4pIGRhPCZBG9Hzk09ETReQWe0OhHTZZkUg/2UpGE:vDFHoyHNuL86+hKZBG9HUXhz/ad","tlshash":"b0b15363971031497537c83636d17e947e226215c8332ab4e426aafccbce4275a39f9a","first_seen":"2025-06-08T21:36:43.859934Z","last_seen":"2026-08-09T13:22:05.189661Z","times_seen":43205,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/uploads/elementor/css/post-6.css?ver=1761291367","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-6.css?ver=1761291367 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 24 Oct 2025 07:36:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3915\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":62892,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16656)","md5":"753aa373e2bc9b0032377a5aadcc1f06","sha1":"ce8a7373dccfc2223017c28d3384346aae38db9b","sha256":"4e340d78ddcfffb8e82afd87ba426c09f7662c1a68b0f42344089f8a52b37612","sha512":"1390644813b393c2f61da7ec870b25ed2c92ca63b2b4eb13a017adadc4b0182fd037f51572f8764054750aa7bd4f2877282c9cc1512938006d75a4e1ba7525a8","ssdeep":"1536:C8aeqDBQL64QwmCUwZ5f5VYSCMp+c3XpWMAd9j7oo9JvCqKAb1VlGgrl9wEbw6qa:mDBQL64Qwm3wZ5fLYSCMwc3XpLAd9jEm","tlshash":"7b5386607c13932d763f106f9107fa9c64380ccadbae66eaf4119827f4bad51b3a0e55","first_seen":"2026-03-18T17:23:04.498514Z","last_seen":"2026-03-18T20:05:00.831836Z","times_seen":2,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Inter:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Inter:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\ncontent-security-policy-report-only: script-src 'unsafe-inline';report-uri https://csp.withgoogle.com/csp/script-inclusions/bcfae741e379a885f2ab2cf83ebe6d32\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 18 Mar 2026 17:22:36 GMT\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45675,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a34f88f00b3b275162b90a5f4166b99c","sha1":"30522f09ae080dbc76f3ad81bbdf542fd8303a56","sha256":"e5e5f92d1543747b23c1658baa72b3bc102fc849e87012e0c8ef182510108940","sha512":"331de80f1de982f363d9777510073861e5337db94b413b26cf0d5038d0fbc3ffc97a9fd031e1f7dd665d5a07368175e4baa1eaf973ed48e0d4e73b3e043c5954","ssdeep":"384:v3nf353s3Lg3Y3X3xOfQRUgvM2Rf3yJgaBfofefygBu0DftwHgM7V6f01QgTg6NA:/P1AwsHsSXokZIj","tlshash":"8723cd92002be500aa931dc233cf7e3aadce10a97486d5b95ffd0cc96cdad27526875d","first_seen":"2025-09-11T17:19:41.547996Z","last_seen":"2026-08-09T14:41:13.356698Z","times_seen":4677,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":97,"dns":1,"connect":9,"send":0,"wait":33,"receive":0,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/uploads/2025/10/walletconn-300x167-1.png","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/walletconn-300x167-1.png HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 20 Oct 2025 22:18:13 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5989\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5989,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 167, 8-bit/color RGBA, non-interlaced","md5":"f1c2209345328d4b2d9b8641b106329b","sha1":"ddec444303339a71d1a941d84ae003cb19aa9acb","sha256":"d65145c416fb2f6bf36de9613f811fd956da226c3a10083a2a46024901ff8c04","sha512":"ca027f14dd37f3a6525d922c2bc098fb43b7b1b67730e7963a11587370f37d1b0f16d668a5dfcccf0687350b6aee472f4e1b67e18ba5564d459d81ba841b3f87","ssdeep":"96:4L17jP76C3lcA+pVh2LC1epULDbr5YD6WE5hes0vlPZHdMaXF58T8xBITsFwzGbF:4BP773lLe2PULL5YDGhes+lJxn8YbIIV","tlshash":"2fc18de1cec5d0f5e8236c7a763291aba92e4abc340b2d34b8e4ce13491121908ae446","first_seen":"2025-08-05T21:53:19.374125Z","last_seen":"2026-03-18T20:34:03.748481Z","times_seen":8,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/uploads/2025/10/bitrex-300x167-1.png","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/bitrex-300x167-1.png HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 20 Oct 2025 22:18:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3025\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3025,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 167, 8-bit/color RGBA, non-interlaced","md5":"d47ebf54cc82a00b3e6c1e11ebddcaed","sha1":"6e7969f9ac50336db5a2ea43c85941bc56df500e","sha256":"b1af19fde9e8750be31758ac3e837dc9a18c5b7a4de3ee4835fea57e0d95595f","sha512":"6ecc426548fc90c1778cbd6edd3439f993046567b38b18426d4d56227ed5d6769e99a563a5b5bd0e014467d79c1089b81e48aff24fa00f1b7ef269aab31f4631","ssdeep":"","tlshash":"90512b020113cb08b155216e6e7218e14d6e8739e2e50def617a9a25d362c3598f0fcd","first_seen":"2025-08-05T21:53:19.652201Z","last_seen":"2026-03-18T20:05:00.834118Z","times_seen":6,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/uploads/2025/10/qqquad.svg","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/qqquad.svg HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/wp-content/uploads/elementor/css/post-6.css?ver=1761291367\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 20 Oct 2025 22:54:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 411\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1735,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"74568583973ff2dcff9dd3b0cd1d0eae","sha1":"f45ae522437e500d04862f5cbd568d05ed750c44","sha256":"105dd36c9642f2bd08e4ab7267d5b843489d2dc55668e47c3ce76053146458a1","sha512":"9c9851697dfd45597adfd5e7e99b42746bff635c4740ac34332b39fb590a89f570ca507c8e0bf0867a0d4735c34811217937886130a3ab9d382f79a47032d85d","ssdeep":"","tlshash":"b331d39943080fe1d6231ee8e07259c8a99b48cbc09c99caa4d136e4cc7f5690ee634e","first_seen":"2026-03-18T17:23:04.503863Z","last_seen":"2026-03-18T20:05:00.83922Z","times_seen":2,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://crypto-refunds.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 16 Mar 2026 19:50:51 GMT\r\nexpires: Tue, 16 Mar 2027 19:50:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 163905\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-09T14:50:00.045559Z","times_seen":258120,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":72,"dns":0,"connect":32,"send":0,"wait":13,"receive":2,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/uploads/2025/10/pattern.svg","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/pattern.svg HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/wp-content/uploads/elementor/css/post-6.css?ver=1761291367\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 02:21:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 904\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2793,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5400e3a2439021ae61c95e7f2d840185","sha1":"e9bc11ee958ce8f1631b4b3bee1cdcd87a20c15b","sha256":"723b8ac4732285cf463112f7261f64817b384ad4b569f2874ec74a85f2f28374","sha512":"2064ad444c63c41ff9379829f37273a46a49955f15af37d9ce3a2932fe631f030ff9bc4159752c8613ff025d82d17737c0c810cd38dab40e99086199e7ec7454","ssdeep":"","tlshash":"8c5111e10730b97c528aef49ff225d6a1806f43e9a1ab58049fda30f59cbdc63588c18","first_seen":"2026-03-18T17:23:04.505157Z","last_seen":"2026-03-18T20:05:00.838037Z","times_seen":2,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.32.4","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.32.4 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 17:22:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 17 Oct 2025 16:28:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6537\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53614,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53574)","md5":"28b0f194b6f875f29629396eac1671d5","sha1":"0ac6040104a49fb72bcfdeabc83cb2521f13a68b","sha256":"4ad0e11654ca79a411fcd3ec4cd398fc778915d1bb9e07b5e3370d2248257af4","sha512":"5f88a02ca687680da8db3cc32b459baf713adbf9a356f76921a1ddb9aabdfce49d0b420b7d225626ffb9f472a908f2543c0e0224c068aab93a8f66ac72c63551","ssdeep":"384:QsrJS/vmyeUaEMoZ0qk0e/RmRC5Cz9TfikvmGkvmCFldlRaE2ksYrOk:kLRdL2t7RllNX7svk","tlshash":"4e33fb623d13b269226f442b82d7364c526495c1ee4376d9fa04c5239afece63b36c1b","first_seen":"2025-10-05T16:15:06.672451Z","last_seen":"2026-08-09T15:20:19.031173Z","times_seen":7561,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.32.4","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.32.4 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 17 Oct 2025 16:29:05 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10164\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32362,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32322)","md5":"473c356dc1375b89a89396fdabc64357","sha1":"dc6f1a64100bbd009708a9ec40244abebe85c4d8","sha256":"a60e22996b3d94aa0e93c90794942d627d01e95fb3b144ea833d60c80fa803cf","sha512":"3338f5d0a801b88532ad3b764e46b3359e408c9b4218cdb7112659f1ea73139977024bf118b4bff06af0ee938a8579f6c7f8a21ebf94eed548607b62397e4249","ssdeep":"768:Vj1cI21yHLRd1M4ZBOh0hbuNFXCz1k8MtJR8RjDKv//Dpl1XkLVgbpM+MpKEnzBv:3caRd1MMBOhSmF7tJR8RjD8/mLVliEnN","tlshash":"36e209523296d4a2069f48a3f4331119f3769dd9b80af095b2bcdce6a471f877362b34","first_seen":"2025-10-05T16:15:06.575149Z","last_seen":"2026-08-09T15:20:18.9976Z","times_seen":11072,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/plugins/pro-elements/assets/js/frontend.min.js?ver=3.32.1","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/js/frontend.min.js?ver=3.32.1 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 30 Sep 2025 08:38:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6325\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24288,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (24244)","md5":"7b77664ebade4127a4534d187d1bfe44","sha1":"e46448f4d96507dbb1b98e1607b79cacddddfa26","sha256":"f0484fe31f9121c5a76875d2726b841b6d9fc5802d9c8bad0119bb21a888f851","sha512":"2ef6042eeddd5bc9c3ee0f588954c3d29adb6f28112556696eac3ccfd68114ae3c6bb0b8a7732a18fd59e31a16f35df8126f31716f2f9430db091e37b9977d22","ssdeep":"384:Czxpy+EVxFm6cKJskdHd7taQtHuGJswg/i+TSQDTWmMo7YtDTVHJiMqkoh+vFWNJ:Czxw+EVxFm6cKikdHd7taQtHuGJswg/J","tlshash":"67b2d9023163ac7a50cf815be467420e7b374895740570ed7abc6cdba5b8e9a33ea335","first_seen":"2025-09-30T20:29:17.485827Z","last_seen":"2026-08-07T04:13:08.939785Z","times_seen":1329,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-refunds.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.4.4","fqdn":"crypto-refunds.com","domain":"crypto-refunds.com","tld":"com"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crypto-refunds.com/","date":"2026-03-18T17:22:36.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.crypto-refunds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 22:46:39 GMT","end":"Sat, 23 May 2026 22:46:38 GMT"},"fingerprint":{"sha1":"F3:E2:EE:04:DC:32:BE:EE:D0:45:1B:B6:E7:6A:35:7F:84:BE:A0:0B","sha256":"85:E8:17:9D:77:AE:AF:F1:B8:35:DC:B0:B4:05:23:3F:AD:2C:02:07:7F:DF:A3:F5:41:F5:19:32:C4:93:B8:86"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.4.4 HTTP/1.1\r\nHost: crypto-refunds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crypto-refunds.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 17 Oct 2025 16:28:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 496\r\ndate: Wed, 18 Mar 2026 17:22:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1846,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1846), with no line terminators","md5":"a1e87433534214c42bc5e80a6d96f9f9","sha1":"56269ee46b410ad42b3dc1281ff85ec0b5d6bba1","sha256":"d09012005a283292d543b53dd988d15275c61904c97ebc45de2110b3d2f7d9e1","sha512":"01e58eafae7f22a4714814e5bb4d9472358eacfbf7e04c9d7a0a46e90ed0bf064f1ad1378055927d556f7c9ed5ecfa3e5a4c6cd4e08bb38a15fb58e3c64c3c69","ssdeep":"","tlshash":"f3316a66724a5d3a045ec2b72b4b6aafb26695cf9441847c7039fecf0560dd123e23b3","first_seen":"2025-06-08T21:36:43.872332Z","last_seen":"2026-08-09T08:00:33.179851Z","times_seen":13960,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}