{"report_id":"ffaec759-8f6e-489a-9aff-c724be4556b3","version":6,"status":"done","tags":[],"date":"2026-01-24T23:19:11Z","url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"104.21.28.175","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"title":"Free Crypto AML Checker | Check Wallet or Transaction for AML-Compliance","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-08T17:41:59.403349Z","times_seen":1036337,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"104.21.28.175","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T23:19:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-18T22:14:28.232245Z","alert_count":0,"request_count":3,"received_data":131290,"sent_data":1643,"comment":"","tags":null,"fingerprints":null},{"fqdn":"t.co","ip":{"addr":"162.159.140.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2010-04-26","domain_rank":232,"first_seen":"2012-07-25T19:09:44Z","last_seen":"2026-01-21T13:51:04.03614Z","alert_count":0,"request_count":2,"received_data":1784,"sent_data":1882,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-01-18T22:25:45.907302Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":755,"comment":"","tags":null,"fingerprints":null},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-01-18T22:31:43.238988Z","alert_count":0,"request_count":1,"received_data":851,"sent_data":1046,"comment":"","tags":null,"fingerprints":null},{"fqdn":"d11rkz2z4619di.cloudfront.net","ip":{"addr":"52.84.50.102","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-03-26T06:21:41.487769Z","last_seen":"2026-01-24T14:09:00.238555Z","alert_count":0,"request_count":8,"received_data":58699,"sent_data":3787,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-18T22:20:30.851037Z","alert_count":0,"request_count":6,"received_data":2669325,"sent_data":2658,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-01-18T22:27:42.748663Z","alert_count":0,"request_count":8,"received_data":4457214,"sent_data":3848,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-01-18T22:25:45.99612Z","alert_count":0,"request_count":8,"received_data":117843,"sent_data":6762,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-18T22:17:29.309663Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"images.ctfassets.net","ip":{"addr":"54.240.174.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-28","domain_rank":23334,"first_seen":"2017-09-20T16:27:05Z","last_seen":"2026-01-21T13:21:58.918079Z","alert_count":0,"request_count":1,"received_data":5450,"sent_data":539,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"emblem.certik-assets.com","ip":{"addr":"54.240.174.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-05-04","domain_rank":0,"first_seen":"2022-07-11T21:16:41Z","last_seen":"2026-01-24T14:09:00.182967Z","alert_count":0,"request_count":5,"received_data":73565,"sent_data":2534,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"rubic-support.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-01","domain_rank":0,"first_seen":"2026-01-24T14:08:59.618975Z","last_seen":"2026-01-24T14:08:59.618975Z","alert_count":40,"request_count":40,"received_data":306600,"sent_data":18509,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Twitter Ads","description":"Twitter Ads is an advertising platform for Twitter 'microblogging' system.","website":"https://ads.twitter.com","common_platform_enumeration":"","icon":"Twitter.svg","categories":["Advertising"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Yandex.Metrika","description":"Yandex.Metrica is a free web analytics service that tracks and reports website traffic.","website":"https://metrika.yandex.com","common_platform_enumeration":"","icon":"Yandex.Metrika.png","categories":["Analytics"]},{"name":"Facebook Pixel:2.9.252","description":"Facebook pixel is an analytics tool that allows you to measure the effectiveness of your advertising.","website":"https://facebook.com","common_platform_enumeration":"","icon":"Facebook.svg","categories":["Analytics"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"01a39bba6df66b9b6c1ce105b37d948c","sha1":"cc4c7d59b3ce8ec9d8ddb107b19b42f2052a7d94","sha256":"d89a3b683ad06f027eaf33c886083c7d6f0fe88ee28e646059c4f521a166cde3","sha512":"4e644ffbbda98fe7ba928b7ba56d5e7bdec3c6320bac4c5518e4a2671ccc0c1192f11f0148949f54be666368f7ffb062296135145dca1f01fa1c3259d4a080e1","ssdeep":"12288:CcrIRP7yj+Ql2v2ZQqbrH4SJoR4yjom71o:jIhyj+RRqbrYSJw4yT71o","tlshash":"9a0529ca721275f94332b4f92037142a936daa25940c0d5db259c8f52ff2c6931beeb7","size":856260,"data":"","first_seen":"2026-01-15T01:58:18.084345Z","last_seen":"2026-06-02T23:59:05.000095Z","times_seen":25485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3e3e350f78cf22bd7b335d70b41a58a","sha1":"cce22220b6a8dff76692755cc45439b4ec474a4d","sha256":"ee6bb81f4e9fc030a39a7c71affc4d1f2b900baa4b4c7af83361388d7c39599b","sha512":"15b6cbf8bd67e82a4952004138ebc95c44e4d373317826f1560eeec13416cc1d6a38d834609ef4b713e7a9c92d1b1bbf84de08e2e4061ed3d1e3891982c25b0a","ssdeep":"","tlshash":"3f90025ff2302063a756122b166f15456421626565550869123830eb4955148474265c","size":57,"data":"","first_seen":"2025-06-30T14:23:19.448274Z","last_seen":"2026-08-08T17:11:52.549702Z","times_seen":66320,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"be7b0e47fb58e524875665c45d6b90aa","sha1":"ea2db9285d179183c0f6b2cbc15a866d7ddeeeec","sha256":"2ae34e33bda9cc5f786cbacd20d87ba7c1b4ea860c307c2120b4bbc445cf75f1","sha512":"8df87851cbc8f8960cf3420cafb1bd8d78afd92f9cdc557572fe03d1148fda8b4e643a7bd854aff743b02204e769a8443301995ceaa20b4e3d1fe9b72acd4c13","ssdeep":"","tlshash":"5101f1b5f7281a5925e51fbfb16a670870a1012d7c1950229606eef66b10ed110d7d8e","size":786,"data":"","first_seen":"2025-06-30T14:23:19.451294Z","last_seen":"2026-08-08T17:11:52.550959Z","times_seen":1067,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-08T17:42:51.337482Z","times_seen":217767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c36d8641b520d7377cd95218ea620239","sha1":"50de322ffbf2fa25d8c584410fa12c99ef983cb1","sha256":"4705d8be4534aa489a4f46f42144a45c3bbf86baddee5c296d1aa68fe86f0b2d","sha512":"0de3960f3b346cd62f56f3944ecfad846b6d3fc03743c0714fd3dd1703a026345d7cb5c41100eb44685012c317da2cd91b0c98436c494ed6f71e1d05a39ffa09","ssdeep":"","tlshash":"d6210a4df509f8aa6a20cc0f402b1d24d4ccdd7e43e8809ca2adceab9611dbd53c88c2","size":1326,"data":"","first_seen":"2026-01-24T14:09:05.680669Z","last_seen":"2026-01-24T23:19:19.269276Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c06e9ed11ac22a73d1fd71bf717e3b32","sha1":"d57b3ffedd0d25ce413a7069a85fa082953f83f2","sha256":"24d74eb420864e1b577fb62b363e3ddab9b0d0cb78d6cbd9ea22884f524c2426","sha512":"051d19e041506e547a3f154fb1f27cdca7367fbd297a719a00ae08d0a7a21382f3c3ff128414ab6a8b8db25f425138bdfc0e6bd5e64cfbabd4057f4c22b798c3","ssdeep":"96:LJwrg7a7cg1xqzc/xmWOd+fAV7Z/GcT9yQL+9:FzgnqzcpmHj/g","tlshash":"d1d1571e6405cd4bdc7e7ca9033e9d36a4ccce7b83659af8858ecf580a4647527dac81","size":6188,"data":"","first_seen":"2026-01-24T14:09:05.681824Z","last_seen":"2026-01-24T23:19:19.270306Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfXO5shAAAAACeiH_nMoJ8sUjtXkTv7DcCZAHRB\u0026co=aHR0cHM6Ly9jcnlwdG9tdXMuY29tOjQ0Mw..\u0026hl=en\u0026type=image\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=vc093n271k6j","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a3a60d2d1abf0b92b1cdfea8b14c3b52","sha1":"e33810857d1a2e95c0fde7a720663cefbd2e8cfe","sha256":"e36412938a707d1542652556c4e904e59fb0c9db556bc1f8ca028a3ee55d5dd5","sha512":"5eee7a67bb7a4c230b6df5f1744240855e4f24f5f26a2bb2ff8adf21e7c7eb65ffe82b241a7a7625ecd46c1ee468cd77b7cbfbb94836675db60aa8787b34d016","ssdeep":"384:DTPlxKiHSKusI7YCL9MyEE8XNcHtP4nz7tcnaes3G2dOxF4d6RHv:/3Kt/s4LH3pHR4HteaesPvd6RHv","tlshash":"c292e8d4b581b57a52b2b0f0813f100ae1f76c9aa84c755ee215c4e43e78bc9816ff6b","size":19754,"data":"","first_seen":"2026-01-24T10:56:22.40643Z","last_seen":"2026-02-02T20:54:31.350336Z","times_seen":4969,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"00ad154cd3155a00d56e494658bf5639","sha1":"82d1090bd7d075d7c402aec6de99807036a866ea","sha256":"2571cd095a0181b15987ec25bc552f982e44154cee458a368dd4722870abcc98","sha512":"51b1b45a8a0e868d5c7faa60ccb8df603950c4088610d24ea8ddcc6293e9683c1a3587d19f1c7f394911cbe04482bc6a1ea177e5df9f8f7795376b64b5ff45ea","ssdeep":"384:6tUdCD1yakGqjDxrHVAgvE/tUdCD1yZkGqJJ4r926VBE28clw:ns1CrHVPs1ErZE+w","tlshash":"3a93541314ad013823120ed41fee65ff2b6fb212c567864abb9c97c697c74a4ca9379c","size":92332,"data":"","first_seen":"2025-09-20T13:25:47.536618Z","last_seen":"2026-05-24T05:01:39.300556Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ded1fa9a57f7baf2e4820370b292dc4b","sha1":"19878a7b15a5881ef14681ed216e496a9f927058","sha256":"837b1eba050ca949c9f3ed5589149ef4f0c95a400884120a73aff8d9ee2dbfeb","sha512":"cfba7234325fa3486ea272a0777ab35368d2eabd791b0e94caa1fc92641c0ed47c7b60386fd0eec37a8fb161aa58c8453f34a290ad8acd9b4214cc105c9e36bd","ssdeep":"","tlshash":"a7d012f59809de5bec683e45553ebc2920cd445f50c1eef80290dd141a819397646dc5","size":279,"data":"","first_seen":"2026-01-24T14:09:05.686501Z","last_seen":"2026-01-24T23:19:19.272439Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"20641360ac889a0419ead34a8682e0af","sha1":"a7cd0f6944cfae69f83bcb479d43e7d5e6089caf","sha256":"41d62a0e3e6a145ba3fc1ee472c06aba9188ef4ab8724aef7fe0d8f5bfb61ae0","sha512":"2fd3f803be9d2ca5244df6e847a5d8d3e53458ad1e535808290529644cd0e67e1970a7ef3fff66636785c3cdfcf6beba59b234fbfe085f630f4446d6f3ee1d78","ssdeep":"","tlshash":"1a31aab36d04fcd8ebc11dcc3279ac3daa97864908c28fe5b7d8e81261c48b8ce54b54","size":1782,"data":"","first_seen":"2026-01-24T14:09:05.687822Z","last_seen":"2026-05-24T05:01:39.279557Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"92092a7594f617ddf988708660bb4dfb","sha1":"0eb4a6bfd9abc759fccbe61554ea90ce25707944","sha256":"f9211fc1429e9efb674bc3463a04fd32260e1418d3105b083bc85d0a226de310","sha512":"e360a666616032ce82fdd872dbfa436b4993aa37f61c07947d17bfaaa06cae6f477a1b7b92623d09c0598450fc7bf4a03151a3353d86a4b0584a4285227566eb","ssdeep":"","tlshash":"1ef08c5fac15c953d43e2c2e827f5c7104c88d7b0b6096b88a9fdf4825054b91bede45","size":489,"data":"","first_seen":"2026-01-24T14:09:05.68926Z","last_seen":"2026-07-27T09:16:53.173978Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d14d736d743ebdf8e3487be7b7f897c7","sha1":"224e0490ca5b212ade8693dc7bc6a53eaeec81ef","sha256":"578b500af8c53f5a5ef75016ab60d07b92e394defb4d90be471969b06059e6b7","sha512":"07f22ed83805cf912c06f715f746439a3a2bd82babe0987014bac07800802d9c70e07c2cea7cdef28d75798007737dccaa07fe0985b746dfe365af40a1413a9b","ssdeep":"","tlshash":"5801f11f6052e0207debcd4714372e2b9888edb7173de56cc28ee87a641167e5768c46","size":780,"data":"","first_seen":"2026-01-24T14:09:05.690541Z","last_seen":"2026-01-24T23:19:19.275205Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a34cbdd55c2c44b54b8e550a91ffc4fe","sha1":"cb1838bdc9438b9874bde56dbec42581f305eeef","sha256":"cfcf4331e8e1e9a0855fe6c79a3cceb13ff25f3a86b627163ec89e65b5844bc5","sha512":"b5684fd8b06312e6c76c04050666b0f42c686f8a6bde93461a459c3312497432dae330b6f73fbcf5d11b045129dd339038ecf0051de5fbfb9c20bf571fc6a617","ssdeep":"1536:amHV+Wi0XmqWLFkS/BgT9DRsVvmguVbbLNLDf0BmExudUljJ:amHV+Wi0XmqWLFkS/BgT9DSVvmguVbbK","tlshash":"6733960eba18f5dad1c31f072b7ebcb6a72e8309219245791b7cc01e12b5d7d49bba44","size":53170,"data":"","first_seen":"2026-01-24T14:09:05.692085Z","last_seen":"2026-01-24T23:19:19.276166Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"624d7987d8f21fd3b297a1533d7cb870","sha1":"198ef472530bde775ede8726bf4e87f3aa47e461","sha256":"b37886b0dddce09db571bc886329980dd9ff008125225523815ffd81495364f3","sha512":"37c5f80a9948a52d3011e645a6239f7e505720173300d083d81d54db5b0f029b1195ef19825ead5fe51809c41bbc8e433e01a4dfcac0dccc244234c06f4272ec","ssdeep":"","tlshash":"b301221f6041e4203df6cc8b04372e2b8448edb71b3dd56c864ee83a541263e6b58c46","size":810,"data":"","first_seen":"2026-01-24T14:09:05.693378Z","last_seen":"2026-01-24T23:19:19.277439Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-16731183257\u0026cx=c\u0026gtm=4e61m1h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"674308a45f2f4c4ebc8f8af27db8982e","sha1":"c09524368e37b2521486d8cbbf72552692cb3397","sha256":"cd4366ce5c4720489f7a6ada8f0507cec101ffbd5fc8e22b48be48f5a186d592","sha512":"d23401a577a154a126d9afca39d365f0818a0ea246e729e2cbc3d8acab711d5aee6e107ec1a82263e5197585032e6cbec89d87263d9dc4a0c8f4d76b2e8e1ad4","ssdeep":"6144:fJmMvPWlAxJ508RYoeXDIItDmlFldbKKCY5dqbQlGf:xmMnWlAxJ508RYPIItDIdqpf","tlshash":"608419dd73d6702693a3b478403f118ba57b69a2b44cc899f189cce42e74a9a4177f3c","size":388460,"data":"","first_seen":"2026-01-24T23:19:19.246839Z","last_seen":"2026-01-24T23:19:19.246839Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-MJ4Z47N","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"04a5eebe7c285b35a404db3e39bbbf23","sha1":"803b0956b17293e5e3a730c98bf898ba340812c1","sha256":"8611fdc3679777eff98dda4085123b8a0925ea11a96eeeb2ee28c190b4d81d6d","sha512":"9740bb7220365cad2a2fc63766ac6cb024e7a10a741939c352cf929e901f233cc44d4a64228a10829316028839f4fec1e177f5e84c75c035d5fa11e0ce19e8fa","ssdeep":"6144:j6FJmMvKHQAxJ508RYoeXDIItDmlFldbKKCYvdqnitTX7:jcmMSHQAxJ508RYPIItDwdqo7","tlshash":"44942aceb7d6746683a2b478803f114ba57b29e2b44cc895f189cce42e745aa1133f7d","size":442110,"data":"","first_seen":"2026-01-24T23:19:19.26206Z","last_seen":"2026-01-24T23:19:19.26206Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfXO5shAAAAACeiH_nMoJ8sUjtXkTv7DcCZAHRB\u0026co=aHR0cHM6Ly9jcnlwdG9tdXMuY29tOjQ0Mw..\u0026hl=en\u0026type=image\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=vc093n271k6j","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-08-08T17:41:48.052107Z","times_seen":503943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf93cb73f92865f65e74ed93a895b221","sha1":"d6014ab779d9b506b2284351933f0ca27cd5aa18","sha256":"f6b4e5a3a8b2ae89dd6bfb1476481a02929997874339edc0aae49b44a4c552ec","sha512":"3f09e88602111921c5397e0e2b62d7af14b051841d1d18bddbbed38fb6393e00e2c9587adc58f30aeb3b820d6b4a2940217792900d984e3a1a9b6d498db9df0e","ssdeep":"","tlshash":"cd01221f6001e4203df6cc8b00372e2f8448edb71b3de56c864ee93a541263e5758c46","size":807,"data":"","first_seen":"2026-01-24T14:09:05.694573Z","last_seen":"2026-01-24T23:19:19.279401Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b74ddd1e0b104108907b996a1150f4c6","sha1":"c3329c09bcb00b7dcf6a4c731613c440378b05e0","sha256":"17dcfb3da03c04668658f8c9051fa3e89945ee72ec4d4f953bc91d0e5d68616a","sha512":"37804e73aaad45b56e30dbfb679ae68ab4bd2a84f48aadde361eba85f236c0007d84880f6f152a56646fa0bc08ce0b49a669b2946a125e0c5517c7173291786c","ssdeep":"","tlshash":"f301220f6001e4203df6cd8700372e2f8888edb71b3de56cc54ee83a541163e5718c46","size":808,"data":"","first_seen":"2026-01-24T14:09:05.696588Z","last_seen":"2026-01-24T23:19:19.280516Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ebdb1394378f485d735f978af07d7c26","sha1":"20fcf8ac3e65d5c41637aeda34d1aa5d78527767","sha256":"703fdca025e4a652f2a1f3dfa219ddda0930af7f7830a4b7e602663988f383d3","sha512":"2c386cdfe5d787d1616d25b562182da012a71699d58129e178ce8317f7dd701ec0c92b90c678ea9a42ebaedc670a40b91da7c33f514327f9fa4165f3c63485ad","ssdeep":"","tlshash":"cfb092b8404eed267c26f8120c387c27109c840b0081bfb883d8de402f0283e7342d87","size":128,"data":"","first_seen":"2026-01-24T14:09:05.697994Z","last_seen":"2026-02-03T09:50:03.190341Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"622c760f62242093d22b6d662ecaa31b","sha1":"c79e76346c56e5460fca323ea7a32a342a099d79","sha256":"5e5495bd8cef96226819985ceadf18469b906ae4819c0db3e3a4fda3905032d3","sha512":"0a9ba57397b1b6ca2b9ccf11360713600f3e48eda347b67e8d1d52139c0c5508a55e5584f690905d95d680e1793088d36390212afc55871d7d9e2fc063ead436","ssdeep":"","tlshash":"8201c00f6001e4207de6dd8744372e2b9448ddb71a3de56cc54ee82a545167e5758c46","size":808,"data":"","first_seen":"2026-01-24T14:09:05.699193Z","last_seen":"2026-01-24T23:19:19.28268Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0c5329d65044c91db8ca7e91847607ac","sha1":"fcbe35e7004fd143a770e4297a3dd41d2bf442a8","sha256":"7e5caca330fa3b03b96098a80f0bade483fdc03469ea4e64032bcc2df16ca8a7","sha512":"933a2f5464cb381db35ace9a9b8d95292bb177d0d6abb8fe2ad31c7cff188c418eb96ad48695d6211330efc5a0ff3c6b155a30cb917c4c8dc27678a481f60160","ssdeep":"","tlshash":"4901220f6001e4203df6cc87003b2e2f8848edb71b3de56c868ee83e541163e5718c46","size":808,"data":"","first_seen":"2026-01-24T14:09:05.700636Z","last_seen":"2026-01-24T23:19:19.283971Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"550a3850b52f7181d227c6414c6cea0d","sha1":"a1201382371e22f32e9254ee37bb1132bf556b7d","sha256":"a443798fe2a41d5c0443d1a809150e75c0648504a7331b19946567622322de47","sha512":"942374be74b2db9d62f551e45cf69e29b4f84e7245acc2c1469d71335880d8ea13d91dcb72640492e9eda91c4dfee8a26238586971b82c5d97604f98d3ef7d83","ssdeep":"","tlshash":"b501220f6041e4217df6cc8b04372e2f9848eeb71b3de56cc68ee83a541267e6758c46","size":832,"data":"","first_seen":"2026-01-24T14:09:05.701838Z","last_seen":"2026-01-24T23:19:19.285109Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f4d32827b0e7f6b376332abff1915b1","sha1":"004067d4541f306defaea70e0b500a0c344e56a2","sha256":"353dc590d86a3399650d856216e75bfee88e753e03c6dfdab05ab5a70220131a","sha512":"6907e7fa940e29b2c53dcd302adafbe8a0689bcdebaa008cce6d851bea824b65f5f32ee719bfbecded4edf771083c000f0bcf5034b27156df08c89ccf66ffb5b","ssdeep":"","tlshash":"ca8004d531c35000c753357404571cc4f03cc47014444d505140d4531c550305115c7c","size":38,"data":"","first_seen":"2023-04-12T02:37:29Z","last_seen":"2026-08-08T17:27:08.53665Z","times_seen":4093,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-MJ4Z47N","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"deabd6ea677a027e6f4bd0d1daddeffe","sha1":"2d4a60561e2afbf8dafc1fe844f84181315af9c3","sha256":"2e076586db0918713a79463840b07efac61bf509256a685ee10e6d105879e906","sha512":"5b09b476dbc8517e8d23d2ab6edc73090f7a4566451d366f1bab60ee1f7232707b6e12a5de24a17239630d6b3e51995f97775c940363f78b4d2b7ac9d64bde01","ssdeep":"6144:j6cJmMvKHQAxJ508RYoeXDIItDmlFldbKKCYvdqnitTX7:jzmMSHQAxJ508RYPIItDwdqo7","tlshash":"06942aceb7d6746683a2b478803f114ba57b29e2b44cc895f189cce42e745aa1133f7d","size":442110,"data":"","first_seen":"2026-01-24T23:19:19.247806Z","last_seen":"2026-01-24T23:19:19.247806Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emblem.certik-assets.com/script?pid=cryptomus\u0026vid=eea4197d\u0026locale=en","fqdn":"emblem.certik-assets.com","domain":"certik-assets.com","tld":"com"},"ip":{"addr":"54.240.174.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"64b0533a1b1e87362090920142e236ae","sha1":"d2c47b24ad99c339710e3c731522db9097815b84","sha256":"1aed944d0f1dd24fc7bce47a187a72614f23c5880217a69bb3617d4b2023daed","sha512":"8e698494a29199cf71fc471f1668b13508bf4dba1328e0b3fcecb843f585bbd4c6bbc6eea877475cd55c11cee0fa37ea576c3ffaad4280489bfe5c76b9383c45","ssdeep":"768:876BZyWlKHFYBeWw7HofV22loERP4ydXjYNkUH2rXxbt8t:I+lFtl3RP4ydXjYN72rX9t8t","tlshash":"88c2080d666aa5a587e331f8152f400bb835e2774208c464fa5cd7d13fb456ca3abf39","size":27398,"data":"","first_seen":"2025-09-20T13:25:47.378468Z","last_seen":"2026-05-24T05:01:39.165455Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8a411d7cb360b9b3eca3d1c842d1821","sha1":"e34c9269c82df3326122e7f95d70d10307b1231f","sha256":"3f372994ffc80f2a8d5eb34a6dee46ba0fae509e69c5389e9c2028e0ab5d4ffc","sha512":"a2ee9db2ada0d3210f1d696da06613af1ef6ea84f74df65c0e79065140e6996d5b9d0aa73cac8f06cfb6123467dcbeb942c899ec9387a6ca3eaa289c72a3e697","ssdeep":"","tlshash":"d601000f6001e4207df7cd87043b2e2b9448deb71b3de56c8a4ee83a545163e6b5cc46","size":816,"data":"","first_seen":"2026-01-24T14:09:05.704896Z","last_seen":"2026-01-24T23:19:19.286787Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"01a39bba6df66b9b6c1ce105b37d948c","sha1":"cc4c7d59b3ce8ec9d8ddb107b19b42f2052a7d94","sha256":"d89a3b683ad06f027eaf33c886083c7d6f0fe88ee28e646059c4f521a166cde3","sha512":"4e644ffbbda98fe7ba928b7ba56d5e7bdec3c6320bac4c5518e4a2671ccc0c1192f11f0148949f54be666368f7ffb062296135145dca1f01fa1c3259d4a080e1","ssdeep":"12288:CcrIRP7yj+Ql2v2ZQqbrH4SJoR4yjom71o:jIhyj+RRqbrYSJw4yT71o","tlshash":"9a0529ca721275f94332b4f92037142a936daa25940c0d5db259c8f52ff2c6931beeb7","size":856260,"data":"","first_seen":"2026-01-15T01:58:18.084345Z","last_seen":"2026-06-02T23:59:05.000095Z","times_seen":25485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c0a7f99f661a3efcb04562a57aee2b5","sha1":"eb2711dc3ba0f7324367cadcd4c75aa769bd4da1","sha256":"f64850df0c5cdeebe630f54f825ef2ffb46ce6b081c568d9a0cda6dfb0e423dc","sha512":"bd1b43e2c09ab01204ff00e5d940a30952fb64d9b753ca00a1f7fad4a74b3c7d689765e0aafcc23cd47d7be729042832f8c3563a1650f4cc948797c1e35d1424","ssdeep":"","tlshash":"bee0d127e0819550e657105047371d14b713ba06542db499765ec371ff36177479144f","size":367,"data":"","first_seen":"2023-06-18T22:52:35Z","last_seen":"2026-05-24T05:01:39.275911Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"efe3ca19d46d84c304992c618695443c","sha1":"4466eda89cdd856f5f7662099cc385b4bac76e62","sha256":"a2ff017b80b1bca6e0a85af0915c4cb6b742a995dddb4470aea02268f221c229","sha512":"79e9d400bb626f0b4df760d2af0f6a76e4caca23b581c6a1ac43533336eda4b9ce93032667004ca411d88a91c25e33cdfa05a15046d25a2d550536d9e2570f58","ssdeep":"","tlshash":"8901d20f6001e4207df6dd8b44372e2f9848edb71b3de56c858ee83e541167e5758c46","size":808,"data":"","first_seen":"2026-01-24T14:09:05.706048Z","last_seen":"2026-01-24T23:19:19.288969Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f0c0557f894ab699ce70e5fb8ad7743","sha1":"42e7188462f722fdadb3d1db8f5e72bf6d225778","sha256":"c71580deef250cba63a27594d4606f2ad9b099bf3b876025e3d0726d056746ab","sha512":"03d9c773530fa3244c8995bb755b4804c72f543729369ef9234e6d1700f7259222d65e627a54d774f6ea26c28b370bba37151eed91f32ac15ffa780a2957300a","ssdeep":"","tlshash":"be01d20f6001e4207ef6dd8744372e2f9448deb71b3de56cc54ee83a545167e5758c46","size":808,"data":"","first_seen":"2026-01-24T14:09:05.707081Z","last_seen":"2026-01-24T23:19:19.290094Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"acf4ab923a52fe311a372d7ae1701533","sha1":"b66d9bd28b79f4d502b8c4bb66869700b8257bc1","sha256":"609660732362614532b9475829a442ae542fdfcfa89b8e5f14b0ae084f47d467","sha512":"d8b1fccd3956d7ee8ffff660acc682df57db6eea3e04537b216abf1f58f9558adc3ab76a56a779aeb1f642a5d7459faa782ad6f04e69eb84d9f0c08357b8f144","ssdeep":"","tlshash":"0a11332a6906cc17a83e7d5d5e3e2c3200cccd3b0752abb5c6cece142a454bd27d9c82","size":1081,"data":"","first_seen":"2026-01-24T14:09:05.708372Z","last_seen":"2026-02-03T09:50:03.199243Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"01a39bba6df66b9b6c1ce105b37d948c","sha1":"cc4c7d59b3ce8ec9d8ddb107b19b42f2052a7d94","sha256":"d89a3b683ad06f027eaf33c886083c7d6f0fe88ee28e646059c4f521a166cde3","sha512":"4e644ffbbda98fe7ba928b7ba56d5e7bdec3c6320bac4c5518e4a2671ccc0c1192f11f0148949f54be666368f7ffb062296135145dca1f01fa1c3259d4a080e1","ssdeep":"12288:CcrIRP7yj+Ql2v2ZQqbrH4SJoR4yjom71o:jIhyj+RRqbrYSJw4yT71o","tlshash":"9a0529ca721275f94332b4f92037142a936daa25940c0d5db259c8f52ff2c6931beeb7","size":856260,"data":"","first_seen":"2026-01-15T01:58:18.084345Z","last_seen":"2026-06-02T23:59:05.000095Z","times_seen":25485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026k=6LfXO5shAAAAACeiH_nMoJ8sUjtXkTv7DcCZAHRB\u0026bft=0dAFcWeA4bi3p02bHzi3BsioD7JjlY0wAgkdQKOanmZNUM585vK8aNvAkiHguC8wksaWlUs9L83A8ufnOCD-qrX511dkgNMpC9-Q","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-08-08T17:41:48.052107Z","times_seen":503943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-08T17:40:52.537966Z","times_seen":416550,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"465c47c687e5fb4a74e4c417eda4b808","sha1":"c89477651c52ecfcd5d937efbae56cb932efbe2b","sha256":"7441824ffd5d1e6b4823eceb7beeadf14ea14b1fd9e1eed172a3a721cda11cab","sha512":"0d863bd652f475390cce90bcf51f2a0c0bb5f3b058ec9cf43bcfb1eb934bd60fb9ba2bbed526df272851dfb69e074070406551d88105ce3a074c0c1b6b393ea4","ssdeep":"","tlshash":"7ed0231d5201dd171ab59d573f352e1210fdc87311690995b18fd456130273d6345d46","size":218,"data":"","first_seen":"2026-01-24T14:09:05.711355Z","last_seen":"2026-01-24T23:19:19.292459Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0c272230fe484814a05b1c2f052d136c","sha1":"bebd489fac57868499885b30c4089c26c12ae75f","sha256":"a1839adfd39b41dca501077668be13b33d7c8124d139aa606f9f9146b62b9f04","sha512":"92d3e078a41ba60c3b27de173c9b0ec59d66e4d90ef05b002796e61ee9993e377c05bab5c19da757174513ab00b78f1ce395d1d0a44c586874b47be9e0c0fd0a","ssdeep":"","tlshash":"10d09780ac02cc0cc2514b22283a1d2510ce9ab40a0200835c84ca389881d3005b0ccc","size":220,"data":"","first_seen":"2025-08-13T15:42:54.194399Z","last_seen":"2026-07-13T10:45:19.05998Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ff3193bedb50df2b718bcae970eb691f","sha1":"b81430de184094f9fc286d8bb5bebbba47094d5c","sha256":"128fef5bfaf0ddf289214547a472a1508bff26fed8021a68e9fe20f8f59aaa85","sha512":"f734f8b7ae15d8a643a628c01ab9b0925cd376377ccaa9f6daabcfc4d2a269c5e1f735ae7d8714f190f04b83892e43cba562b4bff93361b22a799c8a9988655f","ssdeep":"","tlshash":"5a90026cd65a0c959039512254381c0543a8c80c00446d4053e4548854f5f55a54df49","size":55,"data":"","first_seen":"2025-10-23T05:37:49.160224Z","last_seen":"2026-06-03T09:53:17.959412Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8cbfb17fcff9e9a2abb4c13b6ca9177","sha1":"5f48da704a21d6460daf4486d013efbabc4c644b","sha256":"de17f85ba5092b9f701e1bc63552f91e9e9fa09791025c4b807be50b3d9aa4e1","sha512":"d65ba75758e23d460417e07703996fb62e2541bcdf1bb15d98bbe792335810ce90667475730f6d8fbedfb67c4bea6fa2c4cacf9d026eaffb3db467cfef0661b8","ssdeep":"","tlshash":"d351b0a3ed0cee418fd99e0c293a7cf824ddc759c185996ba3c8c8110b86d345ee2b61","size":2719,"data":"","first_seen":"2026-01-24T14:09:05.716318Z","last_seen":"2026-01-24T23:19:19.294823Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?onload=onloadcallback\u0026render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f87bf4565a4c3b3a90703cb3f47f0418","sha1":"06ec7754b14612f15b21ff3c24d8da1c32a9f2d1","sha256":"8ad19159ded67aab36cc152b754e24d773ed7b935561917143bcd78d0c7b7c63","sha512":"581d9806f84b50cc925fff387b94528eaf3db21f96c7bf88f500c5588137adebe6e8c60faea5de339ab4216945486778e51f995f0b1015c8f767a483205cf9bb","ssdeep":"","tlshash":"9211f0b21605e0390f7219e1e2fecbb0e492701df15885dca5159a982e7accbce05586","size":1076,"data":"","first_seen":"2026-01-15T06:34:27.857741Z","last_seen":"2026-01-28T19:14:36.90457Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc77552cc0a6f8a905748d42ff0f59aa","sha1":"e373d185cab935bf400e3ef8ec2132e8d1f99429","sha256":"93f3e04fa11d64bfdec977cf7604b20688344516bcc778a4545d78701e4d2547","sha512":"4f144a39199febd49cfa9d4e45a5ada228d2764e76ce59a290fca5c5adeab447ebe2a60a25cf83a7907c100d35c6889323f94d199fdd1c0b76bf9bba803d2fc5","ssdeep":"","tlshash":"4a900470d4c00c5750310c1735fcf10115dcd04d04010d001f51574714135557f05d45","size":45,"data":"","first_seen":"2025-07-28T05:20:09.914663Z","last_seen":"2026-08-08T09:59:24.838963Z","times_seen":3239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"96c9752a84ad3e4def200d96101a5ac2","sha1":"591770ff5ff87693419d5d6b696ea179c521646d","sha256":"09072df98fc811471d9f4a0957704e791e59488099b4849012ee15d611f2ddbb","sha512":"152b33076ba7e2777e8d2048e06e54d9e15b6d221302f4c27370159db98439a9bb955ab9ebbfbf0084d96ee4a237e06dca4235891c08d46b36c66798a4c00917","ssdeep":"384:VM71TLgKcW//IeDBzzuGnS6P15/BJHXDffVpjmUAjCUyr:VmTLgkoCzzuGbn/BJHXDCir","tlshash":"5292961a7a18f6fac5875f0a72bbacbdb13f81081a5245b56b98c11903f847d4fb3906","size":19948,"data":"","first_seen":"2026-01-24T14:09:05.718522Z","last_seen":"2026-01-24T23:19:19.296456Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b60179f749b18197eedd71163d21bc05","sha1":"843009f466cda1cce46cae593b5375cce6c5848a","sha256":"c2971f1f863b72d9dcac0c1aed95d25b9974fe64089519aab5f7066684d14445","sha512":"437d2d4cf68e0ca6f01c9b646137c7b63d4ad5a081f6250b2e235db55ef1eefcd54b12380aaea04294998905779294a26235ad0b07ec2207994084f36534d757","ssdeep":"","tlshash":"4c01f11f6152e0207dfbcd0714372e2b9888edb7173de62c828ee87a641167e576cc46","size":780,"data":"","first_seen":"2026-01-24T14:09:05.720616Z","last_seen":"2026-01-24T23:19:19.297732Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cfaba7bd0e189ab28dbc39c21108c2df","sha1":"c02a33ff8c93359fc315e046bb32b909df8fd89d","sha256":"159c7efca1b6fecf46bbfba15adfb0c2898f8ab0e9274923c875b61d80c798b5","sha512":"04b635b20b7c1498559378911f7eeca0bb1ee049239429fec23552c877639ed8b65b554b9063a9f5cfd7b613f8610c2bbb87074ce8781aa30c8f45c29c42e5fd","ssdeep":"96:LY4bSw9CS+AIPjGg/ORL28dFb/u5DHSyD+PIetVdbNmWoZ:iS+V9OgIByD+ge3de","tlshash":"bfa17c3ca118ea9dfd5a3e40153eec6e264f815f0695deb1c6dcdc244946538b253ec0","size":4986,"data":"","first_seen":"2026-01-24T14:09:05.722302Z","last_seen":"2026-01-24T23:19:19.298855Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d6d90aef5fc55472086861d28fc8639","sha1":"0b12dcf77d680a418913739630c14fe57834fd8f","sha256":"6f54128fe79be1b580aad283f6a5a97a687998fbe6c2cca02ea0cbd760347400","sha512":"7dbaff406d3f3322cec6846bf434bfe8bbb3ac93b3743633d20633447d3eb78bc551be0d644043b74e1deee451b2084bcee6574d3a956c960c940f92c11f7e07","ssdeep":"","tlshash":"4901411f6052e0207debcd0714372e2b9888edb71b3de12c828ee83a640067e6768c46","size":780,"data":"","first_seen":"2026-01-24T14:09:05.724179Z","last_seen":"2026-01-24T23:19:19.300333Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"424c71f4c92db64f118eb721d2190d33","sha1":"fd2ed95dd6bb4fe0ec942df0bf2d45e4154bee75","sha256":"cea045128aaf2bd49cb26b003e80acadea36ebe977ec1fe796b7ec9dc915050c","sha512":"c7d60e1ae26f2f60ba0543288c6288b2d014e0661c9b8caa9becdcfb4e8e68060014d3f98709ab570805a0dc1812ba0dd579ef8cd75b6d3c3ed3d8e36c0723da","ssdeep":"","tlshash":"6101411f6052e0207debcd0714372e2b9888edb72b3de12c828ee83a640067e5368c46","size":780,"data":"","first_seen":"2026-01-24T14:09:05.727399Z","last_seen":"2026-01-24T23:19:19.301446Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd3f129aee6adc0c979c9286efd5d7f0","sha1":"2c4b04c5278a67878e0836a536d41bc20a6e2931","sha256":"6817a5f6a7cfdee9ab79c2b97d1a18a2f658d7f0b04ec9f00a4a3f0d5380994b","sha512":"5bfc8ab785289bb97400e2d7be443f8675c6bfc866dc04a8ee37a6b8d23521d014d89e844f3cddcb284a82986ac0d738008787da37fc770ec9039a023d1087a6","ssdeep":"","tlshash":"c641ec18f419f6c87d9f2ae1b23eed9f364f204c0da666f68993a5ac17080783113ec0","size":2245,"data":"","first_seen":"2026-01-24T14:09:05.732023Z","last_seen":"2026-01-24T23:19:19.302488Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"01a39bba6df66b9b6c1ce105b37d948c","sha1":"cc4c7d59b3ce8ec9d8ddb107b19b42f2052a7d94","sha256":"d89a3b683ad06f027eaf33c886083c7d6f0fe88ee28e646059c4f521a166cde3","sha512":"4e644ffbbda98fe7ba928b7ba56d5e7bdec3c6320bac4c5518e4a2671ccc0c1192f11f0148949f54be666368f7ffb062296135145dca1f01fa1c3259d4a080e1","ssdeep":"12288:CcrIRP7yj+Ql2v2ZQqbrH4SJoR4yjom71o:jIhyj+RRqbrYSJw4yT71o","tlshash":"9a0529ca721275f94332b4f92037142a936daa25940c0d5db259c8f52ff2c6931beeb7","size":856260,"data":"","first_seen":"2026-01-15T01:58:18.084345Z","last_seen":"2026-06-02T23:59:05.000095Z","times_seen":25485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"198c31b0ce8fd4a4852566b089da3579","sha1":"ab51b08f16702f3347ea2f9dbe23bd2e6d0fdcae","sha256":"e817527edf34d1c050f46e40052dbbc2996c51c5a47a6027977f7784b80e1c75","sha512":"fae52914c70c2275e662df225f88ee1c00ed4cba43a21bf3f47b32fa8832ad1ee19ab40b9a76581f2fa260a1844bf20513ca05743b4a26907db11a11dd7753c6","ssdeep":"","tlshash":"54f0f44c94f34075002723b282eb19c931f285ab2286c89f3491d6e91f44ae767a47ed","size":625,"data":"","first_seen":"2025-09-20T13:25:47.545096Z","last_seen":"2026-05-24T05:01:39.28413Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-X5DRT5DBEL\u0026cx=c\u0026gtm=4e61m1h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3777dfe68258b342f5126a20b385b0d8","sha1":"2392302cdcfc274f23fe83b09c77df9e6a714884","sha256":"acb7300c12eab18d543bae0bd95920aa3f74220c593e377cecd9154c4c5997e0","sha512":"d1ed51ec166c60e88a95c0c2d9f6981b3e544e52511bc305feb491d9c341af8135af8d0ad5183ef869e007e1409d73db9b03add7ec8979394014b88e14dc81ac","ssdeep":"6144:xsQ+JmMvkbBQAxJ508XYoeXDZItDmlFldbKKCYTdqP0n4JBxV2:xomM8bBQAxJ508XYPZItD4dql2","tlshash":"a5b4099e73c67426939af478502f02cba87b25a2b45dc8abb1c9ccf01d3459b4167f78","size":508571,"data":"","first_seen":"2026-01-24T23:19:19.24156Z","last_seen":"2026-01-24T23:19:19.24156Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe9aefd6115bf904a1b1b2f1b0c4737e","sha1":"41dd1cdcc6a498d36146bbbd83004b0166370126","sha256":"069dfacd5903d801cb6bbf11cab464c792ad1490caaf3c048a7b796edccad4de","sha512":"8a7f94ac9613a768bbdf4bbff1e88e153cf238284f4a26002b9e22486cafc915281dafc6000dd96c17b15bd097f99c837dd33cf1c50ab7bde945693200801bd2","ssdeep":"","tlshash":"b321262cf015fac8bd9f2be1a17eed9b264f605c0d956afa899395ac07080793553ec0","size":1191,"data":"","first_seen":"2026-01-24T14:09:05.734481Z","last_seen":"2026-01-24T23:19:19.304192Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c848546e8dab323ce683b389297ee18","sha1":"b8808ae0dccc4097d4e454b6141fbc90ae1285af","sha256":"ab32775bbab4db20124910bde334f397ebe792a31f98762e6606eeee9d85addd","sha512":"982d6b12e24297c9eb5f4db69b5c199020e27ee8c393144b33722bc62fd328d4b99dfa03d53928ffb08695ab4ad4b26f78b79f654f18f0d2137ad77c9f3d0a06","ssdeep":"","tlshash":"c741a7c14b3069d855f76daddd1b280c273df8761c52c3c4c15ce7aec8739a05806d04","size":2147,"data":"","first_seen":"2025-09-20T13:25:47.53993Z","last_seen":"2026-01-24T23:19:19.305492Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eded5d27c0c030a5ee8e3a470b52d9c1","sha1":"6e8e86aea548608e5cd16fb8470e803445dd4277","sha256":"03e5d79cc36f43e07efaa1476b8c94c0b5dc88846e1ba5a895b73eeba04a0799","sha512":"f84cb1d36877670f0efb9d69527367c20cb677228ddd50b4eaf38c4e4cef65e99c1d1c7b6d69b56a3d58745fc20f95f5647e8465c96b783ff3a9246fd0c05046","ssdeep":"","tlshash":"9531aeb89005dadcfd5a3e08183ead98628ed5af5a94cf71cad4cc248e4b079f753980","size":1702,"data":"","first_seen":"2026-01-24T14:09:05.745397Z","last_seen":"2026-01-24T23:19:19.306075Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"68de9ad97b1e6a143455c7a7bf1adf47","sha1":"b45f53fc84cb3419452d2675ae907e69f462c1ba","sha256":"0194f33fe8c9fa03011c1ff07120324c2df7ebbea31522a55c9160ab98bfad69","sha512":"ae5e7a742e914c33e92e297327288f352167fc2deb61e600691e999cb56b89e4347acd4b400823361061f6ce6de75654f08d31c984a1b81d918898f7561b05d8","ssdeep":"96:Lf5sjuuOj/4q24e+EGk+UbxPf6LE4dSVyZs4pSoC4fSOk:8PoyHRhf","tlshash":"1bc12539a00aea8afc9e3e81107eec7d358f506f0586def986c5dd640a428797643ec0","size":5880,"data":"","first_seen":"2026-01-24T14:09:05.747766Z","last_seen":"2026-01-24T23:19:19.307087Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfXO5shAAAAACeiH_nMoJ8sUjtXkTv7DcCZAHRB\u0026co=aHR0cHM6Ly9jcnlwdG9tdXMuY29tOjQ0Mw..\u0026hl=en\u0026type=image\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=vc093n271k6j","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"982847f12ab23bb23d84e9936ada2d32","sha1":"9d2f00ef4deebf8fb9705c14ac9b869ca0c95b46","sha256":"08a7050c327c58433fd821eeab73e368361dee0f8ff10f016494a40b77459a26","sha512":"29942f7d631832743433b0e965e7ef4e56d4d8533aa961137526c4097d106ea28df87c43a58ccebe4d7ecdb331a475c0f1c4ebec1ec4041a92c2c24d7a879654","ssdeep":"","tlshash":"727000b82c282200222238e0e02b000800a2002000020000200022808c3082a000ac08","size":22,"data":"","first_seen":"2026-01-24T10:56:22.420387Z","last_seen":"2026-02-02T20:54:31.34458Z","times_seen":4972,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"850cffbb0805d3ae6e094f399a87d675","sha1":"194b21e6b766fcfeb4d50f807f3570d02c693963","sha256":"657f4c1ac5907c2138c524ba0992043ca4bbfc98d1c939e45aee784df0c9aaae","sha512":"fc99b7fc1720d188e40ce063f83c932dd1508aedd7d261df377b19e795b177ea9654c19ad9d0634a840c74418668babd64657ce20c422eeeecbe93929bcda713","ssdeep":"","tlshash":"04110c5d2198ec11e9997f1e623cbd3a20cdc58786968df487dcc51902e647ca753c82","size":876,"data":"","first_seen":"2026-01-24T14:09:05.750495Z","last_seen":"2026-01-24T23:19:19.308965Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c9200ff426c7a5621c6bd2ae51a27b0","sha1":"948ddc6beae3594adbd8d3bcff3a626ec71ab171","sha256":"f2b95ffdc968cb96810e99ca40cca0887d7ea40ba2a62e8b7162e52bac3ce302","sha512":"ee3c5e1d53fb774cf8f6521d65b7a2c2a3d2da3f1f641f70f89b4e08d8c8700e220d00627facf07b5572dff255a7ede37248769fa65fac2e3648e24ebfc8bfdf","ssdeep":"192:HrO3lnSWiui1cpAO3OV9c1tzITgIPn19KernUeRx7T4+nnvKnvx7T4MNT9WwGHiV:H6me8U","tlshash":"910261109c7708b0c12b60aea7eb66114a1fa547a60bdd087f4de3861fc751984f3bee","size":8994,"data":"","first_seen":"2026-01-24T23:19:19.31003Z","last_seen":"2026-01-24T23:19:19.31003Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e2863a2287f61229c8c7e586792cfe66","sha1":"7eed20afb868e459caa538acf2531fd60f1bdf68","sha256":"96f0471779bca0ce32de65d247ef5cebd57f0e9ef9347b66340a09ef09bbe7d7","sha512":"57ec6548781bc6c596d662b9af59d3cc1d37eea5933c5645aeb3e9254705e82617d5327e14643dc3e11bf6c29f30be7449350d4f3ed996d418301e02a5b1e56a","ssdeep":"","tlshash":"199002bd82588c256c7225531c382c0641ac985a00450f146399da4422155767609d4a","size":55,"data":"","first_seen":"2025-11-30T15:57:48.221202Z","last_seen":"2026-04-04T04:57:02.247339Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f345b7df53f3fed120fbc884e27b21c8","sha1":"05327c82f3b7bd136f7a29ce7fc25f6d6c420dab","sha256":"10c781d823f90eb7b0eb0d53f61e00ac4c50c27fd61fb0a9036faad46b7dcd78","sha512":"eaa989d437e9be25f1dd156fc3787423f26edb711a57421e4f482157aa947988018fa97a5aae0211e53a4633139555c5d15189c9653b0c07e60c0733148ae846","ssdeep":"","tlshash":"d4b01234a000cd8fadb87493d0392d15134e001e0041c5551388c90800621bea18bfc1","size":89,"data":"","first_seen":"2026-01-24T14:09:05.754673Z","last_seen":"2026-01-24T23:19:19.312206Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"00cb81a4b1e6b7017a848fe61f522b7b","sha1":"e8ee2ac72e1080660db40e4af758922129daf6c1","sha256":"5daf3d065ede0da525c8b4458aa8a5f1567ea54d7b2e0d5ec8267e297026c044","sha512":"8cd02bd6836a19c5074ab5b2a9d035150b30aa50febd0183822c55d5ca356c1db5109f2f45667437b4b7bbc26beb7fd9475c0a82a46f1785dce93540b2ba22f7","ssdeep":"","tlshash":"e671699aa120665e4e8ed95d6f34fda437bb40a53f76e0b605cd43a5983f8c7c003c8a","size":3476,"data":"","first_seen":"2025-09-20T13:25:47.547077Z","last_seen":"2026-01-24T23:19:19.313257Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"47a58bf7f114cc9e4ba7863bfb7ce73b","sha1":"dcfb1ad615ce2a5f24a19d6e47ee3c3bc76efbed","sha256":"2f802e80327be618d4147bdc4f291f1078aba3944a436116bd994226263344f9","sha512":"1e6e38dec4155f70a8066f640531fc7fab7624ba7fbd7ce62b8e88a312aae71b77767246566847acdf5c2062a3b52b9a00fc4b95137d8b87915a86ffb07c773e","ssdeep":"","tlshash":"df11e62ce005eed9ed8e6e91243efcaa304f509e0989dfa2cae2cd1956441b83113ac5","size":949,"data":"","first_seen":"2026-01-24T14:09:05.760151Z","last_seen":"2026-01-24T23:19:19.31454Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2bbad23ac78fb847aa470c5b036ad81e","sha1":"a7db55f9ab4fa277a695e4cd2481a5bdaa02e835","sha256":"64028742ea3202aaa8c447303a430eb443b9db827311896c8d544bad0e76fb31","sha512":"e7510e57482c9fe13587c88132825cbba82fb14adfcaf920cbc52842a463a605d5469b4531c5330b32ed4e9bd9d06aab95b9dc7df3d1d9539a7d0d4e6c54bf89","ssdeep":"","tlshash":"73800470c0440c15d173003375741101115cc4454001000057d05c4c11111054d05d55","size":34,"data":"","first_seen":"2026-01-24T14:09:05.761406Z","last_seen":"2026-01-24T23:19:19.316008Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfXO5shAAAAACeiH_nMoJ8sUjtXkTv7DcCZAHRB\u0026co=aHR0cHM6Ly9jcnlwdG9tdXMuY29tOjQ0Mw..\u0026hl=en\u0026type=image\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=vc093n271k6j","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"72b5a1116fe849eac14a5c20ca96a9a6","sha1":"3e3c3313145f06cd794bd000d1ee8e06c1c77fe7","sha256":"1b2ffcb1d0c2a04400ce6f743cd1468b60f065e4bf56adc0f6e2dd7245ed6676","sha512":"ea2b6d2c983c887c52516b30d5dde686f91feb9b2cb4c192adc6a23fd1686eccec62d2bd8d86bdefebf36f3ef3d94beede079d5271f32c2baf197c69d2d9932d","ssdeep":"1536:WBr2Ul7mhs/9gDpwiyHWVdr4I93LsQAu4B/59wZ4vFVdwyCCJBb7IH0:awrB3QC4N3nw1Cnc0","tlshash":"a673bf2aeb0370efcf6f9f0187e2abd913fc654b255101dc16ba10d1492de972a6e19c","size":75388,"data":"","first_seen":"2026-01-24T23:19:19.317208Z","last_seen":"2026-01-24T23:19:19.317208Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e5d67daccc3a16e8065c6b204327f37","sha1":"a33e1c98f59c936f09a27d925d5744ac79e668b7","sha256":"6190a22adc6d50618422ddf1065f3dabf08b78efd2f2fc257b84b291719080e0","sha512":"641568896ce8e79b83c91a87740b9fd380ef8ae86c89d0af8be31199f58cc1b03e3461cc5acde8c4b9f2beeecc049f0671620dc11ade89e166583930f370af2c","ssdeep":"","tlshash":"5841fbc26b34999454cbdccaff274b95370b80b7ff62489902ce9a3e8953a55e5019a0","size":2033,"data":"","first_seen":"2026-01-24T14:09:05.76264Z","last_seen":"2026-01-24T23:19:19.318254Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f48a962330cccb08f40883e0a9662d5","sha1":"2f4f2b41a877bdfcb1e57d81257ce8a70fe5883e","sha256":"c73c1403bbabbe2d8c34788885be52b7fb90cf38309a6d92f8775122fb54be05","sha512":"e2d1fc127c1c508a0a6d243e161a6dc8f9b8ffc5d25afd6f49147705283a2ce9c97e807e832f41be749c3672df0999f27371a5c084f4c2478e0f6521c69afe2a","ssdeep":"","tlshash":"3cd0cd64ccc7cfa45c3cb55725391c1b359948d5024425158fd9dd34a151cb99901c09","size":290,"data":"","first_seen":"2026-01-24T14:09:05.766143Z","last_seen":"2026-01-24T23:19:19.319479Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"11ca624cbbb4c6d4d962f5e4aa9bbed2","sha1":"6583cfb515e29a0d91e6f7191050a7465999b219","sha256":"64c735f2cd1d3e0f65f4a049bf9fd9210adb64cc26635d3ffdd5b8c8659f6729","sha512":"dfd5b371865004aaa92a4bca526edbcdb34d995b0e075edafc8e64ccc522e7e68c344aa815f33edf8d03f9c5342b31c5c98e76af96e5dd3072640471f01dd6a3","ssdeep":"","tlshash":"02e0c0db70120c71619f89f627b5a5347153250d78091923fdfdc8242f5868748121dc","size":373,"data":"","first_seen":"2025-09-20T13:25:47.50304Z","last_seen":"2026-05-24T05:01:39.295969Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b88a3b162d4771d5568e3c61d5d4223","sha1":"91d87d0303166df1de4d404c08329f74959e2070","sha256":"0444f275b73a9988e6829596bf238f43e5e4ddf368e966f1fb9e1e0be6716bb7","sha512":"322801945703b167d08ecb2e6ea946f7c974f015b9c691f9c10aacfb5ffb3ae59a8d7ccf40197f631ed790936897b2a668514c62150fa33388121d7132c20319","ssdeep":"","tlshash":"88e0c0db70120c71619f89f627b5a5347153250d78091923fdfdc8242f5868748121dc","size":405,"data":"","first_seen":"2025-09-20T13:25:47.532923Z","last_seen":"2026-05-24T05:01:39.280465Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a63672ccd7defc19d2123370d18d23af","sha1":"71c926cc915d72163362d31f7e265fbc345110ad","sha256":"2773d4f7e3c3d7db859b04205b192b926a044b062b2ce485f70f862d99abf77d","sha512":"25588105b09ed20949fd4a60213e65cd0bbb2d30508163da74589f2041ec44dd47caa1deae72a9d8235ed207442b1393fe3d16c9b36d52a5da5edd6add342f38","ssdeep":"","tlshash":"9ee023f92c91803815781691a373cb0430510d083c4af9f0d08d88c16d30fe8088e54c","size":433,"data":"","first_seen":"2024-08-20T20:35:08.391339Z","last_seen":"2026-05-24T05:01:39.31419Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d0f717fa81a08dff6fd8e64c6c23b391","sha1":"f11b602545e8c3f3c69d689a49d4bd5f776d28f1","sha256":"137c6a3f2883fdd89048b145386e7dcd5f4b4a3ff5ea4c418e48f0e61e7e5379","sha512":"18c4133e70c0681f6dff72a12dda5b05542d5c3d73182d23ed8c3d379e902789ee8d3db4575e6631d9bcaa8f0276d4166dc1d343b12313ba1c6de12a6c23f0a3","ssdeep":"","tlshash":"46f0d4192c1eb42117741965e27bd51930a53301374a16d5dad7c4e43d30cca64c6e4c","size":474,"data":"","first_seen":"2025-06-23T12:34:12.510807Z","last_seen":"2026-05-24T05:01:39.311295Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026k=6LfXO5shAAAAACeiH_nMoJ8sUjtXkTv7DcCZAHRB\u0026bft=0dAFcWeA4bi3p02bHzi3BsioD7JjlY0wAgkdQKOanmZNUM585vK8aNvAkiHguC8wksaWlUs9L83A8ufnOCD-qrX511dkgNMpC9-Q","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fc05436a0ba9bf653854adb665986060","sha1":"c96767b916b0cab9b279fa63cea6814cd4746a78","sha256":"ed6b799985e617847af8b38720f6e868013bbc18ab6ba95fec01806b0bcdc380","sha512":"5a814ff0b36f9c828f121187d8ea4cca213b4cca379055b9d810f10448ebbdfa1b11aa503b22f2d4fb4f72ce236e99ca2ab4b7d4a9bbd87bc86e106f2d90b784","ssdeep":"","tlshash":"02d0a96356022deb8c25aca00811009b2c890923e01783f07ace7c59afa0d492d08978","size":219,"data":"","first_seen":"2026-01-24T14:09:05.763923Z","last_seen":"2026-02-07T14:09:23.63769Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a48fec13dc7bdcfb73176ddc668aefb7","sha1":"10cbf69c927f8bc6875d492b078db0f54851e823","sha256":"1e968e12e5f5e2c9f7f68eef54da2ba389311f3544d277ff56f47a93ae4d7515","sha512":"97e70153a0cd5063fe3b21c8157d3b924b60ad98b8c98b8d1d991a9ede8c7015fc40141e35e717fea68f95087b5b1345d8da4e5dcc2003656517ceba69b5fbab","ssdeep":"","tlshash":"1fd095bb34d010f6a279c6f4b377970c34a3124c541dca23f65581657530e96004e9dc","size":281,"data":"","first_seen":"2025-06-23T12:34:12.435258Z","last_seen":"2026-05-24T05:01:39.299255Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"emblem.certik-assets.com/template","fqdn":"emblem.certik-assets.com","domain":"certik-assets.com","tld":"com"},"ip":{"addr":"54.240.174.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:49.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.certik-assets.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 28 Jun 2025 00:00:00 GMT","end":"Mon, 27 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A3:67:69:92:34:7D:B5:A6:36:7A:26:A0:8E:2C:3C:81:88:B6:BA:D4","sha256":"F1:C8:93:DD:79:E0:AE:90:29:D7:83:BB:21:37:18:20:D9:20:34:81:60:C7:8E:9E:98:CC:50:AA:A2:19:56:CB"}}},"request":{"raw":"OPTIONS /template HTTP/1.1\r\nHost: emblem.certik-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: response-type\r\nReferer: https://rubic-support.com/\r\nOrigin: https://rubic-support.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 0\r\ndate: Sat, 24 Jan 2026 23:18:50 GMT\r\nx-amzn-trace-id: Root=1-6975535a-716f56da70252d6968d3e5e4;Parent=39218fdaa5a9c5d5;Sampled=0;Lineage=1:7a5e17b6:0\r\nx-amzn-requestid: 00f80d86-a1c4-4128-89d8-d71c14d5c2ea\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\nx-amz-apigw-id: Xtn2IFD3oAMEnFg=\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, PATCH, DELETE\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: PYLafHiOQ1CauTGySYV-hgJe61YJR_E7_ae1CT64UndfMD-mCnaCrA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d11rkz2z4619di.cloudfront.net/emblem/audit-badge-dark.svg","fqdn":"d11rkz2z4619di.cloudfront.net","domain":"d11rkz2z4619di.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"52.84.50.102","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:50.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /emblem/audit-badge-dark.svg HTTP/1.1\r\nHost: d11rkz2z4619di.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ndate: Sat, 24 Jan 2026 02:30:49 GMT\r\nlast-modified: Fri, 22 Nov 2024 18:17:36 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\netag: W/\"333637f25f9cb1703a8d81b59c8b0b1b\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ed0b1ae4224d4a858ec43080e17ab00c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Y_KcShe8biqjvJ9Rblm_F0R3aDw3rFhTF9WGAhacGfCJaJsfRsTl5w==\r\nage: 74882\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":4089,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"333637f25f9cb1703a8d81b59c8b0b1b","sha1":"a6c7e65414a4095685395f35ed503fd171ffe6a6","sha256":"ddf7651b1997a8f36de27a5da737618d157980a12d108884252cd4e5e29f53a4","sha512":"9c3226282f976c38caf0c2a279712b75b44a77e1d17565b3cb6efd771d8258784f9583ccc935f5797b051fcff9f056bf148fc5b653c9584f472578c15562cd64","ssdeep":"","tlshash":"718176f9a3f950d1910a4ba4ce2c7573b9a238f9b704da86a2721ed4df0615e4cf74c1","first_seen":"2025-09-20T13:25:47.358584Z","last_seen":"2026-05-24T05:01:39.268607Z","times_seen":35,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":43,"dns":61,"connect":3,"send":0,"wait":3,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d11rkz2z4619di.cloudfront.net/emblem/contract-badge-light.svg","fqdn":"d11rkz2z4619di.cloudfront.net","domain":"d11rkz2z4619di.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"52.84.50.102","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:50.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /emblem/contract-badge-light.svg HTTP/1.1\r\nHost: d11rkz2z4619di.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ndate: Sat, 24 Jan 2026 02:30:49 GMT\r\nlast-modified: Fri, 22 Nov 2024 18:17:37 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\netag: W/\"25b707a4c021cd334e409f87775483bf\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ed0b1ae4224d4a858ec43080e17ab00c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: ALUHTmytMBTth7kk2FIKvfHSCzDbpS4-B-1ODAfb6IFxLOiO__aIUQ==\r\nage: 74882\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4224,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"25b707a4c021cd334e409f87775483bf","sha1":"d2b76c01dc7744594f79296fd8b8a139b8f4f3e2","sha256":"d456252345fe510cdbcc4f0d6e4b876a6644e566e78afb4ed9719b5d8eb8fc8f","sha512":"7524cfad90a0ff63bf1a3d286fbd88619b9a357b640d2f673d5c5d91a2793e96af2c578ecd3d6f9297f2334a64ae85178f04f6ddb50341147dc0245e4cc6180f","ssdeep":"96:ERJotDWtzEx4pfts+7YRJZLka1OIa/LZIpM:EMwzECJtN7YRJSYvpM","tlshash":"ff9120b2a3faa1c0d61e63f1aabc30ba75321bfc1645cdc452892cd8e96455ecd889c1","first_seen":"2025-09-20T13:25:47.350772Z","last_seen":"2026-05-24T05:01:39.177027Z","times_seen":30,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":46,"dns":60,"connect":15,"send":0,"wait":3,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/css/c29947d1cc76f81d.css","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/css/c29947d1cc76f81d.css HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8PrcP%2FRxMD3XBcsKL8K1gv1M9VVhRY5I3xDfs4w%2BNAWo7Hju7%2Fo2hqFi4%2FgNeXT%2BQn4754I0zRenpxBRVMAhbBEpSJeceFBoy7p3bySLDA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c334085fe6a56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/chunks/3063-3caf952eac987ed1.js","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/chunks/3063-3caf952eac987ed1.js HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Di7xMVkLdNmjPHZNcTW134%2Bmga7v%2Bl%2FJs9c6qEWY7WN3pLF10PVNpkqRV4HSSX8ubUejvHpp7tiixYKy20zY9mPoSxDdCM4FYjQFV%2FS3kg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340864eb556b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/css/6f61691a29f6ee26.css","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/css/6f61691a29f6ee26.css HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zErVIsMCJbhJjJP2T4r3EGJVJO7BMBMkZXUdAxiMJlf5G7TonuUgpIYYu3fUKpSE504r8n3CFQVm3LdQBe7LRwX%2BePQ2UjiwBsvEHmZvyQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340866ee156b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/chunks/webpack-545e0be0255e94e6.js","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/chunks/webpack-545e0be0255e94e6.js HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=urJPW9NRpNqHq5pUUJGtnqTEI3p1liP9t%2FCYZt6tRBtAkhkgtZR5rJBT82%2FXiP7RXjV0GCV5m%2BnLla0n2S87%2Fsn1aFi4dF2u4z4%2FQqZoeg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c33408abab256b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-X5DRT5DBEL\u0026cx=c\u0026gtm=4e61m1h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/js?id=G-X5DRT5DBEL\u0026cx=c\u0026gtm=4e61m1h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\nexpires: Sat, 24 Jan 2026 23:18:48 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 160627\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":508571,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11272)","md5":"3777dfe68258b342f5126a20b385b0d8","sha1":"2392302cdcfc274f23fe83b09c77df9e6a714884","sha256":"acb7300c12eab18d543bae0bd95920aa3f74220c593e377cecd9154c4c5997e0","sha512":"d1ed51ec166c60e88a95c0c2d9f6981b3e544e52511bc305feb491d9c341af8135af8d0ad5183ef869e007e1409d73db9b03add7ec8979394014b88e14dc81ac","ssdeep":"6144:xsQ+JmMvkbBQAxJ508XYoeXDZItDmlFldbKKCYTdqP0n4JBxV2:xomM8bBQAxJ508XYPZItD4dql2","tlshash":"a5b4099e73c67426939af478502f02cba87b25a2b45dc8abb1c9ccf01d3459b4167f78","first_seen":"2026-01-24T23:19:19.24156Z","last_seen":"2026-01-24T23:19:19.24156Z","times_seen":1,"resource_available":true,"data":null}},"time_used":452,"timings":{"blocked":127,"dns":1,"connect":21,"send":0,"wait":65,"receive":66,"ssl":169},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/chunks/9630-7d2af85ab267a57d.js","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/chunks/9630-7d2af85ab267a57d.js HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D0vKu7d%2Bqezzm3Pc8%2F0ZbweNl5vE%2BdJcCeYqnbs2qJcGcDanm6yN%2Fb9OD4VyOlPWBcxolo7S8MTkN7vhHXDww%2B0%2BGfb9E0HYxEZajAi3wQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340864ebd56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfXO5shAAAAACeiH_nMoJ8sUjtXkTv7DcCZAHRB\u0026co=aHR0cHM6Ly9jcnlwdG9tdXMuY29tOjQ0Mw..\u0026hl=en\u0026type=image\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=vc093n271k6j","date":"2026-01-24T23:18:49.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 24 Jan 2026 10:06:28 GMT\r\nexpires: Sun, 24 Jan 2027 10:06:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 47541\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-08T17:41:47.923Z","times_seen":958905,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":36,"dns":1,"connect":21,"send":0,"wait":44,"receive":14,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026k=6LfXO5shAAAAACeiH_nMoJ8sUjtXkTv7DcCZAHRB\u0026bft=0dAFcWeA4bi3p02bHzi3BsioD7JjlY0wAgkdQKOanmZNUM585vK8aNvAkiHguC8wksaWlUs9L83A8ufnOCD-qrX511dkgNMpC9-Q","date":"2026-01-24T23:18:49.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 364933\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:44:10 GMT\r\nexpires: Sat, 23 Jan 2027 13:44:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 12 Jan 2026 01:00:14 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 120879\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":856260,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (670)","md5":"01a39bba6df66b9b6c1ce105b37d948c","sha1":"cc4c7d59b3ce8ec9d8ddb107b19b42f2052a7d94","sha256":"d89a3b683ad06f027eaf33c886083c7d6f0fe88ee28e646059c4f521a166cde3","sha512":"4e644ffbbda98fe7ba928b7ba56d5e7bdec3c6320bac4c5518e4a2671ccc0c1192f11f0148949f54be666368f7ffb062296135145dca1f01fa1c3259d4a080e1","ssdeep":"12288:CcrIRP7yj+Ql2v2ZQqbrH4SJoR4yjom71o:jIhyj+RRqbrYSJw4yT71o","tlshash":"9a0529ca721275f94332b4f92037142a936daa25940c0d5db259c8f52ff2c6931beeb7","first_seen":"2026-01-15T01:58:18.084345Z","last_seen":"2026-06-02T23:59:05.000095Z","times_seen":25485,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emblem.certik-assets.com/template","fqdn":"emblem.certik-assets.com","domain":"certik-assets.com","tld":"com"},"ip":{"addr":"54.240.174.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:50.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.certik-assets.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 28 Jun 2025 00:00:00 GMT","end":"Mon, 27 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A3:67:69:92:34:7D:B5:A6:36:7A:26:A0:8E:2C:3C:81:88:B6:BA:D4","sha256":"F1:C8:93:DD:79:E0:AE:90:29:D7:83:BB:21:37:18:20:D9:20:34:81:60:C7:8E:9E:98:CC:50:AA:A2:19:56:CB"}}},"request":{"raw":"GET /template HTTP/1.1\r\nHost: emblem.certik-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nresponse-type: application/json\r\nOrigin: https://rubic-support.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain\r\ncontent-length: 41393\r\ndate: Sat, 24 Jan 2026 23:18:50 GMT\r\nx-amzn-trace-id: Root=1-6975535a-6ccc62486724d8d2675cd993;Parent=045ec163c4a983cb;Sampled=0;Lineage=1:d1503fc8:0\r\nx-amzn-requestid: 090aca06-151b-41c9-a0f3-e32ca4f65fc6\r\naccess-control-allow-origin: *\r\nx-amz-apigw-id: Xtn2LFW1oAMEnUg=\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: HmFykOpIx5xckgijTuVW9PWqPQIQg3p_gwN-YHE1FakcPR1IwXWOjg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":41393,"size_decoded":0,"mime_type":"text/plain","magic":"HTML document, ASCII text","md5":"503ee7db291ce812367ea67397c88a12","sha1":"87fd0738940626b570087a47294ab45ab50c98d7","sha256":"9c8bdd163c8ab39b782227355cec98db5bc3e2a6ce72aa95d774a152b2a6a1ce","sha512":"3342301b0fd60e90e934776cec4adcb2b857efaf1d68275d0e2730c1b3e0a8aae96cad557b7f98eb314394a9bfb943618eff338e1208cea54888ad8e3c16680e","ssdeep":"192:G9Q9cnBdWtqxc3l1eLqkFRlUZS8yymtrO3lnSWiui1cpAO3OV9c1tzITgIPn19Kw:mxcxkFRiK6mejDqiXyYjJ8HSvmJ","tlshash":"8f03021594fe0438302250746eee66976b57e203c21bce4eb7dc9bd59fd38c58aa278c","first_seen":"2025-09-20T13:25:47.453073Z","last_seen":"2026-05-24T05:01:39.204303Z","times_seen":31,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d11rkz2z4619di.cloudfront.net/emblem/bug-bounty-badge-light.svg","fqdn":"d11rkz2z4619di.cloudfront.net","domain":"d11rkz2z4619di.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"52.84.50.102","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:50.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /emblem/bug-bounty-badge-light.svg HTTP/1.1\r\nHost: d11rkz2z4619di.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ndate: Sat, 24 Jan 2026 02:30:49 GMT\r\nlast-modified: Fri, 22 Nov 2024 18:17:36 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\netag: W/\"249edd98a285ed1f2ee37a3704b4f9d4\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ed0b1ae4224d4a858ec43080e17ab00c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: sEiH1RBNP87R_IbA9F1UE1CXQp_1QiggolcyCSRiOknr_hWTzHG-ng==\r\nage: 74882\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":7510,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"249edd98a285ed1f2ee37a3704b4f9d4","sha1":"ab25c74572110f9926cfac47a5f7e8dcd47a6595","sha256":"e821d46f94865302d8dc26d2931b3127e29a19038306170889c4accfc6796cf2","sha512":"49133203c1996f33033a902e54f7798ccb5385e9968298276c033fcbf0808d27e00555e3c30e81d00a018733ff22451233a9c6a01ab2d390d909ac4c491b64b1","ssdeep":"192:sgA+uU3Q+2dEYhdTXYiYnlTZ2Fxg3PaoaZVdm2/l12ahgYiYnlTZ2Z:sgA+u4Q+2dthdGnlTM7eao8vm4FznlT+","tlshash":"d0f193f5b2e421f4950befa4cd3ba0b5796728f53ba1cf4946a50da4e21529ec8cccd0","first_seen":"2025-09-20T13:25:47.428743Z","last_seen":"2026-05-24T05:01:39.269422Z","times_seen":30,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":47,"dns":59,"connect":14,"send":0,"wait":7,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/css/5d5958782b4c0ed3.css","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/css/5d5958782b4c0ed3.css HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0o28beNyb%2BkP2Vj%2BL3dw0h9Fdf2OqK7tnRI1Fvt9cdg1bnFsU6vJsu982MLky59%2FHy8UsOghvnEoy%2F7A8QSHE7p5jmutKUUAT083gGDXnA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340860e7056b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/chunks/main-app-c541d7e060f78bad.js","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/chunks/main-app-c541d7e060f78bad.js HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qbqWWOScEcofmpNBY7S617iD5fGp4Kqk8%2FDQENSBv1x%2F8hvPbANdioSnhU5eNfHh8IySqteof4A2qpdeLVid7OZ2vts5fSjzgKzwqLgevg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340863ea556b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/chunks/2509-9c40765686691154.js","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/chunks/2509-9c40765686691154.js HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dXPQl5vjKiisTH13HBacJiFD45vxpPYijpBKlOTTY9HJPHrSzrFSMk4ZEbYbapLJkKV%2BTw9HfVioKuNUIHJA2228geHLFIiLkIli0v9lgQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340866ed756b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Frubic-support.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=332938081.1769296729\u0026dt=Free%20Crypto%20AML%20Checker%20%7C%20Check%20Wallet%20or%20Transaction%20for%20AML-Compliance\u0026auid=489864715.1769296729\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He61m0v890434404za200zd890434404xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391253~115938466~115938469~116682875~117041588~117223564\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1769296729099\u0026tfd=1606\u0026img=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:49.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"GET /ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Frubic-support.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=332938081.1769296729\u0026dt=Free%20Crypto%20AML%20Checker%20%7C%20Check%20Wallet%20or%20Transaction%20for%20AML-Compliance\u0026auid=489864715.1769296729\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He61m0v890434404za200zd890434404xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391253~115938466~115938469~116682875~117041588~117223564\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1769296729099\u0026tfd=1606\u0026img=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain\r\ndate: Sat, 24 Jan 2026 23:18:49 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d11rkz2z4619di.cloudfront.net/emblem/kyc-badge-light.svg","fqdn":"d11rkz2z4619di.cloudfront.net","domain":"d11rkz2z4619di.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"52.84.50.102","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:50.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /emblem/kyc-badge-light.svg HTTP/1.1\r\nHost: d11rkz2z4619di.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 22 Nov 2024 18:17:37 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\ndate: Sat, 24 Jan 2026 02:30:45 GMT\r\netag: W/\"e399fc917ade8e49e4663b5be7de51ba\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ed0b1ae4224d4a858ec43080e17ab00c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: fnTwr5hgkx9dbw58glEsB9E17yY4-r3LCeQkVdVMxImHfZa5oCHsjQ==\r\nage: 74885\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":3021,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e399fc917ade8e49e4663b5be7de51ba","sha1":"b7cd2b1bbbec3f1093f202195ad7faf459a49a9a","sha256":"c822385511ac81527e36f501f4d3d2071547ab5f249391e75e65f7bea38f8e9f","sha512":"de981bcb445b61c51c37b6005da8eb41ec80e1d0f2d6aadc475f0f026cd218bb9afee4d014747b36e66b9e7a2dcc873bc7b18f24a89563419e783e2ff2a4f334","ssdeep":"","tlshash":"7d513ee862bc00f9fd8bd334bb7cb5b665d624e57024a34619b13e94fb1424ec8645c2","first_seen":"2025-09-20T13:25:47.28327Z","last_seen":"2026-05-24T05:01:39.22102Z","times_seen":28,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":46,"dns":61,"connect":3,"send":0,"wait":4,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:50.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rubic-support.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 24 Jan 2026 18:23:05 GMT\r\nexpires: Sun, 24 Jan 2027 18:23:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 17745\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-08T17:39:20.400408Z","times_seen":254952,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":22,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/chunks/app/%5Blocale%5D/layout-f413dcf4e33aabcf.js","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/chunks/app/%5Blocale%5D/layout-f413dcf4e33aabcf.js HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uxNjUGxhZfML5MA628CAROAybKVoyVsfKIgjDM2KwmBWO7Y6hOybkvNmL3io646lfQF%2Fc36t8GQzMtdWbkzYj2%2B%2BQREyIGLagU91qNnT%2BA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340866ed956b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emblem.certik-assets.com/script?pid=cryptomus\u0026vid=eea4197d\u0026locale=en","fqdn":"emblem.certik-assets.com","domain":"certik-assets.com","tld":"com"},"ip":{"addr":"54.240.174.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.certik-assets.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 28 Jun 2025 00:00:00 GMT","end":"Mon, 27 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A3:67:69:92:34:7D:B5:A6:36:7A:26:A0:8E:2C:3C:81:88:B6:BA:D4","sha256":"F1:C8:93:DD:79:E0:AE:90:29:D7:83:BB:21:37:18:20:D9:20:34:81:60:C7:8E:9E:98:CC:50:AA:A2:19:56:CB"}}},"request":{"raw":"GET /script?pid=cryptomus\u0026vid=eea4197d\u0026locale=en HTTP/1.1\r\nHost: emblem.certik-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 27398\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\nx-amzn-trace-id: Root=1-69755358-0f5db3486907a6fd28037e7c;Parent=40de14e35c18da29;Sampled=0;Lineage=1:69bb64ef:0\r\nx-amzn-requestid: f9d29aa9-29e2-47fe-920f-bf3790ed1b0b\r\naccess-control-allow-origin: *\r\nx-amz-apigw-id: Xtn16EovoAMEm2A=\r\ncache-control: max-age=604800, must-revalidate\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 1XWF1ZTd1yBsEE1klCHiUfv1X2H1SAJL-IQ5U2_7DPnjArevV-0ZyQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":27398,"size_decoded":0,"mime_type":"application/json","magic":"JavaScript source, ASCII text, with very long lines (22606)","md5":"64b0533a1b1e87362090920142e236ae","sha1":"d2c47b24ad99c339710e3c731522db9097815b84","sha256":"1aed944d0f1dd24fc7bce47a187a72614f23c5880217a69bb3617d4b2023daed","sha512":"8e698494a29199cf71fc471f1668b13508bf4dba1328e0b3fcecb843f585bbd4c6bbc6eea877475cd55c11cee0fa37ea576c3ffaad4280489bfe5c76b9383c45","ssdeep":"768:876BZyWlKHFYBeWw7HofV22loERP4ydXjYNkUH2rXxbt8t:I+lFtl3RP4ydXjYN72rX9t8t","tlshash":"88c2080d666aa5a587e331f8152f400bb835e2774208c464fa5cd7d13fb456ca3abf39","first_seen":"2025-09-20T13:25:47.378468Z","last_seen":"2026-05-24T05:01:39.165455Z","times_seen":24,"resource_available":true,"data":null}},"time_used":1250,"timings":{"blocked":480,"dns":115,"connect":5,"send":0,"wait":232,"receive":1,"ssl":413},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/css/9a46134750fbcd82.css","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/css/9a46134750fbcd82.css HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gB0I4pZnzqVVMgyeC01pGsfWZiFZdo2cKmpEyDnmP%2FsFsTmFKxZ1glVu3Rid6YDMrJI2lQaZUmQrFCYMES31tFwvrAFdl5SpToI109tkIg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340860e7756b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/chunks/4bd1b696-3a2efb7df6fe0a72.js","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/chunks/4bd1b696-3a2efb7df6fe0a72.js HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BTtTvrEa%2FiUTg%2BArz9PRn9Rg0YDKN7k0XclTDC9%2B5HHFFUsMO5%2BP3m1kyJPt79H3a1ZljrhANVRXLNtG26rNZtmdaWVmXZHCm4M6k8f57g%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340863ea256b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/chunks/2007-660400630fe2addb.js","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/chunks/2007-660400630fe2addb.js HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TYQDqOmT8ov%2BQcjxV0T5L%2BB%2FRfUIBEdW%2BaoOIp%2FdbC3pgct9LJqJv%2B28X1gf2WklyDKte2vVIYfbFnUFDjlb92zpc%2FA0USoWYe%2BFaYs5kQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340864eb156b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/chunks/8751-5679ed7e2ae9113a.js","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/chunks/8751-5679ed7e2ae9113a.js HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uXNTMd%2Fibc846nl3Fgvb05hj4BKvx3EG6EkfixZtyLQhvR4VXaupITkdc8PvU6q5S%2BTVV5otq31B4kybDIMZD4pvNX1e%2FLQQ62%2BBP3o4CQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340865ec956b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/chunks/3699-1bafdab83fc4f17a.js","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/chunks/3699-1bafdab83fc4f17a.js HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cmw2AqMQTEsDSLSVxsjvmpT%2FH7tcuzsFenOVhnVyjapJySuxSuBqpTQVxqplMhBKz9OWUbfxGaBj%2FJdN00HheytIMHKvriMCYsAFAPqWlA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340866ed856b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-16731183257\u0026cx=c\u0026gtm=4e61m1h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/js?id=AW-16731183257\u0026cx=c\u0026gtm=4e61m1h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\nexpires: Sat, 24 Jan 2026 23:18:48 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 24 Jan 2026 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 131519\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":388460,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5882)","md5":"674308a45f2f4c4ebc8f8af27db8982e","sha1":"c09524368e37b2521486d8cbbf72552692cb3397","sha256":"cd4366ce5c4720489f7a6ada8f0507cec101ffbd5fc8e22b48be48f5a186d592","sha512":"d23401a577a154a126d9afca39d365f0818a0ea246e729e2cbc3d8acab711d5aee6e107ec1a82263e5197585032e6cbec89d87263d9dc4a0c8f4d76b2e8e1ad4","ssdeep":"6144:fJmMvPWlAxJ508RYoeXDIItDmlFldbKKCY5dqbQlGf:xmMnWlAxJ508RYPIItDIdqpf","tlshash":"608419dd73d6702693a3b478403f118ba57b69a2b44cc899f189cce42e74a9a4177f3c","first_seen":"2026-01-24T23:19:19.246839Z","last_seen":"2026-01-24T23:19:19.246839Z","times_seen":1,"resource_available":true,"data":null}},"time_used":443,"timings":{"blocked":125,"dns":1,"connect":23,"send":0,"wait":38,"receive":88,"ssl":165},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-MJ4Z47N","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtm.js?id=GTM-MJ4Z47N HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\nexpires: Sat, 24 Jan 2026 23:18:48 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 24 Jan 2026 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 140079\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":442110,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33859)","md5":"deabd6ea677a027e6f4bd0d1daddeffe","sha1":"2d4a60561e2afbf8dafc1fe844f84181315af9c3","sha256":"2e076586db0918713a79463840b07efac61bf509256a685ee10e6d105879e906","sha512":"5b09b476dbc8517e8d23d2ab6edc73090f7a4566451d366f1bab60ee1f7232707b6e12a5de24a17239630d6b3e51995f97775c940363f78b4d2b7ac9d64bde01","ssdeep":"6144:j6cJmMvKHQAxJ508RYoeXDIItDmlFldbKKCYvdqnitTX7:jzmMSHQAxJ508RYPIItDwdqo7","tlshash":"06942aceb7d6746683a2b478803f114ba57b29e2b44cc895f189cce42e745aa1133f7d","first_seen":"2026-01-24T23:19:19.247806Z","last_seen":"2026-01-24T23:19:19.247806Z","times_seen":1,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":77,"dns":68,"connect":21,"send":0,"wait":107,"receive":19,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ","date":"2026-01-24T23:18:49.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 364933\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:44:10 GMT\r\nexpires: Sat, 23 Jan 2027 13:44:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 12 Jan 2026 01:00:14 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 120879\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":856260,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (670)","md5":"01a39bba6df66b9b6c1ce105b37d948c","sha1":"cc4c7d59b3ce8ec9d8ddb107b19b42f2052a7d94","sha256":"d89a3b683ad06f027eaf33c886083c7d6f0fe88ee28e646059c4f521a166cde3","sha512":"4e644ffbbda98fe7ba928b7ba56d5e7bdec3c6320bac4c5518e4a2671ccc0c1192f11f0148949f54be666368f7ffb062296135145dca1f01fa1c3259d4a080e1","ssdeep":"12288:CcrIRP7yj+Ql2v2ZQqbrH4SJoR4yjom71o:jIhyj+RRqbrYSJw4yT71o","tlshash":"9a0529ca721275f94332b4f92037142a936daa25940c0d5db259c8f52ff2c6931beeb7","first_seen":"2026-01-15T01:58:18.084345Z","last_seen":"2026-06-02T23:59:05.000095Z","times_seen":25485,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T23:18:47.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:47 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BK55vD35db9zHpH3nAQquyfh36Re1opn3AUxYKrzcGIa%2F6%2BKSvlG6%2BRlEhRGVeue4sxwEiiICtSkUHpBOnrb3PHdtgfv%2BDsE5%2BEqflYsIs1b\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c3340834844b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Twitter Ads","description":"Twitter Ads is an advertising platform for Twitter 'microblogging' system.","website":"https://ads.twitter.com","common_platform_enumeration":"","icon":"Twitter.svg","categories":["Advertising"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Yandex.Metrika","description":"Yandex.Metrica is a free web analytics service that tracks and reports website traffic.","website":"https://metrika.yandex.com","common_platform_enumeration":"","icon":"Yandex.Metrika.png","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Facebook Pixel:2.9.252","description":"Facebook pixel is an analytics tool that allows you to measure the effectiveness of your advertising.","website":"https://facebook.com","common_platform_enumeration":"","icon":"Facebook.svg","categories":["Analytics"]}],"data":{"size":254955,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (38059)","md5":"a4a2f4954d1447f1eefd521e89ade328","sha1":"82d1501575d399e82bdd6202862637d1eae41023","sha256":"e0a189b1838a1f0da6936381023cd045ce002d514bc8e4744c2db879d30ef861","sha512":"2e6881941919ae4c0d539ad622d29091684ac445595f5e2493b01dc297ed66620d5f2e426eeca18c2483611c99977351f1d2d380ad3c3b4bc2da561a786f6521","ssdeep":"3072:PtIRuYkU31mHV+Wi0XmqWLFkS/BgT9DSVvmguVbbLNLDf0BmExudUlj/yhoCGqTl:FILdmrmFmroCBgo","tlshash":"9c444b296508e66e94d78e89a63fbe3de24fc01d55228ef8d3dcc2580781d7f4ba7940","first_seen":"2026-01-24T23:19:19.248646Z","last_seen":"2026-01-24T23:19:19.248646Z","times_seen":1,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":54,"dns":42,"connect":1,"send":0,"wait":225,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/css/18724b59b5c833d7.css","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/css/18724b59b5c833d7.css HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZvCwHxfjdQydknZyNyQJgP58SveUOGayghh2ZXYOyZ2Hp0d7Gpk24QWelLTM7cS%2BwmTLlNKgLHPv3xdvSKtaQbPpHC7IiqCPhvXXBLJk7g%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340861e8156b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/chunks/8701-a5439514ec6a9160.js","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/chunks/8701-a5439514ec6a9160.js HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EXqGQ2O8OjU5cqN6SBB8%2FZ7cDbrYNr9hoo8%2FvZStS5SL8O6o%2BWlTLC%2Fz8y8fKCVVgn%2BEPrrk7%2FS7QEZyQhWzx7mVF6aLuK3ZszrgFNoHxA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340863ea456b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t.co/1/i/adsct?bci=4\u0026dv=Europe%2FMoscow%26en-US%2Cen%26Google%20Inc.%26Linux%20x86_64%26255%26800%26600%2624%2624%26800%26600%260%26na\u0026eci=3\u0026event=%7B%7D\u0026event_id=961670e1-7986-48c1-9e85-19794369f7c6\u0026integration=gtm\u0026p_id=Twitter\u0026p_user_id=0\u0026pl_id=c15b830a-b72e-4f47-88aa-cc7edd03da3a\u0026pt=Free%20Crypto%20AML%20Checker%20%7C%20Check%20Wallet%20or%20Transaction%20for%20AML-Compliance\u0026tw_document_href=https%3A%2F%2Fcryptomus.com%2Faml-checker\u0026tw_iframe_status=0\u0026txn_id=ojrpp\u0026type=javascript\u0026version=2.3.35","fqdn":"t.co","domain":"t.co","tld":"co"},"ip":{"addr":"162.159.140.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 10:48:36 GMT","end":"Mon, 13 Apr 2026 10:48:35 GMT"},"fingerprint":{"sha1":"E4:B9:D5:EA:F9:09:8E:3F:79:67:C7:48:1D:AD:7B:BD:80:87:D0:08","sha256":"0D:6D:F0:3E:96:B9:AE:13:A4:68:BF:24:A5:B3:D2:42:D0:4B:83:A3:6A:06:DB:72:60:71:74:0C:14:A2:9B:3D"}}},"request":{"raw":"GET /1/i/adsct?bci=4\u0026dv=Europe%2FMoscow%26en-US%2Cen%26Google%20Inc.%26Linux%20x86_64%26255%26800%26600%2624%2624%26800%26600%260%26na\u0026eci=3\u0026event=%7B%7D\u0026event_id=961670e1-7986-48c1-9e85-19794369f7c6\u0026integration=gtm\u0026p_id=Twitter\u0026p_user_id=0\u0026pl_id=c15b830a-b72e-4f47-88aa-cc7edd03da3a\u0026pt=Free%20Crypto%20AML%20Checker%20%7C%20Check%20Wallet%20or%20Transaction%20for%20AML-Compliance\u0026tw_document_href=https%3A%2F%2Fcryptomus.com%2Faml-checker\u0026tw_iframe_status=0\u0026txn_id=ojrpp\u0026type=javascript\u0026version=2.3.35 HTTP/1.1\r\nHost: t.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html;charset=utf-8\r\nperf: 7402827104\r\nserver: cloudflare envoy\r\nset-cookie: muc_ads=3086d082-0d71-4838-8636-e0b087eee332; Max-Age=63072000; Expires=Mon, 24 Jan 2028 23:18:48 GMT; Path=/; Domain=t.co; Secure; SameSite=None\n__cf_bm=6qQp5heKWx4LXIWjBcORckJQxIaMYXoMZhcBgayMcp0-1769296728.138445-1.0.1.1-ubV5nVEinuorNY1aLwX3dtLR_OGPMQnxLraHWuNBCyb79J_behE0yfdHV44hU1BgUVLm8OT2nJP7QM_WTwkm1jP5C2h0j9WlXiywUyUbKr9gkZv2UTGrqDuFsiUQ1uKp; HttpOnly; Secure; Path=/; Domain=t.co; Expires=Sat, 24 Jan 2026 23:48:48 GMT\r\ncache-control: no-cache, no-store, max-age=0\r\nx-transaction-id: 8dbc70f954a3b71b\r\nx-xss-protection: 0\r\naccess-control-allow-credentials: true\r\nx-response-time: 7\r\norigin-cf-ray: 9c334086de6bb4fa-OSL\r\nstrict-transport-security: max-age=631138519; includeSubdomains\r\nx-served-by: t4_a\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\ncf-ray: 9c334086de6bb4fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":23,"connect":1,"send":0,"wait":156,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/favicon.ico","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:49.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nCookie: _gcl_au=1.1.489864715.1769296729; _ga_X5DRT5DBEL=GS2.1.s1769296729$o1$g0$t1769296729$j60$l0$h0; _ga=GA1.1.988302496.1769296729\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:49 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bi0rjS5asn7OFmtQLM%2FPl5z6ruSj5OlIsM%2BUaljmmaQZEnnUCdfyR3AMng0PA%2F5m43sadFh6qwm3P%2BUsOaWl3J3RDauF2rMkMxbxaYCHng%3D%3D\"}]}\r\netag: W/\"6974300c-3aee\"\r\ncontent-encoding: br\r\ncf-ray: 9c33408f8eff56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"789224bc25eff38ec6ba27204e4d4078","sha1":"d835ec6b063d6c5501a6050e716ef6e4de28495a","sha256":"12c5904d849fa493096feb95865eb77e78257329c786b7ab1d2c56c8815fbc57","sha512":"f575e5e82835e0b3d015614d537327cbffbf7c4bbc1587b3719734918972f562cb9240a9266bd388a30a8211ad13a53feee5b30484aaf6c11c507357bd84de24","ssdeep":"192:jrkXfCopU97PMssRWWWWWWWWp0uoq/jrF6eG:jrkXfCopU9rXsRWWWWWWWWp0uPbx6x","tlshash":"006243e69304f023d02d03769962fdbd1265acccb6850eb355dc2e9f3a8f4351a2236a","first_seen":"2023-11-07T06:53:39Z","last_seen":"2026-05-24T05:01:39.195399Z","times_seen":44,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfXO5shAAAAACeiH_nMoJ8sUjtXkTv7DcCZAHRB\u0026co=aHR0cHM6Ly9jcnlwdG9tdXMuY29tOjQ0Mw..\u0026hl=en\u0026type=image\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=vc093n271k6j","date":"2026-01-24T23:18:49.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 24 Jan 2026 18:25:21 GMT\r\nexpires: Sat, 31 Jan 2026 18:25:21 GMT\r\ncache-control: public, max-age=604800\r\nage: 17608\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-08-08T17:41:47.882477Z","times_seen":704467,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:50.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:24 GMT","end":"Mon, 23 Mar 2026 19:52:23 GMT"},"fingerprint":{"sha1":"43:39:AF:0A:74:F9:2F:1B:C0:1E:4E:89:21:30:C2:28:EC:9F:6C:67","sha256":"EA:F1:0E:C7:36:18:F3:9D:D1:D5:34:23:44:7D:6F:9D:2F:61:C7:81:09:9E:E9:C8:02:C8:F2:2C:0A:83:B3:A5"}}},"request":{"raw":"GET /css2?family=Inter:wght@500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 24 Jan 2026 23:18:50 GMT\r\ndate: Sat, 24 Jan 2026 23:18:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"11b717eb78010864015ad1ba8cbeedcf","sha1":"0418d94e5b5fedfe3d30ed2cc907036a427ee807","sha256":"4a5deb024530a08ea3004162dc3f4cc67a6c3fb53851aae103bd26edc9a348ec","sha512":"0586c81453c13b1bba154b292f2edd2088daf0a7cdac58d3fa4868f958515596bef202b29acbfc434dc372a3c1097e546fd24bea0d0e7fc50361ffd3807f6c66","ssdeep":"192:+NOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHx:mM0p2+g7r","tlshash":"8b227892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-20T13:25:47.280126Z","last_seen":"2026-08-01T11:32:43.109512Z","times_seen":70,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":95,"dns":1,"connect":22,"send":0,"wait":34,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/chunks/4510-fd41668a1914ad57.js","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/chunks/4510-fd41668a1914ad57.js HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KxykdiEnk1McnT%2Bz0EnlaGD%2F8%2B0m87G8maR%2BDvxJVb3Pr%2B%2Fpo5VUHpWu3nwB4QP8b17BLgGy4Q49389elR8c6JHhc%2FQLvHYGBU3Ba9X5vQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340864eae56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/chunks/5838-3bdeba4104cf8917.js","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/chunks/5838-3bdeba4104cf8917.js HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QtveeIYaN1cezYM8vLhcMqeqAlzPOXmxEKF6rjYp0VZ7vNGmI8e7XaAzP%2B%2Fo03qmuropokBTZMFKUKU5Bu2E%2F0ChFEyxrlKajywNAAmRHw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340865ec656b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfXO5shAAAAACeiH_nMoJ8sUjtXkTv7DcCZAHRB\u0026co=aHR0cHM6Ly9jcnlwdG9tdXMuY29tOjQ0Mw..\u0026hl=en\u0026type=image\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=vc093n271k6j","date":"2026-01-24T23:18:49.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 24 Jan 2026 10:06:28 GMT\r\nexpires: Sun, 24 Jan 2027 10:06:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 47541\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-08T17:41:47.923Z","times_seen":958905,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":38,"dns":0,"connect":21,"send":0,"wait":21,"receive":26,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfXO5shAAAAACeiH_nMoJ8sUjtXkTv7DcCZAHRB\u0026co=aHR0cHM6Ly9jcnlwdG9tdXMuY29tOjQ0Mw..\u0026hl=en\u0026type=image\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=vc093n271k6j","date":"2026-01-24T23:18:49.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfXO5shAAAAACeiH_nMoJ8sUjtXkTv7DcCZAHRB\u0026co=aHR0cHM6Ly9jcnlwdG9tdXMuY29tOjQ0Mw..\u0026hl=en\u0026type=image\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=vc093n271k6j\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Sat, 24 Jan 2026 23:18:49 GMT\r\ndate: Sat, 24 Jan 2026 23:18:49 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"dc011820123ba7745da88094e558d501","sha1":"ca9ed775a451ed17f426795f4c926fce035a0f4e","sha256":"f1e9611d7795cd326e7d7976787823be8c1a258d2be43c91cdb43d447c5e4ac7","sha512":"58e9da875323ba2577a7263bf4c19cac84fed1386778f6b7793e821dfab0f2857d0cb0ba2691fa7c98c32a5a2399b7d2767e293618e24f5699e2a335571ac74e","ssdeep":"","tlshash":"bfb012a30611cc280c800a93e927dbb8e4066078ead0d0f5b0291ffc55301b74125400","first_seen":"2026-01-15T01:58:18.123308Z","last_seen":"2026-03-14T22:28:56.501982Z","times_seen":21042,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Frubic-support.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=332938081.1769296729\u0026dt=Free%20Crypto%20AML%20Checker%20%7C%20Check%20Wallet%20or%20Transaction%20for%20AML-Compliance\u0026auid=489864715.1769296729\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He61m0v890434404za200zd890434404xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391253~115938466~115938469~116682875~117041588~117223564\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1769296729099\u0026tfd=1606","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:49.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"POST /ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Frubic-support.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=332938081.1769296729\u0026dt=Free%20Crypto%20AML%20Checker%20%7C%20Check%20Wallet%20or%20Transaction%20for%20AML-Compliance\u0026auid=489864715.1769296729\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He61m0v890434404za200zd890434404xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391253~115938466~115938469~116682875~117041588~117223564\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1769296729099\u0026tfd=1606 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rubic-support.com/\r\nOrigin: https://rubic-support.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\npragma: no-cache\r\ndate: Sat, 24 Jan 2026 23:18:49 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://rubic-support.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/jqfm0se0f03r/3cLluImDlJKxiQgubuU565/79aa873b102b4c6ed2d21c8816ef513b/giTUt-Ai_400x400.jpg?fm=jpg\u0026w=128\u0026h=40","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"54.240.174.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:50.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /jqfm0se0f03r/3cLluImDlJKxiQgubuU565/79aa873b102b4c6ed2d21c8816ef513b/giTUt-Ai_400x400.jpg?fm=jpg\u0026w=128\u0026h=40 HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 4913\r\nlast-modified: Fri, 02 Jan 2026 16:22:21 GMT\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ndate: Sat, 24 Jan 2026 04:38:00 GMT\r\ncache-control: max-age=31536000\r\netag: \"46750c544e70bddef3bc74ca8beffb77\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: V-dk0MCaUnZHrKVxmoRKgAkuBg_yPM0oPl326OTBbrqrGB9qNM15Ew==\r\nage: 67250\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4913,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 40x40, components 3","md5":"46750c544e70bddef3bc74ca8beffb77","sha1":"ec9d6cbdc3599489dc63fda28621a5a2d3520e75","sha256":"66fcbf0be442f519cbed9e0487adb2922f7784f431df7fab072568206a5745f1","sha512":"b8eff59a80fc3bac30f1d93b9343cc38e4ac18f9700d6bf544b2d2a2249575aad34d5fb2ad91faa438ac3863d5f764324c427dc5361f96c2c81c92fad9c7a6bd","ssdeep":"96:fN26MT0D5MdtbZPAVwzVeLyaUw1d1IxKgpOa4:KYNMtKweM74","tlshash":"1ea15c7aff77d7e3fe71da3420f02fb0a1e132259b2265db61e54a1000861c08f8d04a","first_seen":"2025-09-20T13:25:47.296646Z","last_seen":"2026-05-24T05:01:39.198546Z","times_seen":30,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":68,"dns":55,"connect":3,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/css/0712f8850b58f828.css","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/css/0712f8850b58f828.css HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ADlJw3TKsze6VNgvkNx%2FjL2NcMldgaj4o9M53FY6AW277SQZR5DzLAjeueteHlJ8svlaa5IK4O%2F3VtBTv7Rvf4b2qSBRTp3gfZKs5hVX7g%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340861e7b56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/chunks/466-a7d6451fb8df14b1.js","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/chunks/466-a7d6451fb8df14b1.js HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SiMcktBuE9TjexCknqqa%2Fr6IsqOVwaG7CmWrHPSGy2UCnN3S93tBqAkKcqeWRcbQO5T8iM7dm2J4xZzDVs5zZLonsU%2B0wOXjPEOe2M6lzQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340866ed556b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/chunks/app/%5Blocale%5D/not-found-bcae21be860eb73d.js","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/chunks/app/%5Blocale%5D/not-found-bcae21be860eb73d.js HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7S2V%2Btq8q1iOLO6ZwlAsS95E%2Bbxu9%2BbLSy1HkXfchDdBKNCBinVjXn%2Brm8V9TL2wqPz71Vu7IeWucKo3lrqnbIqO3gLH3dsFkVc3GlVDMg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340866edb56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?onload=onloadcallback\u0026render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:53:15 GMT","end":"Mon, 23 Mar 2026 19:53:14 GMT"},"fingerprint":{"sha1":"9C:37:F9:BF:35:57:46:D5:34:37:23:71:DE:BD:66:5E:77:DA:8A:62","sha256":"37:EA:A6:C5:A2:9F:7B:7E:6E:78:CF:38:EA:C5:EA:56:BD:FF:08:67:85:50:6B:BC:AC:6E:E6:19:76:0A:6A:97"}}},"request":{"raw":"GET /recaptcha/api.js?onload=onloadcallback\u0026render=explicit HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sat, 24 Jan 2026 23:18:48 GMT\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1076,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1076), with no line terminators","md5":"f87bf4565a4c3b3a90703cb3f47f0418","sha1":"06ec7754b14612f15b21ff3c24d8da1c32a9f2d1","sha256":"8ad19159ded67aab36cc152b754e24d773ed7b935561917143bcd78d0c7b7c63","sha512":"581d9806f84b50cc925fff387b94528eaf3db21f96c7bf88f500c5588137adebe6e8c60faea5de339ab4216945486778e51f995f0b1015c8f767a483205cf9bb","ssdeep":"","tlshash":"9211f0b21605e0390f7219e1e2fecbb0e492701df15885dca5159a982e7accbce05586","first_seen":"2026-01-15T06:34:27.857741Z","last_seen":"2026-01-28T19:14:36.90457Z","times_seen":73,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":55,"dns":0,"connect":15,"send":0,"wait":36,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Frubic-support.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=332938081.1769296729\u0026dt=Free%20Crypto%20AML%20Checker%20%7C%20Check%20Wallet%20or%20Transaction%20for%20AML-Compliance\u0026auid=489864715.1769296729\u0026navt=n\u0026npa=1\u0026gtm=45be61m1h2v9208651017z8890434404za200zd9208651017xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104573694~104684208~104684211~105391252~115495939~115938466~115938469~116682875~116988316~117041588~117223564\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16731183257~AW-17724046657\u0026tid=AW-16731183257\u0026tft=1769296729259\u0026tfd=1766\u0026img=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:49.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"GET /ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Frubic-support.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=332938081.1769296729\u0026dt=Free%20Crypto%20AML%20Checker%20%7C%20Check%20Wallet%20or%20Transaction%20for%20AML-Compliance\u0026auid=489864715.1769296729\u0026navt=n\u0026npa=1\u0026gtm=45be61m1h2v9208651017z8890434404za200zd9208651017xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104573694~104684208~104684211~105391252~115495939~115938466~115938469~116682875~116988316~117041588~117223564\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16731183257~AW-17724046657\u0026tid=AW-16731183257\u0026tft=1769296729259\u0026tfd=1766\u0026img=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:49 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d11rkz2z4619di.cloudfront.net/emblem/certik-logo-animated-light.svg","fqdn":"d11rkz2z4619di.cloudfront.net","domain":"d11rkz2z4619di.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"52.84.50.102","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:50.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /emblem/certik-logo-animated-light.svg HTTP/1.1\r\nHost: d11rkz2z4619di.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 28 Jul 2024 08:45:31 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\ndate: Sat, 24 Jan 2026 05:26:25 GMT\r\netag: W/\"ef60973db80e81de97d9808f81a2bd95\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ed0b1ae4224d4a858ec43080e17ab00c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: xi4sSSqadjszgHZIqpQd3nZ4uSpA-qCXzXEObs--ZKiXhXyve35s-Q==\r\nage: 64346\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":10716,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef60973db80e81de97d9808f81a2bd95","sha1":"7726cb31af1bd4ebb97514f9ae2b74a5bf17705a","sha256":"9ae32174a53130c43889d2848d7b50c2aa29218ab3e8c459769357f1c64aaca1","sha512":"b78cda61f151472c3964517dca1412adba5d634508f1fad8c2b144a77e44c7e217a9061245d2f9d9d0bf2459e33d306e95803f3dcb3913eb0e8bb96df99f7624","ssdeep":"192:TwF7wB0K7V6uRByh3WaSsMlAOiB/EHSLAjcS:T+EB0KZwGsMq/B/sBcS","tlshash":"8522c7dd33a443f8e440c3a5ef458c20651f28fe6fd512a9c3745e68ea641ad8e7acc5","first_seen":"2025-09-20T13:25:47.361718Z","last_seen":"2026-06-06T15:21:27.606268Z","times_seen":31,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":40,"dns":65,"connect":1,"send":0,"wait":4,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d11rkz2z4619di.cloudfront.net/emblem/insights-badge-light.svg","fqdn":"d11rkz2z4619di.cloudfront.net","domain":"d11rkz2z4619di.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"52.84.50.102","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:50.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /emblem/insights-badge-light.svg HTTP/1.1\r\nHost: d11rkz2z4619di.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ndate: Sat, 24 Jan 2026 02:30:49 GMT\r\nlast-modified: Fri, 22 Nov 2024 18:17:37 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\netag: W/\"57b6ed23f822f2d92fcb7eb9071b2e53\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ed0b1ae4224d4a858ec43080e17ab00c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: ODiTzsQebPZw_79S_mSCtZghXURiYLQT5UiHnysDe2NRbk7amrnsLw==\r\nage: 74882\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2738,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"57b6ed23f822f2d92fcb7eb9071b2e53","sha1":"6f001293412c0c720a2d255e91fd9cc84814cb61","sha256":"56eb3cc50847bc0f06def4d938e6e5b09b736bea3247933f4655039438b07ff1","sha512":"fd1fa176f897a607ab068b0c73c88d716d9399fcb7f0ae3ded9fecec9148cc79bbe94b6c96f51be74aab8fc3820025e7a140b0a7408d4c0d9e8373cdc58df041","ssdeep":"","tlshash":"13510ef891fe4081880d0fa89f2d75b24e9079e1b390c58a32765e98ef1e1ae4cb25c0","first_seen":"2025-09-20T13:25:47.446012Z","last_seen":"2026-05-24T05:01:39.153078Z","times_seen":30,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/chunks/c16f53c3-2b2ae219c8c5a8f1.js","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/chunks/c16f53c3-2b2ae219c8c5a8f1.js HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C12za0tuA65opwkFG%2B5PdIwOiSixgrP45P6L9quM1GXn%2BrBuUrZK%2FxwPdJ5BOd7jVkXKT9SGLYXl3hPxnb7iNYOTtS1X7ikFsklYOUZW0g%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340863ea856b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/chunks/2752-7d253e61753ca29a.js","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/chunks/2752-7d253e61753ca29a.js HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Frlxp64M%2FeqtNkT0wK1RQMcUPu5XtXYyA%2F0rhiPWOmg0sdI6eJkUU%2BzlrdwFExn6%2BFYLMLfLteENTEWwFe2PBkcspHQ8QAmXjjcIkgusgA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340866ed456b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/chunks/app/%5Blocale%5D/(product-pages)/aml-checker/page-7e1ff706c1e19ca1.js","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/chunks/app/%5Blocale%5D/(product-pages)/aml-checker/page-7e1ff706c1e19ca1.js HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IRV3sE1%2BMnIhZbFFpW5mQbuWYw4R7FkO1LPnDuL1%2BexVLjjmVyTx2DqMLnL0ygK4ynC4niM%2FQ%2B0YyXrNhgft9zSBr%2F7HM6mGvblsgg9Iug%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340866ed656b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfXO5shAAAAACeiH_nMoJ8sUjtXkTv7DcCZAHRB\u0026co=aHR0cHM6Ly9jcnlwdG9tdXMuY29tOjQ0Mw..\u0026hl=en\u0026type=image\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=vc093n271k6j","date":"2026-01-24T23:18:48.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 364933\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:44:10 GMT\r\nexpires: Sat, 23 Jan 2027 13:44:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 12 Jan 2026 01:00:14 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 120878\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":856260,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (670)","md5":"01a39bba6df66b9b6c1ce105b37d948c","sha1":"cc4c7d59b3ce8ec9d8ddb107b19b42f2052a7d94","sha256":"d89a3b683ad06f027eaf33c886083c7d6f0fe88ee28e646059c4f521a166cde3","sha512":"4e644ffbbda98fe7ba928b7ba56d5e7bdec3c6320bac4c5518e4a2671ccc0c1192f11f0148949f54be666368f7ffb062296135145dca1f01fa1c3259d4a080e1","ssdeep":"12288:CcrIRP7yj+Ql2v2ZQqbrH4SJoR4yjom71o:jIhyj+RRqbrYSJw4yT71o","tlshash":"9a0529ca721275f94332b4f92037142a936daa25940c0d5db259c8f52ff2c6931beeb7","first_seen":"2026-01-15T01:58:18.084345Z","last_seen":"2026-06-02T23:59:05.000095Z","times_seen":25485,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":74,"dns":1,"connect":11,"send":0,"wait":8,"receive":35,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-MJ4Z47N","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtm.js?id=GTM-MJ4Z47N HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\nexpires: Sat, 24 Jan 2026 23:18:48 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 24 Jan 2026 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 140243\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":442140,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33859)","md5":"40691d891b0fde3cb0dd899011d3f574","sha1":"07417b00881a62ea249cad711b18295b37ce4168","sha256":"a2e551605b68561b57e4c9fe5bfaba0d3d9ba825984a53cfbe3e501351d1e958","sha512":"0fb482f1e5bc80523c49679e8f7116082a7ecbd6b0f1250d95267a27d5e974375add57d0ab8fc93f80b054719d00b7c3fe79165a94634f594ebfca1bb8be3c5e","ssdeep":"6144:j6xJmMvKHQAxJ508RYoeXDIItDmlFldbKKCYvdqnitTX7:jMmMSHQAxJ508RYPIItDwdqo7","tlshash":"6c942aceb7d6746683a2b478803f114ba57b29e2b44cc895f189cce42e745aa1133f7d","first_seen":"2026-01-24T23:19:19.254401Z","last_seen":"2026-01-24T23:19:19.254401Z","times_seen":1,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.co/1/i/adsct?bci=4\u0026dv=Europe%2FMoscow%26en-US%2Cen%26Google%20Inc.%26Linux%20x86_64%26255%26800%26600%2624%2624%26800%26600%260%26na\u0026eci=3\u0026event=%7B%7D\u0026event_id=961670e1-7986-48c1-9e85-19794369f7c6\u0026integration=gtm\u0026p_id=Twitter\u0026p_user_id=0\u0026pl_id=c15b830a-b72e-4f47-88aa-cc7edd03da3a\u0026pt=Free%20Crypto%20AML%20Checker%20%7C%20Check%20Wallet%20or%20Transaction%20for%20AML-Compliance\u0026tw_document_href=https%3A%2F%2Fcryptomus.com%2Faml-checker\u0026tw_iframe_status=0\u0026txn_id=ojrpp\u0026type=javascript\u0026version=2.3.35","fqdn":"t.co","domain":"t.co","tld":"co"},"ip":{"addr":"162.159.140.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:49.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 10:48:36 GMT","end":"Mon, 13 Apr 2026 10:48:35 GMT"},"fingerprint":{"sha1":"E4:B9:D5:EA:F9:09:8E:3F:79:67:C7:48:1D:AD:7B:BD:80:87:D0:08","sha256":"0D:6D:F0:3E:96:B9:AE:13:A4:68:BF:24:A5:B3:D2:42:D0:4B:83:A3:6A:06:DB:72:60:71:74:0C:14:A2:9B:3D"}}},"request":{"raw":"GET /1/i/adsct?bci=4\u0026dv=Europe%2FMoscow%26en-US%2Cen%26Google%20Inc.%26Linux%20x86_64%26255%26800%26600%2624%2624%26800%26600%260%26na\u0026eci=3\u0026event=%7B%7D\u0026event_id=961670e1-7986-48c1-9e85-19794369f7c6\u0026integration=gtm\u0026p_id=Twitter\u0026p_user_id=0\u0026pl_id=c15b830a-b72e-4f47-88aa-cc7edd03da3a\u0026pt=Free%20Crypto%20AML%20Checker%20%7C%20Check%20Wallet%20or%20Transaction%20for%20AML-Compliance\u0026tw_document_href=https%3A%2F%2Fcryptomus.com%2Faml-checker\u0026tw_iframe_status=0\u0026txn_id=ojrpp\u0026type=javascript\u0026version=2.3.35 HTTP/1.1\r\nHost: t.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nCookie: muc_ads=3086d082-0d71-4838-8636-e0b087eee332\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:49 GMT\r\ncontent-type: text/html;charset=utf-8\r\nperf: 7402827104\r\nserver: cloudflare envoy\r\ncache-control: no-cache, no-store, max-age=0\r\nx-transaction-id: ba3b6e1f3a8568bb\r\nx-xss-protection: 0\r\naccess-control-allow-credentials: true\r\nx-response-time: 7\r\norigin-cf-ray: 9c33408c9929b4fa-OSL\r\nstrict-transport-security: max-age=631138519; includeSubdomains\r\nx-served-by: t4_a\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=zkqmq3hhJOaEkbve7wan6UUWKdfPUC774lBY6XqOfyI-1769296729.053771-1.0.1.1-W90nkgPS3HAi8j3injKulYghKUpvfJYKMv5jPPM.kwAXIPu1qFkRCZh76TWQmHYO5lPzXgzB.XcYKEiuBBvJBpAUDF62kNF4nFsrjkbGYTfZOvTen.cVA9XuMzu7GiZ2; HttpOnly; Secure; Path=/; Domain=t.co; Expires=Sat, 24 Jan 2026 23:48:49 GMT\r\ncontent-encoding: gzip\r\ncf-ray: 9c33408c9929b4fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emblem.certik-assets.com/data?pid=cryptomus","fqdn":"emblem.certik-assets.com","domain":"certik-assets.com","tld":"com"},"ip":{"addr":"54.240.174.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:49.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.certik-assets.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 28 Jun 2025 00:00:00 GMT","end":"Mon, 27 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A3:67:69:92:34:7D:B5:A6:36:7A:26:A0:8E:2C:3C:81:88:B6:BA:D4","sha256":"F1:C8:93:DD:79:E0:AE:90:29:D7:83:BB:21:37:18:20:D9:20:34:81:60:C7:8E:9E:98:CC:50:AA:A2:19:56:CB"}}},"request":{"raw":"OPTIONS /data?pid=cryptomus HTTP/1.1\r\nHost: emblem.certik-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: response-type\r\nReferer: https://rubic-support.com/\r\nOrigin: https://rubic-support.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 0\r\ndate: Sat, 24 Jan 2026 23:18:49 GMT\r\nx-amzn-trace-id: Root=1-69755359-644e94f95a094cc3742540a9;Parent=39c3fbb489f12240;Sampled=0;Lineage=1:e4163f14:0\r\nx-amzn-requestid: 082c78b4-0873-4711-a792-7145f33d9b79\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\nx-amz-apigw-id: Xtn1_HFxoAMEWNw=\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, PATCH, DELETE\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: h-WmPcKdn2ZGO8yHVRBhGBME9DPIRDTw_BqZuor0rKTLN0y4XkqE9w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/css/d49ae6f9c090bc42.css","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/css/d49ae6f9c090bc42.css HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IaoQ6wf%2Be%2BMZCJ6%2FGGZob%2BAeX1h4svVZHhX3nRtOAzsKQwxmuem34c8l3%2BltOG1f2Sgs2iNzkFSP%2BqHLwSLMgOy2DYQRzln5To2Yekofkg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c334085fe6856b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/css/9db05aa7e9820c06.css","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/css/9db05aa7e9820c06.css HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X7zgWkf9HPES4hOlhnM1%2Fi2IUnwcSCVK6msKjM2cOitdrkTDu65f6UFdOK0v%2BHhhFpvqP7Y%2FyEQCM6wn2hllV%2FxdtqnGFpJdAVYw%2B49jlQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340861e8456b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: application/javascript\r\nexpires: Sun, 25 Jan 2026 00:06:48 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7PLqbatVeQKKmBHnmuhIMq1tXAD8irS7wj3kZlWef4T%2F9RUL1pWg13MpQXb5Kish95SO7Ih%2FYRIhx21PiLnL1U37CDPpaODS1qMffEmVEw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c3340867eec56b5-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-08T17:40:52.537966Z","times_seen":416550,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-X5DRT5DBEL\u0026cid=988302496.1769296729\u0026gtm=45je61m1h2v890434883z8890434404za200zd890434883\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115938466~115938469~116682875~117041587~117223564\u0026z=716410324","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:49.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:54:10 GMT","end":"Mon, 23 Mar 2026 19:54:09 GMT"},"fingerprint":{"sha1":"14:2A:F0:02:AD:8D:2D:80:6C:2B:AA:B9:22:91:91:6A:7B:AF:ED:25","sha256":"BF:77:89:4B:30:22:E2:10:67:3D:71:92:53:41:17:4A:29:3E:68:E2:19:85:C3:14:32:61:F2:96:DA:3A:37:90"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-X5DRT5DBEL\u0026cid=988302496.1769296729\u0026gtm=45je61m1h2v890434883z8890434404za200zd890434883\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115938466~115938469~116682875~117041587~117223564\u0026z=716410324 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 23:18:49 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-08T17:42:56.304802Z","times_seen":1024573,"resource_available":true,"data":null}},"time_used":584,"timings":{"blocked":196,"dns":25,"connect":32,"send":0,"wait":125,"receive":1,"ssl":201},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Frubic-support.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=332938081.1769296729\u0026dt=Free%20Crypto%20AML%20Checker%20%7C%20Check%20Wallet%20or%20Transaction%20for%20AML-Compliance\u0026auid=489864715.1769296729\u0026navt=n\u0026npa=1\u0026gtm=45be61m1h2v9208651017z8890434404za200zd9208651017xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104573694~104684208~104684211~105391252~115495939~115938466~115938469~116682875~116988316~117041588~117223564\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16731183257~AW-17724046657\u0026tid=AW-16731183257\u0026tft=1769296729259\u0026tfd=1766","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:49.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"POST /ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Frubic-support.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=332938081.1769296729\u0026dt=Free%20Crypto%20AML%20Checker%20%7C%20Check%20Wallet%20or%20Transaction%20for%20AML-Compliance\u0026auid=489864715.1769296729\u0026navt=n\u0026npa=1\u0026gtm=45be61m1h2v9208651017z8890434404za200zd9208651017xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104573694~104684208~104684211~105391252~115495939~115938466~115938469~116682875~116988316~117041588~117223564\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16731183257~AW-17724046657\u0026tid=AW-16731183257\u0026tft=1769296729259\u0026tfd=1766 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rubic-support.com/\r\nOrigin: https://rubic-support.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:49 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://rubic-support.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/css/d72c8dd9aaff3308.css","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/css/d72c8dd9aaff3308.css HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NBQW2EWqU0lBgVg053NGkpJV1FwC89GMREQ6%2BjB9OIU%2B5r999E%2BIXKiSoXJHpgOYMdjw9868YZhc08xW%2BDCZag6Vmg37BYQl5z7WOikBmA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340861e8056b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emblem.certik-assets.com/data?pid=cryptomus","fqdn":"emblem.certik-assets.com","domain":"certik-assets.com","tld":"com"},"ip":{"addr":"54.240.174.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:49.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.certik-assets.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 28 Jun 2025 00:00:00 GMT","end":"Mon, 27 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A3:67:69:92:34:7D:B5:A6:36:7A:26:A0:8E:2C:3C:81:88:B6:BA:D4","sha256":"F1:C8:93:DD:79:E0:AE:90:29:D7:83:BB:21:37:18:20:D9:20:34:81:60:C7:8E:9E:98:CC:50:AA:A2:19:56:CB"}}},"request":{"raw":"GET /data?pid=cryptomus HTTP/1.1\r\nHost: emblem.certik-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nresponse-type: application/json\r\nOrigin: https://rubic-support.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 1725\r\ndate: Sat, 24 Jan 2026 23:18:49 GMT\r\nx-amzn-trace-id: Root=1-69755359-7fd45cfb1d6d02f9566afccd;Parent=734b9a73cd68bbf8;Sampled=0;Lineage=1:f99fb0f3:0\r\nx-amzn-requestid: 6e745065-3de3-48b6-9cba-bfd069447a04\r\naccess-control-allow-origin: *\r\nx-amz-apigw-id: Xtn2BHK8IAMEnRA=\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: sxqls0Y8IP_gRp9HoxRuwj1AVWlgBDAVhPEdzvCHGyk0_dIvZo5VUA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1725,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"aab44e568bb79c88c36b6abd073c36c4","sha1":"fa99fe66df8669b48d4e696c84fc4118c041f254","sha256":"29f2b64866cdae9c986425d309ba2b7440e7076b39b3a9831c64fc5bf4cbe7e8","sha512":"4d987d45f7b1d7f23c2971ada1c11b69991d6628b694b8753a2a64b463de0fb4c526b8d00a293479f8c4e06704f565b4897867f5db6c7a0904fddbe396ca7654","ssdeep":"","tlshash":"3531541fa204adbee9c703d2d426fb99161d1bc0414c5eccffc91f8c71d69e55926912","first_seen":"2026-01-24T23:19:19.259981Z","last_seen":"2026-01-24T23:19:19.259981Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:49.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rubic-support.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 364933\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:44:10 GMT\r\nexpires: Sat, 23 Jan 2027 13:44:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 12 Jan 2026 01:00:14 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 120879\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":856260,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (670)","md5":"01a39bba6df66b9b6c1ce105b37d948c","sha1":"cc4c7d59b3ce8ec9d8ddb107b19b42f2052a7d94","sha256":"d89a3b683ad06f027eaf33c886083c7d6f0fe88ee28e646059c4f521a166cde3","sha512":"4e644ffbbda98fe7ba928b7ba56d5e7bdec3c6320bac4c5518e4a2671ccc0c1192f11f0148949f54be666368f7ffb062296135145dca1f01fa1c3259d4a080e1","ssdeep":"12288:CcrIRP7yj+Ql2v2ZQqbrH4SJoR4yjom71o:jIhyj+RRqbrYSJw4yT71o","tlshash":"9a0529ca721275f94332b4f92037142a936daa25940c0d5db259c8f52ff2c6931beeb7","first_seen":"2026-01-15T01:58:18.084345Z","last_seen":"2026-06-02T23:59:05.000095Z","times_seen":25485,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d11rkz2z4619di.cloudfront.net/emblem/active-monitor-badge-light.svg","fqdn":"d11rkz2z4619di.cloudfront.net","domain":"d11rkz2z4619di.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"52.84.50.102","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:50.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /emblem/active-monitor-badge-light.svg HTTP/1.1\r\nHost: d11rkz2z4619di.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ndate: Sat, 24 Jan 2026 05:50:26 GMT\r\nlast-modified: Fri, 22 Nov 2024 18:17:36 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\netag: W/\"f807b79c591cd26f2c1c5bde4fc26454\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ed0b1ae4224d4a858ec43080e17ab00c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: JwmjNGIkyaoDG2zXYmjJfRimVdi95JvIvHEDBZQ2u3FJCZXBggGQew==\r\nage: 62905\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":14851,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f807b79c591cd26f2c1c5bde4fc26454","sha1":"6a6dbfdbbbb2547d31d8902b6b0aa6c92c3bf63a","sha256":"01f4501b19337f647c985a3f20dcbf9d3cb2b1b20641a22954d5cfaa56e99703","sha512":"b40020265551955375008dd277fdd21cbc2aaa6041be6c57869b9883c66d8b4376d04b47dc93d872dd6e88ecc09163f4babfd218130b3396d7b4f4d239ce27fd","ssdeep":"384:MgA+uIapQ+2d421teleaeOefeWeZecle7eJ:kgtI","tlshash":"0c62bea452f8607ca542826cff69a8903b2964f3731061867c2f2b78db56c5fd97f1c4","first_seen":"2025-09-20T13:25:47.380904Z","last_seen":"2026-05-24T05:01:39.275062Z","times_seen":30,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":49,"dns":57,"connect":14,"send":0,"wait":5,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/chunks/webpack-545e0be0255e94e6.js","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/chunks/webpack-545e0be0255e94e6.js HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RNvhJwTjbqhOS%2FEOwpY8scF0jRKJbXUdoTbvZK34ixkfN7w3nGK7vMoUJ66ildV8XHO6wB1puhjhfI1z8MQuU9z5jXhsT1IwWcXCA9g7eA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340861e8556b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/chunks/52774a7f-cddee976a9f0cac5.js","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/chunks/52774a7f-cddee976a9f0cac5.js HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=egIK6Uji1NIMjkR2wpmS%2BppY%2Bgmu65WFH1ygfZ8tqWe2vDiqf99AB31gkmZY01FH8c4%2BadsySyPDiE%2F4QtaG%2FmlKRYTZotxmO1iiU7j4cQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340863ea056b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/chunks/6143-b651c123d4a9a3ab.js","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/chunks/6143-b651c123d4a9a3ab.js HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qUk33uSYsYmpeRKkucuBDT47JmsY2VK%2FnqLGUNxmyTtYs4DVlZV8ka4AawMxwrJgSlP91NwLQQYUN6GFFTH6EQNVb%2BZ%2BACtbxwgSD8HSlw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340865ec556b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-MJ4Z47N","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtm.js?id=GTM-MJ4Z47N HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\nexpires: Sat, 24 Jan 2026 23:18:48 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 24 Jan 2026 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 140063\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":442110,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33859)","md5":"04a5eebe7c285b35a404db3e39bbbf23","sha1":"803b0956b17293e5e3a730c98bf898ba340812c1","sha256":"8611fdc3679777eff98dda4085123b8a0925ea11a96eeeb2ee28c190b4d81d6d","sha512":"9740bb7220365cad2a2fc63766ac6cb024e7a10a741939c352cf929e901f233cc44d4a64228a10829316028839f4fec1e177f5e84c75c035d5fa11e0ce19e8fa","ssdeep":"6144:j6FJmMvKHQAxJ508RYoeXDIItDmlFldbKKCYvdqnitTX7:jcmMSHQAxJ508RYPIItDwdqo7","tlshash":"44942aceb7d6746683a2b478803f114ba57b29e2b44cc895f189cce42e745aa1133f7d","first_seen":"2026-01-24T23:19:19.26206Z","last_seen":"2026-01-24T23:19:19.26206Z","times_seen":1,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":68,"dns":15,"connect":21,"send":0,"wait":111,"receive":17,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026k=6LfXO5shAAAAACeiH_nMoJ8sUjtXkTv7DcCZAHRB\u0026bft=0dAFcWeA4bi3p02bHzi3BsioD7JjlY0wAgkdQKOanmZNUM585vK8aNvAkiHguC8wksaWlUs9L83A8ufnOCD-qrX511dkgNMpC9-Q","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:49.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026k=6LfXO5shAAAAACeiH_nMoJ8sUjtXkTv7DcCZAHRB\u0026bft=0dAFcWeA4bi3p02bHzi3BsioD7JjlY0wAgkdQKOanmZNUM585vK8aNvAkiHguC8wksaWlUs9L83A8ufnOCD-qrX511dkgNMpC9-Q HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 24 Jan 2026 23:18:49 GMT\r\ncontent-security-policy: script-src 'nonce-WCXcdurRqyb2bHss9W-feg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17035,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"929edcc02662b7134cb72743903dbb73","sha1":"62be9d02d8db870b6d62333cbf8904abb47769c8","sha256":"8f8400fbd43d542f1d2c241e202705216f4d406c75027effaf533c60d8ac717f","sha512":"92e732454b2169e9579ceca1958ce165a0da33918cabdbb79e322c9d08547781c2514fdf05036177c4cfff9c0466c9df62b1995afa3b6844aea8f1d466b30028","ssdeep":"384:EjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/u:EFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+L","tlshash":"90720f50041744009b835ce223ce7f34fe4e92517142d0b1abfdab6beedbda6926939d","first_seen":"2026-01-24T23:19:19.26302Z","last_seen":"2026-01-24T23:19:19.26302Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/css/8e392fc9cb069403.css","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/css/8e392fc9cb069403.css HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lHX6M3lHe7xXNjC9PyCmNo1XAFh0NA%2B7ZNe1%2FZfL%2B3XV54Wp8F%2Bxkqyk%2F0DCBB3BeyinVloYk87z57q0R%2FnRJ8ptkVeqNTVySSsUctXr4A%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340860e6f56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/chunks/9c6082d5-212566c1fc94ab16.js","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/chunks/9c6082d5-212566c1fc94ab16.js HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BRwFffVYBfoy7ThbnbofwGr3UeJpmBOIdfuMcW8UJtgdzxd90g7iYRECsp9RHYZtL0DsNvQqhvRz%2BlzQxBJstdqM1g4a%2FDhJ9SGEHh%2FHOg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340863eaa56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026k=6LfXO5shAAAAACeiH_nMoJ8sUjtXkTv7DcCZAHRB\u0026bft=0dAFcWeA4bi3p02bHzi3BsioD7JjlY0wAgkdQKOanmZNUM585vK8aNvAkiHguC8wksaWlUs9L83A8ufnOCD-qrX511dkgNMpC9-Q","date":"2026-01-24T23:18:49.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42553\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 10:12:04 GMT\r\nexpires: Sat, 23 Jan 2027 10:12:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 12 Jan 2026 01:00:14 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 133605\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83364,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0e6fd8b6da2dcf5ca36317d505430750","sha1":"4909b6a1aa64d81acf66992af2f963a2ad82600d","sha256":"08003ec505dd59b8ccc0207938aa40d0ee43099fbaff76d2301cfe614b997e9f","sha512":"10b39a632b56defdca12f351df51b32d94ffc82939997fe087601f1016fc441788c0dc8559e8090c9bff30890587aabd0c59a2e7171ae7b6f63096acc2e43bab","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOImIdthXwW5l1Dx7:1GRFauOxLA/+IcTOiLX1","tlshash":"b5838e7338513b39fc2b9b616186b9edf21cc423e5514bfab5497a20c3db19a8253b07","first_seen":"2026-01-15T01:58:18.135687Z","last_seen":"2026-05-06T01:17:01.463408Z","times_seen":21669,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d11rkz2z4619di.cloudfront.net/emblem/certik-big-logo-text-light.svg","fqdn":"d11rkz2z4619di.cloudfront.net","domain":"d11rkz2z4619di.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"52.84.50.102","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:50.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /emblem/certik-big-logo-text-light.svg HTTP/1.1\r\nHost: d11rkz2z4619di.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ndate: Sat, 24 Jan 2026 02:30:49 GMT\r\nlast-modified: Mon, 18 Nov 2024 16:50:46 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\netag: W/\"9b59a0086bc21e02fcafc96bb7867af7\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ed0b1ae4224d4a858ec43080e17ab00c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: o8anQRV_99rvA_APtD2eAMzU2QULeqQrPaAHBnFGG77fZt9ACEfhaA==\r\nage: 74882\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":7518,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9b59a0086bc21e02fcafc96bb7867af7","sha1":"a1127dba0c7ad679557f382d8f940ea15933d4c3","sha256":"4223c4701abea6eaec88c3372e17b0bfb2fbf468c04cc4e1004abf9213f34f65","sha512":"d796be15797bcb8830177cf2f0d9eeb6a431be6488ec21f4702a4f31aa3f2f7ef91cd71be60b1246caff09240cbd64e36c1ccdc3606cd758ae2a3111bf2a443d","ssdeep":"96:XAmnqp7GyYc6m1E8NeIgRFrECFbP2mmUzDSB1ntsHIGyGoygzKInEYLkxI/p0UMY:jyYYKUxqR11EnWHHsOcoO/aUMECs","tlshash":"78f186e0236471f4b649d789cd165831329738fa7b65a3ca8b617a68f61409c9dffcc0","first_seen":"2025-09-20T13:25:47.405414Z","last_seen":"2026-05-24T05:01:39.271827Z","times_seen":30,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/chunks/app/global-error-893c3df5d0c36e65.js","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/chunks/app/global-error-893c3df5d0c36e65.js HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8joAaESqX65i3OEH8JMqO7W2kZ2zhgUOaTcaaLoBZbCC%2BRPvm1xME5Nx77HKZxj1N7QUxcXpKqkXQQn2f361EU%2F758%2BwrRNQgiOAA8IcnA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340864eba56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/chunks/6160-85427a44a6e1f21d.js","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/chunks/6160-85427a44a6e1f21d.js HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pAOwLPbe4eoluTzayiCeybdIiKsh4WyGtehXIoP9U%2Be3cEn12JQI09YokwC3umAVe4DDxKYVkR4%2BGXTgTQAAuKWavoxvhpF8y2vLeUNQGQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340864ebc56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfXO5shAAAAACeiH_nMoJ8sUjtXkTv7DcCZAHRB\u0026co=aHR0cHM6Ly9jcnlwdG9tdXMuY29tOjQ0Mw..\u0026hl=en\u0026type=image\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=vc093n271k6j","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:53:15 GMT","end":"Mon, 23 Mar 2026 19:53:14 GMT"},"fingerprint":{"sha1":"9C:37:F9:BF:35:57:46:D5:34:37:23:71:DE:BD:66:5E:77:DA:8A:62","sha256":"37:EA:A6:C5:A2:9F:7B:7E:6E:78:CF:38:EA:C5:EA:56:BD:FF:08:67:85:50:6B:BC:AC:6E:E6:19:76:0A:6A:97"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LfXO5shAAAAACeiH_nMoJ8sUjtXkTv7DcCZAHRB\u0026co=aHR0cHM6Ly9jcnlwdG9tdXMuY29tOjQ0Mw..\u0026hl=en\u0026type=image\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=vc093n271k6j HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-security-policy: script-src 'nonce-sgGPCEk4QWfKt_kASY1gOw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":94011,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (46935)","md5":"ddfceb08aca456d495686f2520e40f47","sha1":"7a99b812caa92487f77bcfd40358a1c8ec5f9f4e","sha256":"1f0e12e504e9e33452c4269fb6c3ddf758e19b0417c705f11577b997df2eeb58","sha512":"ae79f3535a3281ba6a2faab13f192ae82a202427d706ca23ee33f0c111a5098de255d12f47b5b5cb4673cf2fce8686dfeb58802717de7a0f9e8473292ca618ad","ssdeep":"1536:y+kS33jBr2Ul7mhs/9gDpwiyHWVdr4I93LsQAu4B/59wZ4vFVdwyCCJBb7IHD:y+kS3JwrB3QC4N3nw1CncD","tlshash":"f693ae258603608acfab8e9153d67fb4e7bd5146310180ec27fe12e78d9ed97526e38c","first_seen":"2026-01-24T23:19:19.265651Z","last_seen":"2026-01-24T23:19:19.265651Z","times_seen":1,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":145,"dns":1,"connect":31,"send":0,"wait":78,"receive":0,"ssl":159},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-MJ4Z47N","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtm.js?id=GTM-MJ4Z47N HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\nexpires: Sat, 24 Jan 2026 23:18:48 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 24 Jan 2026 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 140159\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":442120,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33859)","md5":"26d30c540a0795150baaa4a6d6d4b647","sha1":"980ab7b18b04ebd41d3b2402daf7d291637420b6","sha256":"eb68d2f030716c0f975e48a3a6a804753d1fae6c997b42b0ad05bc09d8012d1b","sha512":"ebdc36f672a3dc8120f621938d139b45849c6608c1010b59b894398f7244657e7b11978f1f9b6d3beb942a25b34f81f8824fcea51f2d8936bb2a3d00177222c8","ssdeep":"6144:j68JmMvKHQAxJ508RYoeXDIItDmlFldbKKCYvdqnitTX7:jLmMSHQAxJ508RYPIItDwdqo7","tlshash":"92942aceb7d6746683a2b478803f114ba57b29e2b44cc895f189cce42e745aa1133f7d","first_seen":"2026-01-24T23:19:19.266603Z","last_seen":"2026-01-24T23:19:19.266603Z","times_seen":1,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:49.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rubic-support.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 364933\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:44:10 GMT\r\nexpires: Sat, 23 Jan 2027 13:44:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 12 Jan 2026 01:00:14 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 120879\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":856260,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (670)","md5":"01a39bba6df66b9b6c1ce105b37d948c","sha1":"cc4c7d59b3ce8ec9d8ddb107b19b42f2052a7d94","sha256":"d89a3b683ad06f027eaf33c886083c7d6f0fe88ee28e646059c4f521a166cde3","sha512":"4e644ffbbda98fe7ba928b7ba56d5e7bdec3c6320bac4c5518e4a2671ccc0c1192f11f0148949f54be666368f7ffb062296135145dca1f01fa1c3259d4a080e1","ssdeep":"12288:CcrIRP7yj+Ql2v2ZQqbrH4SJoR4yjom71o:jIhyj+RRqbrYSJw4yT71o","tlshash":"9a0529ca721275f94332b4f92037142a936daa25940c0d5db259c8f52ff2c6931beeb7","first_seen":"2026-01-15T01:58:18.084345Z","last_seen":"2026-06-02T23:59:05.000095Z","times_seen":25485,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/css/8d8895b6f9062d6e.css","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/css/8d8895b6f9062d6e.css HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S7DqiPiaUDTKLQzbM1Sk3MFNxG%2FCdkXHZAzspHA0Gw7Nsh%2Bja1kxE766Eg9qmm%2FmEuRN0SuBC6wmRRvx8BxLJbD0K3hCA4J6J2YDK6ZWqQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c334085fe6c56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/css/cbda5c3debf311d0.css","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/css/cbda5c3debf311d0.css HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MUyeiNoSilmuZT81q9JjoFaMgpT8u1%2F6RPjhtFd3B1W6wiE%2FXM%2BYyy5sP1dPzTGmUyTmLv2MS8PE8APm7Urwz2desuwARrFiDJrMnljIUg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340861e8256b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rubic-support.com/_next/static/css/73111c9757e810c0.css","fqdn":"rubic-support.com","domain":"rubic-support.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:48.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rubic-support.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:13:15 GMT","end":"Thu, 23 Apr 2026 16:11:52 GMT"},"fingerprint":{"sha1":"3A:19:5C:C0:45:57:43:EA:F4:52:92:5B:2D:13:47:75:A8:38:4D:F2","sha256":"7F:DF:36:9B:C8:3E:7F:9A:71:2E:0E:DF:2F:75:99:1C:86:6C:7E:8A:98:01:E3:75:7F:A0:0B:9C:67:CC:A5:79"}}},"request":{"raw":"GET /_next/static/css/73111c9757e810c0.css HTTP/1.1\r\nHost: rubic-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rubic-support.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 23:18:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 24 Jan 2026 02:35:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bk1p4hGOgv3Oy4gHxTJ00aaF5OryboQE0uxsPQREbyS%2B8P%2FIE%2FUKL0nCk9uwNPoM4H1E9mtF2RuNNW3SXrYXG7VR2AUYS4d%2F8Zi5kqwdoA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3340861e8356b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rubic-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfXO5shAAAAACeiH_nMoJ8sUjtXkTv7DcCZAHRB\u0026co=aHR0cHM6Ly9jcnlwdG9tdXMuY29tOjQ0Mw..\u0026hl=en\u0026type=image\u0026v=PoyoqOPhxBO7pBk68S4YbpHZ\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=vc093n271k6j","date":"2026-01-24T23:18:48.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42553\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 10:12:04 GMT\r\nexpires: Sat, 23 Jan 2027 10:12:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 12 Jan 2026 01:00:14 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 133604\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83364,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0e6fd8b6da2dcf5ca36317d505430750","sha1":"4909b6a1aa64d81acf66992af2f963a2ad82600d","sha256":"08003ec505dd59b8ccc0207938aa40d0ee43099fbaff76d2301cfe614b997e9f","sha512":"10b39a632b56defdca12f351df51b32d94ffc82939997fe087601f1016fc441788c0dc8559e8090c9bff30890587aabd0c59a2e7171ae7b6f63096acc2e43bab","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOImIdthXwW5l1Dx7:1GRFauOxLA/+IcTOiLX1","tlshash":"b5838e7338513b39fc2b9b616186b9edf21cc423e5514bfab5497a20c3db19a8253b07","first_seen":"2026-01-15T01:58:18.135687Z","last_seen":"2026-05-06T01:17:01.463408Z","times_seen":21669,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":65,"dns":1,"connect":8,"send":0,"wait":9,"receive":10,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-X5DRT5DBEL\u0026gtm=45je61m1h2v890434883z8890434404za200zd890434883\u0026_p=1769296728786\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=988302496.1769296729\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_prs=wg\u0026_eu=AAAAAGA\u0026_s=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115938466~115938469~116682875~117041587~117223564\u0026sid=1769296729\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Frubic-support.com%2F\u0026dt=Free%20Crypto%20AML%20Checker%20%7C%20Check%20Wallet%20or%20Transaction%20for%20AML-Compliance\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=2\u0026tfd=1673","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rubic-support.com/","date":"2026-01-24T23:18:49.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-X5DRT5DBEL\u0026gtm=45je61m1h2v890434883z8890434404za200zd890434883\u0026_p=1769296728786\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=988302496.1769296729\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_prs=wg\u0026_eu=AAAAAGA\u0026_s=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115938466~115938469~116682875~117041587~117223564\u0026sid=1769296729\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Frubic-support.com%2F\u0026dt=Free%20Crypto%20AML%20Checker%20%7C%20Check%20Wallet%20or%20Transaction%20for%20AML-Compliance\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=2\u0026tfd=1673 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rubic-support.com/\r\nOrigin: https://rubic-support.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://rubic-support.com\r\ndate: Sat, 24 Jan 2026 23:18:49 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:170:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:170:0\r\nreport-to: {\"group\":\"ascnsrsggc:170:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:170:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":26,"dns":1,"connect":23,"send":0,"wait":78,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
