{"report_id":"017c0bed-49f6-4363-b714-8097cd363ec2","version":6,"status":"done","tags":[],"date":"2025-09-08T14:26:14Z","url":{"schema":"https","addr":"join-blackmirrorxp.xyz/","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"172.67.172.93","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"title":"Black Mirror"},"submit":{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"172.67.172.93","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-13T14:26:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":10,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-08T14:25:51Z","timestamp":1757341551,"ip_dst":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":44064,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-08T14:25:51.546377+0000\",\"flow_id\":691274574149062,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":44064,\"dest_ip\":\"104.26.12.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3435,\"start\":\"2025-09-08T14:25:51.538054+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-08T14:25:51Z","timestamp":1757341551,"ip_dst":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":44074,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-08T14:25:51.550964+0000\",\"flow_id\":257766345100656,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":44074,\"dest_ip\":\"104.26.12.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3510,\"start\":\"2025-09-08T14:25:51.544112+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-08T14:25:51Z","timestamp":1757341551,"ip_dst":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":42016,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-09-08T14:25:51.590562+0000\",\"flow_id\":919972992771128,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":42016,\"dest_ip\":\"104.26.14.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":922,\"bytes_toclient\":3523,\"start\":\"2025-09-08T14:25:51.582712+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-08T14:25:51Z","timestamp":1757341551,"ip_dst":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":42022,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-09-08T14:25:51.593973+0000\",\"flow_id\":2178681878340863,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":42022,\"dest_ip\":\"104.26.14.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":922,\"bytes_toclient\":3522,\"start\":\"2025-09-08T14:25:51.582911+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-08T14:25:51Z","timestamp":1757341551,"ip_dst":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.12","port":49008,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2025-09-08T14:25:51.661660+0000\",\"flow_id\":1424219333162060,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":49008,\"dest_ip\":\"216.119.155.40\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":4434,\"start\":\"2025-09-08T14:25:51.619596+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-08T14:25:51Z","timestamp":1757341551,"ip_dst":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.12","port":49012,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2025-09-08T14:25:51.664505+0000\",\"flow_id\":2061394911393008,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":49012,\"dest_ip\":\"216.119.155.40\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":4434,\"start\":\"2025-09-08T14:25:51.619760+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-08T14:25:52Z","timestamp":1757341552,"ip_dst":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.12","port":51448,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)","source":"{\"timestamp\":\"2025-09-08T14:25:52.028218+0000\",\"flow_id\":49228503043943,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":51448,\"dest_ip\":\"20.105.41.175\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058788,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"1rpc.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":909,\"bytes_toclient\":3435,\"start\":\"2025-09-08T14:25:51.970599+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-08T14:25:52Z","timestamp":1757341552,"ip_dst":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.12","port":51456,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)","source":"{\"timestamp\":\"2025-09-08T14:25:52.031637+0000\",\"flow_id\":607475467276499,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":51456,\"dest_ip\":\"20.105.41.175\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058788,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"1rpc.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":909,\"bytes_toclient\":3435,\"start\":\"2025-09-08T14:25:51.970963+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-08T14:25:52Z","timestamp":1757341552,"ip_dst":{"addr":"54.171.37.114","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.12","port":44658,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)","source":"{\"timestamp\":\"2025-09-08T14:25:52.044490+0000\",\"flow_id\":1575904693183132,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":44658,\"dest_ip\":\"54.171.37.114\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058797,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed3.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":928,\"bytes_toclient\":1654,\"start\":\"2025-09-08T14:25:51.975516+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-08T14:25:52Z","timestamp":1757341552,"ip_dst":{"addr":"54.171.37.114","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.12","port":44650,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)","source":"{\"timestamp\":\"2025-09-08T14:25:52.047816+0000\",\"flow_id\":1065383405543899,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":44650,\"dest_ip\":\"54.171.37.114\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058797,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed3.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":928,\"bytes_toclient\":1654,\"start\":\"2025-09-08T14:25:51.975323+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"api.ipify.org","ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2025-09-03T23:51:20.030348Z","alert_count":0,"request_count":2,"received_data":935,"sent_data":890,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rpc.ankr.com","ip":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"domain_registered":"2007-04-23","domain_rank":541361,"first_seen":"2021-10-24T12:41:06Z","last_seen":"2025-09-05T07:06:00.702791Z","alert_count":0,"request_count":2,"received_data":1405,"sent_data":1035,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"join-blackmirrorxp.xyz","ip":{"addr":"104.21.63.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-07","domain_rank":0,"first_seen":"2025-09-08T14:26:18.159399Z","last_seen":"2025-09-08T14:26:18.159399Z","alert_count":0,"request_count":19,"received_data":6360606,"sent_data":8810,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"1rpc.io","ip":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"domain_registered":"2022-08-02","domain_rank":47066,"first_seen":"2022-08-18T07:06:26Z","last_seen":"2025-09-07T12:50:23.447776Z","alert_count":0,"request_count":2,"received_data":5469,"sent_data":1025,"comment":"","tags":null,"fingerprints":null},{"fqdn":"binance.llamarpc.com","ip":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-02-07","domain_rank":2101135,"first_seen":"2023-09-18T00:31:06Z","last_seen":"2025-09-03T03:13:16.081247Z","alert_count":0,"request_count":2,"received_data":8151,"sent_data":1045,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-09-03T15:20:50.935949Z","alert_count":0,"request_count":2,"received_data":798863,"sent_data":914,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bsc-dataseed3.bnbchain.org","ip":{"addr":"54.171.37.114","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":5059613,"first_seen":"2023-12-07T18:13:02Z","last_seen":"2025-09-05T06:44:00.744996Z","alert_count":0,"request_count":2,"received_data":7443,"sent_data":1057,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-08T14:25:51Z","timestamp":1757341551,"ip_dst":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":44064,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-08T14:25:51.546377+0000\",\"flow_id\":691274574149062,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":44064,\"dest_ip\":\"104.26.12.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3435,\"start\":\"2025-09-08T14:25:51.538054+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-08T14:25:51Z","timestamp":1757341551,"ip_dst":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":44074,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-08T14:25:51.550964+0000\",\"flow_id\":257766345100656,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":44074,\"dest_ip\":\"104.26.12.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3510,\"start\":\"2025-09-08T14:25:51.544112+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-08T14:25:51Z","timestamp":1757341551,"ip_dst":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":42016,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-09-08T14:25:51.590562+0000\",\"flow_id\":919972992771128,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":42016,\"dest_ip\":\"104.26.14.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":922,\"bytes_toclient\":3523,\"start\":\"2025-09-08T14:25:51.582712+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-08T14:25:51Z","timestamp":1757341551,"ip_dst":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":42022,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-09-08T14:25:51.593973+0000\",\"flow_id\":2178681878340863,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":42022,\"dest_ip\":\"104.26.14.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":922,\"bytes_toclient\":3522,\"start\":\"2025-09-08T14:25:51.582911+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-08T14:25:51Z","timestamp":1757341551,"ip_dst":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.12","port":49008,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2025-09-08T14:25:51.661660+0000\",\"flow_id\":1424219333162060,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":49008,\"dest_ip\":\"216.119.155.40\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":4434,\"start\":\"2025-09-08T14:25:51.619596+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-08T14:25:51Z","timestamp":1757341551,"ip_dst":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.12","port":49012,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2025-09-08T14:25:51.664505+0000\",\"flow_id\":2061394911393008,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":49012,\"dest_ip\":\"216.119.155.40\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":4434,\"start\":\"2025-09-08T14:25:51.619760+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-08T14:25:52Z","timestamp":1757341552,"ip_dst":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.12","port":51448,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)","source":"{\"timestamp\":\"2025-09-08T14:25:52.028218+0000\",\"flow_id\":49228503043943,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":51448,\"dest_ip\":\"20.105.41.175\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058788,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"1rpc.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":909,\"bytes_toclient\":3435,\"start\":\"2025-09-08T14:25:51.970599+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-08T14:25:52Z","timestamp":1757341552,"ip_dst":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.12","port":51456,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)","source":"{\"timestamp\":\"2025-09-08T14:25:52.031637+0000\",\"flow_id\":607475467276499,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":51456,\"dest_ip\":\"20.105.41.175\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058788,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"1rpc.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":909,\"bytes_toclient\":3435,\"start\":\"2025-09-08T14:25:51.970963+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-08T14:25:52Z","timestamp":1757341552,"ip_dst":{"addr":"54.171.37.114","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.12","port":44658,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)","source":"{\"timestamp\":\"2025-09-08T14:25:52.044490+0000\",\"flow_id\":1575904693183132,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":44658,\"dest_ip\":\"54.171.37.114\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058797,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed3.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":928,\"bytes_toclient\":1654,\"start\":\"2025-09-08T14:25:51.975516+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-08T14:25:52Z","timestamp":1757341552,"ip_dst":{"addr":"54.171.37.114","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.12","port":44650,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)","source":"{\"timestamp\":\"2025-09-08T14:25:52.047816+0000\",\"flow_id\":1065383405543899,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":44650,\"dest_ip\":\"54.171.37.114\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058797,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed3.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":928,\"bytes_toclient\":1654,\"start\":\"2025-09-08T14:25:51.975323+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-08-14T12:21:59.538531Z","times_seen":1971,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":735973,"data":"","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-14T05:15:44.121492Z","times_seen":8491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-14T14:48:35.737662Z","times_seen":743376,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/7c0e598d-3388-49c0-aa00-0f93fb744c84","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"59a6445d59993235a252393a28d5b921","sha1":"62d48f9685c1cf3cfb63e1d7313cc15c8ba31906","sha256":"f1a114e2a669923e28c7ad1f499d145fdcee5c3bc7de596c3dc249f3b4755863","sha512":"3466b5e24edb332ab200e5d11775a9061eeda9da7c7c31e9859683e27a85fa2e7cdebe2b37004041ff6e01d7a27a43db3cfd193bd816d4cbae6336243b220e42","ssdeep":"24576:uYz8nxSxV/OVfBs6wRoGdcxREG6t2ZIkg:uYAnxeP","tlshash":"b736c6b1c00e99e1a9e353b47931c8ccc9c22797f85cd2ca789d9cee738ca725295716","size":4884923,"data":"","first_seen":"2025-09-08T09:07:39.559246Z","last_seen":"2025-09-24T11:19:23.500178Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-08-11T10:54:04.310295Z","times_seen":3240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/2865f56d-a9b9-458a-ac68-ca7898f5a221","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"05997da4a9c3d58ef33a7cf3d716af57","sha1":"3a7a7913c31aa2787a11dc6ba6fb5b5f2c525ac1","sha256":"e268ded9f58238c3885b4e0e83ddf10ea9552c488dd25538c8569ec2beff7eb9","sha512":"83413571115e6b39abe7e3b6573a81b3198125b35ae13e31d14c7cb3c81790b24a11cd81531a58922386bbf6e2d41ab6e449fc3206c8b7f20932820cdf58aefe","ssdeep":"49152:D+2KKNjyR5WP4CQjNn9GU6lCLsSPOnLUfJ8KZTcbQQqG7r8aQO/iSJNHoRO2sxSQ:RD8ew45JV","tlshash":"20f591496bf660358213f0795e6f8801b234a40b2949ed5c7e9c92f09f4953c8bf6fe9","size":3517001,"data":"","first_seen":"2025-07-12T22:38:09.134446Z","last_seen":"2026-08-09T15:35:30.742787Z","times_seen":4177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/6c0ac442-d0ce-4423-a397-10f708216798","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec26a722169cb2cef03353fcf8dd144a","sha1":"6eec6673abcde3d29547796a38361256d9efde1c","sha256":"01861fcd47bc63bb7be76c480bad4c6cc987c8996ab0e023a4e692b68c94b05c","sha512":"c885e5d94bd96fa4a573524356e0ca7398b1489f5a39fc1120cf7f4e469950630ad3e9f48dd0392acd36da390c27a4be1e81da943d1d9ecd48890d1691e416cf","ssdeep":"6144:Ufg7z90bnvLZqnWTI9esVTMuyEvtzXNglxQP92L:VzBe6kEdOxQoL","tlshash":"bf740980b261b07247da24e10477540af339e96c744a40acf6a8d8fb7dbd589957ff38","size":357754,"data":"","first_seen":"2025-07-12T22:38:09.13306Z","last_seen":"2026-08-09T15:35:30.742044Z","times_seen":5092,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","size":60819,"data":"","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-14T08:08:20.199702Z","times_seen":31901,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-14T14:48:35.738167Z","times_seen":237731,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/45dcbdc69e792a0a.css","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:47.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-blackmirrorxp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 22:28:34 GMT","end":"Sat, 06 Dec 2025 23:27:12 GMT"},"fingerprint":{"sha1":"2B:CE:46:FC:DB:7C:A8:F3:65:63:90:1C:55:D4:36:51:C7:10:6C:29","sha256":"A2:D3:68:14:D0:F2:A3:E0:9C:3D:7E:A6:C9:B1:E2:DE:58:AF:A9:2A:EE:AC:0D:06:A7:F3:CF:21:FF:43:DF:E1"}}},"request":{"raw":"GET /45dcbdc69e792a0a.css HTTP/1.1\r\nHost: join-blackmirrorxp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-blackmirrorxp.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 14:25:47 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 02:08:23 GMT\r\netag: \"1468e-63e40a98617e5-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 15182\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C8EBS0SELxKjEpoEvH2H9onAxVFIjmLPjS4gHH7XVEZTo%2F4nnuyR1i6bIyh8nFoAvQq%2FGvS3GTvSnM99VOUFr5tkfCfAStS04kYM53vtATXNxfgO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 97bf1dfe8d39b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83598,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (63216)","md5":"4903ce786e44b6ef07e5903deb8c62be","sha1":"a100f46a2baca87c87dc8cb04ad26091a10a5c74","sha256":"6f0f34bf9bf569b17e76f111464d4bc57707cf32c7515a12d0dfc3f200abec2b","sha512":"3c2a2c2c7c4475bb7eb633d8afba89a804af8c37057825a7b060240f45597639547f867c72f5b1eb043c09fb2f25104116dbce2ae1f8e668b27a5819942c6962","ssdeep":"1536:+HvSclPdCh9DQ644c26TyXq87CBjZzxRZzhcLspC26irSWxDhblhN:+HvSclPdCh90644cbyXqSLspC26irSWt","tlshash":"0f83626de661403f7c1390fad29cddad901af1c1ee3a67eab98212106be17f72d53600","first_seen":"2025-09-08T14:26:23.46523Z","last_seen":"2025-09-20T21:59:25.987187Z","times_seen":4,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/eafabf029ad39a43-s.p.woff2","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:50.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-blackmirrorxp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 22:28:34 GMT","end":"Sat, 06 Dec 2025 23:27:12 GMT"},"fingerprint":{"sha1":"2B:CE:46:FC:DB:7C:A8:F3:65:63:90:1C:55:D4:36:51:C7:10:6C:29","sha256":"A2:D3:68:14:D0:F2:A3:E0:9C:3D:7E:A6:C9:B1:E2:DE:58:AF:A9:2A:EE:AC:0D:06:A7:F3:CF:21:FF:43:DF:E1"}}},"request":{"raw":"GET /eafabf029ad39a43-s.p.woff2 HTTP/1.1\r\nHost: join-blackmirrorxp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-blackmirrorxp.xyz/b78f8067b57f6908.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 14:25:50 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 02:08:23 GMT\r\netag: \"1edc-63e40a9835cb1\"\r\naccept-ranges: bytes\r\ncontent-length: 7900\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fe%2BUjvRcl%2FrWAUPOek%2FuiMCUw1Ke7iVGo1tNNgitoLUJ0HU3s2F1TF%2BSCIGdGM23Y7DN%2FYnS6XbK0qEYPZIKhnzGRHu1oO%2BYTFe9QqdxdI5Jq3x4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 97bf1e114e18b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7900,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7900, version 1.0","md5":"43751174b6b810eb169101a20d8c26f8","sha1":"7e48d54b1df1d3f657fc90227590308183ff9ddc","sha256":"3dc5d0c52428fe1696264907a1054ebbaac07f8cbe45832c105f819c2ae397c0","sha512":"a56307976583f9f0dd41ea34a3878c1fd69d5f89577664c350be014f6485da077cecf03f315104dc00e3cb0b6036d9b58e602ca19e963bf500016f090ca80ff2","ssdeep":"192:J2+QXwv9y8UEem7iQD+hqsNl3ahSFsd8Rq0s+Hxf49:J2+9vI8XX+DxrFe0/f0","tlshash":"dcf1bffef23115d580b66bb6c307bf24d9298147fc772608a61c6978a4e9f0c194cf0a","first_seen":"2024-03-26T19:18:23Z","last_seen":"2026-08-14T14:49:09.009188Z","times_seen":25278,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":209,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1rpc.io/bnb","fqdn":"1rpc.io","domain":"1rpc.io","tld":"io"},"ip":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:51.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1rpc.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 01:23:19 GMT","end":"Sun, 23 Nov 2025 01:23:18 GMT"},"fingerprint":{"sha1":"77:DD:9D:03:9A:8B:27:57:64:8B:DC:3F:84:87:56:2B:4C:AD:62:3C","sha256":"98:20:17:06:F7:B2:60:4B:A8:A1:AE:72:47:3C:9D:A4:FC:C0:39:C4:F7:3F:EA:8B:B3:19:01:4B:E6:61:CD:6A"}}},"request":{"raw":"OPTIONS /bnb HTTP/1.1\r\nHost: 1rpc.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://join-blackmirrorxp.xyz/\r\nOrigin: https://join-blackmirrorxp.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AutomataGeode/0.1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\nContent-Length: 0\r\nDate: Mon, 08 Sep 2025 14:25:52 GMT\r\nConnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T14:51:30.253169Z","times_seen":17888305,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":79,"dns":20,"connect":27,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/css2.css","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:47.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-blackmirrorxp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 22:28:34 GMT","end":"Sat, 06 Dec 2025 23:27:12 GMT"},"fingerprint":{"sha1":"2B:CE:46:FC:DB:7C:A8:F3:65:63:90:1C:55:D4:36:51:C7:10:6C:29","sha256":"A2:D3:68:14:D0:F2:A3:E0:9C:3D:7E:A6:C9:B1:E2:DE:58:AF:A9:2A:EE:AC:0D:06:A7:F3:CF:21:FF:43:DF:E1"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: join-blackmirrorxp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-blackmirrorxp.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 14:25:47 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 02:08:23 GMT\r\netag: \"1dcc-63e40a9834d11-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 638\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tSeofOcxWD4ZvO6ESu9pBU%2BdAwQAzUFxBtkQKKRvk8RV9OtUMGG17RyorgRUWNVNhFbbRc3FGsFOaWn%2BORknAOfDeXwt1fmpt2XS1IR3B%2BfaNuGb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 97bf1dfe8d3bb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7628,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a945690afba190bdf35bdbc8dca91152","sha1":"d93d79ba5c4ff541fb62d683c5d6b488b9f53ba8","sha256":"e3588f89e8f3d36d7befdcd1ad777d37963acce98132704f84f1d7ab2d5e1b4b","sha512":"72a22e14d311d595ee72e60b3ae2692c0cf6745594fab8f6f60c522f0f91a227d67e0dbbbc34e4fdfae78e152a29498981398ad2f56e511e7abe26664268a393","ssdeep":"192:9/NAPt34yaDD/OnIt3/ha8G/rKht3iIall/E5yt3RPaGc:JwSfyGKVm","tlshash":"ebf14490046b9400eb872cd277cf7f376d9da148a045c9795ffd1898acded2613a1b4d","first_seen":"2024-12-17T11:31:53.647668Z","last_seen":"2026-08-14T12:15:20.957651Z","times_seen":633,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/0484562807a97172-s.p.woff2","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:50.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-blackmirrorxp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 22:28:34 GMT","end":"Sat, 06 Dec 2025 23:27:12 GMT"},"fingerprint":{"sha1":"2B:CE:46:FC:DB:7C:A8:F3:65:63:90:1C:55:D4:36:51:C7:10:6C:29","sha256":"A2:D3:68:14:D0:F2:A3:E0:9C:3D:7E:A6:C9:B1:E2:DE:58:AF:A9:2A:EE:AC:0D:06:A7:F3:CF:21:FF:43:DF:E1"}}},"request":{"raw":"GET /0484562807a97172-s.p.woff2 HTTP/1.1\r\nHost: join-blackmirrorxp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-blackmirrorxp.xyz/b78f8067b57f6908.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 14:25:50 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 02:08:22 GMT\r\netag: \"1f38-63e40a98285da\"\r\naccept-ranges: bytes\r\ncontent-length: 7992\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iQhH%2FD88Xk8fmFcVNi3cri04fXiMdKg2eOrMZaQG%2FXoYyCgjKMHJowQgI6vA7eMaBm7xwv86E2MQp7ikHXnuGjALQNxcllpTQci%2Bxq2hRzYlVCYb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 97bf1e114e19b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7992,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7992, version 1.0","md5":"b550bca8934bd86812d1f5e28c9cc1de","sha1":"fffe793f52607740984a931ee7158aa82db94a72","sha256":"872e862918591a9e824dc03ed92f05729435ffbb8ebbb10eff7eda26592b1798","sha512":"a0b84873a17f6ded0d966c0f159718ccbb617ae19416815ea3f706c436becee0671d9cbc01c0fc4572712856bd0c1e5b32e2dda8fbf56d540dee5e36e833c05c","ssdeep":"96:2TVwxWNrKIvPdg1axqKXivj6iCvB0H0P76Oj6rDbeEmcDZsuVGD0RqaHbJiL1BgF:2TixEECQzfUv6BSMGDU5agjhWbq","tlshash":"77f1ad9ab6c85e02c724287b05c14727593c3313db2cbf56049ec2ad62c7eb14c9b06b","first_seen":"2024-03-26T19:18:23Z","last_seen":"2026-08-14T14:14:37.798071Z","times_seen":18428,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/secureproxy?e=ping_proxy","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:51.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-blackmirrorxp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 22:28:34 GMT","end":"Sat, 06 Dec 2025 23:27:12 GMT"},"fingerprint":{"sha1":"2B:CE:46:FC:DB:7C:A8:F3:65:63:90:1C:55:D4:36:51:C7:10:6C:29","sha256":"A2:D3:68:14:D0:F2:A3:E0:9C:3D:7E:A6:C9:B1:E2:DE:58:AF:A9:2A:EE:AC:0D:06:A7:F3:CF:21:FF:43:DF:E1"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: join-blackmirrorxp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://join-blackmirrorxp.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 14:25:51 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BU%2Bxh0u274w30HLi0Y9Uj2XhiVQhtZFN7vHgAR3s87j4r%2Bud0h%2B42MEmp9ab48xa0Yhn0YfGwRWQgPWcpEbz2Ja6umxSwg7KaNWXG4zCgTBpdfPl\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 97bf1e1ade77b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-13T05:58:08.703701Z","times_seen":9040,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/coinbase-1.png","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:50.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-blackmirrorxp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 22:28:34 GMT","end":"Sat, 06 Dec 2025 23:27:12 GMT"},"fingerprint":{"sha1":"2B:CE:46:FC:DB:7C:A8:F3:65:63:90:1C:55:D4:36:51:C7:10:6C:29","sha256":"A2:D3:68:14:D0:F2:A3:E0:9C:3D:7E:A6:C9:B1:E2:DE:58:AF:A9:2A:EE:AC:0D:06:A7:F3:CF:21:FF:43:DF:E1"}}},"request":{"raw":"GET /coinbase-1.png HTTP/1.1\r\nHost: join-blackmirrorxp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-blackmirrorxp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 14:25:50 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 02:08:23 GMT\r\netag: \"1a2-63e40a9834929\"\r\naccept-ranges: bytes\r\ncontent-length: 418\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uadrWDIIeLCr%2Bbbs7uN5wqqQWyPqUG4hHIBmqB3%2Fde%2FR7a9uqEuVH5Ah1u1rfnwA51pbnGIIivu%2Be%2FSsd8CSF44RIoINfxjHU4ym2Zx7Qx5WUgjc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 97bf1e116e1fb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":418,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit colormap, non-interlaced","md5":"6cf6eb61c080f5109c45af0a2b90b0de","sha1":"3d280e7d11b9ff7d6d49caf419d020939f921e7a","sha256":"b6dff6b1b03830cfdada7ee282ff8c9dab06e3384f0e1d282a20bd22d2d4d13c","sha512":"b55f713e88fdd517005b592e15b3aeb9c7c3b5c9c1b7a65842d6b99085398723fd8651f4af04e783d3e8f464aaf44fcb4491c11fbdfc25977278aae9f2102b07","ssdeep":"","tlshash":"9ce02ba80bc08c3904caa023f10023208e3389c8b230400283bec1be1baa09de620aa7","first_seen":"2025-09-08T14:26:23.469733Z","last_seen":"2025-09-20T21:59:26.010024Z","times_seen":4,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/secureproxy.php?e=ping_proxy","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:51.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-blackmirrorxp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 22:28:34 GMT","end":"Sat, 06 Dec 2025 23:27:12 GMT"},"fingerprint":{"sha1":"2B:CE:46:FC:DB:7C:A8:F3:65:63:90:1C:55:D4:36:51:C7:10:6C:29","sha256":"A2:D3:68:14:D0:F2:A3:E0:9C:3D:7E:A6:C9:B1:E2:DE:58:AF:A9:2A:EE:AC:0D:06:A7:F3:CF:21:FF:43:DF:E1"}}},"request":{"raw":"GET /secureproxy.php?e=ping_proxy HTTP/1.1\r\nHost: join-blackmirrorxp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://join-blackmirrorxp.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 14:25:51 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 02:08:23 GMT\r\netag: \"1e34-63e40a9837421\"\r\naccept-ranges: bytes\r\ncontent-length: 7732\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ah1VpB641mjlEsxM6RsYSt59a15fsmuwQpwyJAAlQlkFxvaLERVfSB9mnCBPcXTttbXlswgTRarHb15HTtGSgtVXkH13xVYE1H5NeuteI%2BCNWeSa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 97bf1e191e6bb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7732,"size_decoded":0,"mime_type":"text/html","magic":"PHP script, ASCII text","md5":"266ba4231e44862da9e32e4f9b6a8012","sha1":"eb2b688e2b06e66a65aa7446809b35e10aba6d7b","sha256":"a568132ebe184290adad1a5970f34e9191d3f38894c640ba6d4d0acd9237cc4d","sha512":"59fd83eb968a9342a72a2214e6c9718e02f558f7abf9cb4938b8b7eb01e5645e140b4b92a656ba78cd9a31d244fb0fcde96a4e313739cd9496ca3d81b777fb65","ssdeep":"192:q6vgpPDNF6iTypG/+WA4yAXg9bDI6C4VCRnw0Zy5q:epLeit2WBwRhVmX","tlshash":"b8f1611079e37a80a177e0bda74fb8086609a80b441ed909be5c23931fc033cebf169d","first_seen":"2025-07-12T22:38:09.124273Z","last_seen":"2026-04-09T02:34:42.258638Z","times_seen":964,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/b78f8067b57f6908.css","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:47.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-blackmirrorxp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 22:28:34 GMT","end":"Sat, 06 Dec 2025 23:27:12 GMT"},"fingerprint":{"sha1":"2B:CE:46:FC:DB:7C:A8:F3:65:63:90:1C:55:D4:36:51:C7:10:6C:29","sha256":"A2:D3:68:14:D0:F2:A3:E0:9C:3D:7E:A6:C9:B1:E2:DE:58:AF:A9:2A:EE:AC:0D:06:A7:F3:CF:21:FF:43:DF:E1"}}},"request":{"raw":"GET /b78f8067b57f6908.css HTTP/1.1\r\nHost: join-blackmirrorxp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-blackmirrorxp.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 14:25:47 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 02:08:22 GMT\r\netag: \"15b4-63e40a9828daa-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 735\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5DaW41xmvdpzg5ZM43287HJKJy8eyk81JVbJlTiWbbI4nUvcoyFEi%2FdI8l8fXGMz%2BPja41lhOvE4UF2MAHbu%2Fls9XTEvWIp6c8PhmryMinWXdgNJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 97bf1dfe8d3ab4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5556,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5556), with no line terminators","md5":"b3050a76483a172294fd99aac0cdca71","sha1":"74468249c4afa307317698cda97563091b6d6a56","sha256":"9a73a9795e75acb79e77d2b6af585be2419d33382b6bee78cb691a84a9591340","sha512":"93062203603f0a95c58282e4a2a8f2759d299e84ba6fdf10aef30ae6d2ba61e5b48b04a6e7dfa04251d0c83ae9f360f8af2b822627969ed4843da2d73058aa00","ssdeep":"96:cpbH41wpWH44PpHH4GpAH4fpTH4jpoH4mO+4P:UYzYwYlYJYiYmO+4P","tlshash":"f1b190304029a44ee572bcd231ca7f132d3d1029a6d45a61de2c45a99fbbc6b73a0f6c","first_seen":"2025-09-08T14:26:23.471389Z","last_seen":"2025-09-20T21:59:26.008204Z","times_seen":4,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/binance-logo.8e189297.svg","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:50.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-blackmirrorxp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 22:28:34 GMT","end":"Sat, 06 Dec 2025 23:27:12 GMT"},"fingerprint":{"sha1":"2B:CE:46:FC:DB:7C:A8:F3:65:63:90:1C:55:D4:36:51:C7:10:6C:29","sha256":"A2:D3:68:14:D0:F2:A3:E0:9C:3D:7E:A6:C9:B1:E2:DE:58:AF:A9:2A:EE:AC:0D:06:A7:F3:CF:21:FF:43:DF:E1"}}},"request":{"raw":"GET /binance-logo.8e189297.svg HTTP/1.1\r\nHost: join-blackmirrorxp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-blackmirrorxp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 14:25:50 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 02:08:23 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jn5GVEZ1Lulz0QYr6duxL%2BxN5EmyrJNvwGaufIAC0fihkuPv5AXu7Jm3VpsFt0gbSrHq0Q26iQOHWUUEhfmns0gJQopY9tCXw3SzzSTNcFo9vm%2By\"}]}\r\netag: W/\"1ca-63e40a9829962\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 97bf1e116e1bb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":458,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0cb29ee78b1d6abcade119bfb211fb6c","sha1":"c723624332d658ab7eda965e7d146b2973960181","sha256":"8818089010c2d348181dfd6dca1324ce22cc0281b875238a0edd2b0be5960ece","sha512":"09651afd024cb9ef2e867dee2c4bdac2642b2cb1aa2fc6be5cc358ade2512745709be7f14fcf637e851bf186d680e32e88ac4ef9241f1d981b6707db164e7533","ssdeep":"","tlshash":"bdf0e51ad8257132a48217f0cb68e8a81bffd1b85305223be5215390305b6fde490ddc","first_seen":"2024-10-04T10:29:18.510023Z","last_seen":"2026-06-13T00:30:25.089919Z","times_seen":22,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/black-mirror-logo-white-1.png","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:50.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-blackmirrorxp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 22:28:34 GMT","end":"Sat, 06 Dec 2025 23:27:12 GMT"},"fingerprint":{"sha1":"2B:CE:46:FC:DB:7C:A8:F3:65:63:90:1C:55:D4:36:51:C7:10:6C:29","sha256":"A2:D3:68:14:D0:F2:A3:E0:9C:3D:7E:A6:C9:B1:E2:DE:58:AF:A9:2A:EE:AC:0D:06:A7:F3:CF:21:FF:43:DF:E1"}}},"request":{"raw":"GET /black-mirror-logo-white-1.png HTTP/1.1\r\nHost: join-blackmirrorxp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-blackmirrorxp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 14:25:50 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 02:08:23 GMT\r\netag: \"47e-63e40a982a51a\"\r\naccept-ranges: bytes\r\ncontent-length: 1150\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AloRNIzVMAaQufBHQ3cHj4jCLaKvHKQR%2BNONMc32XxF%2B0G7iOy35f%2BC9ict%2B%2FTo1VtVSgHLr4VILeM9mWhMPn2xxxtXdtVr8%2F%2B8Xd6QzLtcwUc71\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 97bf1e116e1cb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 123 x 18, 8-bit colormap, non-interlaced","md5":"580a1b82f0e92e6384e3a7b7e5d11a1c","sha1":"677b11adf46bedc383867b2e8d80e63461181651","sha256":"36bec1d04e83fd1a7f7814c6d624dd1e06b70a9001f16dfc89e725728b3c7154","sha512":"ead7179fdd7d6d10432ff3228cd0fc994a78c5f56840a1d3bf308d915430bbc1bfa2cd0a79710fd9e391e8872fa826ad4527c7998196ad5d5833d5969bbfc10c","ssdeep":"","tlshash":"4121c6c991f615b7c4103cbec18f3e5042b072687e0ef14bfc26921258050ff5685da8","first_seen":"2025-09-08T14:26:23.474109Z","last_seen":"2025-09-20T21:59:26.002767Z","times_seen":4,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/metamask-1.png","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:50.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-blackmirrorxp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 22:28:34 GMT","end":"Sat, 06 Dec 2025 23:27:12 GMT"},"fingerprint":{"sha1":"2B:CE:46:FC:DB:7C:A8:F3:65:63:90:1C:55:D4:36:51:C7:10:6C:29","sha256":"A2:D3:68:14:D0:F2:A3:E0:9C:3D:7E:A6:C9:B1:E2:DE:58:AF:A9:2A:EE:AC:0D:06:A7:F3:CF:21:FF:43:DF:E1"}}},"request":{"raw":"GET /metamask-1.png HTTP/1.1\r\nHost: join-blackmirrorxp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-blackmirrorxp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 14:25:50 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 02:08:23 GMT\r\netag: \"1ec-63e40a9837039\"\r\naccept-ranges: bytes\r\ncontent-length: 492\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bjwi2uJTuplHbB2WiO%2FyxViS30GDsnl%2BV%2BHUDzxkCYhYopR%2BWGEwZ1xIo5u5OXchN%2BYIfFhegN%2FsHevhHDSHUv1%2FqMMTVLm7N8GaPV8GdM%2FwN2Ao\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 97bf1e116e1eb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":492,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 21 x 21, 8-bit colormap, non-interlaced","md5":"0317e209baa739ae4e08e4124c6bcf71","sha1":"8e6e83a34b1917459435425c17e93eb460c21497","sha256":"b518b6211400faa3a935cf3f8c3628a6cb6bd4affbcad36435bf7010f01f451a","sha512":"4b6d5fef20ff781fc01a6680a1d54f056d996d83d7d36bcbe33515dc834a296bc3bd3300168c53e39227a045310b30702c2119d7cc20afaf321c5d113ba44356","ssdeep":"","tlshash":"4df054f132bb9cbb83588b127955409440df9f6e103a8018c930551316c0b68fc9c377","first_seen":"2025-09-08T14:26:23.475316Z","last_seen":"2025-09-20T21:59:25.979436Z","times_seen":4,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance.llamarpc.com/","fqdn":"binance.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:52.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llamarpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 08:03:47 GMT","end":"Fri, 07 Nov 2025 09:03:27 GMT"},"fingerprint":{"sha1":"9C:C7:46:E0:04:44:8D:56:AE:49:1C:77:2E:C5:79:4E:1B:65:13:C6","sha256":"E9:C7:AB:36:D0:99:3A:66:DA:CB:32:87:CD:4F:AF:FE:68:21:18:37:F4:2D:E4:3D:27:91:EE:AF:2C:CB:6D:B7"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: binance.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://join-blackmirrorxp.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://join-blackmirrorxp.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:25:52 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nx-cache: false\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PbpWcM3WEr45yfHp4tjZxacCBJuVALbHGze7PxNgs%2FdTeYLYxSz0GFr0EGFeWayFHy%2BdBkMb5NCLXL4I67lbApA%2FtuziZJgn84Xix%2BzJFVvAuup9y2hdFYU84%2BwC71AQyXW%2FBHq7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 97bf1e1c8c8456bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=4936\u0026min_rtt=483\u0026rtt_var=8895\u0026sent=11\u0026recv=14\u0026lost=0\u0026retrans=0\u0026sent_bytes=3986\u0026recv_bytes=1550\u0026delivery_rate=8044444\u0026cwnd=255\u0026unsent_bytes=0\u0026cid=306597ffc94e3f2e\u0026ts=710\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6374,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fa3dbe9e7a67f351ee2d52c99850bf9c","sha1":"294cd26f4c0198841057707ed0b44b3cf616e5a8","sha256":"efe3b5e2a041edfb73e010d9c7b8321b7c075c78f0b5d972fe7783da8844f87b","sha512":"d46f4edc8d511404ba6bb32a1a375a1a1c66b24a11f072dbe332243df7b1489af0816a8506fb648a97dd28b0c5ceac714915bc46221ef78d12e9a8a5f1d51d45","ssdeep":"24:YUtXa257vaoWH3eGZsthXvUzZ5+hdex1qx1xxNU6xvQaNBtXX60jv:YKam3QytxvU15+doY1jNNTt9jv","tlshash":"52d108f098c98e50f19baa81b798bc9400213caf7fdf8f40415cf8b6a0f54a176a448f","first_seen":"2025-04-07T11:53:19.749574Z","last_seen":"2026-08-09T15:35:30.721565Z","times_seen":5261,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/svelte.js","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:47.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-blackmirrorxp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 22:28:34 GMT","end":"Sat, 06 Dec 2025 23:27:12 GMT"},"fingerprint":{"sha1":"2B:CE:46:FC:DB:7C:A8:F3:65:63:90:1C:55:D4:36:51:C7:10:6C:29","sha256":"A2:D3:68:14:D0:F2:A3:E0:9C:3D:7E:A6:C9:B1:E2:DE:58:AF:A9:2A:EE:AC:0D:06:A7:F3:CF:21:FF:43:DF:E1"}}},"request":{"raw":"GET /svelte.js HTTP/1.1\r\nHost: join-blackmirrorxp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-blackmirrorxp.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 14:25:47 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 02:08:23 GMT\r\netag: \"5771f4-63e40a984c40f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wIZnMVNY%2FIV3ftWx6%2BZWgeNdazAcx%2FZqx2imzuaq38FIFoAzgBckpEWZpEF7vYYtLTasqnRVvrYIPOtXzkbVVYiaOP8GFWDm0GoBOP2kSkNighdN\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-ray: 97bf1dfe8d38b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5730804,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"64bad0e1ca4f1e287f4873805aa55f8f","sha1":"47d1497212db839d26a843b0c27b0a4eb4b8b536","sha256":"ccca3a2cc030410748b86a039eef78da2d1ced927fef146f4f0327d8db114a75","sha512":"691014177f5a036384fde3a446a4c96956715c88c3ddab7cbc4c3c57a761811107dcac8df01791c6248875501df2bf280f0611922d68fe868c851967e4f3cdd2","ssdeep":"24576:jw5N3mJorqnXPqmSsXqdochfaHKBPh5M7zUS:JJDS1sX2ochfaHKBp5iJ","tlshash":"182512e7a0a1e0c03712c03af7c6aeed2c97506da5db52777954ac8428875a8c7dcef1","first_seen":"2025-09-08T09:07:39.546265Z","last_seen":"2025-09-24T11:19:23.489618Z","times_seen":13,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":343,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/walletConnect.png","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:50.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-blackmirrorxp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 22:28:34 GMT","end":"Sat, 06 Dec 2025 23:27:12 GMT"},"fingerprint":{"sha1":"2B:CE:46:FC:DB:7C:A8:F3:65:63:90:1C:55:D4:36:51:C7:10:6C:29","sha256":"A2:D3:68:14:D0:F2:A3:E0:9C:3D:7E:A6:C9:B1:E2:DE:58:AF:A9:2A:EE:AC:0D:06:A7:F3:CF:21:FF:43:DF:E1"}}},"request":{"raw":"GET /walletConnect.png HTTP/1.1\r\nHost: join-blackmirrorxp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-blackmirrorxp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 14:25:50 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 02:08:23 GMT\r\netag: \"153-63e40a984c7f7\"\r\naccept-ranges: bytes\r\ncontent-length: 339\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UhX8AQFUqUhvTTxfdvdrZKtY8jPHcJo5cZc6u85t4RbULaD%2F50ZdMRhmLZ2Ka9G87TbhRGvDj9ge9BbVEAO87aWQO30TwKF7WZr40OwTiHOWzIoS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 97bf1e116e20b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":339,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit colormap, non-interlaced","md5":"f682353dd13dc8fd9f071279c1c4c235","sha1":"311c0d55825bb3d28974b44958864b49e8886e08","sha256":"62312ffabee35056e6d81df5a20099991e166cb8966c2def925ba38d49507bae","sha512":"414845d5c8b78aaa770d3227dead83b8cc8e3192786bf9a292963440cf08415725164bec771bb90369f73de48881b2ea055f1c97d05be7294b1c9d46059fde1d","ssdeep":"","tlshash":"11e0c0ed9b00883b904d803f42be0da0b662531e01038177068adc200d53660e614767","first_seen":"2025-09-08T14:26:23.478081Z","last_seen":"2025-09-20T21:59:26.004352Z","times_seen":4,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:51.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/ethers/5.6.9/ethers.umd.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-blackmirrorxp.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 14:25:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 125841\r\ncf-ray: 97bf1e173e08b512-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62ad87d5-1eb91\"\r\nlast-modified: Sat, 18 Jun 2022 08:07:49 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 421632\r\nexpires: Sat, 29 Aug 2026 14:25:51 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FZvh9iq%2FMyhj9iwzNQNfO%2BHEi7uWWq8mjaQa%2BmTmV04wh5EabA6SrzykSfa1stQhRIx6sgpEAmm3BvSkgOXsgDRMcov34mUFhnX5rdWsaqF05jP3ry454aTNuZp%2B%2BzgzHMjvZs4c\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":735973,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-14T05:15:44.121492Z","times_seen":8491,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1rpc.io/bnb","fqdn":"1rpc.io","domain":"1rpc.io","tld":"io"},"ip":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:52.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1rpc.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 01:23:19 GMT","end":"Sun, 23 Nov 2025 01:23:18 GMT"},"fingerprint":{"sha1":"77:DD:9D:03:9A:8B:27:57:64:8B:DC:3F:84:87:56:2B:4C:AD:62:3C","sha256":"98:20:17:06:F7:B2:60:4B:A8:A1:AE:72:47:3C:9D:A4:FC:C0:39:C4:F7:3F:EA:8B:B3:19:01:4B:E6:61:CD:6A"}}},"request":{"raw":"POST /bnb HTTP/1.1\r\nHost: 1rpc.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://join-blackmirrorxp.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://join-blackmirrorxp.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 08 Sep 2025 14:25:52 GMT\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: br\r\nAccess-Control-Allow-Origin: https://join-blackmirrorxp.xyz\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4902,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2188b7f1b90a143020f7faf12d10e91f","sha1":"e6a95e4d574d05948b7c8517861a71e6f69b38b8","sha256":"4a8dd94310fc027a042dc9ca0311f20e9341084839e00b8d7a830ab52cdc8096","sha512":"08e8f648099fac2b075f96396f2f9056ac526f12e5843bc16d07fd725fcd74abeed4021a9ed64f53ef3e1dbb57a707ebee71bc51b230f5b5ee4200c2da1d7b1c","ssdeep":"96:oigW53TB2SzrZYpTbDaOTkSO6mdSInccYGS9FzelVLY:r5TB2SzAT/7kSRRrze3k","tlshash":"e6a179f0ee02c891f1be4768f2ddbe0461383726eedc5a4604b45a991ee5a51bd0dccd","first_seen":"2025-01-17T17:24:07.906471Z","last_seen":"2026-08-09T15:35:30.717016Z","times_seen":4827,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":18,"connect":30,"send":0,"wait":34,"receive":1,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed3.bnbchain.org/","fqdn":"bsc-dataseed3.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"54.171.37.114","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:52.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-dataseed3.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://join-blackmirrorxp.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://join-blackmirrorxp.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:25:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: dc0398e2af3bc8c4e79a3833c70e0dc4\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6374,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fa3dbe9e7a67f351ee2d52c99850bf9c","sha1":"294cd26f4c0198841057707ed0b44b3cf616e5a8","sha256":"efe3b5e2a041edfb73e010d9c7b8321b7c075c78f0b5d972fe7783da8844f87b","sha512":"d46f4edc8d511404ba6bb32a1a375a1a1c66b24a11f072dbe332243df7b1489af0816a8506fb648a97dd28b0c5ceac714915bc46221ef78d12e9a8a5f1d51d45","ssdeep":"24:YUtXa257vaoWH3eGZsthXvUzZ5+hdex1qx1xxNU6xvQaNBtXX60jv:YKam3QytxvU15+doY1jNNTt9jv","tlshash":"52d108f098c98e50f19baa81b798bc9400213caf7fdf8f40415cf8b6a0f54a176a448f","first_seen":"2025-04-07T11:53:19.749574Z","last_seen":"2026-08-09T15:35:30.721565Z","times_seen":5261,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-08T14:25:46.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-blackmirrorxp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 22:28:34 GMT","end":"Sat, 06 Dec 2025 23:27:12 GMT"},"fingerprint":{"sha1":"2B:CE:46:FC:DB:7C:A8:F3:65:63:90:1C:55:D4:36:51:C7:10:6C:29","sha256":"A2:D3:68:14:D0:F2:A3:E0:9C:3D:7E:A6:C9:B1:E2:DE:58:AF:A9:2A:EE:AC:0D:06:A7:F3:CF:21:FF:43:DF:E1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: join-blackmirrorxp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:25:47 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 02:08:23 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L5Qpb%2BoDJOrBa2MPCbtDAqHbEwWhdbrbyaj5eEiTn%2Fnh%2B0mNlimMMA1Cm6egA3XuKMvb5uJVcP9RpSdmKk4LnWJAu1HsrlF9ZLrlyAiYJ8otiAG73d4%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 97bf1dfc9de423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61375,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (15401)","md5":"67a526413ff2660eccb6774871085f69","sha1":"3c6c1ea62d3730ec440e12c3531b201e4a3cda3b","sha256":"bf9b179511f371d84aa84694ce655bf8022fc1cf56b0b499e5d0f54abc707c16","sha512":"3fae150db4272ec01f2672778557b6925f6c7482195cac22bd69807db7a8927288c441eefe066c58e9c75af341530efaf91932a82114e4f8f3efbaf243d4dd5c","ssdeep":"1536:ctcx/c64Jysq7vPxm/1Wnpz4x23UtJSxOEJ/0vY94p3HHvzoCx:ctAx0AI","tlshash":"33537285fd10427a792792eeabc5de4c9134b0034911ba9d32fd0086dfc6afb29f7919","first_seen":"2025-09-08T14:26:23.481218Z","last_seen":"2025-09-10T17:23:45.277403Z","times_seen":2,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":106,"dns":93,"connect":1,"send":0,"wait":143,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/black-mirror-main-6.png","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:47.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-blackmirrorxp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 22:28:34 GMT","end":"Sat, 06 Dec 2025 23:27:12 GMT"},"fingerprint":{"sha1":"2B:CE:46:FC:DB:7C:A8:F3:65:63:90:1C:55:D4:36:51:C7:10:6C:29","sha256":"A2:D3:68:14:D0:F2:A3:E0:9C:3D:7E:A6:C9:B1:E2:DE:58:AF:A9:2A:EE:AC:0D:06:A7:F3:CF:21:FF:43:DF:E1"}}},"request":{"raw":"GET /black-mirror-main-6.png HTTP/1.1\r\nHost: join-blackmirrorxp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-blackmirrorxp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 14:25:47 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 02:08:23 GMT\r\netag: \"5e384-63e40a9832219\"\r\naccept-ranges: bytes\r\ncontent-length: 385924\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sCa%2Fxq3YgXuoVMS3pfm5p6OLyYRRCAuoDhu6TkhK2UkwlhGJlzGcM9194PyJsT37pJP6E0ZDCyUA4FKrqsmP7Oq0FXj1TfqLKHKClRKrgO0dRltW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 97bf1dfe9d3cb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":385924,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1072, 8-bit colormap, non-interlaced","md5":"18ebed46bc7af6d83ac97607c36d4bde","sha1":"0ea72504f4dd06394a2e141aa88229b0a2e501cb","sha256":"f91208f4fd5c1dd8949495b7bf98ed2d30fdba75ee13c95c55642977afe99226","sha512":"2fc8225b0efd3e1c9e5d7714a5c7d07bdc48ef2c30c316f0662632fc0e922c81a06c32c3c7faeff597696f02629a39e42cf588d20eea282c62794b698aa51138","ssdeep":"6144:rRrWs4j+wG0TJ/PjakHtPVTP/BxNWoc74UkrCLou2n8woM7RcdHNdJHIR:As4awGMusdzzNW774RrCLoXn8iRINnHA","tlshash":"1a842277dbe8cc7772a266682f46a333dbf3e6d06b317670980530c5355a089989e329","first_seen":"2025-09-08T14:26:23.482532Z","last_seen":"2025-09-20T21:59:25.997862Z","times_seen":4,"resource_available":false,"data":null}},"time_used":660,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":455,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/b957ea75a84b6ea7-s.p.woff2","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:50.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-blackmirrorxp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 22:28:34 GMT","end":"Sat, 06 Dec 2025 23:27:12 GMT"},"fingerprint":{"sha1":"2B:CE:46:FC:DB:7C:A8:F3:65:63:90:1C:55:D4:36:51:C7:10:6C:29","sha256":"A2:D3:68:14:D0:F2:A3:E0:9C:3D:7E:A6:C9:B1:E2:DE:58:AF:A9:2A:EE:AC:0D:06:A7:F3:CF:21:FF:43:DF:E1"}}},"request":{"raw":"GET /b957ea75a84b6ea7-s.p.woff2 HTTP/1.1\r\nHost: join-blackmirrorxp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-blackmirrorxp.xyz/b78f8067b57f6908.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 14:25:50 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 02:08:23 GMT\r\netag: \"1ea8-63e40a982957a\"\r\naccept-ranges: bytes\r\ncontent-length: 7848\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CxUKEvips0S%2BT1The9q7USfB%2FyQ%2BxtwnFpYyyhWdq1GAmmphSk8nFkyXs7MTGlaczcji7wfms0io%2BFHHEqRntQK%2FZbMiwmdyQ7ayJuDmOVazRtGZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 97bf1e113e16b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7848,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7848, version 1.0","md5":"0bd523f6049956faaf43c254a719d06a","sha1":"6af69d307c33af0f3c4c3eb96ef01ea4390f474e","sha256":"197a3cbd7290c242c5c765268cdd69a9a39867fdc80cd13071f243a81c56fb76","sha512":"a0729696c915b1f08b1cef404ebe621c6031812b733107c423b39eeb6b4d852552ffaf2fccffbfe08259f43d532f53d649665be186c26add8bfcee483a9af7e4","ssdeep":"192:K2JJwUQALPlHurxh27HviZ+x5BTbwNA/aGyGhXFUcbtXCR+1pH:nJKUQABHuNgDig13cSHUcbtI+1pH","tlshash":"60f1af5411a00b08e206937903d638e15d977b1c99fff8684d0b5092fdd75f2b8359e0","first_seen":"2024-03-26T19:18:23Z","last_seen":"2026-08-14T14:49:08.943565Z","times_seen":19755,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:51.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 03:22:08 GMT","end":"Thu, 04 Dec 2025 04:21:53 GMT"},"fingerprint":{"sha1":"E6:3E:4F:B3:FC:53:DD:27:D8:25:AA:72:59:23:FF:63:FD:4F:1C:73","sha256":"B4:1F:47:61:EC:D3:B5:F8:B4:5E:F2:BF:CD:E8:CA:5A:7F:1E:80:E0:D8:8E:F2:70:3C:14:BB:81:DE:13:23:9A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://join-blackmirrorxp.xyz/\r\nOrigin: https://join-blackmirrorxp.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:25:51 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\ncf-ray: 97bf1e194c930b41-OSL\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=548\u0026min_rtt=454\u0026rtt_var=204\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3190\u0026recv_bytes=1160\u0026delivery_rate=7688495\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=b1adecc51c82e999\u0026ts=138\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":20,"dns":0,"connect":1,"send":0,"wait":114,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/favicon.ico","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:50.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-blackmirrorxp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 22:28:34 GMT","end":"Sat, 06 Dec 2025 23:27:12 GMT"},"fingerprint":{"sha1":"2B:CE:46:FC:DB:7C:A8:F3:65:63:90:1C:55:D4:36:51:C7:10:6C:29","sha256":"A2:D3:68:14:D0:F2:A3:E0:9C:3D:7E:A6:C9:B1:E2:DE:58:AF:A9:2A:EE:AC:0D:06:A7:F3:CF:21:FF:43:DF:E1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: join-blackmirrorxp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-blackmirrorxp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 14:25:50 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 02:08:23 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9bKCs4e6xWe3CZYpT266oMhgRgH6ZlLzGeqxuOk3Q34KPXMnJK%2Bn0eKtE0xu6ikthrd5qz%2FMCOL2Bxd2hhKrmnaLnoCqbZYecVxmr00JkWLM1Cmm\"}]}\r\netag: W/\"654b-63e40a9836099\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/vnd.microsoft.icon\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 97bf1e12ae29b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25931,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-08-14T14:55:00.42077Z","times_seen":39801,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:51.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 03:22:08 GMT","end":"Thu, 04 Dec 2025 04:21:53 GMT"},"fingerprint":{"sha1":"E6:3E:4F:B3:FC:53:DD:27:D8:25:AA:72:59:23:FF:63:FD:4F:1C:73","sha256":"B4:1F:47:61:EC:D3:B5:F8:B4:5E:F2:BF:CD:E8:CA:5A:7F:1E:80:E0:D8:8E:F2:70:3C:14:BB:81:DE:13:23:9A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://join-blackmirrorxp.xyz/\r\nOrigin: https://join-blackmirrorxp.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:25:51 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\ncf-ray: 97bf1e194c940b41-OSL\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=701\u0026min_rtt=454\u0026rtt_var=459\u0026sent=10\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=3556\u0026recv_bytes=1160\u0026delivery_rate=7688495\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=b1adecc51c82e999\u0026ts=144\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":18,"dns":4,"connect":1,"send":0,"wait":118,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance.llamarpc.com/","fqdn":"binance.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:51.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llamarpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 08:03:47 GMT","end":"Fri, 07 Nov 2025 09:03:27 GMT"},"fingerprint":{"sha1":"9C:C7:46:E0:04:44:8D:56:AE:49:1C:77:2E:C5:79:4E:1B:65:13:C6","sha256":"E9:C7:AB:36:D0:99:3A:66:DA:CB:32:87:CD:4F:AF:FE:68:21:18:37:F4:2D:E4:3D:27:91:EE:AF:2C:CB:6D:B7"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: binance.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://join-blackmirrorxp.xyz/\r\nOrigin: https://join-blackmirrorxp.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 08 Sep 2025 14:25:52 GMT\r\ncf-ray: 97bf1e19899f56bf-OSL\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,POST,HEAD,PUT,DELETE,PATCH\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6ijG9t5ObmfXQgBqsIrXUZE47t94PFhrF6XRhIJcm5dLYqxNUBJSVXK%2Fl5TU3Js1aXIZqW4oo0QuVDLaQi5uAe%2FEIGzdiewK5C6CMRzgfKRFicNuOsIXRT8dPM%2Ft8IKcVmLyjEG7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5572\u0026min_rtt=501\u0026rtt_var=10164\u0026sent=8\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3278\u0026recv_bytes=1297\u0026delivery_rate=8044444\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=306597ffc94e3f2e\u0026ts=474\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T14:51:30.253169Z","times_seen":17888305,"resource_available":true,"data":null}},"time_used":568,"timings":{"blocked":50,"dns":39,"connect":1,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/bsc","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:51.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enterprise.onerpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 11:43:07 GMT","end":"Mon, 27 Oct 2025 11:43:06 GMT"},"fingerprint":{"sha1":"0A:91:99:6D:49:3A:2D:61:FB:0E:6D:EB:6C:CB:67:DD:A6:F6:EF:4D","sha256":"92:66:B5:09:99:C7:87:4C:F6:60:B6:C3:59:71:7E:6F:31:DB:A0:53:24:52:5C:1D:C0:C8:79:22:5F:4E:C2:00"}}},"request":{"raw":"POST /bsc HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://join-blackmirrorxp.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://join-blackmirrorxp.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:25:51 GMT\r\ncontent-type: application/json\r\ncontent-length: 229\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version,x-ton-client-version\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":229,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"42e136a22281d105bd21fa496816706c","sha1":"bc02950079004b0d4f4bea3888dfd4517cddeeff","sha256":"ede226c79ae326ce9e4b099e9f4dbb4e3d7807da2b793bdfadfafeeb84d7175a","sha512":"a41403da8b9e698eb2823bbe0925160b68682c55d4c64e5c8b27193f8fd8bf4fd118179d26eadb446ed41c2c9c12d46523b6f5094caadaae8a03ba3c1d6bade5","ssdeep":"","tlshash":"33d02313c6470537e34f4633371567c4f559705071105f1b4e1c0315024f97b0255351","first_seen":"2025-04-07T11:34:31.00119Z","last_seen":"2026-08-14T08:31:11.121145Z","times_seen":3044,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed3.bnbchain.org/","fqdn":"bsc-dataseed3.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"54.171.37.114","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:51.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed3.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://join-blackmirrorxp.xyz/\r\nOrigin: https://join-blackmirrorxp.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 08 Sep 2025 14:25:52 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T14:51:30.253169Z","times_seen":17888305,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":152,"dns":23,"connect":36,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz/css2-1.css","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:47.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-blackmirrorxp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 22:28:34 GMT","end":"Sat, 06 Dec 2025 23:27:12 GMT"},"fingerprint":{"sha1":"2B:CE:46:FC:DB:7C:A8:F3:65:63:90:1C:55:D4:36:51:C7:10:6C:29","sha256":"A2:D3:68:14:D0:F2:A3:E0:9C:3D:7E:A6:C9:B1:E2:DE:58:AF:A9:2A:EE:AC:0D:06:A7:F3:CF:21:FF:43:DF:E1"}}},"request":{"raw":"GET /css2-1.css HTTP/1.1\r\nHost: join-blackmirrorxp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-blackmirrorxp.xyz/45dcbdc69e792a0a.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 14:25:47 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 02:08:23 GMT\r\netag: \"14b2-63e40a98350f9-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 612\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=US5PzYLfKWEqsCauBw9Wt5xSVo%2BGicCk3fpu%2B3i9h3YHiRpicvtd4MXe6uLY4rBPMHwfPeaRX%2BPCqfFwPiYlFJaHJCjGvVSpC824qT8LW3%2BhOaS8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 97bf1dff4d47b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5298,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0c752055354de865641aea126e1d3590","sha1":"344689be1a110c8815e20317e487f40698997b3b","sha256":"ad8f4d35bb0bac5a4e367b5ee802a30065d5278289e83e63ec220f5c613dddfa","sha512":"6564dd92ecfb6b37c1a4c48d63e2f721d0f1973243c326f3341e401285c17863ac795e7c11c17f71f0a2bc01fc5f79f4450000de1abf1e95f65f2a5f6b90a606","ssdeep":"96:jYgQayJc+ufYgQadNkOQayJc+ufOQadNDYg4a/qYg4afFZHYg4aAYg4at3vYg4aV:MIaVIDaDky/fy4yByt3gyqyaVyw/xsbN","tlshash":"5cb19a90086b5104ea876cd137cf7e33ae5db284a045da786ffd1899accad6653a0b4c","first_seen":"2025-08-05T14:04:31.799832Z","last_seen":"2026-06-09T02:14:15.398398Z","times_seen":9,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:51.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-blackmirrorxp.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:25:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19621\r\ncf-ray: 97bf1e166e4d723c-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65384d58-4ca5\"\r\nlast-modified: Tue, 24 Oct 2023 23:03:52 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 124336\r\nexpires: Sat, 29 Aug 2026 14:25:51 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Nq5r9elOg1KAkRpoeil2%2BMfyyuWvqma8O%2BUsfq1yokHucIbSBu1ZTGT9u0%2BhU5ylEeX3ki9%2BPZkVVo2qABEot4sBmWuhSTDx5KdU5ct90m%2BXZBMdIBB%2FT2xyXpo8L9txKgNPUuwc\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-14T08:08:20.199702Z","times_seen":31901,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":15,"dns":0,"connect":1,"send":0,"wait":10,"receive":1,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/bsc","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:51.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enterprise.onerpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 11:43:07 GMT","end":"Mon, 27 Oct 2025 11:43:06 GMT"},"fingerprint":{"sha1":"0A:91:99:6D:49:3A:2D:61:FB:0E:6D:EB:6C:CB:67:DD:A6:F6:EF:4D","sha256":"92:66:B5:09:99:C7:87:4C:F6:60:B6:C3:59:71:7E:6F:31:DB:A0:53:24:52:5C:1D:C0:C8:79:22:5F:4E:C2:00"}}},"request":{"raw":"OPTIONS /bsc HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://join-blackmirrorxp.xyz/\r\nOrigin: https://join-blackmirrorxp.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 08 Sep 2025 14:25:51 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version,x-ton-client-version\r\naccess-control-max-age: 1728000\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T14:51:30.253169Z","times_seen":17888305,"resource_available":true,"data":null}},"time_used":529,"timings":{"blocked":254,"dns":65,"connect":21,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-blackmirrorxp.xyz//secureproxy.php?e=ping_proxy","fqdn":"join-blackmirrorxp.xyz","domain":"join-blackmirrorxp.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-blackmirrorxp.xyz/","date":"2025-09-08T14:25:51.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-blackmirrorxp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 22:28:34 GMT","end":"Sat, 06 Dec 2025 23:27:12 GMT"},"fingerprint":{"sha1":"2B:CE:46:FC:DB:7C:A8:F3:65:63:90:1C:55:D4:36:51:C7:10:6C:29","sha256":"A2:D3:68:14:D0:F2:A3:E0:9C:3D:7E:A6:C9:B1:E2:DE:58:AF:A9:2A:EE:AC:0D:06:A7:F3:CF:21:FF:43:DF:E1"}}},"request":{"raw":"GET //secureproxy.php?e=ping_proxy HTTP/1.1\r\nHost: join-blackmirrorxp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://join-blackmirrorxp.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 14:25:51 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 02:08:23 GMT\r\netag: \"1e34-63e40a9837421\"\r\naccept-ranges: bytes\r\ncontent-length: 7732\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VDZ%2FG%2F4mH4yRCfq4YOJcU3SN6xQkUGSrE9G2IvZu5PM%2F%2FDGDgILgLBt2ZABHFwzx9ihwjekdpYj3IjNvppfE1aM%2B2DFpujn%2FX3n8%2BkVVC4JbcsI4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 97bf1e199e70b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7732,"size_decoded":0,"mime_type":"text/html","magic":"PHP script, ASCII text","md5":"266ba4231e44862da9e32e4f9b6a8012","sha1":"eb2b688e2b06e66a65aa7446809b35e10aba6d7b","sha256":"a568132ebe184290adad1a5970f34e9191d3f38894c640ba6d4d0acd9237cc4d","sha512":"59fd83eb968a9342a72a2214e6c9718e02f558f7abf9cb4938b8b7eb01e5645e140b4b92a656ba78cd9a31d244fb0fcde96a4e313739cd9496ca3d81b777fb65","ssdeep":"192:q6vgpPDNF6iTypG/+WA4yAXg9bDI6C4VCRnw0Zy5q:epLeit2WBwRhVmX","tlshash":"b8f1611079e37a80a177e0bda74fb8086609a80b441ed909be5c23931fc033cebf169d","first_seen":"2025-07-12T22:38:09.124273Z","last_seen":"2026-04-09T02:34:42.258638Z","times_seen":964,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":102,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}