{"report_id":"0b20ed03-550f-4934-8ee1-c01063974b4c","version":6,"status":"done","tags":[],"date":"2026-01-07T06:15:16Z","url":{"schema":"https","addr":"refundyoursol.world","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"refundyoursol.world/","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"title":"$RDY - The DEGEN Reindeer | Solana Memecoin","dom":{"size":72690,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16169)","md5":"50c381722fb4ef8457b2b746d0949303","sha1":"3d4de7cead3a8ea2e1d77e07dd77752156c51975","sha256":"450ff9662d18a5715767f207a9b7dbc73ed8e07ce32ce65941ea54aad5574682","sha512":"c5811fdca6030b5188bd9d45cbf1d7d5983c7f3dceece682703d0f4eb765c882583215cb8a589f780de4df605520be52568c95c5f72ca2e013c7e2e80641a37a","ssdeep":"768:duehzQH2L0r82It4uSRhKut5NFgl+FU+xHyvfSDIJPJWf3b8fzwZPROHXL0hDgml:d3zqyrY8OOd7VDdnf3VoQhO6ssW","tlshash":"86637154e4f5453b361381ea6ae58f1f6ee16403c94b620872fc4ac4afc7eb39d63468","dom_hash":"domhash2d26f58e6c15f87b4162780c04794557","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"refundyoursol.world","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-11T06:15:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"refundyoursol.world","ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-07T06:15:18.491576Z","last_seen":"2026-01-07T06:15:18.491576Z","alert_count":153,"request_count":51,"received_data":7341922,"sent_data":37164,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-04T22:17:15.216142Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-04T22:27:18.120727Z","alert_count":0,"request_count":1,"received_data":163400,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/@solana/web3.js@1.95.2/lib/index.iife.min.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b5c4430c7067106ed24c57efc525364","sha1":"24bd2a000dcf9c449698f2e14fcafcdc52dd4e15","sha256":"049d130a6aa67b9bee77c222e6f95e5eee74384263f4d4270a1c0060faaa9ea7","sha512":"43083f2ba36aface4abcb059d7650f02d94d1758fb9bd0062d8960ae1e6c58389f77a04fd6f826ae88624a996690611f67ccac5199f32c3be1c22ed160e482b3","ssdeep":"12288:OuddWUL7lK23yvjAo/AbkGgp2dyqJ2qW7nVBKAvHnz33r9ctK+HUY6dJBjFeQEQi:ma1y0","tlshash":"33d482496af720618a5370794f2f6009b635e407240ddd58be8c93a05f5a938cbfbfe9","size":611242,"data":"","first_seen":"2026-01-07T06:15:25.334953Z","last_seen":"2026-01-07T06:15:26.703226Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/npm/bs58@5.0.0/index.min.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"640ae4e0beac28d778848cc4059eaf80","sha1":"c3a20c08e028298e3755a291956b0b63eec3b15b","sha256":"c0dfec5fef5c1f085c1b04b0323991767cdef354df277c802add9d84836352e4","sha512":"32667d1f1ea7bbcb81ea9244bc135a28ad14cc4139639023b14cca13f758291945342a61ea0b147360f3958627dddf4c598f15406655892bc25237c46bfc11e7","ssdeep":"","tlshash":"65c02bdad4e35a0b0504010bb2c0d0250aeac5703d040100140ecb1f80818c026fbcb3","size":140,"data":"","first_seen":"2026-01-07T06:15:25.366148Z","last_seen":"2026-01-07T06:15:26.71883Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/cookie-consent.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b52db77c3e783875a3439f3f80f78fba","sha1":"367774153a016121d9545925f4a6a567fab3adfe","sha256":"11ac239fc11b08f623d7f8647df5021c67eed50d318d8d08a66ac2747cfa6b50","sha512":"92569dbbcc24805b916110566355ff6b912d93a69226a2aae3c2f8e7ba8cf752d9901c362cdf05b60efa16b6ff08a7065ccf3869b2f52ddbb3269731e373dc82","ssdeep":"","tlshash":"5071661d26d61560a29212787b17d31e7321b103513ccd197a5c9184bfadb3598fb79c","size":3550,"data":"","first_seen":"2026-01-07T06:15:25.297594Z","last_seen":"2026-01-07T06:15:26.706435Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/roadmap-highway.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"115e0431fbd524c177ec369fd3bf4563","sha1":"10d73dea30d4b5291f7f5dabe274134851364b96","sha256":"be1138f593148aee68516a0cfd2e7546fe7f6b1dd6c750b276e04b373e466efe","sha512":"0809bd323742f4a5c263c068a929359b019fd7c536b0295d43a9dbf45ba354058c739598c5e775b9a025c5f89b390d63f746165babc1e62c6fc990ee01e44e97","ssdeep":"96:ZXZrCbRyFSEhmbqvyeTqlMG0r5vIawACSm6uDdlQjfcCQnIX7Cmo:RUbAFFhcqvyeTqGG0r1AL6uhlQLcCQnn","tlshash":"8691aa1663b32510d2a7655f9b0702847722a00f3947c8ac7fadc5d88f51670eebbae9","size":4613,"data":"","first_seen":"2026-01-07T06:15:25.292129Z","last_seen":"2026-01-07T06:15:26.729179Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/buffer@6.0.3/index.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"06df5ab9cb551340a4c298240118103a","sha1":"2cb4249bc24fe796e09d1ad28015d7bdada21584","sha256":"c69e07c413fdcce237dd7f1382226c18fb8e3d0b91140fab70e8f4510f8a7857","sha512":"2863a74cc348d5e061273a1dc262035431651da164d1caa03bf8b55633dfd4136bfa73f0e0d502c42dcd81cf24eb966b340713a46d78eb4c334a86d7e962a024","ssdeep":"768:HzwHxEA27ncbwBIQ6pNKNtfvdAodMA7XHWfGBzGBACkM1w0Bqw+k/k737ZEGBnGN:oEj7cEBIevdAodMA7X4Wf95OKFzy","tlshash":"d2334d462ff111274313b03d584fa60e7a34e81a510ddedd786c86902fa4d69cefbea9","size":50228,"data":"","first_seen":"2026-01-07T06:15:25.289577Z","last_seen":"2026-01-07T06:15:26.720179Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@supabase/supabase-js@2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd04632485f87a18cb90c09383de8852","sha1":"609009ad92199c0a23f42a0f6befc62237a780ba","sha256":"622b7f6d4bb2fa945ae6d38c2ff94462b91eda642fa4f09f76e4c97d6c3ab0e5","sha512":"68796f7528fcd0ce68df8498a46365e9a604203415e763e0829745dae23afbe7d5f3c7189048a8d5fe358cfa93987934ae4d500a0850acf561eb0633a9e9d26a","ssdeep":"3072:7agu0hmaFUqVh8t0BcjEk/wLg8srJ51NEIN73lAIFZ+AnGJzkJKJbIKgZJFUJoJ7:7aF0hTF/hW5wLgJr/1GIN73lAIFZdGOv","tlshash":"7df3f8d6b3a3a43346d55062e4351902f378a95df82e401cbb781edf6998908eb3bf35","size":162263,"data":"","first_seen":"2025-12-21T04:04:27.439714Z","last_seen":"2026-03-07T06:11:48.841283Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/security-utils.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d1fcb613bcb6149c53b0f5dbf39926f","sha1":"5d2bb2523ed575ef27d4d4526906a940962197d8","sha256":"a9a9aac9c8687f7d6f270c2c14e9d5078a543c03a6f08d97241e82af5ab8ee5b","sha512":"3c57f9d845a5edc6876002be876afbd73e4172ac785aa10ea30acd398a812dc737fcb9b9892f1b4edaca16fffda02cd61e63938f99492cfbda32b17c83b589e3","ssdeep":"","tlshash":"b161a98c79e3a02a4422f0395edf450b7178aa53119cde49b88c4234af956bcd6f7f98","size":3253,"data":"","first_seen":"2026-01-07T06:15:25.349093Z","last_seen":"2026-01-07T06:15:26.736857Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/supabase-lazy.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0dcec2bbd08e6d7cce8d49349800e3c2","sha1":"dc283cc7c39833a87c6c39260adbd5bde1d56978","sha256":"6fb919a4feb5af4ca77e5cbddfb7dbf48599bec7bd3b2ba2cadc33c83c02723c","sha512":"026b3d282e3eed68503da5f0733c942ee009e2c2f4415f03de5a32f04d5ce61dce232808649fbc7cd1369d4f98012bd0090f6b032003702f8d18dd0d84634119","ssdeep":"","tlshash":"4f313e490ff3e42711336079562bd21531122c231194e8ca7f4cc7f59f91adaaaaf5dd","size":1523,"data":"","first_seen":"2026-01-07T06:15:25.357675Z","last_seen":"2026-01-07T06:15:26.716505Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/wallet-adapter.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd103a10ace9aa4c8e13b82196418426","sha1":"dc83aa0e9da6612894af4c74443b9caf93432387","sha256":"aab0cc7c3ceaed564d8a40d7d60c05203792daa90e3895f168f55d919067a47c","sha512":"9f77b7dec53ee2d706cb5cf0ce666a669bb1cfc0d8ce737bef7810ccc9fc9aaa33b46cb6442ac35995dba8d72f2cbbce3fd1236bf71b6114cd4b65c5bc11d828","ssdeep":"384:DqaRqkqaRJqaRaqaRPqaRcqaR6qaR7AEaEoEu3EOEnEU/v1xCPZ6bieh3lMAGZFd:mJl4rOe+xLrdEU/vfCPZ6+slM+JQ","tlshash":"3813a708b37a17016263525e2b7311b2f153240b1908f9a87bdcd7545fa8e9ea5f63fc","size":44841,"data":"","first_seen":"2026-01-07T06:15:25.300761Z","last_seen":"2026-01-07T06:15:26.73763Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/tweetnacl@1.0.3/nacl-fast.min.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f63893bd32a6a19777a9ae4c97bb564","sha1":"0924e4831003f29640865ff0d4787025c6fb4794","sha256":"142baec456054328699f08e81ba08f3505d8e3dca2a856357f7930cedb61f34f","sha512":"56fb0545f9981edf31be6eed33ca67680a03f9d73bb3a0af85e62c2bd9fff0907f21b5c22d7b437568b1b5a522ee846ba208351da77d0589661833bca430b9e3","ssdeep":"384:fGihsxR1MRNhAAHDqGb6WWqqyXFa7vYk0wN+ROid1ygirA9c0AVWA+x/xzdlTvZU:fLFTsykVPTynouqm4BRKdesSoF/C+Bc","tlshash":"642343055fd63439c02be1be6e5f8c01a609b51a2f0cc84e781f9bf00e5bb65a7b492d","size":45821,"data":"","first_seen":"2026-01-07T06:15:25.303364Z","last_seen":"2026-01-07T06:15:26.729993Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/phantom-deeplinks.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b56a2fc98371d6846de8657c829af5b","sha1":"2fbddebe95dc12461b9fdab420c7f486b05dfaf2","sha256":"e7d7b74b2cb673e2a63bd43d5b18f522f847abfd77707b89c9b976a03a2783cf","sha512":"0225bc9fd80dfa7622ac5e932ad7d22405b61802aff8bc0f9f1be3cbf666485bf9255670e0365aa2c141c4350c756941d90240afb07efacc050a6ffa4afa55dd","ssdeep":"192:uzlNxZ6+Se8ef0JcmJzmufJir3i4QQ5yo8viVQuUdLnnHclZg0HnDnq7a0D1fucF:uhdvynh++Jz15xPzNbQA80yG","tlshash":"09b2501c36b322105593606f6e2b10917636a853354cdaa43f9c96102f2eaede7f37de","size":23996,"data":"","first_seen":"2026-01-07T06:15:25.321005Z","last_seen":"2026-01-07T06:15:26.731313Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/walletconnect-bundle.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf6bf1b4fa6a9815ee336c7f730ca943","sha1":"a138752b2f03f0a284b22ec789905858b13836e6","sha256":"8aca76604cfb11d1e08aaa8362eededc2df40dfb9ac5a687442e25ce663cd4f6","sha512":"578d2b49063f81e8d561551f144da9dae89b607a181e861e2ce1199a31b8c2f93fc4abda2159aa58c92796856d5b427d44e85466c909e236654ab9ef23ef73c3","ssdeep":"6144:w0DDH6zjRUw0k78h2VWWuxNHAnDp/20NT1V8Xvr938spnz08Ee5Ii4sxpU:2QKu/g1nNT1V8XpnzhEe5IiU","tlshash":"9ce44d096bf720324263f0795a1fdc06b228d55b058add1d7e8c52b4af4853c8bf9fa9","size":663887,"data":"","first_seen":"2026-01-07T06:15:25.322312Z","last_seen":"2026-01-07T06:15:26.704806Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/preload-images.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"57f7f4343020e0a266a868b3f0c1e39b","sha1":"373225822def5b945bccd735cc366f1bd524f759","sha256":"cf1a6e58514d4e542da235d477c7d7d2bfbd6cf2be2ea8035434213522cff22f","sha512":"33575ea066e4075362b4f49908ee6fd54d77b2965868843a9e9d5124cb059caf9f22cd0528d0aa3f49a942e26d3b300367ed7a7ccf81cd2aed0fe454914544c5","ssdeep":"","tlshash":"05f0d69d28f26456903250b9aa4f64a174980a0354c5c3653f0dd309cfab96d5ab25dc","size":619,"data":"","first_seen":"2026-01-07T06:15:25.362399Z","last_seen":"2026-01-07T06:15:26.741633Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/referral-capture.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4fc3eaae2f40c5358ae1294f7b68678","sha1":"b8f0fc9e5e72e9aa287547654f67cb0665793491","sha256":"4a96c30ae59d3f1ce6368c6184a1443c667924890564c573085138536d27b48f","sha512":"7eeafc9cf113836866c6b8feefcedc44ab85c95f97d6b23d62427aef1c43807f14ed3987b20b4805f72e4218e15157259cb931e8566635a1cd3231b25110b67e","ssdeep":"","tlshash":"59513048a1f3140111b320f8166b4219b53ce013656aca9abf4c87b43f95e2ad7bfbdd","size":3089,"data":"","first_seen":"2026-01-07T06:15:25.337209Z","last_seen":"2026-01-07T06:15:26.733916Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/mobile-game-handler.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfa0660c65db05c11f966eeb4f608282","sha1":"1f0d0adbfda7c9545906a8d8043db4516825d7ab","sha256":"7c3f1d717f082cf443e3699a8c4212bcf2776ca00d8b68660058bc46e217eb9f","sha512":"425fa7d37364c0502eebaef9a9a91181a531d71a30d75c6fb2c8a28504f6cee54a6b9476cca9d18d97c6afb9255ccb3f7f19f88504438ef8665e3569c4d9f020","ssdeep":"192:IxxPggB3oRQjlVYLmNnoyIrIF2M5p9EpCkUIpn2P33kQNhiOliOrKoTtiOPlcI5o:IJljrYxMLHkCiQiUivihiIG","tlshash":"8642218d92ab0232e133782d1f0b6705367190131909dd457e9cc7caaf9967694bebfc","size":12380,"data":"","first_seen":"2026-01-07T06:15:25.328882Z","last_seen":"2026-01-07T06:15:26.717659Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/rendy-runner-v2.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01e248dbb3621429498f194a875f5db4","sha1":"83c8b2e88ce6cdd4dca683a09bd41b394af8c1aa","sha256":"7b057a664943b50c79e56f956ce24ee0bf7efb0864fbcf3b043b412efc3f875c","sha512":"eebeba44bc07a91660e955932fd9c902e2563189f077623fe78b7c413ead7589e98227a1b828a546e30c8dac93b1b32d7d4abf5081ccec94a827cac177dfe09b","ssdeep":"768:DminGS6kuyT1yeyWSBsEc5kROfAsCHCE+4wo2spQEqPCACPG/w2ppSurbmBiKqd0:DmmLcQ1ykIOfA7Ygz","tlshash":"deb3210903bf1623d12725792f8b561aa624b00b2e4bfd2dbd1cc5d55f9803a84faf79","size":112186,"data":"","first_seen":"2026-01-07T06:15:25.35865Z","last_seen":"2026-01-07T06:15:26.721987Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d49f3314d79f9d845e60419317f4dac7","sha1":"e85a286b8e56c68aae0d93dadda67dbda79d1451","sha256":"15781f07ce90127ca879ea0fbe282ac5172c876223e783ef5455eca0a313fd80","sha512":"a9264f8cdf4909f812d833d622aa57b665a140e71326a74fd6eaa85550011fa6a54a19884053c17c80169dcec1e547c6d4f0c7ddd9d9317e4dc6781cfb2a8e3f","ssdeep":"12288:zs4FgAg39MLCgdXG77sOPHPyk0BlpP5XU28GOghjDVN:zs4FgAg39MLbdXG7YOPHPy5lpPCGOgh3","tlshash":"02d408e8a1d2a13b6c2d62cb3fd13c883913e73180bc68adf6a4d7c1db505d25159a6f","size":629711,"data":"","first_seen":"2026-01-05T17:18:38.576463Z","last_seen":"2026-01-07T13:38:09.713907Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cbc34bce7aa08155f0beb603caf0fa44","sha1":"7a42d8d32dc8ff911c2a09ea5430a9d4ca24e457","sha256":"f33bac492128fd5461454fe261819eb46857431bd1704fac3e67df899063afc1","sha512":"9dbc14e44a66d75f85fa28f8a51abd28f52b5c6eb060a98f65ad400f9d2591501ff5547af30f0a37950cda29660f9316b8683f5589eecc6cc4cfbe40a3203a57","ssdeep":"","tlshash":"1ae086297df690b81333b4164b1ff10113275b570000d8053f1c875e5f9074a59715fd","size":338,"data":"","first_seen":"2026-01-07T06:15:25.368531Z","last_seen":"2026-01-07T06:15:26.755802Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/parallax-clouds.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a6a343bf7697f9f8cb6fead46a7d9bb","sha1":"38b71c6abda8f1cba1eb19be403e21135669e0eb","sha256":"854e1d7504e25f2c00ae59f224101243bb22fcc84d36f4dac6fe3c8354815092","sha512":"ed0b51872ef17ec703131adc09baec9b52f2e6b74f4744589bc1de4f0ead9251a343716dca5a3cfc5345da24400d44c4541d37a2845f46877dddc6a591057a79","ssdeep":"","tlshash":"0331bf180a31c332313b5391e3c343d0b59604133501d99d3b9fc9991f6693d519759e","size":1498,"data":"","first_seen":"2026-01-07T06:15:25.350543Z","last_seen":"2026-01-07T06:15:26.742769Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/event-handlers.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0057b32447fb38847b544a8d8c95124a","sha1":"fd65917edf46b7708f42e7276c7d6f5c3c7333fb","sha256":"190cbcaff24e4bff70583b2ddc66eb443df7e7eedc92238ab427e021aa4957cc","sha512":"2e8c4094e90fbfb3d46cea016ef7b0c35e586bb5888f7a60466559b24e458f9a0df7e37ef6026717f07da70b1e38b898a6177bbb8e49039adbf2e240c3d22d0c","ssdeep":"","tlshash":"f451d02a25e111324277b5750a5f615434532563210edc413f4c86b29ff0afae8e7fee","size":2848,"data":"","first_seen":"2026-01-07T06:15:25.361208Z","last_seen":"2026-01-07T06:15:26.732178Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/launch-countdown.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4b349d65bbac8bc0f052d6a8e671377","sha1":"136138c6de24d7fc5aa34806169f955e33673548","sha256":"efe63151fb3ca3bad7d2fdfb1e31bfdddeaca76da209da12fa9f12ee4a90b733","sha512":"e2f27bd39ea2b1061159f02a73d52ea6fae7b2445d76282b07f012cec1bc661ae7fb7b87eaf7213fc7f91130e25730845c3de407aaf9c923a761762b933cb2c8","ssdeep":"","tlshash":"6c417b3f32a6142215ff30a7238f2335745896427a43d9993e7c06944f98c4ca96f4dd","size":1938,"data":"","first_seen":"2026-01-07T06:15:25.314814Z","last_seen":"2026-01-07T06:15:26.696487Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/visual-effects.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f20e844363b33dd55a588c7f117e548f","sha1":"8c8ea0abc8acf2427de7b500b1483bf4d8891bc2","sha256":"d87177728b0a03053a11f03c81ea06930502677fde3df68b182e61776c9764d7","sha512":"28f42a4cabe7a07d40c4625b9b311294f138c190dae3fc2a720dcd6dabf162adc50298707353c0998cd975ec8c4fd8a3cc56dc8e38794cc4faafa490dde5bf63","ssdeep":"","tlshash":"a841de4c7af31022a0d7217f8a3b49043a3072133603cd197a9dc256df56d29a7a7aac","size":2248,"data":"","first_seen":"2026-01-07T06:15:25.319179Z","last_seen":"2026-01-07T06:15:26.733039Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/supabase-client.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"23c2dae08263881f55a5c3ea248ae4f3","sha1":"dcd3b0ae2d48d93f1939bb3ee98eb73136546704","sha256":"416e51eece59409a0d3eb77f6ff1f6f36244e45cc38c68570b697acc58cff4da","sha512":"448bef29ed105474772144858d1faa9dc4c77fb358262ebcbbf0c6f8020bf78de51549be27c4962987fdb589a97cff955482d0827a546cec5691d9dd693bc982","ssdeep":"384:D7R2jzE94B1XvlzpTAwLiqB2n89ePXkutXAgVFXTmK+fEFijPeJnh8:fq494B1Xv/A1qB289ePXkuV7m","tlshash":"3ec2b25c1af328260273203e6a1b611277218043299cde58ff9c93607f5d56aaefb7dc","size":27407,"data":"","first_seen":"2026-01-07T06:15:25.360043Z","last_seen":"2026-01-07T06:15:26.738459Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/_nuxt/assets/index.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ac5cd7e91ee93d45b0c4ebcbc2d1bb4","sha1":"3263d0d086e96d582f9032403212f0ed0c642264","sha256":"3700476893660c1be38c8b84b9b72df1c9a4c6bbfc364b28663e0c1673311785","sha512":"d6a3392417fb9e8ec7ad779a7f614577767b9e151901772bbbfd7a5cb5cf8cab11d82875a7fbaf92533a5564f352cf66b07b030127642c3d187a6ddf460a00f1","ssdeep":"12288:oAfA8rJA7kNMpXGrIOPHjy0Fy1bxTHiSUCKcXlVXAwto:o6A8rJA7lpXGrIOPHjyd1bx+WKc1Vwwu","tlshash":"a6d4d8e7a1d1a16a3c297a872fe13c3838d3e760803c64beb656dfc0d7605e14355a6b","size":656357,"data":"","first_seen":"2026-01-05T17:18:38.574387Z","last_seen":"2026-01-07T13:38:09.707878Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"refundyoursol.world/_nuxt/assets/index.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /_nuxt/assets/index.js HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 05 Jan 2026 13:02:07 GMT\r\netag: W/\"695bb64f-a0917\"\r\ncache-control: public, max-age=300, must-revalidate\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1wqUC0DK9goOYyPIRcNKgmQNJRCKNmUijG0Eblof5S1u5AmdfQSmEpxvUxWhs6unoF4TVv2fWinBEx0w3w73os0AsnpBq%2FWd2622DqwRqglCMaQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba151442d438be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":657687,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (55455), with no line terminators","md5":"23393cb19d2bde4ab830e3514a73be4d","sha1":"79964344989346aed919e0b4485912589f2f9b12","sha256":"fd83b0d988a08913b9727586f04de2afbc4793aea0375b19988d837fac6a17de","sha512":"713b6570ce0ed9e755535d838bf3cff3278f901b8edcf1377e870ba8205bd07c1ff0978927a78ce9be46008c2fa2f3ae25f0f264a420f019203b6f73a56fc05e","ssdeep":"12288:ohdA8rJA7kNMpXGrIOPHjy0Fy1bxTHiSUCKcXlVXAwto:obA8rJA7lpXGrIOPHjyd1bx+WKc1Vwwu","tlshash":"b9e4e8e7a0d2a36a38297a971fe13c343cd7e761803c687eb746dec0d7604a1934596b","first_seen":"2026-01-07T06:15:21.66424Z","last_seen":"2026-01-07T06:15:25.279206Z","times_seen":2,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/images-webp/tokenomics.webp","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/images-webp/tokenomics.webp HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 483368\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: \"69331f7f-76028\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FOKkn1ETjK6c3%2Bk8Va2Wfq5QNYqpP%2BKWc%2FMNDUoLseKQl6xsC91FSJTm7PwrL6h4q8r5LLadwfXQBrD5hbCoEJxjlHl080jPY2PNkLW9Do3Iz2A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba151443d468be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":483368,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"87be51e865be2d50e97e87f31de7250d","sha1":"a7c00939ffd87468363a6438ddba26cd080eaaa7","sha256":"dbcf1ffec106bebbd73e32f6ac755ac6880275fafa408b1ed38fa655f8789c5e","sha512":"64048badd14ac28986e5d03075959378b0d9917d5b1d5186dcf8ffd55b1e4745e4786f36af949adb2df3be5d8044a8fe07c05f938eedec3ebcb289e77f5bcdb8","ssdeep":"12288:SnPDCg2jGQK8d+aTi9OF0PmMxWarwYK8nGGzYpJMJpDVE:SnPDcScpTeOYXrwY9n1Y/OE","tlshash":"06a42365799e5f13c75b4d3ed6031c33b63a3874adfa3f98891e137581193a393aa0a0","first_seen":"2026-01-07T06:15:25.279951Z","last_seen":"2026-01-07T06:15:26.713937Z","times_seen":2,"resource_available":false,"data":null}},"time_used":642,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":359,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/webp/player-roadmap2.webp","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/webp/player-roadmap2.webp HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 61450\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: \"69331f7f-f00a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TB%2BoXWV9DN1HgMrZxFiBcTOfOE49lO6xvdSdMKXJ81KjbHF3m%2Bas6cu%2FF78wZq5XWk6f%2FgLgoCC2Y8WDIG2%2BImMEXGxVrmO5YP3UZgFcqxu9UqY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba151443d478be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61450,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"265739858083e1f4d376fe2d98c7fca1","sha1":"ff39da456914565d32da2822b202ec4c829c18c4","sha256":"aa94dc9589f70801c706fc475bc2bbbe324362c8a188c4640d64b9dbf102f69c","sha512":"097fe8f1fb9cf9b0e03a1adfdd742969d3e82636ce34dea81efe6c838212f8db264aa0a742a591037d09a5db6a12a0e3bb3ee891743d93ffa9ffaf53a5f2fe2e","ssdeep":"1536:u5u/NaQoGWP3Jszo/U7SeiQTFV5pE/IcEdS5Fy:u5u/NaNGuuowSeiQxV5pjcEg5U","tlshash":"6853028b07a358f4646e1326af431bd4c5e44eb79e48ea00c6898d9e3f309dd902977d","first_seen":"2026-01-07T06:15:25.286614Z","last_seen":"2026-01-07T06:15:26.715268Z","times_seen":2,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/buffer@6.0.3/index.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/buffer@6.0.3/index.js HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: W/\"69331f7f-c434\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s0rUrFWsaohSpnUAVWUlmcwGEXhDJkWxabg%2BBCZvhoCc5j97DMEViTqOHw56%2B1u3aBUCe0pACsueMHGLuhSd%2BKIXUc0FUqYhBXlt5eAX%2FEciz3w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba151443d4a8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50228,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"06df5ab9cb551340a4c298240118103a","sha1":"2cb4249bc24fe796e09d1ad28015d7bdada21584","sha256":"c69e07c413fdcce237dd7f1382226c18fb8e3d0b91140fab70e8f4510f8a7857","sha512":"2863a74cc348d5e061273a1dc262035431651da164d1caa03bf8b55633dfd4136bfa73f0e0d502c42dcd81cf24eb966b340713a46d78eb4c334a86d7e962a024","ssdeep":"768:HzwHxEA27ncbwBIQ6pNKNtfvdAodMA7XHWfGBzGBACkM1w0Bqw+k/k737ZEGBnGN:oEj7cEBIevdAodMA7X4Wf95OKFzy","tlshash":"d2334d462ff111274313b03d584fa60e7a34e81a510ddedd786c86902fa4d69cefbea9","first_seen":"2026-01-07T06:15:25.289577Z","last_seen":"2026-01-07T06:15:26.720179Z","times_seen":2,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/roadmap-highway.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/roadmap-highway.js HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: W/\"69331f7f-1205\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j2ZsWkVWvefbDU4u11A00MSK9wqmuV1iPgnkV7%2Bp%2BAIEvb3czHLSBidSNQxGaTyUALCbtGQdPB4FF7Bf%2FNS1xI8JctesK3VZfykRaYmZTU%2BoJVA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba151444d588be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4613,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"C++ source, ASCII text","md5":"115e0431fbd524c177ec369fd3bf4563","sha1":"10d73dea30d4b5291f7f5dabe274134851364b96","sha256":"be1138f593148aee68516a0cfd2e7546fe7f6b1dd6c750b276e04b373e466efe","sha512":"0809bd323742f4a5c263c068a929359b019fd7c536b0295d43a9dbf45ba354058c739598c5e775b9a025c5f89b390d63f746165babc1e62c6fc990ee01e44e97","ssdeep":"96:ZXZrCbRyFSEhmbqvyeTqlMG0r5vIawACSm6uDdlQjfcCQnIX7Cmo:RUbAFFhcqvyeTqGG0r1AL6uhlQLcCQnn","tlshash":"8691aa1663b32510d2a7655f9b0702847722a00f3947c8ac7fadc5d88f51670eebbae9","first_seen":"2026-01-07T06:15:25.292129Z","last_seen":"2026-01-07T06:15:26.729179Z","times_seen":2,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/cookie-consent.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/cookie-consent.js HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69331f7f-dde\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0kaEt06NBNx%2BvQ9WSXOMuRI%2B3%2BNyA7qhrStkWn1auoNdQqIPt5Igtq%2BUZTgEibb0zKMTj%2BSTsFmnVwesvxi2Hno0JVuQvAPIpdKUOXYyve78Mbk%3D\"}]}\r\ncf-ray: 9ba151445d5d8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3550,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (326)","md5":"b52db77c3e783875a3439f3f80f78fba","sha1":"367774153a016121d9545925f4a6a567fab3adfe","sha256":"11ac239fc11b08f623d7f8647df5021c67eed50d318d8d08a66ac2747cfa6b50","sha512":"92569dbbcc24805b916110566355ff6b912d93a69226a2aae3c2f8e7ba8cf752d9901c362cdf05b60efa16b6ff08a7065ccf3869b2f52ddbb3269731e373dc82","ssdeep":"","tlshash":"5071661d26d61560a29212787b17d31e7321b103513ccd197a5c9184bfadb3598fb79c","first_seen":"2026-01-07T06:15:25.297594Z","last_seen":"2026-01-07T06:15:26.706435Z","times_seen":2,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/webp/roadmap-border-right.webp","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:53.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/webp/roadmap-border-right.webp HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/l/-c--rendycoin-47224/roadmap-highway.css\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 147070\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: \"69331f7f-23e7e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GPxcSrs7LPjgK86A8azdhuimrS4QCSaV%2BufuWa%2BEYQ7b5exLr4wUUNqzKC9gVhf4JRcHhppq%2F5bMBCSi8ZvP8OTLcFj4GvI3uy78lmcwalmQCOU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba151471d848be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147070,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3a94b03c3b9ad48042b4f48bc28054ef","sha1":"fdea01cfb3883ac07ea09637503a18e429f9d806","sha256":"2cbeca38850d0b74644318db9e1ce02635ede19d4a975fe345347616a9a6ba3f","sha512":"f5326eaf10e0aaeafc89a1b242efdf139d4341c5c1d3d80dd1445a3e96354e5b03f499763f485cb6004ae2311297d175f39dafde1d7aeca4677e5a879f71d712","ssdeep":"3072:jrzzQVN66Hp3SATvJPQCW28mrZO/oKkfdOAT9IR5R6Q6q7V:/wTrH0gv2CW28mrsgKkfdjqz36qZ","tlshash":"22e3d8a86089e825718b80f272e5b4d86d1fdc70a0a43b7e4d5d2577b3e14a07dbe0b7","first_seen":"2026-01-07T06:15:25.299093Z","last_seen":"2026-01-07T06:15:26.748664Z","times_seen":2,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":218,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/wallet-adapter.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/wallet-adapter.js HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: W/\"69331f7f-af29\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qutEafwAn2sycfEdlQQ0HvipO4%2FWIewuxAHG4lYTcqMHhdVSm6IDxjYqi1Ko5ZyNgR5XX9ofcp8DNW1X8%2BqxfuCferLLm5ovcIXO8%2FlcyLzXe8M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba151443d4f8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44841,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (831)","md5":"dd103a10ace9aa4c8e13b82196418426","sha1":"dc83aa0e9da6612894af4c74443b9caf93432387","sha256":"aab0cc7c3ceaed564d8a40d7d60c05203792daa90e3895f168f55d919067a47c","sha512":"9f77b7dec53ee2d706cb5cf0ce666a669bb1cfc0d8ce737bef7810ccc9fc9aaa33b46cb6442ac35995dba8d72f2cbbce3fd1236bf71b6114cd4b65c5bc11d828","ssdeep":"384:DqaRqkqaRJqaRaqaRPqaRcqaR6qaR7AEaEoEu3EOEnEU/v1xCPZ6bieh3lMAGZFd:mJl4rOe+xLrdEU/vfCPZ6+slM+JQ","tlshash":"3813a708b37a17016263525e2b7311b2f153240b1908f9a87bdcd7545fa8e9ea5f63fc","first_seen":"2026-01-07T06:15:25.300761Z","last_seen":"2026-01-07T06:15:26.73763Z","times_seen":2,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/images-webp/6a438fa2-a625-4212-8fb9-9ab05d9c7f4f.webp","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:53.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/images-webp/6a438fa2-a625-4212-8fb9-9ab05d9c7f4f.webp HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:54 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zzV3lHUPjYMIVOptLzc4cZGnl5sFazCkbxB1PlbuqSmKZAIusZDcX7pSmjAHJvq29%2FGvlB6hDFdlVSX5SHFDMEbirx24DHyCKRxviia8CQltovI%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba1514a9d9d8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-05-01T14:39:10.802439Z","times_seen":500171,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/images-webp/6a438fa2-a625-4212-8fb9-9abuyuyu05d9c7f4f.webp","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:53.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/images-webp/6a438fa2-a625-4212-8fb9-9abuyuyu05d9c7f4f.webp HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:54 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LV0mFL6h1O7k5RieGouD4m6ueg7fz8zXtBDevWU%2BZ0k48%2FzSKVlSmbuvYAABc0CwGTfVWcBDcjajPxly%2FcBmDBgyw1rIas%2B087vq47UV8MWcefM%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba1514aad9e8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-05-01T14:39:10.802439Z","times_seen":500171,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/images-webp/6a438fa2-a625-4212-8fb9-9abrefefrr05d9c7f4f.webp","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:53.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/images-webp/6a438fa2-a625-4212-8fb9-9abrefefrr05d9c7f4f.webp HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:54 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ii48KP0HEN5v8Zbo%2FYnqdnqADX3bzqWrHup8YdBKOb9sMH%2FAy5E57Kh7WbuYL%2Bp%2FNumZo7IWvdrqlCtbfy%2BRYy4r0rD%2FsIDRruHDNftOaAvtH30%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba1514aad9f8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-05-01T14:39:10.802439Z","times_seen":500171,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/tweetnacl@1.0.3/nacl-fast.min.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:54.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/tweetnacl@1.0.3/nacl-fast.min.js HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: W/\"69331f7f-b2fd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zr34vovYBnRdkgc3ow2ryEDUMKrML%2FZOJuiPvwZ1tEY2i4Lkmhez3882rna70pGtFdiVtdTgmldzAl%2Fk5aV6BNXyurj8NKbTe0TAu%2FgD%2FaC8Lh8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba1514d6db78be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45821,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5653)","md5":"6f63893bd32a6a19777a9ae4c97bb564","sha1":"0924e4831003f29640865ff0d4787025c6fb4794","sha256":"142baec456054328699f08e81ba08f3505d8e3dca2a856357f7930cedb61f34f","sha512":"56fb0545f9981edf31be6eed33ca67680a03f9d73bb3a0af85e62c2bd9fff0907f21b5c22d7b437568b1b5a522ee846ba208351da77d0589661833bca430b9e3","ssdeep":"384:fGihsxR1MRNhAAHDqGb6WWqqyXFa7vYk0wN+ROid1ygirA9c0AVWA+x/xzdlTvZU:fLFTsykVPTynouqm4BRKdesSoF/C+Bc","tlshash":"642343055fd63439c02be1be6e5f8c01a609b51a2f0cc84e781f9bf00e5bb65a7b492d","first_seen":"2026-01-07T06:15:25.303364Z","last_seen":"2026-01-07T06:15:26.729993Z","times_seen":2,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/api/config","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:54.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://refundyoursol.world/\r\ncontent-language: en-US,q=0.8;en\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:54 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lYD4RjbpzwIo2ILrKaGU4hS0YWAY6GfC9YI4U%2BmWAUEZF9QMx7%2F0G9FNGYZNgAdL2PHeErsydWG84hs7dv%2F7oiSzsAoL5nJ%2FaIOw8SKGpMzFS3w%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba1514d8dc48be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":215,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"data","md5":"80f95a5d229bc05434fc515d929adc11","sha1":"e4785e857afc00eef4a0f8e5f595ec307a4fd2e5","sha256":"b7b7d7b716270f6982f00f6fcceb52ef05346f04814a3a19352ba90b34b5c0fb","sha512":"da33d569453b4e20a727ddf5b57e92b8784c31c212df8a3157335ce1bd4377d74e6b3713833e4dcdc89027103a99d996d2c8934fda2acdb8c9c3f90736a1fc7b","ssdeep":"","tlshash":"0ee02db6f32323eceee108630e0c0af928272404e805c033e2054e4a03cc88b9a0d60a","first_seen":"2026-01-07T06:15:25.305246Z","last_seen":"2026-01-07T06:15:26.735163Z","times_seen":2,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/api/visit","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:54.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"POST /api/visit HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://refundyoursol.world/\r\nOrigin: https://refundyoursol.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:55 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tA9YI5Im1EMRBjGflEsiSc%2BVWEenFipnQ0oTGhUEL1fAE1GQNgBvbnTlilza0En78EbY58haIoao52iFo%2Bn3y8ar6Jpg%2FCMA5KWVKrHethzq5dw%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba15151ae158be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-05-01T14:36:10.531577Z","times_seen":403589,"resource_available":true,"data":null}},"time_used":650,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":648,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/webp/cursor-pointer.svg","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:53.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/webp/cursor-pointer.svg HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/l/-c--rendycoin-47224/style.css\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69331f7f-674\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TN5GcwEuYRKBwVYuoI6lhaJearn4snNTRcUlaNR7aloBedNAgoCGzjIJzOVbeZLMJBlvIywyapzGvrIGj0Dwwk7UVoTMUUnUP01ysTet1cMa4tQ%3D\"}]}\r\ncf-ray: 9ba15146ed7c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1652,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"343b23201df8d690b75ece5a8a4c45c6","sha1":"a87a2024a80196ac2c12a62c88d2e3bb96887597","sha256":"78e25ab9257326c70b8087fe7120f4673fa62cc1c2ff9fa39cbef153e1328efd","sha512":"0915f60174e26f94e8842073f487a8fc3165724e763f298051708135dea5395770a4adf868565188094c2ae693899b8fc2ff692020f4521b3547449dd3374544","ssdeep":"","tlshash":"14316eee5baf129b88654320c7e771e4633ef22a020458553aacd1e13b0dc8d57a75d4","first_seen":"2026-01-07T06:15:25.308367Z","last_seen":"2026-01-07T06:15:26.753543Z","times_seen":2,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/images-webp/ecewdfeweddwdwdwde.webp","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:53.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/images-webp/ecewdfeweddwdwdwde.webp HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/l/-c--rendycoin-47224/style.css\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 276030\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: \"69331f7f-4363e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uwu7SgVuIWbcM%2By10TRdYWFW4ZlWfRFksi1D7KPvT6si4MTeKBxoG4IS6iBJRpJxJuU5Mn0Cd8RP2lDC0avm5lTEP8hsm1UcnMLN2Z6zaDigDdU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba15146fd7e8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":276030,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e3c7ef3441848b4447e1baf8f9764e5d","sha1":"1aeeb8916571850ce15fb3b06fba9a5e50c9f0a5","sha256":"b0099204aaa8d352da52c0ff758f28c90cd820110ccc1610fb17c3b4e3a69fd3","sha512":"b3df7f3b04cbe9d2d6946465e3f4f0aa1d82fca73d39ad34283083d0cf3aedfa2e482225e7dcc2340d452b2f2962cf61e35ab5ef293ea1aed5d20363614d375c","ssdeep":"6144:yQD283DywUswXVNtal06s6ObLgSqUl+SaUXMdBbz/YFgV0:TZTydPt+056eLgjCcdB/","tlshash":"3644f120dedd9011e5713835a75b7f0afb5dee276fa922dae43838127472c12d638883","first_seen":"2026-01-07T06:15:25.309575Z","last_seen":"2026-01-07T06:15:26.740505Z","times_seen":2,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":322,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:53.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 07 Jan 2026 06:14:53 GMT\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-05-01T14:38:28.808324Z","times_seen":23723,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":197,"dns":1,"connect":22,"send":0,"wait":33,"receive":0,"ssl":170},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/webp/favicon.png","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:54.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/webp/favicon.png HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 12771\r\npriority: u=6,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: \"69331f7f-31e3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K9ddI9sblL%2BPk6tm0bTOx%2Bjhwl63B3AOJM3GckCRwgKX1kU37mZpcZ4d6GVn7m3PNkrl8WqOacfqWTIplCtijSSJDBcC3rJwPmop6bpax4Af77k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba1514f3df48be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12771,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"2ff63371124917f9e5e545f935496ac7","sha1":"8cf6cc0b38587b08e3060296000810726f5beb25","sha256":"03ed4adac57f5117a36c9b576e27a4461a76136de64142c822ac8c1ce016ec6d","sha512":"65b8e3e385520f0b060c78c50c151bfe707e1f0543385ac2d2c9b36d024a01746bbb046020ceba15a430c6f6e5f9b6d53d3a9afa76963104799fcf8849a4b863","ssdeep":"384:3wVQENRPmoR9fX/uQHB4tqRGCKMmwRDTH0Dg:3yXNdPd6C9mw5H0E","tlshash":"6f42d035cafb8d66b7659c95ba7e0ce4919944f121c3c9b514b43aabbf030f1c461bc4","first_seen":"2026-01-07T06:15:25.31369Z","last_seen":"2026-01-07T06:15:26.72703Z","times_seen":2,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/launch-countdown.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/launch-countdown.js HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69331f7f-792\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IotxT2XSmYJ2BiexfMpUEq1ybGFrlZ5h8PqeWAiC8JouUZJGeHJpoCn7G1iWLbe4M4k6YswopN%2BEe9H7uo8hKOO8p9Y39gxy7rYc%2FdktqUDQjPg%3D\"}]}\r\ncf-ray: 9ba151445d5b8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1938,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"b4b349d65bbac8bc0f052d6a8e671377","sha1":"136138c6de24d7fc5aa34806169f955e33673548","sha256":"efe63151fb3ca3bad7d2fdfb1e31bfdddeaca76da209da12fa9f12ee4a90b733","sha512":"e2f27bd39ea2b1061159f02a73d52ea6fae7b2445d76282b07f012cec1bc661ae7fb7b87eaf7213fc7f91130e25730845c3de407aaf9c923a761762b933cb2c8","ssdeep":"","tlshash":"6c417b3f32a6142215ff30a7238f2335745896427a43d9993e7c06944f98c4ca96f4dd","first_seen":"2026-01-07T06:15:25.314814Z","last_seen":"2026-01-07T06:15:26.696487Z","times_seen":2,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/webp/social-image.webp","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:53.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/webp/social-image.webp HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/l/-c--rendycoin-47224/style.css\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 665646\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: \"69331f7f-a282e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b0XO0JtYg6pirAPFjSsLftSZft2fsS5hmo%2Bt9OzYe%2FwYpj2p%2Bk1B1At6xKRBpkOFwMLOCviSpcnk9wjfN7CA%2BRfs%2FZ2LF%2Br%2FQi9fUJyNBX0n1Nw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba151471d858be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":665646,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aa0d9c406016e71a88b6f04474f769b5","sha1":"86a37d96ff85a3f9a94996162154eda2433d24bc","sha256":"cc88705bc3d1b26e31cabc5e9611234de1a3fe3dc7939d4b7be40fd03f9f15be","sha512":"c445598bb846d280ca3d2aa44b900261f8798ac7ef5a07a7a681ede466dc9b5f55046f098644c923e2d2cc12995b927c99b96adb8844e18b1bd8cfd7c9beb81c","ssdeep":"12288:lWSq5b+/+4ia0/r6UJqLNxVf3GFoEEKZG6IPMRWjPVa85:ISq5b++DyLRTEEAGvPlxR5","tlshash":"9ee42330702f6b1ad7960d3c96460fe05f0265a9c8c7dd469faf6ea192f324f038a785","first_seen":"2026-01-07T06:15:25.316169Z","last_seen":"2026-01-07T06:15:26.724864Z","times_seen":2,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":321,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/images-webp/asset-01.webp","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:53.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/images-webp/asset-01.webp HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31894\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: \"69331f7f-7c96\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L4o4S9zqnIfCGSJhGQDq7ylHDFuko6pZTMVpy%2FR%2BjvFM%2FLhidlo73cDKACy8YRHZCfWRIEkA92cAHgUDzVy6oGOppqzqoCU1tGPJA0rgn%2FQfWHA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba151483d8d8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31894,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7881b11c89d08976d7502972e5e35d3c","sha1":"a5f232915e8fc1876ca9623334a00006e3867743","sha256":"de50780791ce1c08a0a7e325e880c675cef3999abf2ec2399bc1226f5ffc6938","sha512":"3972afa659270cf86550f2c8cf6f74aa39d1195832bd6c27990f46ff6a8b3f1a6227926a1fb9902509fcdd6a24b5ab818152beb6abc35888c3da0f840d22945f","ssdeep":"768:eyCw1ayw4eA1jXhBHT22RW9pfIl06cCC5mdzcl0ltTCoraSzFu4:TC8w4eA1jx1T22RixIl06cCymbPC8nz/","tlshash":"bfe2f1ab3daa388dfd2acc21382224cc5347f2662db977e61ab50e35340d9822599d75","first_seen":"2026-01-07T06:15:25.317483Z","last_seen":"2026-01-07T06:15:26.750048Z","times_seen":2,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":262,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/visual-effects.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/visual-effects.js HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69331f7f-8c8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bPO%2FVzD9%2BaFKgCmaNmYaEADCXp7AdlZKrNWogNOJeqbb6%2BqOME4E9zSRw19U3agNwD3Nlx48qiXSGex%2BbZyfUK3W%2BDUuVKbBuUCe52z%2Fo2ZXHaQ%3D\"}]}\r\ncf-ray: 9ba151445d5c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2248,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"f20e844363b33dd55a588c7f117e548f","sha1":"8c8ea0abc8acf2427de7b500b1483bf4d8891bc2","sha256":"d87177728b0a03053a11f03c81ea06930502677fde3df68b182e61776c9764d7","sha512":"28f42a4cabe7a07d40c4625b9b311294f138c190dae3fc2a720dcd6dabf162adc50298707353c0998cd975ec8c4fd8a3cc56dc8e38794cc4faafa490dde5bf63","ssdeep":"","tlshash":"a841de4c7af31022a0d7217f8a3b49043a3072133603cd197a9dc256df56d29a7a7aac","first_seen":"2026-01-07T06:15:25.319179Z","last_seen":"2026-01-07T06:15:26.733039Z","times_seen":2,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/css2","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/css2 HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1213\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: \"69331f7f-4bd\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qjlf0yJX9ze4bF%2BCSNfMTdzVky1MVGYpHgHPmD0Jp1mmTbNW4yaFCQDhmaG%2B1Hz5oMTFd%2FjqQuDZk0ls%2FtMFnp%2BT%2BlKXpIlBmTb7gWJjQe9YRrQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba151442d428be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T14:39:37.382264Z","times_seen":14476331,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/phantom-deeplinks.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/phantom-deeplinks.js HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: W/\"69331f7f-5dbc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OXqANnMRb26m%2F45ds3hfaU1AnHlmRTGZ%2F%2BndLv%2BrUgtiA9jGs3quyVvPB7qxFIsS4RZ%2B4bCMOqEhJ5e%2FkcNTDdsNcug2tdwYEPdXosYC5mNDUF0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba151443d4e8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23996,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"5b56a2fc98371d6846de8657c829af5b","sha1":"2fbddebe95dc12461b9fdab420c7f486b05dfaf2","sha256":"e7d7b74b2cb673e2a63bd43d5b18f522f847abfd77707b89c9b976a03a2783cf","sha512":"0225bc9fd80dfa7622ac5e932ad7d22405b61802aff8bc0f9f1be3cbf666485bf9255670e0365aa2c141c4350c756941d90240afb07efacc050a6ffa4afa55dd","ssdeep":"192:uzlNxZ6+Se8ef0JcmJzmufJir3i4QQ5yo8viVQuUdLnnHclZg0HnDnq7a0D1fucF:uhdvynh++Jz15xPzNbQA80yG","tlshash":"09b2501c36b322105593606f6e2b10917636a853354cdaa43f9c96102f2eaede7f37de","first_seen":"2026-01-07T06:15:25.321005Z","last_seen":"2026-01-07T06:15:26.731313Z","times_seen":2,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/walletconnect-bundle.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/walletconnect-bundle.js HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: W/\"69331f7f-a214f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pyETmzNSFD5atxzRAlH1d%2FYwPBJijF3CbIjdQp%2F6khZYbHoedFBZS18c63WvUpd8OIseYjStd9akucXeq6Rc1736hWObgT3vIQv5eGt8uJ5%2BlEo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba151443d4d8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":663887,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (917)","md5":"bf6bf1b4fa6a9815ee336c7f730ca943","sha1":"a138752b2f03f0a284b22ec789905858b13836e6","sha256":"8aca76604cfb11d1e08aaa8362eededc2df40dfb9ac5a687442e25ce663cd4f6","sha512":"578d2b49063f81e8d561551f144da9dae89b607a181e861e2ce1199a31b8c2f93fc4abda2159aa58c92796856d5b427d44e85466c909e236654ab9ef23ef73c3","ssdeep":"6144:w0DDH6zjRUw0k78h2VWWuxNHAnDp/20NT1V8Xvr938spnz08Ee5Ii4sxpU:2QKu/g1nNT1V8XpnzhEe5IiU","tlshash":"9ce44d096bf720324263f0795a1fdc06b228d55b058add1d7e8c52b4af4853c8bf9fa9","first_seen":"2026-01-07T06:15:25.322312Z","last_seen":"2026-01-07T06:15:26.704806Z","times_seen":2,"resource_available":true,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":212,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/config.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/config.js HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FvH1GD3H45b665zeV6riZPoKTrd1bD9P6X4azmMhaEHhFMFbFgXUdBFq1y%2FiWAiYwFPfuJz9rlGdJ6eq70pxIEUFNxBJSX4pRmIgb4piwOtcVXU%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba151443d4b8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T14:39:37.382264Z","times_seen":14476331,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/webp/rendy-peek.webm","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/webp/rendy-peek.webm HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: video/webm\r\ncontent-length: 1917553\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: \"69331f7f-1d4271\"\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 0-1917552/1917553\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r9472Lay6KduT3EGNs8su3LT42NstIM20h8s5ZwX%2Fp8q0hj7L3l7p%2FnOuEWH2WoHkPtXaDertYmf91agn411GM6%2Ftsov0hlXb%2Bj08TD5849BuAw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba15144dd608be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1917553,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"4e3a526620a0f9511641d231f8958b8a","sha1":"0359d74561b1bc97d7a295f0d15025e3714b3f9e","sha256":"12b9fd4c299ac8c2a4462cfe56a54d0bdf718b65d7d2c04dc010b70d46701295","sha512":"c28cb5818efff6b92f5a5ce24e24c33c815b5729c3de4cc4bf47f95c6f85a43430c37e7c77bdb9eff218252f815ddad00a2c1c461c562384cb1a0e28a7a6d393","ssdeep":"24576:Ee2J2k+3y07icIaTyXiPh79V6kTnJ4v89KFs:Ee4Ev/57GkTnJ4v89Ys","tlshash":"4e2523281d3574a79100fefc0ecaaf5dbe61c822382596327593a516decedcd0a37987","first_seen":"2026-01-07T06:15:25.323708Z","last_seen":"2026-01-07T06:15:26.744908Z","times_seen":2,"resource_available":false,"data":null}},"time_used":912,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":277,"receive":635,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/images-webp/hero-olho-lado.webp","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:53.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/images-webp/hero-olho-lado.webp HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/l/-c--rendycoin-47224/style.css\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 245292\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: \"69331f7f-3be2c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mvt%2FumA6lXhMQDCNXQkNsSi80OdPB3t%2BdqQb76%2BP6hAczloBpcN01g2sDP3cPgxYl53Al0yGsOxZir8reoQJuW1gMUu5GPveoO3tC%2Bm0vdngIaE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba15146fd808be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":245292,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1e5864f8f346a5e63c7d73384ff17f86","sha1":"bf0782847aa70a400e70451815f264e7f8308efb","sha256":"af2815752f68817e8b2a00b581ea74306f55bf119aab5926132a94cf489c4ee8","sha512":"628dfe14d9318fb92c7178121a98441f3b2e222dec399019e3549fbc999b5a474238ce4c656ab1778d2bfdb21fb378ffe6191155fe934ecfb5535819687e29c4","ssdeep":"6144:CHwhNe3/QVcj2mKQ1PeSutKf9rr9ghHM14Qglp2XIKV:vhi/QVcj2mKQ1POtKf9rriHdQgWXIKV","tlshash":"8134cf98d37980d4f34b6bb03965a5aa052deedf7c28d7a98701cd3d8b10b184ebc56c","first_seen":"2026-01-07T06:15:25.325562Z","last_seen":"2026-01-07T06:15:26.723543Z","times_seen":2,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":249,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-07T06:14:52.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 06:14:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=grgg3kJ4otfYXGIH3LKjZxMjqjEzyWV6xInejZAZZNSyDMcvz%2BKS8YIUwOadglK39sizj%2B1L2DSi%2FRgSw7ZsvMEzvMFtVj2Isgx7wM70GjY1\"}]}\r\nexpires: Wed, 07 Jan 2026 06:14:52 GMT\r\nset-cookie: _subid=1sjos4f2fnal0; expires=Sat, 07 Feb 2026 06:14:52 GMT; path=/\nfab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g; expires=Thu, 08 Jan 2026 06:14:52 GMT; path=/\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ba15140ec1656b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":54021,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1892), with CRLF line terminators","md5":"d437060c7dcaa99f509b446e1d38a64a","sha1":"17b6b5fa6ac4b0470373139230775e46c0a64c6e","sha256":"87896b9989154df41b79d8d81849f2a6dea98088f3a1996988ab788336ea30fc","sha512":"e81bd54e107b5f155e050383bc7efda6c0b95d403e178a36a50685df4372fbc68862ec9f5e5a4398057cd1a624f4ad50d4d9abb99f2ef442f60d79e6fab410b3","ssdeep":"384:R8Qpp2UjGfsNalkGuZkp5PND/7ug6pfoGcUdqfbVDyYk6wLJD3XrWU0bc1q9T:R8Qpp2XfsNJvkp8cgqfbVWYk6Qbp0bHT","tlshash":"f7331a6464d691374173c0d2aeb65babffe68103c68a824432fd179b6ff3e44ad13498","first_seen":"2026-01-07T06:15:25.326812Z","last_seen":"2026-01-07T06:15:26.709601Z","times_seen":2,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":40,"dns":22,"connect":1,"send":0,"wait":302,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/mobile-game-handler.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/mobile-game-handler.js HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: W/\"69331f7f-305c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lhBypPea14R2WYyaVxIfStkox9yDxT5mvugzdBU1w5H1NgBbovKl0dHMjYZrhYHbpmLyRzIVMZaCA%2F4OVj%2BL4S%2FpDSdRLFsMJgV6bLW2VWBQ5Cg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba151444d528be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12380,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"C++ source, ASCII text","md5":"bfa0660c65db05c11f966eeb4f608282","sha1":"1f0d0adbfda7c9545906a8d8043db4516825d7ab","sha256":"7c3f1d717f082cf443e3699a8c4212bcf2776ca00d8b68660058bc46e217eb9f","sha512":"425fa7d37364c0502eebaef9a9a91181a531d71a30d75c6fb2c8a28504f6cee54a6b9476cca9d18d97c6afb9255ccb3f7f19f88504438ef8665e3569c4d9f020","ssdeep":"192:IxxPggB3oRQjlVYLmNnoyIrIF2M5p9EpCkUIpn2P33kQNhiOliOrKoTtiOPlcI5o:IJljrYxMLHkCiQiUivihiIG","tlshash":"8642218d92ab0232e133782d1f0b6705367190131909dd457e9cc7caaf9967694bebfc","first_seen":"2026-01-07T06:15:25.328882Z","last_seen":"2026-01-07T06:15:26.717659Z","times_seen":2,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/@solana/web3.js@1.95.2/lib/index.iife.min.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/@solana/web3.js@1.95.2/lib/index.iife.min.js HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: W/\"69331f7f-953aa\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EMV5Mcnox2rUO90giETJE%2F%2BDpZjDDXB8ckD0DMA9rVxLyAROCvyG2ieIAlIMAJhtehWONbLYpLWZGjq0QxJ2AcUisjDPLxNsjPTzyKXwa5hG66k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba151443d498be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":611242,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"2b5c4430c7067106ed24c57efc525364","sha1":"24bd2a000dcf9c449698f2e14fcafcdc52dd4e15","sha256":"049d130a6aa67b9bee77c222e6f95e5eee74384263f4d4270a1c0060faaa9ea7","sha512":"43083f2ba36aface4abcb059d7650f02d94d1758fb9bd0062d8960ae1e6c58389f77a04fd6f826ae88624a996690611f67ccac5199f32c3be1c22ed160e482b3","ssdeep":"12288:OuddWUL7lK23yvjAo/AbkGgp2dyqJ2qW7nVBKAvHnz33r9ctK+HUY6dJBjFeQEQi:ma1y0","tlshash":"33d482496af720618a5370794f2f6009b635e407240ddd58be8c93a05f5a938cbfbfe9","first_seen":"2026-01-07T06:15:25.334953Z","last_seen":"2026-01-07T06:15:26.703226Z","times_seen":2,"resource_available":true,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":215,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/script.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/script.js HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aHZMvFswpy8r6GCE2PF3MeG%2F3Fotlzj8b%2BAuEExQNHDXVAs6nTiWCnRUKAeQ9KWRjG%2Fs2uAsv6sh7WHaJSzcVrA0IoGAL18JZz85xOdS6EJsr3Y%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba151444d568be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T14:39:37.382264Z","times_seen":14476331,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/referral-capture.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/referral-capture.js HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69331f7f-c11\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gB5Yv%2FgPnp1RTfFRzLUfr3qmvAYYbratXLySbgGKOwq5v7%2F%2BvA0zOLUN9qK55VGSbagB1foCeDnNWcFRm4JzPzqheEsKp0x%2B2TpIHSPqvCDKb8M%3D\"}]}\r\ncf-ray: 9ba151445d5e8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3089,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"a4fc3eaae2f40c5358ae1294f7b68678","sha1":"b8f0fc9e5e72e9aa287547654f67cb0665793491","sha256":"4a96c30ae59d3f1ce6368c6184a1443c667924890564c573085138536d27b48f","sha512":"7eeafc9cf113836866c6b8feefcedc44ab85c95f97d6b23d62427aef1c43807f14ed3987b20b4805f72e4218e15157259cb931e8566635a1cd3231b25110b67e","ssdeep":"","tlshash":"59513048a1f3140111b320f8166b4219b53ce013656aca9abf4c87b43f95e2ad7bfbdd","first_seen":"2026-01-07T06:15:25.337209Z","last_seen":"2026-01-07T06:15:26.733916Z","times_seen":2,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/images-webp/how-to-buy-bg.webp","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:53.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/images-webp/how-to-buy-bg.webp HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/l/-c--rendycoin-47224/style.css\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 184584\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: \"69331f7f-2d108\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=odFYCafA6WbYFkKXA59uLQj%2F7Ps7GRZInPfIRRRgSS0npLpm0DxHcOU7ITFw9Jco%2BDjp%2BoN3rjd%2F1J2rGceE4x3lgTp5%2B5Ma0yMIBwz0JnPTG4I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba151470d828be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":184584,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1344x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d7403ef52f108b2f085919a16155cabf","sha1":"a97244b67de029170d82a0c40782cdfe68de2933","sha256":"a0596022c5927dcc156ed253531f38c6197165c03668a77a09edb47220ef8ab3","sha512":"4f770a230a585bf231dea1cfa8a955f1ddd60b69427ca416875e4fa42329fdf56eba107b746e3ebe15e1e751d593b4977d78e74194abf2cce168f573634b1316","ssdeep":"3072:cf5VW1Xe4aW3S1TxW0ozSaaUKMtgovCWVvTkNbl/v/cXBOPnal/AyZvaDfDLYOmH:cxV/4GTFRajKMecnMv/cx0hyRb","tlshash":"090423387924265d4b3e254bb8d6002064fe7d8c2fa733c39eb834c89d6b6d55c63b69","first_seen":"2026-01-07T06:15:25.33828Z","last_seen":"2026-01-07T06:15:26.746603Z","times_seen":2,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":218,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/api/is-banned","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:54.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /api/is-banned HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://refundyoursol.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:54 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HHriIM0RNcPOINj7JiK6YTosFFM%2BFVJt0puM9hBimhzlZBDy0iAHc9pbuEnmgw9HBXIBaLv2a0bDWOmPwAyM7wj6dQ%2B0BFzZqjJ82hSnCTOIO2Q%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncache-control: private, max-age=300\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba1514d7dba8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"application/json","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-05-01T14:32:05.730815Z","times_seen":107576,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@supabase/supabase-js@2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:54.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/@supabase/supabase-js@2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://refundyoursol.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 06:14:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 41795\r\ncf-ray: 9ba15151a81656c4-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 2.89.0\r\nx-jsd-version-type: version\r\netag: W/\"279d7-YJAJrZIZnAoj9CoPa+/GIjengLo\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-etou8220172-FRA, cache-bma-essb1270071-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 23013\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4Ik4%2BUtQRtHE9ypMFc0NoZlBgoU6rahdnePz8iUBGHKTg8iTc22tjLHjiahzkGkPdHQb1u0%2FIa9AqnV2Ulmd7EVUMHGamCEyM8Ke5FMhEyMsc6gvJrZr58l%2Bwk0OTbHe61Y%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":162263,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"bd04632485f87a18cb90c09383de8852","sha1":"609009ad92199c0a23f42a0f6befc62237a780ba","sha256":"622b7f6d4bb2fa945ae6d38c2ff94462b91eda642fa4f09f76e4c97d6c3ab0e5","sha512":"68796f7528fcd0ce68df8498a46365e9a604203415e763e0829745dae23afbe7d5f3c7189048a8d5fe358cfa93987934ae4d500a0850acf561eb0633a9e9d26a","ssdeep":"3072:7agu0hmaFUqVh8t0BcjEk/wLg8srJ51NEIN73lAIFZ+AnGJzkJKJbIKgZJFUJoJ7:7aF0hTF/hW5wLgJr/1GIN73lAIFZdGOv","tlshash":"7df3f8d6b3a3a43346d55062e4351902f378a95df82e401cbb781edf6998908eb3bf35","first_seen":"2025-12-21T04:04:27.439714Z","last_seen":"2026-03-07T06:11:48.841283Z","times_seen":30,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":12,"receive":3,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/images-webp/logo%20ticker2.webp","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/images-webp/logo%20ticker2.webp HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 44948\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: \"69331f7f-af94\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2OyDA1uuNH5FaJQYOp8u%2Bwxc3%2FQ9yvzSMlzwUM3UEB6OkeSLg1ShZNUleL3H4XVK5e5LK%2B24iomIBVPBURUwBuh%2FjR5YEDoSfHxTpXQ8EGDulEY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba151442d458be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44948,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3361f5b3a55e981f4f570c4e72214dac","sha1":"0cbf795e393c3bfe5f1c482eaf22da1c580f374a","sha256":"cd3160f359279ef060ea8a60690d9445ca07e31aa7a33fbdd1af9c62ca15ab8c","sha512":"ad6227a61f6bc2a95150aafcd21475351568b52c33e260430e4df885282bc4e49fd41ca22dea565cb9e7617a1312321a467a228e597aafdaa6a3de7991578833","ssdeep":"768:E1VHGoHKbTiiUaG84YIV3mlSsXyMdoS01NfJ1T/RYY0xdnfFWxaf+vtSzs/jPaH0:qNFqbTWY4YWkyMubx1TZYZfkxaGvtcsf","tlshash":"0313029adf3c5a2cc17eb154a308eb22f89d794c52b9ce782efa831455e2521eb4f014","first_seen":"2026-01-07T06:15:25.34339Z","last_seen":"2026-01-07T06:15:26.693436Z","times_seen":2,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":139,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/roadmap-highway.css","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/roadmap-highway.css HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: W/\"69331f7f-4d70\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DBirCVDZSKN%2BvdSz3gIxXZ5HxmSltGSI04i8EoRAqFnZaKT8%2FWrT061XtG1fNWNxnASRmf6rjr3qt%2Bw%2BfNgf8WkIv3euql3evOSqnvXjMmjs5YI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba151442d418be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19824,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (333)","md5":"c92a22f96cb6f396420f816d1b1f9957","sha1":"b6dd1e0a1c7896751c6af83ff43488eb3bc5f1de","sha256":"c8df34540052ea0a8bfaf3333980ed6d771946dbcb6b9971263fd42a48ccce10","sha512":"233c033be8b397d7bbe59a9437af0931e87231248ad9c69a6bd4516687a07cfef1bd48243bff780fa40f381ad04cd056741e4026c2229eb10bd80ada050650b3","ssdeep":"384:BZVhY9o7YfIr8QfEifXoHF46z1fYlopGFF8:bVhY9o7YfIr8QfEifXoHF46z1fYlo4Fi","tlshash":"ef9273d65da31049b90ad09d6fe71769222d90079a0fcc7d7bcd36448f093e869b7bc8","first_seen":"2026-01-07T06:15:25.344903Z","last_seen":"2026-01-07T06:15:26.735886Z","times_seen":2,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/images-webp/logo.webp","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/images-webp/logo.webp HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42092\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: \"69331f7f-a46c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h01LrUfYCEI3JeBFTFH4Pce2NNFodzDwF48PlMxyWdpYUp8rJHMn0QiyrHe1KV1mzcFCdiWS%2FZliRsWdtiQFJjlyLOCe1PVT%2Fp59uGLs8OLuT%2FA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba151442d448be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42092,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4f72a8f8beb34d361b752ed13eb4ed89","sha1":"a0c304564aef19f6cf0bc29e41208932fdec8185","sha256":"8781f29c0afd73c89c7e3f0d049a20d43ab7db2842b85f953c4dd5104ce70c69","sha512":"125840a49dd765d0895b0653f2d1c593f1fb7d29dd3f9a7cf29f685f77b5623db2bb57e08585aabef5af1f388e6145253b82d585d331385429da8e46641df550","ssdeep":"768:hT+zAYEjAvlxvrK0FWQ71J77jSGo+iqgkGMq9Ym/5jtQ3W0m:KAYpvjvO/Q7EVkhqWm/TQg","tlshash":"a913f259f7a214b2a16ebc7ecabbcc215a0cb4700d635cef5e039334523325924c7a97","first_seen":"2026-01-07T06:15:25.34766Z","last_seen":"2026-01-07T06:15:26.712561Z","times_seen":2,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":138,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/security-utils.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/security-utils.js HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69331f7f-cb5\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b7XO1OVVy%2FZluGgxLteZRSHEwcdcfnRTw1vqAAJP6zwo4oDI1Qsvf0%2FSYvOh1s4G7Mmg0yyMvmYMfk0iI10%2F5MAPIw4LjAfiePINZv63w4sw57k%3D\"}]}\r\ncf-ray: 9ba151443d4c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3253,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"5d1fcb613bcb6149c53b0f5dbf39926f","sha1":"5d2bb2523ed575ef27d4d4526906a940962197d8","sha256":"a9a9aac9c8687f7d6f270c2c14e9d5078a543c03a6f08d97241e82af5ab8ee5b","sha512":"3c57f9d845a5edc6876002be876afbd73e4172ac785aa10ea30acd398a812dc737fcb9b9892f1b4edaca16fffda02cd61e63938f99492cfbda32b17c83b589e3","ssdeep":"","tlshash":"b161a98c79e3a02a4422f0395edf450b7178aa53119cde49b88c4234af956bcd6f7f98","first_seen":"2026-01-07T06:15:25.349093Z","last_seen":"2026-01-07T06:15:26.736857Z","times_seen":2,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/parallax-clouds.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/parallax-clouds.js HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69331f7f-5da\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x9RIf7v7NRLw9MNSTpOjRtFUCtgjXGm3ER2SLZIoPkal9RVePBLcVEdl1RYNej%2BkQNv%2FPJTOz7kjVow2YMGAI072hCjHS%2FzYGd51hMHoGu%2F8Npg%3D\"}]}\r\ncf-ray: 9ba151444d548be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1498,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"3a6a343bf7697f9f8cb6fead46a7d9bb","sha1":"38b71c6abda8f1cba1eb19be403e21135669e0eb","sha256":"854e1d7504e25f2c00ae59f224101243bb22fcc84d36f4dac6fe3c8354815092","sha512":"ed0b51872ef17ec703131adc09baec9b52f2e6b74f4744589bc1de4f0ead9251a343716dca5a3cfc5345da24400d44c4541d37a2845f46877dddc6a591057a79","ssdeep":"","tlshash":"0331bf180a31c332313b5391e3c343d0b59604133501d99d3b9fc9991f6693d519759e","first_seen":"2026-01-07T06:15:25.350543Z","last_seen":"2026-01-07T06:15:26.742769Z","times_seen":2,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/webp/game-preview.webp","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/webp/game-preview.webp HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32864\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: \"69331f7f-8060\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IGND9YhpCqOkSJTLt7jkR6%2B%2B755rhl4JmF4346A0EosUuj21TM%2BhqQtiRnK9Wr%2BGxOhLt971kLxryO9sWntbl0Vp5w6Zyj1FIq8t7yqtx74poAc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba151443d488be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32864,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"424576922a2a4cf43f8593f31d398b0a","sha1":"33f8a7dc62fbd8c840e761f745c7b738f4d32c57","sha256":"77432ab4066d0c1ed5e6617f2c558e1528fba1559618fe254684c9724b39735f","sha512":"40e0cd03aaa70870e26e1b6e2d4011e8d723bc5d8633b955fb174881aed2c905859ea3b1a0caa6af3ba42bdf0b30557fb1edc40050498f777988db8fda1725ce","ssdeep":"768:UNSBql/n9/x+gpxylawCM89fOh0Y46hJMsE+f1+k47vw:UNSBqx/+gpwAwqWh0Y46y+f1gzw","tlshash":"b6e2e13a500b8858c9e9b61d07fa06b1bac1e23384daa6561ad1ddb43f4c495f212ef7","first_seen":"2026-01-07T06:15:25.351891Z","last_seen":"2026-01-07T06:15:26.701648Z","times_seen":2,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/images-webp/hero-olho-fechado.webp","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:53.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/images-webp/hero-olho-fechado.webp HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/l/-c--rendycoin-47224/style.css\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 243710\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: \"69331f7f-3b7fe\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gS%2BhEj2t19mMYrLfAQUqXx%2B0TYF%2BftuHF5cGMW4DH3D%2B0ho03Yw3VeWP6sD7ALfXLqwwVXRPmRyJlfVXnTLc9Y3uaxwAhUtYrSglkubLymdCy%2BE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba151470d818be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243710,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c3087c2e66a23f1cb81fb89fea617112","sha1":"02d5282ca873953ed8f8e797a09cd0a5fb3a291c","sha256":"22568b83f7d879e8a06e38a68c2d7c7438d70c821a57104c3917d4bed05afdf9","sha512":"6ce27943b311ac917632478c331b2159bd6c9350518891e27d4b221610f65791d766daaf09c277a0c8175cbcd8d7c3704a396dd86316db9de84d8b740814b2d4","ssdeep":"3072:C1eHLFHkFV2Ahw4e2YQgNO7Zism8SwMx2Q75QjQUyOGlJu6bL4ucC8NzFe2g8xSh:ZHwhNe3y7M8SljQ0LkMv8+PO6M","tlshash":"ca349ca876b9113dc30d1b700d6824f7786ceb6f63f8a92d4649d4325829cc8afac5dd","first_seen":"2026-01-07T06:15:25.352862Z","last_seen":"2026-01-07T06:15:26.698129Z","times_seen":2,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":278,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/webp/roadmap-border-left.webp","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:53.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/webp/roadmap-border-left.webp HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/l/-c--rendycoin-47224/roadmap-highway.css\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 145172\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: \"69331f7f-23714\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9eir9w%2ByQCZoBfyXuHPvFJn4F1TQVwzwKEjZT15fkbF4nxPCm7bSTjOErYkNrHrPT1Thc18%2FCTBZNgBqLfLVIOFtJ5pd%2BKwHN%2F4ZKlZgWCqidQ0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba151471d838be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":145172,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0969237d092758bb532f05f72531c103","sha1":"4f1d20f17a81803180fd5574f7c7803e6b890cda","sha256":"52447cb605da8c5b18ccdb6a95890f4a1a17510859ee4d7744550fe794859ce4","sha512":"80e65217411c2a17a2eff898b50f68c65c40ad520dde5718c7e7bdd22fc8fbbac9909c6e121b466862c9564ed7c1aec7e46c008b23492718d2efb9110a305604","ssdeep":"3072:alcQpuRL+w50YOgzjoGoXMTu9hoeoCC3TLBjW9/iFU/b:2cLRLXHOgfoGR2hoe43TLB+/iFUz","tlshash":"d2e3afbe649e9a0458ccf6276344cdeb1751b01f630cad7b6ee63e1172a7c272a2d4c4","first_seen":"2026-01-07T06:15:25.354347Z","last_seen":"2026-01-07T06:15:26.708116Z","times_seen":2,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":281,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/style.css","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/style.css HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: W/\"69331f7f-2adaf\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uVy7ghQWgSf6nFaxqP%2F4Cz4ICIR%2FRYRir03NTom3lhJ4OyopbKAlzgzfO8Sx%2BznMpwemxDvluKJZ5o2sGwAxQcXt5J%2FuZfZP4VVdDYg0BDfEQI8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba151442d3f8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175535,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (333), with CRLF line terminators","md5":"38c88e6af090800d1e0f18103adfcefe","sha1":"3a6983b87afe0e1abf8ef6f5da10f6fea955980f","sha256":"dcb94ce3d27621d3eb551c84038cd48761903143053f1347e8e7f230b7e74cd4","sha512":"49fd4e0f8cdbcdbdf57437952e0e2dda91476ffa1b88ba14c05fc216ca68122dc83dcf729488436c21c7a326e887023bc9b8d4d8b61f031fe59cbea28fd31644","ssdeep":"1536:65kQuINn6YDbQ5ORoWc79QUUoDCtzSBNzxqLKmdoVJ/:6IUYNm+/","tlshash":"a604446ea9810046653786286fa3277effa95003ca0248bd3bed77518fb53f585a1f4c","first_seen":"2026-01-07T06:15:25.355746Z","last_seen":"2026-01-07T06:15:26.711044Z","times_seen":2,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/supabase-lazy.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/supabase-lazy.js HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69331f7f-5f3\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nBpRWJJovTwRp9Ru0M0dHP4cr5j9CBTTDS6zZfnGxaEMyZtAyd5Bd%2FeQShuLAgLqpdvSyl9OO67UPh3nCrijvk0qpabg8eBvFSpEleb8QxJPYcg%3D\"}]}\r\ncf-ray: 9ba151443d508be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1523,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"0dcec2bbd08e6d7cce8d49349800e3c2","sha1":"dc283cc7c39833a87c6c39260adbd5bde1d56978","sha256":"6fb919a4feb5af4ca77e5cbddfb7dbf48599bec7bd3b2ba2cadc33c83c02723c","sha512":"026b3d282e3eed68503da5f0733c942ee009e2c2f4415f03de5a32f04d5ce61dce232808649fbc7cd1369d4f98012bd0090f6b032003702f8d18dd0d84634119","ssdeep":"","tlshash":"4f313e490ff3e42711336079562bd21531122c231194e8ca7f4cc7f59f91adaaaaf5dd","first_seen":"2026-01-07T06:15:25.357675Z","last_seen":"2026-01-07T06:15:26.716505Z","times_seen":2,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/rendy-runner-v2.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/rendy-runner-v2.js HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: W/\"69331f7f-1b642\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gy8GFkZi5Fq8SevII%2FYgfCKuTceJKh%2BRF8bi1NsVM1E5xkK2GXhOL5zahuatVbpOXZLTv0RO4u1a%2BmsiBIQnta9pC4fNsdI51B4E2w%2FZcqH0lvk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba151444d538be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112194,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"C++ source, Unicode text, UTF-8 text, with very long lines (308)","md5":"01e248dbb3621429498f194a875f5db4","sha1":"83c8b2e88ce6cdd4dca683a09bd41b394af8c1aa","sha256":"7b057a664943b50c79e56f956ce24ee0bf7efb0864fbcf3b043b412efc3f875c","sha512":"eebeba44bc07a91660e955932fd9c902e2563189f077623fe78b7c413ead7589e98227a1b828a546e30c8dac93b1b32d7d4abf5081ccec94a827cac177dfe09b","ssdeep":"768:DminGS6kuyT1yeyWSBsEc5kROfAsCHCE+4wo2spQEqPCACPG/w2ppSurbmBiKqd0:DmmLcQ1ykIOfA7Ygz","tlshash":"deb3210903bf1623d12725792f8b561aa624b00b2e4bfd2dbd1cc5d55f9803a84faf79","first_seen":"2026-01-07T06:15:25.35865Z","last_seen":"2026-01-07T06:15:26.721987Z","times_seen":2,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/supabase-client.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/supabase-client.js HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: W/\"69331f7f-6b0f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vC3GnKkZ50jJIRjbh%2BenoTtRv6b5FOtxxb8agVyJ2aajPmqqDqr6qGguzF6%2FWYbTtecFruEBmNDj%2F9IDjhm0ifFAVuiiGQ0FETlzOUUKJYlWnI8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba151444d518be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27407,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"23c2dae08263881f55a5c3ea248ae4f3","sha1":"dcd3b0ae2d48d93f1939bb3ee98eb73136546704","sha256":"416e51eece59409a0d3eb77f6ff1f6f36244e45cc38c68570b697acc58cff4da","sha512":"448bef29ed105474772144858d1faa9dc4c77fb358262ebcbbf0c6f8020bf78de51549be27c4962987fdb589a97cff955482d0827a546cec5691d9dd693bc982","ssdeep":"384:D7R2jzE94B1XvlzpTAwLiqB2n89ePXkutXAgVFXTmK+fEFijPeJnh8:fq494B1Xv/A1qB289ePXkuV7m","tlshash":"3ec2b25c1af328260273203e6a1b611277218043299cde58ff9c93607f5d56aaefb7dc","first_seen":"2026-01-07T06:15:25.360043Z","last_seen":"2026-01-07T06:15:26.738459Z","times_seen":2,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/event-handlers.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/event-handlers.js HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69331f7f-b20\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CVrcHkhSaDABYtEhEDTmkV4PiyP%2B71BKgDvHg5Ya1oHHcoJm6nHBdeXQWLRaGmCIZwRzIUVs30gFvJakthgIEwiZvo6iBPxt2A%2FAkFsrZSjH%2FcM%3D\"}]}\r\ncf-ray: 9ba151444d5a8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2848,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"0057b32447fb38847b544a8d8c95124a","sha1":"fd65917edf46b7708f42e7276c7d6f5c3c7333fb","sha256":"190cbcaff24e4bff70583b2ddc66eb443df7e7eedc92238ab427e021aa4957cc","sha512":"2e8c4094e90fbfb3d46cea016ef7b0c35e586bb5888f7a60466559b24e458f9a0df7e37ef6026717f07da70b1e38b898a6177bbb8e49039adbf2e240c3d22d0c","ssdeep":"","tlshash":"f451d02a25e111324277b5750a5f615434532563210edc413f4c86b29ff0afae8e7fee","first_seen":"2026-01-07T06:15:25.361208Z","last_seen":"2026-01-07T06:15:26.732178Z","times_seen":2,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/preload-images.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/preload-images.js HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69331f7f-26b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=voh6MHGz%2F2GKjRJMB3yuv8XilEyvrklOzbgV01I8k65bh1SIfhmpWSAcStwQzHNsQWMIrQHXOaa4y4N%2BxRW%2BhSFwe%2Ba9nLjSvgXDVIOnv6N%2BhCM%3D\"}]}\r\ncf-ray: 9ba151444d598be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":619,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"57f7f4343020e0a266a868b3f0c1e39b","sha1":"373225822def5b945bccd735cc366f1bd524f759","sha256":"cf1a6e58514d4e542da235d477c7d7d2bfbd6cf2be2ea8035434213522cff22f","sha512":"33575ea066e4075362b4f49908ee6fd54d77b2965868843a9e9d5124cb059caf9f22cd0528d0aa3f49a942e26d3b300367ed7a7ccf81cd2aed0fe454914544c5","ssdeep":"","tlshash":"05f0d69d28f26456903250b9aa4f64a174980a0354c5c3653f0dd309cfab96d5ab25dc","first_seen":"2026-01-07T06:15:25.362399Z","last_seen":"2026-01-07T06:15:26.741633Z","times_seen":2,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/webp/cursor-default.svg","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:53.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/webp/cursor-default.svg HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/l/-c--rendycoin-47224/style.css\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69331f7f-39f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y1bE84fOvN6xL127d8Bl7u1uFvg4hnTBvXLFqbzjVvGBF3D3KdAUY4TcBitxYLcIZ2E3Zeq0vdI1DKjg0Sh7izbmvMMhq1k0YRNisEfXZXF1tZU%3D\"}]}\r\ncf-ray: 9ba15146dd788be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":927,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5b89cd8457e6dc1f06e5a21155adb039","sha1":"626c2358a17f108166ef53e31c8f74daed2a089b","sha256":"4dba52e133c1c44e5f2da1eb90aef7ebb6647a50dc0d33092ae6f0eaa1e58869","sha512":"a5e2e8ae40544ce8d84d60055c4930d452c4aaaa2e98592db45ba6b498ab7073e99d2a0e1832b9098fd0984287eb7ce7d265f260b2200bba042092db1fba2e3c","ssdeep":"","tlshash":"5b11ccc92a5f169e45080310c7fbb6e4902ef44b06094402ba9d04493f0f80cb7bb6e8","first_seen":"2026-01-07T06:15:25.36367Z","last_seen":"2026-01-07T06:15:26.739391Z","times_seen":2,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":250,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/images-webp/hero-olho-aberto.webp","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:53.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/images-webp/hero-olho-aberto.webp HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/l/-c--rendycoin-47224/style.css\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 242558\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\netag: \"69331f7f-3b37e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jif3lPa4aJxesmZDHhX8jnC28fuKv%2Bjfctad1%2FPlGh9P5Gmz77TAJlaE1VLPhviYrBqlJ6%2BXWVqRXZ4KdxYSIFz0PhLkYzcEuLKHme1o57JOVro%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba15146fd7f8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":242558,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8fd8ce1697d019d6adabb690cfa334df","sha1":"1bddb3261b5e2e411f553d7b347b64f954788950","sha256":"d8a2a6b1e556a121d8172b2dac6c0872ca6ee76772d5cd11c1c992cb89290d31","sha512":"17006f006d547c9ca1a1bed85514bff787763f512792085a383abe7a55eecaa87e44ce9abfe86675dec86ff086eace93c4da3d072110731c0a0d55d3d0f29d46","ssdeep":"6144:FHwhNe3aODo7Hk+ipgVoyFB5/g2v3/kTxgyQxikXfuFmWymu:ahiaUobknpPyFB5zkTxgyQI","tlshash":"2834bd98c73814c9f30b2b71386524a9063deecfbda8e7895345dd3d8351b481e789ae","first_seen":"2026-01-07T06:15:25.364777Z","last_seen":"2026-01-07T06:15:26.751294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":620,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":334,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refundyoursol.world/l/-c--rendycoin-47224/npm/bs58@5.0.0/index.min.js","fqdn":"refundyoursol.world","domain":"refundyoursol.world","tld":"world"},"ip":{"addr":"172.67.128.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refundyoursol.world/","date":"2026-01-07T06:14:52.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refundyoursol.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 06:13:28 GMT","end":"Wed, 01 Apr 2026 07:11:04 GMT"},"fingerprint":{"sha1":"9D:CE:CB:93:E5:5D:6B:8D:38:CC:93:4D:32:00:5A:2E:31:5F:8D:EF","sha256":"BE:1B:78:33:02:7C:99:D2:AC:77:C1:5F:B7:02:E7:08:27:7F:68:6D:C7:84:9E:7D:44:72:41:83:65:54:D1:86"}}},"request":{"raw":"GET /l/-c--rendycoin-47224/npm/bs58@5.0.0/index.min.js HTTP/1.1\r\nHost: refundyoursol.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refundyoursol.world/\r\nCookie: _subid=1sjos4f2fnal0; fab60=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3NTU4XCI6MTc2Nzc2NjQ5Mn0sXCJjYW1wYWlnbnNcIjp7XCIyNzU1MlwiOjE3Njc3NjY0OTJ9LFwidGltZVwiOjE3Njc3NjY0OTJ9In0.ZvMpDGmz6uMus-sEjFkKypm4r55817uuxJ-5XRtaO_g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 06:14:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 05 Dec 2025 18:07:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69331f7f-8c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b87Glow8SBItcBH3ygu9OTHKOP3wE7UK7NdJWoZxHPzC4QUVvrZ6FupoNM7Sk8czJkAtAs0O8IrsJ%2FLfhFo7BaxJGQ8BAS91a2GmcPtY%2BvGW0Tg%3D\"}]}\r\ncf-ray: 9ba151444d558be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"640ae4e0beac28d778848cc4059eaf80","sha1":"c3a20c08e028298e3755a291956b0b63eec3b15b","sha256":"c0dfec5fef5c1f085c1b04b0323991767cdef354df277c802add9d84836352e4","sha512":"32667d1f1ea7bbcb81ea9244bc135a28ad14cc4139639023b14cca13f758291945342a61ea0b147360f3958627dddf4c598f15406655892bc25237c46bfc11e7","ssdeep":"","tlshash":"65c02bdad4e35a0b0504010bb2c0d0250aeac5703d040100140ecb1f80818c026fbcb3","first_seen":"2026-01-07T06:15:25.366148Z","last_seen":"2026-01-07T06:15:26.71883Z","times_seen":2,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"refundyoursol.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}