{"report_id":"0ec475c5-a289-4216-8879-480d0cbb5fa5","version":6,"status":"done","tags":[],"date":"2026-06-06T23:07:07Z","url":{"schema":"http","addr":"foundation-starknet.xyz","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"172.67.210.90","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"foundation-starknet.xyz/","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"title":"Starknet | The ZK Execution Layer Scaling Ethereum and Bitcoin","dom":{"size":142,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"292f74c92c97c686c723a291030cfa93","sha1":"ff7ce2a278d64bb71b8a15797fd10276ea6f0df2","sha256":"baf0572ea402de47c8c0c44f67fe0b4af40bd7bc06f5733bac13f51bb4ac4d08","sha512":"4f34b0d47baba42b1c93958d291540f76e16fb3f67405fec9d87d0d8d57bf4ae454b63e8462a3b238ff1f6306323f7af84e182781658961d0acac1e55b70d953","ssdeep":"","tlshash":"54c02b22dc04480f3d009fd1cb8af1c4c003dc3ce8315c00b867b544e9ac131c012548","dom_hash":"domhash1b838b182bbc8c7be786b9f3c16bbd25","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"foundation-starknet.xyz","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"172.67.210.90","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-11T23:07:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":8,"urlquery":0,"analyzer":8}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-06-06T23:06:45Z","timestamp":1780787205,"ip_dst":{"addr":"8.8.8.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":45760,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Google DNS over HTTPS Domain (dns .google in TLS SNI)","source":"{\"timestamp\":\"2026-06-06T23:06:45.970952+0000\",\"flow_id\":1039268940441526,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":45760,\"dest_ip\":\"8.8.8.8\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047866,\"rev\":4,\"signature\":\"ET INFO Observed Google DNS over HTTPS Domain (dns .google in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"8.8.8.8\",\"port\":443},\"target\":{\"ip\":\"172.18.0.5\",\"port\":45760},\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_02_07\"],\"deployment\":[\"Perimeter\"],\"former_sid\":[\"2851058\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_10_05\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"DoH\"],\"updated_at\":[\"2023_10_05\"]}},\"tls\":{\"sni\":\"dns.google\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":912,\"bytes_toclient\":4652,\"start\":\"2026-06-06T23:06:45.944054+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-06-06T23:06:52Z","timestamp":1780787212,"ip_dst":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":53834,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-06-06T23:06:52.740336+0000\",\"flow_id\":413268867561279,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":53834,\"dest_ip\":\"104.26.12.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3512,\"start\":\"2026-06-06T23:06:52.735039+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-06-06T23:06:53Z","timestamp":1780787213,"ip_dst":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":43304,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-rpc .publicnode .com)","source":"{\"timestamp\":\"2026-06-06T23:06:53.475388+0000\",\"flow_id\":652812078619118,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":43304,\"dest_ip\":\"104.20.24.117\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058806,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-rpc .publicnode .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-rpc.publicnode.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2026-06-06T23:06:53.465390+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-06-06T23:06:53Z","timestamp":1780787213,"ip_dst":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":60072,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)","source":"{\"timestamp\":\"2026-06-06T23:06:53.477156+0000\",\"flow_id\":507732378328324,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":60072,\"dest_ip\":\"104.18.11.59\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058812,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.drpc.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2026-06-06T23:06:53.466180+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-06-06T23:06:53Z","timestamp":1780787213,"ip_dst":{"addr":"108.133.23.216","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"Client IP","port":38776,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed .bnbchain .org)","source":"{\"timestamp\":\"2026-06-06T23:06:53.554798+0000\",\"flow_id\":418895274799135,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":38776,\"dest_ip\":\"108.133.23.216\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058780,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":927,\"bytes_toclient\":1654,\"start\":\"2026-06-06T23:06:53.487455+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-06-06T23:06:53Z","timestamp":1780787213,"ip_dst":{"addr":"108.133.23.216","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"Client IP","port":38772,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed .bnbchain .org)","source":"{\"timestamp\":\"2026-06-06T23:06:53.558041+0000\",\"flow_id\":585445516603234,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":38772,\"dest_ip\":\"108.133.23.216\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058780,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3168,\"start\":\"2026-06-06T23:06:53.487266+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-06-06T23:06:53Z","timestamp":1780787213,"ip_dst":{"addr":"152.236.9.75","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"ip_src":{"addr":"Client IP","port":32808,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2026-06-06T23:06:53.592029+0000\",\"flow_id\":1180779523418373,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":32808,\"dest_ip\":\"152.236.9.75\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":4434,\"start\":\"2026-06-06T23:06:53.534789+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-06-06T23:06:53Z","timestamp":1780787213,"ip_dst":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":38834,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-06-06T23:06:53.836545+0000\",\"flow_id\":1388514206656547,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":38834,\"dest_ip\":\"188.114.97.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"elliptical-rabbit.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3168,\"start\":\"2026-06-06T23:06:53.829475+0000\"}}"}],"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-06-06","alert":"PHP webshell obfuscated by encoding of mixed hex and dec","trigger":"foundation-starknet.xyz/assets/srv_eb5e02dbd7.php?req=ping","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/04/18","description":"PHP webshell obfuscated by encoding of mixed hex and dec","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_obfuscated_encoding_mixed_dec_and_hex"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"elliptical-rabbit.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"elliptical-rabbit.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-31T22:21:48.210615Z","alert_count":0,"request_count":2,"received_data":31724,"sent_data":1006,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"foundation-starknet.xyz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-02","domain_rank":0,"first_seen":"2026-06-06T23:01:44.013013Z","last_seen":"2026-06-06T23:01:44.013013Z","alert_count":112,"request_count":37,"received_data":1278386,"sent_data":17348,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-31T22:18:21.058888Z","alert_count":0,"request_count":8,"received_data":394936,"sent_data":4504,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.foundation-starknet.xyz","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-06-02","domain_rank":0,"first_seen":"2026-06-06T23:01:44.01602Z","last_seen":"2026-06-06T23:01:44.01602Z","alert_count":2,"request_count":1,"received_data":0,"sent_data":469,"comment":"","tags":null,"fingerprints":null},{"fqdn":"esm.sh","ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-06","domain_rank":47501,"first_seen":"2020-09-23T23:39:41Z","last_seen":"2026-06-06T08:39:07.700403Z","alert_count":0,"request_count":4,"received_data":21687,"sent_data":1817,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"elliptical-rabbit.icu","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-29","domain_rank":0,"first_seen":"2026-04-26T14:03:04.881914Z","last_seen":"2026-05-31T22:45:59.566787Z","alert_count":6,"request_count":3,"received_data":590349,"sent_data":1527,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bsc.drpc.org","ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":2964008,"first_seen":"2023-11-21T22:39:48Z","last_seen":"2026-06-06T23:01:45.939376Z","alert_count":0,"request_count":2,"received_data":1767,"sent_data":1033,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dns.google","ip":{"addr":"8.8.8.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2018-04-16","domain_rank":158,"first_seen":"2018-10-26T18:11:46Z","last_seen":"2026-06-05T11:56:36.149108Z","alert_count":0,"request_count":1,"received_data":850,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"binance.llamarpc.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-02-07","domain_rank":2101135,"first_seen":"2023-09-18T00:31:06Z","last_seen":"2026-06-06T23:01:44.88903Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":541,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rpc.ankr.com","ip":{"addr":"152.236.9.75","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"domain_registered":"2007-04-23","domain_rank":541361,"first_seen":"2021-10-24T12:41:06Z","last_seen":"2026-06-06T23:01:46.0733Z","alert_count":0,"request_count":2,"received_data":1467,"sent_data":1039,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bsc-rpc.publicnode.com","ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":2142410,"first_seen":"2024-05-08T23:22:55Z","last_seen":"2026-06-06T23:01:46.019351Z","alert_count":0,"request_count":2,"received_data":1943,"sent_data":1053,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bsc.publicnode.com","ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":3431031,"first_seen":"2023-04-05T12:56:41Z","last_seen":"2026-05-31T23:48:15.560239Z","alert_count":0,"request_count":2,"received_data":1943,"sent_data":1045,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2026-06-01T13:23:11.84445Z","alert_count":0,"request_count":1,"received_data":269,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"public-bsc.nownodes.io","ip":{"addr":"104.20.35.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-05-20","domain_rank":0,"first_seen":"2025-10-14T19:44:58.496919Z","last_seen":"2026-06-06T23:01:44.88899Z","alert_count":0,"request_count":2,"received_data":1050,"sent_data":1053,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"wan-milkshake.mom","ip":{"addr":"104.21.85.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-06","domain_rank":0,"first_seen":"2026-06-06T23:01:44.011867Z","last_seen":"2026-06-06T23:01:44.011867Z","alert_count":0,"request_count":1,"received_data":9409181,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bsc-dataseed.bnbchain.org","ip":{"addr":"108.133.23.216","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":2077582,"first_seen":"2023-08-03T06:51:11Z","last_seen":"2026-05-31T22:46:00.798304Z","alert_count":0,"request_count":2,"received_data":1875,"sent_data":1059,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"foundation-starknet.xyz/","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0dc5b501349a894685a9ecbc31be3044","sha1":"71a1f752b29f94747dec12db0d976fe320602c01","sha256":"67a7c13103800933a96e34d99dce3308831b815bc8385893b83c7c9c4c3f7305","sha512":"7f7b23db40a510af4fb5d2bc002cb4ce7c6d0340a8bd66960ecab7f08ddedd93aa01e5b622224d81947e9d80153c106d9482a0ab0ff9fe45817a1083781325e0","ssdeep":"","tlshash":"b6c0121e70516a6610ce6c6d4c4f0489ba368812620909c599dcd4647fb6e6c42a089c","size":178,"data":"","first_seen":"2025-07-14T16:52:25.247325Z","last_seen":"2026-06-06T23:07:11.563039Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/assets/editor-byte.js","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55274a38600f0ed61ea53418b4b68ed6","sha1":"d8eddb4fe23fcba4534c97d222efebf35d5b157f","sha256":"7b9f813d4a0ca8e4520b60597f162a72c39bd2574491041e0040400029bc8274","sha512":"25f28f225d19f934167b99b75cba0a255fd97a10449e631e9c08f398e5041cd67eef80ed3e99a611e6f1e5a73f65d4ce1a2241ddac1377a6801642a08e4a5649","ssdeep":"6144:wmXq/UoKAB9yy81q+pijHhM50thrd84pY:+/Uo5B9ycC2BMgi4pY","tlshash":"bf84c56893deac61436e853c892d35de3d959308bf5d81e7b7d0cc0ea2164bd7a80b47","size":392184,"data":"","first_seen":"2026-06-06T23:01:52.882152Z","last_seen":"2026-06-06T23:07:11.557544Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0cf7713a59c564d3afef8b8dd3325833","sha1":"d2faf9a7fdea0467bebaf8e626264a048ffcd1d2","sha256":"0c738247dd3a8e6aa4d3cf66c3a46f2f5918752caee7f538d44acd1b6657fc9b","sha512":"4fef60c30a00bd595696be577d4d461460d496c0b29c4706667e7e4e5ea0a04bae43595f06ee13324f00b078db0ec473dd8737ff4be04f2f5f330aea19398446","ssdeep":"6144:5mfuSepiAeH7Sstqfpg5XnblzeTBluwZe:pSepxeH78Rc3buIwZe","tlshash":"da84c568d3deac61436e853c892e31de3d959308bb5ed1e7b7d08c0d92264bd3a90b47","size":389325,"data":"","first_seen":"2026-06-06T23:01:52.88326Z","last_seen":"2026-06-06T23:07:11.563853Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/mipd@0.0.7/es2022/mipd.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e27f01505d3b2b0d7e37a489a1643bbe","sha1":"fcc0c28426a74da52b56598e904c94480c94b312","sha256":"362f8af6b974b302df4cb1e8025c65db1dc7217fb5789a0f65ff2eacc605ff5f","sha512":"5e0bf97d23034bacea36a6e213d16a1463b3722367cb32f46722b06fc7214af716fefee6b21ebeb56366dce7d6e187d62cbd3484ae2c5a42dd969982957d9c96","ssdeep":"","tlshash":"1a2166e571576a7517610a8fa7dfdf00a7097ac2a015422cc46121fe705dc8788adae0","size":1111,"data":"","first_seen":"2026-04-20T20:39:03.040451Z","last_seen":"2026-06-07T04:19:09.851042Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"895f526ab37305311d1e998fa4d5a6e8","sha1":"06d0220830c81bf254c70552e908371c6dc1f18f","sha256":"90916b8b1fb2fbbd765a22eba866c30d8829f59aa2d7ee86869abd20207b2117","sha512":"6b087d2e2025f4d11073254448b124af8839ce24ff37eb45bf2fd1a2b66bee8fd4fdca2b4d23c08786d217dd71dbc660d1054b7876b37752dee3baaefdaeaa4e","ssdeep":"","tlshash":"2871bc3beb00173bdc8fa9fdced5b4c02e62497262496960691ce102a16cd7487bed88","size":3743,"data":"","first_seen":"2025-08-14T22:47:51.287187Z","last_seen":"2026-06-07T00:08:21.701832Z","times_seen":1322,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"749fee44b56205f699709643f8aaeeb1","sha1":"179238152aa366c222c7571378ed0e8e7ad725e7","sha256":"3cd44c67ce4771975d8e8984846135a048a91c1d48ab70e2e5a0bee733c4a5e0","sha512":"1c2db46ab618a3974a967fa32e6b4c837918871084eee13db0c5e7432bff77de3688503b8fddd370bf45ba2e6f97a5f314c540558425ef055621a523b2b8c84b","ssdeep":"","tlshash":"f521c09ff5642a3949fb3ba655cff298653201024445ca022aac9ac70f74e956ce7cca","size":1399,"data":"","first_seen":"2026-06-06T23:01:52.88132Z","last_seen":"2026-06-06T23:07:11.565268Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/mipd@0.0.7","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c086cf4bfd6eff57b5209b43659c1697","sha1":"f7052fed487141e6f548a8318071d65a51ae2cd8","sha256":"d10981647c684009f82945a2b89daa0e45b5ff6bcb095e641d10608d9c6fa163","sha512":"97dafc1ec705f4235e906819727bd0bbe7dc297ff1832d01cc049e24a949fb1007e41a0975b5f8ba4bd4696e73bf54abd4f427c5f78bed59dbbaf02b5b635816","ssdeep":"","tlshash":"08a002a501d7053c3b3139d4223fd12ad3a31784e48386cc24b9174159c4850993d1bb","size":71,"data":"","first_seen":"2026-04-20T20:39:03.019439Z","last_seen":"2026-06-07T04:19:09.8452Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/disable-devtool","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"97c69ddec5a41bfd71d4e46f03aa3a66","sha1":"6632a0a55d48d322450a0a0147526f0e91b4cc0b","sha256":"bbd0cbecbc43488ec920e0660e7a0b903af3d9fcd3114421a7620f55ffa98792","sha512":"80e5b974e51b127e2b9c0f227c6cc0b302351806ae1947f0691cb18a67d3743f4390cfe8d0d45f57ab6f5ba899eae8775fdd776edcdb2c0c733997bb38abd90b","ssdeep":"","tlshash":"66c08c10c033f0382a308cb832b4eaefe3a302c6d20c52b88e04022c93cf100d22cba4","size":181,"data":"","first_seen":"2026-05-26T18:42:46.141539Z","last_seen":"2026-06-07T04:19:09.849983Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6f134aa0a4c14df6fe081e2a6643f4bf","sha1":"61989a9857651a3e6e67a4f56bd65a0ac61e1faf","sha256":"f24cb4d56e23c43c0f5927a4ab308c23741e40fbb13e3996e3c42679982559a9","sha512":"b2b21f9c85678b62e77b009768a4ce7fcd1332410817c76f1fc8bff5595edf99fa48b353886413d0952504c7d1629fd4983751c8361bff9edf79d5bec6db839f","ssdeep":"384:XTkAes3CkB0YatnIE3EmI/N62D7LI2fU6HFvQxCN:P3Ck5ibEPt7bU6lvECN","tlshash":"b982c5dcf55770706bb2b9b4403f450ab2367856908c8440e669c8e06eb856fe27bf3e","size":18401,"data":"","first_seen":"2026-05-26T18:42:46.16671Z","last_seen":"2026-06-07T04:19:09.851567Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"foundation-starknet.xyz/featured-dapps.css","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /featured-dapps.css HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=2,i=?0\r\netag: W/\"6a24514c-1ed2\"\r\ncontent-encoding: gzip\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nkXb3Fqrs8D90YqhJ9zfyRt3ZjyiY25mqmtbcAyh3ogPSLllDnfWH9yt9s7SxoaN8nhomX%2BV7ahWZ8ayndblNEDnt%2F5XaX5kHbDbuBari2gZwz3SdOA4ji%2BaJsdIC9ufqOLY651iYTuOdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07b11c24c855690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7890,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2c09ed5f1c371c8349d500912b817133","sha1":"a262c2b056068aa9122b6f0af399d10ac7438f92","sha256":"4cc40ba38bc14538a067b5a50b9b5b8b2236396a2801813d75e751284b175249","sha512":"b4a2600df0bfab06a5036ae979a0005b7e07a18ca96eba15bdbf5ceed52a7fb762180297401c753e4d991c972af19af7dca8698d08c895d5aca9b7f54fc78c1f","ssdeep":"96:htRNmFSDTEUPFzfaGnem61wit5uhOs2LqHn5ReE:rmYDTZzfaGnem61wit5uhOs2Lmn5Rt","tlshash":"bcf1bbd86aa326a5f8165c7e5fa84649e7fd2883354b4bf63e2813c08fe305544d2f4a","first_seen":"2025-11-18T00:46:11.765557Z","last_seen":"2026-06-06T23:07:11.516783Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/layer-2.svg","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /layer-2.svg HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZSxZYdZ3TmgNB4jqvUarn3Ma8aIJzIt7kF0nXLVMxlN44g4zu1X6of%2B2vEWzk2AJHbAqlHfgbeuix6G7tEJt3LUCfUFuxfZmux9F9KwBVVO2Bc1xpxHb9S96MycAao4q6g3nfG1wqo5cMQ%3D%3D\"}]}\r\netag: W/\"6a24514c-9f1\"\r\ncontent-encoding: br\r\ncf-ray: a07b11c27c9e5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2545,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f0b133152205c1142a28f441fa8f2782","sha1":"62e5cd5e4567df29a33fafdecb41b1091c850c69","sha256":"f330184f6b23fb335668aa00f74fd1655304fc3b204400b8accbc089ca0cc239","sha512":"767994bef9819a4004368c2ee5e0b51575b0ab03dee2d4c22678f8ffc5200b3b426435eda145d132e725f54f127890665fd6e6fbbb8e12dac8ce9f5f28f73e6f","ssdeep":"","tlshash":"215120f8eb64d6bcc7d05fac5f3195a82b1a703d38b34a1e816c6fb4524396cc911658","first_seen":"2025-11-18T00:46:11.692757Z","last_seen":"2026-06-06T23:07:11.517793Z","times_seen":8,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/account-abstraction.svg","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /account-abstraction.svg HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5LkdjW0juoObGIll6sYHmWt8xhxPBY4LR2ZoffSfOY3jruY0BopOU09PQkmb8uTBSZlTpYyk2oEpun%2BmxCpkz9uhvxik9Jj4iVpsuwyZ2sfzn0JPQH7RA6mzaS%2FwCvPttcyzbQ5h94FgoQ%3D%3D\"}]}\r\netag: W/\"6a24514c-86a\"\r\ncontent-encoding: br\r\ncf-ray: a07b11c27c9f5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2154,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8977f771007adb07738b3972e97773d8","sha1":"9094f2ec718b9d534196c2c5b58a6fed7661280d","sha256":"d04167a4b85fd4802926b3c27fb4e80a1b6b81c72035983a0958a15b10db8c79","sha512":"d6f22556e2b491a23d0609784ed5841a37a7f0b16526f711cefc8dd517649da51260b0b94bfd1f6603fd04b6453bd0ed53e29472176dd875a5e8bf3544ed1693","ssdeep":"","tlshash":"51412dea573c12eca1d75aac5f30aa54536e78f172f886c0805f96b82103ec5f613c64","first_seen":"2025-11-18T00:46:11.663628Z","last_seen":"2026-06-06T23:07:11.518995Z","times_seen":8,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/amm-crypto.svg","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /amm-crypto.svg HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AvEMIDOk2Ybbq1YgRQ7EjJ8HrlhAODS1t%2FKnfbft1xTUe9wgiGlPFHZMwuGQuMUhlOI6PUbbx0goL4ePqxvm75RMe1jXBH2xlAospJDgXLz%2FjSH67tuamfThiS83MuCNbirUAFF5Z7E68g%3D%3D\"}]}\r\netag: W/\"6a24514c-66a\"\r\ncontent-encoding: br\r\ncf-ray: a07b11c27ca15690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1642,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2de97154764fe597049e543734edb577","sha1":"5b542781a14f58077f87cc8c0fc56e3544e5f0ae","sha256":"4e86776aafa7c5ff5de74542fe91aa2e125e349a42dfb2800ceee6973893b521","sha512":"99ba03ab456437016612e8adf8f52c279250756bc82a474f899676837f64b37c43afc561e85395e3afafb73b175d07ab3450b36a912075af3c8d37287be064de","ssdeep":"","tlshash":"5a3126ffebdc937c6a9bc379a761b1a0931f726030910aa9a97dcab13103594d60b844","first_seen":"2025-11-18T00:46:11.654827Z","last_seen":"2026-06-06T23:07:11.519842Z","times_seen":8,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/da53325d50895429285f938389f1bdadc214fbea.png","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://foundation-starknet.xyz/index_3.html","date":"2026-06-06T23:06:46.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /da53325d50895429285f938389f1bdadc214fbea.png HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 683\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=4,i=?0\r\netag: \"6a24514c-2ab\"\r\naccept-ranges: bytes\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EDHwIr93gt2hX4Kbpwk00oV2GnW6iRJYvd%2BAB6D5rr3FzgdNpJuFq41NDNShbBP%2FEHIcp590J6EsfD%2F3fF%2FtrINstcRbuUpMm6xP88iDLGKefht%2FBFauUh8YpfLSuC3rB2WaG3Nz%2B950qg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07b11c58e1a5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":683,"size_decoded":0,"mime_type":"image/png","magic":"data","md5":"efb32ceda324e1612abe80b50aba63a3","sha1":"da53325d50895429285f938389f1bdadc214fbea","sha256":"f85b1a6a1cd2123c5064ad974f5d42a28ee55c6a2dcd4318a661c0a8958bf525","sha512":"57dc56c4f03d751825761c30ab51c0699da3c899f48dd8f74095c7ca6945f1b459ef202606de2cb20eca22336b7e8b054f3aa58447e3bc0bd64049b5b6807a17","ssdeep":"","tlshash":"0e0144181aaa1e6a5460b81bac61d81af566f0a408d003514a9855f15a23cba9406cba","first_seen":"2025-04-29T17:20:25.822726Z","last_seen":"2026-06-06T23:07:11.520472Z","times_seen":120,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/bsc","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"152.236.9.75","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:53.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shark.multi-rpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 11:08:04 GMT","end":"Sun, 16 Aug 2026 11:08:03 GMT"},"fingerprint":{"sha1":"75:83:7C:84:77:DB:95:45:36:E5:E8:67:BD:D3:E5:85:52:4F:E8:FD","sha256":"B1:12:8E:9C:C2:F1:B2:5A:70:44:5F:46:ED:1F:40:D2:99:24:1D:0C:C1:85:19:9D:E3:34:0B:15:6B:DA:C9:B3"}}},"request":{"raw":"OPTIONS /bsc HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://foundation-starknet.xyz/\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 06 Jun 2026 23:06:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version,x-ton-client-version,x-client-name,x-client-version\r\naccess-control-max-age: 1728000\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T13:09:49.815178Z","times_seen":16212590,"resource_available":true,"data":null}},"time_used":497,"timings":{"blocked":228,"dns":93,"connect":28,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-rpc.publicnode.com/","fqdn":"bsc-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:53.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 23:57:50 GMT","end":"Fri, 10 Jul 2026 00:57:42 GMT"},"fingerprint":{"sha1":"FA:41:42:B5:59:CD:F2:75:9C:78:CB:D0:5E:1F:F6:83:58:D2:EE:5F","sha256":"07:86:2C:E3:AD:0C:A4:31:FD:57:1E:C8:01:EA:80:5B:24:9B:5E:3F:7B:09:9D:D4:1B:FE:A9:2B:34:AC:3E:B4"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://foundation-starknet.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x6981E9EA7023a8407E4B08ad97f186A5CBDaFCf5\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:53 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a07b11f4bd585695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":807,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c98f1747016b12280ffd84c27a2afab3","sha1":"3ee585c411a12b22edc33d9ffd7d4b33728ef5ef","sha256":"d8ec030792568e53b3742bf19e2a417c131a5b2eb689f1f272878c9778bb3aad","sha512":"5a5a5a0a51cf21db623b6543d250f9376b55bf7bd68cca0f7cd8fa6c7b73170fbb07c9f542e62e7fdde179d338984ce884020d4b1f654fd1780a43c36a841187","ssdeep":"","tlshash":"ca011df5415fce91d0fd988c14547a5523173c676cde2f419d4cddc4206c6427379235","first_seen":"2026-04-26T14:03:09.543803Z","last_seen":"2026-06-06T23:07:11.521505Z","times_seen":20,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc.publicnode.com/","fqdn":"bsc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:53.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 23:57:50 GMT","end":"Fri, 10 Jul 2026 00:57:42 GMT"},"fingerprint":{"sha1":"FA:41:42:B5:59:CD:F2:75:9C:78:CB:D0:5E:1F:F6:83:58:D2:EE:5F","sha256":"07:86:2C:E3:AD:0C:A4:31:FD:57:1E:C8:01:EA:80:5B:24:9B:5E:3F:7B:09:9D:D4:1B:FE:A9:2B:34:AC:3E:B4"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://foundation-starknet.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x6981E9EA7023a8407E4B08ad97f186A5CBDaFCf5\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:53 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a07b11f4ed6e5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":807,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c98f1747016b12280ffd84c27a2afab3","sha1":"3ee585c411a12b22edc33d9ffd7d4b33728ef5ef","sha256":"d8ec030792568e53b3742bf19e2a417c131a5b2eb689f1f272878c9778bb3aad","sha512":"5a5a5a0a51cf21db623b6543d250f9376b55bf7bd68cca0f7cd8fa6c7b73170fbb07c9f542e62e7fdde179d338984ce884020d4b1f654fd1780a43c36a841187","ssdeep":"","tlshash":"ca011df5415fce91d0fd988c14547a5523173c676cde2f419d4cddc4206c6427379235","first_seen":"2026-04-26T14:03:09.543803Z","last_seen":"2026-06-06T23:07:11.521505Z","times_seen":20,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/dapp.css","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /dapp.css HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=2,i=?0\r\netag: W/\"6a24514c-15f7\"\r\ncontent-encoding: gzip\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mIz4Gq4VNKU2vsqasayllMCMeNYQQu3z%2BggU22EVIY8VfFojbTFArytVJZV7XQuwGq74MLuLBWRsq9kocit1SSvgZvDIJ9M58ZZAqiz%2FM5%2Fub9agzVOSCUciWF6nt3N4NxtJX3bC1UzbOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07b11c24c815690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5623,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"be403bca07dd55afbf7b9b1dbd3e5c4f","sha1":"3e60d2d3fd920601f9cd39330cba5b0444ff909b","sha256":"968f8a761b23011cabe3df01cc615604726775c67c22103c660d5d505ff9783b","sha512":"8e83c03891c7f46813deda2d52d7e82ca8960afa33598b5e8e121aaa6d3a8fffc344452b33e66f88318f3216a12a3b0153d67fa28fbb4a46b577d45947e2ad1a","ssdeep":"96:F6DlD5EQwePDsAI/AVNQ2uWvsiK08MY7DbZNPwbBNp:FalwePDR2ATDvfK08MKDbZNPwBNp","tlshash":"9cc10da0b39286a5ec0bad7d5fe45b4923380447684686f93f7523c48f931e948d2e8e","first_seen":"2025-11-18T00:46:11.643402Z","last_seen":"2026-06-06T23:07:11.522373Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/index_1.html","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xkWRM3kdv5l6hY5n39WPBlhi7z6sBYy7iTP%2BBt5S1xwIT98kizmrgbjIj9RXnvbuHOstAnOVXLQ5ECdSUI9h%2FKMNh4fGMD8M8ZKae%2BjW2LjYHUN%2BZSlH%2Fj5stcmtvTfmJOx1dMzEpH1xEA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a07b11c3bd2d5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"5d28eff39540e4ba1761c4c04f5d8703","sha1":"dfb0db57dc1032eca0139a23b737e4398c33718e","sha256":"5dd4c51e2e79acb1ab05fee25c4d979ffcdf8279fb1acea1614d92c09033c016","sha512":"bfb826a79055de19e63ade0934c81428d1c0950d0dd229d529a86542c530667ebe0a23f0868451b440a1d771755e9e629b0aeb1dd7688ddeb21f984f34010bcd","ssdeep":"","tlshash":"6ac08c25da25088e38615be3cbaef0c490028cace072ac54b852a744eaa8922c856748","first_seen":"2025-11-18T00:46:11.656955Z","last_seen":"2026-06-06T23:07:11.522861Z","times_seen":3,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Jun 2026 01:46:47 GMT\r\nexpires: Fri, 04 Jun 2027 01:46:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 249598\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T08:20:47.227313Z","times_seen":205648,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":155,"dns":1,"connect":28,"send":0,"wait":24,"receive":2,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/bsc","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"152.236.9.75","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:53.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shark.multi-rpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 11:08:04 GMT","end":"Sun, 16 Aug 2026 11:08:03 GMT"},"fingerprint":{"sha1":"75:83:7C:84:77:DB:95:45:36:E5:E8:67:BD:D3:E5:85:52:4F:E8:FD","sha256":"B1:12:8E:9C:C2:F1:B2:5A:70:44:5F:46:ED:1F:40:D2:99:24:1D:0C:C1:85:19:9D:E3:34:0B:15:6B:DA:C9:B3"}}},"request":{"raw":"POST /bsc HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://foundation-starknet.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x6981E9EA7023a8407E4B08ad97f186A5CBDaFCf5\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:53 GMT\r\ncontent-type: application/json\r\ncontent-length: 229\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version,x-ton-client-version,x-client-name,x-client-version\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":229,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"42e136a22281d105bd21fa496816706c","sha1":"bc02950079004b0d4f4bea3888dfd4517cddeeff","sha256":"ede226c79ae326ce9e4b099e9f4dbb4e3d7807da2b793bdfadfafeeb84d7175a","sha512":"a41403da8b9e698eb2823bbe0925160b68682c55d4c64e5c8b27193f8fd8bf4fd118179d26eadb446ed41c2c9c12d46523b6f5094caadaae8a03ba3c1d6bade5","ssdeep":"","tlshash":"33d02313c6470537e34f4633371567c4f559705071105f1b4e1c0315024f97b0255351","first_seen":"2025-04-07T11:34:31.00119Z","last_seen":"2026-06-07T01:43:51.019651Z","times_seen":2701,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/index_3.html","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /index_3.html HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ov0Kg0uMeTczkIvL3BQkSbCAcnLDidUXVcKD%2BrueDVHNDQZGRHAXv8dbA0gm8MYjpyqATuoxu9MHQRTSDP%2BMHZPAP94%2BKuBS%2FdYVLdNOxLs%2F7TvF4iW%2Fm8BpDNpiw7Ygkg0ZHpE9xpAtCA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a07b11c3bd285690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18184,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1580)","md5":"702b7237f644619fe9ba6a00e843b645","sha1":"c66c8e9a9f171ce20884ec3bec8c76c42a23c226","sha256":"bb5f16f5c666a2a33deb2f767037bd89eea75dda0cc28f8169de0b6fdce8efde","sha512":"91c7f5140e03cff01cb077426b78b1ebb1c291b1e5031e0404522407a2f5fe0f2485db15ae5f027e6a47ff7b573b251a5d0c143fa6a65c6caab06fb0c8d9c813","ssdeep":"192:nHQs+B8Wsq52bqGIwV4Ds1yFQPp28hsqO2bqGIwV4gP19ZQTVS89sq62bqGIwV4D:wLQqY4oxfqY4JRLqY41F7O4","tlshash":"598263600817000197934ce623ce7f34fe5ea244b24691707bfd571faedada692b93ad","first_seen":"2026-06-06T23:01:52.836909Z","last_seen":"2026-06-06T23:07:11.524917Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/index_4.html","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://foundation-starknet.xyz/index_3.html","date":"2026-06-06T23:06:45.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /index_4.html HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/index_3.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:46 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b%2Fag6EAOQD2CWzoSOfTqkGac%2FHIa4rjqYcR%2BnOPJBcGYS%2BvevBLDNf%2FtnbXdHmzhG%2Flp4ooaxj38VJChJcDDeMquOcpI%2B7Am1Fmxe%2FJ1HlOenovkYmo%2BH0FZQP2qTm3qUCF5yj1E10DPRA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a07b11c56e095690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"292f74c92c97c686c723a291030cfa93","sha1":"ff7ce2a278d64bb71b8a15797fd10276ea6f0df2","sha256":"baf0572ea402de47c8c0c44f67fe0b4af40bd7bc06f5733bac13f51bb4ac4d08","sha512":"4f34b0d47baba42b1c93958d291540f76e16fb3f67405fec9d87d0d8d57bf4ae454b63e8462a3b238ff1f6306323f7af84e182781658961d0acac1e55b70d953","ssdeep":"","tlshash":"54c02b22dc04480f3d009fd1cb8af1c4c003dc3ce8315c00b867b544e9ac131c012548","first_seen":"2024-08-19T15:34:07.77924Z","last_seen":"2026-06-06T23:07:11.525616Z","times_seen":447,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:52.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Apr 2026 21:16:17 GMT","end":"Tue, 28 Jul 2026 22:16:15 GMT"},"fingerprint":{"sha1":"6D:CC:48:D6:E1:8C:50:0D:7C:B9:13:15:F0:18:E0:73:56:59:60:F7","sha256":"00:FD:76:18:CB:8D:B6:5A:4C:B7:0A:37:77:28:B1:01:5C:3D:6A:E4:2D:06:02:C1:9D:B8:6B:F8:6F:F8:31:77"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://foundation-starknet.xyz/\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:52 GMT\r\ncontent-type: application/json\r\ncontent-length: 21\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a07b11efb8e60b06-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":40,"dns":22,"connect":1,"send":0,"wait":92,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/global.css","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /global.css HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=2,i=?0\r\netag: W/\"6a24514c-e88b\"\r\ncontent-encoding: gzip\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8JJ%2BiNT0NXZcxzDua1yDAJctYmmZc2oX2p4gNz%2BWbNXXyhBEu7m1yHM76oemWG8fhYbYuKZezIYbTCBNg3JSqevCEPulvShxPng5glaVbUmeS4HPmhKaj1neFFIWhP09TPNtqp11RMT6Ng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07b11c25c8b5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59531,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"5490968a82f0e28a2a3385c22b083f14","sha1":"cf38aa586270e39abf367373f56a9edeb149083f","sha256":"22cdb7d17a1f6690df2d1a1f4106fdf2d4e2426b062f98148f06589f51a9526a","sha512":"53fbcd550fcda9616a97131de0f20cb3f839efeb9be582b236802b5da0ea92700e1f163cbdf5ddc8a454c94606d092ab5f532a7fa83f6fe8317dd89d1dcf0d2e","ssdeep":"384:gmOsEizlhAlUgjIwEeT3fzMRKwEgUOnNhuk2f+pyc0edhuRs4:gBizclUU9EWfzMRKwESHu3aw9","tlshash":"7e436598d61221a65637dbb87bf61559ff845073cb0202ad7ae833658ff42bc8161f8c","first_seen":"2025-11-18T00:46:11.648258Z","last_seen":"2026-06-06T23:07:11.526712Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/dex-aggregator.svg","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /dex-aggregator.svg HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iejd%2B4eTauVjyLiap6yQ8N%2BixRIh27WBbQ%2Bv5VXcNddyvhs9%2Fqfjh69PoglAPbpWlvl9elhcVfPjCJcefOuCkPjh1HBNu4SjRMqnFSOtolU2TWo%2BCeeaO3i6kN4%2Bx4ErJBIdh8XaaVzH8g%3D%3D\"}]}\r\netag: W/\"6a24514c-a5b\"\r\ncontent-encoding: br\r\ncf-ray: a07b11c27ca05690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2651,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ff5562c1c0388c2153368d889b736ec0","sha1":"973c502d7ae6504d0deed5625bdbb2f2504d611a","sha256":"e385282eaff617735e57402f69597b836436b9f7f0f948a3f324e81a543befc4","sha512":"a6771081d9d260a175447ce7cd4cbf7384811338bfde56194151f9f64a129330b9f6554e8281119df21bbf3b7806ddbfed682a9c8717212788de310d16209680","ssdeep":"","tlshash":"635171d207b846cca1e7ee2ddf379a0a531de4b2f6f64891496caba605c34acd807850","first_seen":"2025-11-18T00:46:11.651992Z","last_seen":"2026-06-06T23:07:11.527612Z","times_seen":8,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"public-bsc.nownodes.io/","fqdn":"public-bsc.nownodes.io","domain":"nownodes.io","tld":"io"},"ip":{"addr":"104.20.35.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:53.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nownodes.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 May 2026 03:29:14 GMT","end":"Sat, 08 Aug 2026 04:29:11 GMT"},"fingerprint":{"sha1":"FC:86:CC:AE:CD:57:74:97:D8:3A:25:3B:27:36:B0:7A:B4:04:63:4F","sha256":"05:5D:E0:7C:4D:70:40:BC:B5:C0:BD:2D:A1:F6:9B:4F:B0:C4:7C:54:4B:BA:A0:EA:2E:A6:BA:35:9A:2C:77:E3"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: public-bsc.nownodes.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://foundation-starknet.xyz/\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 06 Jun 2026 23:06:53 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Authorization,DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,api-key\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a07b11f45f03b505-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T13:09:49.815178Z","times_seen":16212590,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":44,"dns":22,"connect":1,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:53.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 00:17:13 GMT","end":"Wed, 22 Jul 2026 01:16:57 GMT"},"fingerprint":{"sha1":"45:3E:C5:5F:48:B3:35:74:79:06:9F:5E:85:3C:D2:6B:EF:4A:1A:1A","sha256":"F1:38:CB:CC:A1:8C:58:F9:30:C8:7C:35:34:D9:A0:86:E4:49:E7:E9:95:20:12:48:94:32:76:96:19:4D:00:E8"}}},"request":{"raw":"GET /disable-devtool@0.3.9/es2022/disable-devtool.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nlast-modified: Fri, 21 Nov 2025 02:57:18 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nage: 34876\r\ncf-cache-status: HIT\r\ncf-ray: a07b11f258c756c6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18401,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14919)","md5":"6f134aa0a4c14df6fe081e2a6643f4bf","sha1":"61989a9857651a3e6e67a4f56bd65a0ac61e1faf","sha256":"f24cb4d56e23c43c0f5927a4ab308c23741e40fbb13e3996e3c42679982559a9","sha512":"b2b21f9c85678b62e77b009768a4ce7fcd1332410817c76f1fc8bff5595edf99fa48b353886413d0952504c7d1629fd4983751c8361bff9edf79d5bec6db839f","ssdeep":"384:XTkAes3CkB0YatnIE3EmI/N62D7LI2fU6HFvQxCN:P3Ck5ibEPt7bU6lvECN","tlshash":"b982c5dcf55770706bb2b9b4403f450ab2367856908c8440e669c8e06eb856fe27bf3e","first_seen":"2026-05-26T18:42:46.16671Z","last_seen":"2026-06-07T04:19:09.851567Z","times_seen":76,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/styles-1.css","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /styles-1.css HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=2,i=?0\r\netag: W/\"6a24514c-b83\"\r\ncontent-encoding: gzip\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=efhIh8paihE5aV0ejmSM%2FSw4fT5ESmQk5jn%2BDYVThC%2FFAzPq6rvzhZ6N8LuyF2pSuohpFkucwuqdO7yoTRT5R9URtbQnbM8kFQAOsNSkeruTmEHMKlBZcFntbVp3Cu2jbHDrY9%2BGoFaF1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07b11c23c795690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2947,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"64ac31699f5326cb3c76122498b76f66","sha1":"cc0a5a1741b8257001f89b331378d8aa7c30094a","sha256":"4048fd0e6c44412465449ba4f5c7272349ee1574401cec755d6b8d9c0ccc28dd","sha512":"23ad865e63544ee039221161083510346b01b8be56fa7a83540036c51dceb3f0171adf8f932cf77a457240427c0c3ccbad1f9f371e977c5b6a01e9fe316a878f","ssdeep":"","tlshash":"d0510164660028504bff92db6ea9db047b6e7481cd1faf97b0c21a7c5b782851223e5e","first_seen":"2025-06-26T12:36:15.124007Z","last_seen":"2026-06-07T08:12:08.144583Z","times_seen":131615,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/main.min.css","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /main.min.css HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=2,i=?0\r\netag: W/\"6a24514c-4c6c\"\r\ncontent-encoding: gzip\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i12WosAzqG%2FlBs6IkjD0bgc70b7Tx6PDT4a44HAVcKcjh%2Besqi5Iimykp1ur8XDGsrARqA571IVP9teM%2BFOJA5RbArvHPXDUa4Ltg4WmTikhn7Ccnk7BMmn2w1Ntv9hxrkeH5apNtQXK3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07b11c24c7b5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19564,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19564), with no line terminators","md5":"867585929ee8b21749cdefa675d9aa11","sha1":"afbd7bc967068d4e804641f4b1df78ab37417144","sha256":"bc3b2c1e618a27e485095a3c0db20da5ba2fbfaf3b872ccd6ca35cb19eb37b5d","sha512":"a27a48a354e33d165985532b7a4f61bfc11cbf9378c025f94378feecf39ce1907146da111f100b1d01a7cc9060384ae9d5870ab9a635a57478eb364b16a787cf","ssdeep":"384:skBJAWvwWZ34igipTh3dGr5PL3NatuylxQp9svaQW4M+ght5NsKa4TqSD6CE:ZAWvwWZ34igipTh3dGr5PL3NatuylxQo","tlshash":"989209a2aaf1242cb177831ffbd0e16c3565d522d30b95dab897d700c9cab67026379c","first_seen":"2024-02-06T20:30:23Z","last_seen":"2026-06-06T23:07:11.529669Z","times_seen":1439,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/inter.css","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /inter.css HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=2,i=?0\r\netag: W/\"6a24514c-3da1\"\r\ncontent-encoding: gzip\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BqsQLQCi3EGoZMELzD%2BDItsepoEpztHYVSffFcFowrOuVJARiEGjp6NBoIK8Ofl7dXwe%2BeomQwWhiUlL4nzzfarAVly1%2B1OUamhSlGjuVBl5Pjd17puEceMV6wygVmoer5bGZ8VsDoKGAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07b11c26c955690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15777,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ce1cf48052ebd4a879f919953b27527c","sha1":"492111fc59d9ca361ecd4aee888c4aac0a18a864","sha256":"9be704af43a88b18826b6ab1ca8bce92e170b75f2d855236e0816c31b21dd2e6","sha512":"45f698f3f0a3975ddb59660923e2c8aee8c02abf6019b88505761ee173702d483c9efdf3f9c90f653388d2cacbfe6dfbe0d0d1de09192ddf035c84f19d78253c","ssdeep":"192:W7/m7V7k7t3t7r7aY7o/lknt3Muazz/iP8t33hao+/Pidt3KYaxx/kl6t3tja+M5:Wbm5oxtvDMIWfK6WZqkuTa2utO","tlshash":"18623690442e9400a7872cd673cf3e325d9db188b08ad9356ffe1859acdad3663a174e","first_seen":"2025-11-18T00:46:11.722924Z","last_seen":"2026-06-06T23:07:11.530185Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Jun 2026 01:46:47 GMT\r\nexpires: Fri, 04 Jun 2027 01:46:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 249598\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T08:20:47.227313Z","times_seen":205648,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":150,"dns":0,"connect":0,"send":0,"wait":17,"receive":6,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wan-milkshake.mom/_2awotdg5Z9XQ1Id3aRQK.js","fqdn":"wan-milkshake.mom","domain":"wan-milkshake.mom","tld":"mom"},"ip":{"addr":"104.21.85.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:46.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wan-milkshake.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 05:32:47 GMT","end":"Fri, 04 Sep 2026 06:31:28 GMT"},"fingerprint":{"sha1":"0C:1F:45:AE:52:30:D4:67:47:1B:86:C2:B0:0F:C5:C6:33:16:6E:95","sha256":"E4:00:F1:C3:9B:21:09:93:E4:55:E9:89:5D:6C:65:1F:2C:F5:0E:8C:5D:43:1E:D7:41:0F:4E:8E:96:DC:D0:42"}}},"request":{"raw":"GET /_2awotdg5Z9XQ1Id3aRQK.js HTTP/1.1\r\nHost: wan-milkshake.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:46 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\naccess-control-allow-methods: GET\r\nlast-modified: Sat, 06 Jun 2026 23:00:18 GMT\r\nserver: cloudflare\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oKu1Vtqg4sLAtZRJE8ek%2FwZfA1mNKx%2FySZhxK%2FkzEmAOJRoVVXV287dhvBtyrWevEMJUHxBDaV%2FczCDHLJKGomR4LaqwN50sXJlToy7%2B0OrWjFLFhnRePXN0n6zH2PH3wJPSsQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8b81f2982e2ef225e57fa6d44ffb2d3c-2\"\r\ncontent-encoding: br\r\ncf-ray: a07b11c6b9f349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9408406,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"f791173de26db7536d89bcdccba78206","sha1":"4bba48704bbc4a22e2912e9798202996a42f19c5","sha256":"4f8b3202b29f93737d65e699891b3a27a3d630ea44abfee40cbedb85c7771797","sha512":"501d2c9986d641ae2da231394b285b061a7daafa26178a9d658d352a144c1359971fe30dcbe7fd7c4eb6e4e3f763f0e8cbc5c986453d147437faf12903111e1d","ssdeep":"12288:eh/kr+ET5AEv+1GadAuP3J1B3USKz6ba01fvhQ7cVKS+rrGFZq+NalK9h8sCUOz6:ikCETR+1GsAWbNUSKz6bRvu7tS+rv91k","tlshash":"db356ce67360b062435a51a158372009f33ae8585c4d846cf7a4ecff7da9d84a6bbf31","first_seen":"2026-06-06T23:07:11.530898Z","last_seen":"2026-06-06T23:07:11.530898Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":69,"dns":52,"connect":1,"send":0,"wait":9,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/disable-devtool","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:52.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 00:17:13 GMT","end":"Wed, 22 Jul 2026 01:16:57 GMT"},"fingerprint":{"sha1":"45:3E:C5:5F:48:B3:35:74:79:06:9F:5E:85:3C:D2:6B:EF:4A:1A:1A","sha256":"F1:38:CB:CC:A1:8C:58:F9:30:C8:7C:35:34:D9:A0:86:E4:49:E7:E9:95:20:12:48:94:32:76:96:19:4D:00:E8"}}},"request":{"raw":"GET /disable-devtool HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wan-milkshake.mom/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-ESM-Path, X-TypeScript-Types\r\ncache-control: public, max-age=600\r\nserver: cloudflare\r\nvary: User-Agent\r\nx-esm-path: /disable-devtool@0.3.9/es2022/disable-devtool.mjs\r\nx-typescript-types: https://esm.sh/disable-devtool@0.3.9/index.d.ts\r\nlast-modified: Sat, 06 Jun 2026 23:06:52 GMT\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\ncf-ray: a07b11efaec656c6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"97c69ddec5a41bfd71d4e46f03aa3a66","sha1":"6632a0a55d48d322450a0a0147526f0e91b4cc0b","sha256":"bbd0cbecbc43488ec920e0660e7a0b903af3d9fcd3114421a7620f55ffa98792","sha512":"80e5b974e51b127e2b9c0f227c6cc0b302351806ae1947f0691cb18a67d3743f4390cfe8d0d45f57ab6f5ba899eae8775fdd776edcdb2c0c733997bb38abd90b","ssdeep":"","tlshash":"66c08c10c033f0382a308cb832b4eaefe3a302c6d20c52b88e04022c93cf100d22cba4","first_seen":"2026-05-26T18:42:46.141539Z","last_seen":"2026-06-07T04:19:09.849983Z","times_seen":77,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":52,"dns":21,"connect":1,"send":0,"wait":111,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc.publicnode.com/","fqdn":"bsc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:53.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 23:57:50 GMT","end":"Fri, 10 Jul 2026 00:57:42 GMT"},"fingerprint":{"sha1":"FA:41:42:B5:59:CD:F2:75:9C:78:CB:D0:5E:1F:F6:83:58:D2:EE:5F","sha256":"07:86:2C:E3:AD:0C:A4:31:FD:57:1E:C8:01:EA:80:5B:24:9B:5E:3F:7B:09:9D:D4:1B:FE:A9:2B:34:AC:3E:B4"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://foundation-starknet.xyz/\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 06 Jun 2026 23:06:53 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a07b11f47d1b5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T13:09:49.815178Z","times_seen":16212590,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":62,"dns":35,"connect":3,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/ibm_plex_sans.css","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /ibm_plex_sans.css HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=2,i=?0\r\netag: W/\"6a24514c-29dc\"\r\ncontent-encoding: gzip\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2BcovaAunuiZNRNXEd%2FPv6mcTTbcdMt0H4n07vGBc7i2ysAkxjQZLf5ngYyEVBrAuUfhMbqAJ0J79caUxoBHtdz8H1Ll2yTb3FPiBMm30K9ivGq1z5I9dtC1IxjQZXCJj1GQsK%2F%2FLz0fZw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07b11c26c945690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10716,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c6693540fd36f9bfb35abb8bf643f274","sha1":"4ba6da178ddb7f1538481f8a03e8061977147040","sha256":"e1e6e4b14fcaaad027c4b79a8161a98b5c85137adeb59c929249830b21f14737","sha512":"d9b4b20428efaeb1e4c3b436ed7da4fa621768e613d8660dd6c48314f2d1fb13249e2693d004867b94b718735278341285139f76bf5f46e8ea4283ed79f1288a","ssdeep":"192:U/EPt3ZbayS/vkt3eAa9z/WRt33Fa4Y/x2t3saaTR/4zt3lXaW2/TYt36Maxc:sWw8Iy8M0ugEl","tlshash":"87222750442a5450a3832cd673cf3e318d6db5947049d9395ffe0838acaad3663b275e","first_seen":"2025-11-18T00:46:11.767774Z","last_seen":"2026-06-06T23:07:11.532742Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/homepage.css","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /homepage.css HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=2,i=?0\r\netag: W/\"6a24514c-46a2\"\r\ncontent-encoding: gzip\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nDrC9Z1NUN%2F6%2F%2FOtoHlCIqxIiNsNeOB0Orec8IK87KoqF9T8G%2FR5kThEj%2B90bpocHfcbE0hc%2BEKBVofaYVaJWEPFWNljc%2BM7SDHtIoFFx2DGXqZYTGo33kdMd8DtZvypM2m4qjrBZ%2FQorA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07b11c26c965690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18082,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3719996ee994366199f9568ab2fd2490","sha1":"76444f8ba5be84097322e3912c375f03216e09e2","sha256":"a6e464943de28a6d4cf22602c465a7de3fab44ce6aa862afce4718feb791f25d","sha512":"2e53bcaa9bd4a0dfa1163155f8acb68d50b8e1c2e49aa1f472766f7bb6e77d1f58eccdc96bdc2cf3558c1bd3915a5fe7b7ef314d1fff3786d34fb9895dd28717","ssdeep":"192:pLTBKx96/HeCwblVuM+l/NohZ2BDYuT0Y/8303u+4BOcPYGR37MYSQYV5aUrvPrv:hBKr6GRloIhZI/CYFQSTD1u9eV0SeF7c","tlshash":"3d82750119636ae4541fa1a96bbb79847368e097870fc8d43bac2f5ccfc41e994637ce","first_seen":"2026-06-06T23:01:52.84468Z","last_seen":"2026-06-06T23:07:11.533795Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026family=IBM+Plex+Sans:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:22 GMT","end":"Mon, 10 Aug 2026 18:37:21 GMT"},"fingerprint":{"sha1":"09:D4:FC:2F:81:37:26:42:91:15:6F:27:1B:72:A7:D2:1A:FC:31:72","sha256":"E9:45:95:A3:A1:F2:6E:F0:08:73:C1:35:32:67:E6:72:BB:89:C7:27:C0:8F:D7:48:6F:0A:88:7E:8B:00:2F:B9"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026family=IBM+Plex+Sans:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 06 Jun 2026 23:06:45 GMT\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20264,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f3de57927fbc589dcfdd4b1a295ea02e","sha1":"1abd4435be811c3a9aece1939a38160bdf6b927f","sha256":"45fe36ad95f510b93889fb8fd5dfa5fe93fc65aadf98efa172fc3fcb46d1b101","sha512":"c971b8fc4d82c1ec9f289417413bd222c342603700ac9e99268f8d1eb8972e3fd4d52b2460a28d91348001b0b2ed39c0be4ab2781c92a468007690b7351eca98","ssdeep":"192:JHZdl3gkLTHHi2l3fTLkWHTnl3uiLZ9HkIl3VZLigNNIxO34OxDENOPCO3/Nx8NM:ZlHH1BjfnXuM0p2+4","tlshash":"2a92fa91402ba440ab431dc233cf3f36ae8e64846485d2bd6ffd1da89ceee26536471d","first_seen":"2026-01-11T18:10:48.286061Z","last_seen":"2026-06-06T23:07:11.5349Z","times_seen":5,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":103,"dns":1,"connect":17,"send":0,"wait":36,"receive":0,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/img.gif","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /img.gif HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/global.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 51\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=4,i=?0\r\netag: \"6a24514c-33\"\r\naccept-ranges: bytes\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2FFJm%2BA%2F97%2BA80KFCblQan1bGdmhXqCakKqt%2Fozmt7u%2BdzLaXbbxOpd257gDwC4240TFZq%2FhYr3dERjDIKHqi29pd7ZrfF0evC7Wnt%2BOGJ9f9Qq8z%2FdHWTU4eWA1UmsdNErKwXgs4LvLeA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07b11c41d5a5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"6d22e4f2d2057c6e8d6fab098e76e80f","sha1":"b80b11203d97fe01c5597ca3be70406ea48f5709","sha256":"afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277","sha512":"95dd0e4944b1541a9be48a60a1a105fcfa0d69dd215abaa9c1771adecc5ee0c0fe91d0eb367b6d46a4f8b2e06e6fb962d56dfc1c53f1f62cc8b314710628cb1e","ssdeep":"","tlshash":"ed900003eb800003e2bae0320b0e0b80238cac200ebc030b80aeb0acecba2a00c03020","first_seen":"2023-04-05T05:18:26Z","last_seen":"2026-06-07T08:11:06.941139Z","times_seen":19381,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/logo_48.png","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://foundation-starknet.xyz/index_3.html","date":"2026-06-06T23:06:46.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /logo_48.png HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:46 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=4,i=?0\r\netag: W/\"6a24514c-8b4\"\r\ncontent-encoding: gzip\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2Fi4J6qNN7G0J2ZFAZP86Im3Y%2Bdrtu1PZXlKveTdsJK7Nmpw2n5mmepkfcYZskPlLZQy8Rr0A8cMMbzTE%2BJPLYmH3Dxm%2BtTGEA7q8YXcCwSuKYJpO0%2BVxkWXSqkRQcrvWvkDb5dp28OQqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07b11c58e195690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-06-07T08:20:47.188151Z","times_seen":647953,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/SN-Symbol-Flat-colour-150x150.png","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:46.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /SN-Symbol-Flat-colour-150x150.png HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:46 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=6,i=?0\r\netag: W/\"6a24514c-1b77\"\r\ncontent-encoding: gzip\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BJ51yNbexkpVkdRbmB3RIVJbWNkuATfBfIjhk3xQCELlamtf7dWnZLBGSJU1PnN8vCh%2BI2hUuuAvC6sruhwkbXX8%2FU%2BWrE4nGiZumjFqxOKFkgusL6PuHjQDcrmdEecGLlBy%2BXnTJ%2FSWHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07b11c62e7d5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7031,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"ac1508adfc0a103113bf086a902ae4ae","sha1":"3565957a059b0eea2a534be6db67c7c374a9436d","sha256":"e1eea95700ce71257333aa7d6305ad2aac4e68a25df54839d628be2cbe7041aa","sha512":"94386f6ebe0cf472f7707549f568bbb1d2ec65eb668a7f67662b3bb77de870b7875f68ef415c434d72a552e30c96fb810648eae1bb55b2b4f836766d72ea99ff","ssdeep":"192:glwSeIkpV4RRid//UNMZZvt3lochNL/cKBti8Cgilfi:gPeIWVFF8uNh1cKjt","tlshash":"66e1af1336e549af8cdd57daa72423ea5731116900a91cd8e9c34c1bd6c7124e9e236d","first_seen":"2026-06-06T23:01:52.873187Z","last_seen":"2026-06-06T23:07:11.537524Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc.drpc.org/","fqdn":"bsc.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:53.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 18:57:31 GMT","end":"Wed, 15 Jul 2026 19:57:24 GMT"},"fingerprint":{"sha1":"29:DF:72:3C:C4:08:05:61:23:A7:6E:9E:35:44:4A:4D:E1:E7:67:7E","sha256":"D3:D5:73:E5:27:98:A5:7C:64:E1:82:6C:59:11:09:64:8E:9A:E2:34:EE:B7:72:8E:63:C5:83:3F:7B:77:04:1A"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://foundation-starknet.xyz/\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 06 Jun 2026 23:06:53 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://foundation-starknet.xyz\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a07b11f46cd232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T13:09:49.815178Z","times_seen":16212590,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":50,"dns":22,"connect":6,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-06T23:06:45.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bb5yt%2B3lQIKv9bwxZRgSKa6m5WJStFo4bY4JnQ4bCHgF0kdISdBAkMzoavNp0FMXm2G2mS8UmmyutaKe54G7Pqv3paoZ7CUeaTJWsBY41Xev%2BqpVnJzgOV5MCAhsBgFWyzPpTF5gVXYyDA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a07b11c03f675687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":266296,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (425)","md5":"e51c816a3b37c3492c5f22741ec10428","sha1":"1922dd6e1bb71ec8b26ffa4644dc29e4b7db3e67","sha256":"6943dd08bc5ff4a9236972fa1ae29b9ba2dafc265461c0d0237774787bfd7ca9","sha512":"b3872582dd795dd785c34e49a7843b2e130fbb2227791e768d6f18751fbcddddbb9c636849b37b7f6a51a13d6e0835a9be0dd54b31d6f114ef1670fcf1ad8831","ssdeep":"1536:e4zW6ug7teAz63qsxPhTctPBWmNFz9tPObiS3xW3xvFtwcoMjxJ/dhW1BMg0c6UP:e4GAzGENz9tPObiS3QftQMjXB0","tlshash":"1e44725685f311613a23a9bd1bea52163234a003fe84df19feecb25ccf8cb985975271","first_seen":"2026-06-06T23:01:52.846673Z","last_seen":"2026-06-06T23:07:11.539009Z","times_seen":2,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":88,"dns":67,"connect":2,"send":0,"wait":118,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://foundation-starknet.xyz/index_3.html","date":"2026-06-06T23:06:46.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/index_3.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40128\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=4,i=?0\r\netag: \"6a24514c-9cc0\"\r\naccept-ranges: bytes\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KJfnK8U75GRqn5FYepbBgvL9BPT3kgFQZbZ1oTsh9yOik9d1nP7lwiVTccu2LM3Oaiu7iC2i86YOvkYIxcLBWBrDB0JKUViHqV8zS5MYmx4nQjnL5oi9azRUjEsVa7KIpJVgKuGD8xR58w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07b11c5ae285690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-07T08:20:47.127655Z","times_seen":872407,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/assets/srv_eb5e02dbd7.php?req=ping","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:53.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /assets/srv_eb5e02dbd7.php?req=ping HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://foundation-starknet.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:53 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 14816\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=4,i=?0\r\netag: \"6a24514c-39e0\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gKtWMSEs%2BO8ieMD3M5NQE1Q%2BG1wzy7%2BCyd4IS%2BHgJQwN9iEQ0BtKLSawIGPlGhQzaIZ0Ggg%2BKXHZLYC6VO4%2BWfLS8hh8Qg%2FctQuLN6JQS7jUIULA1xfQLgMbNc6BKFiuXaw6N0Gd14IKUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07b11f328425690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14816,"size_decoded":0,"mime_type":"application/octet-stream","magic":"PHP script, ASCII text, with very long lines (14206)","md5":"835c7a59da7554a603e22340aa680337","sha1":"2064df5be98a345c0e8941044109a6ce8c69db29","sha256":"1259eb364a3472b29d7c27fe5b781171cca25991471c5cb7260a13bb8db9d786","sha512":"4961cd0da859ce094c8618488b0684e6f0cdf48bfb095d0c7e8fa57cb3bc2c6e5fc15ee9caed2421a9cec119bcd64f5ffccfaf01e4f275f754eba70b4507b8f6","ssdeep":"384:9ojDm+CH/ALQAEoYEU5SpMAAHwxRcFW4rFwoDeN/NuXX:9SDm+CH/meoLNp/AHAcQ4rFheNl4X","tlshash":"f16272706582528b799e0dc6af96288d72b041e70f4e7a8f8f7c38cc21ac659d15dfe4","first_seen":"2026-06-06T23:01:52.858144Z","last_seen":"2026-06-06T23:07:11.541388Z","times_seen":2,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-06-06","alert":"PHP webshell obfuscated by encoding of mixed hex and dec","trigger":"foundation-starknet.xyz/assets/srv_eb5e02dbd7.php?req=ping","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/04/18","description":"PHP webshell obfuscated by encoding of mixed hex and dec","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_obfuscated_encoding_mixed_dec_and_hex"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/starknet-logo-light.svg","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /starknet-logo-light.svg HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lTujZuMjy4aMhrzRIljA92lmzUzbRIKfdJ%2BQL2LgnytSSTs8Jy%2BP%2B3R9XBatJL%2BllWoROdd9N7h1Ban1MRLMHPZHNIdLW2D475kWUlXjKUTV84t%2FOFuf8MZbbV93K9zPc8VtCIcyZyA5wA%3D%3D\"}]}\r\netag: W/\"6a24514c-305a\"\r\ncontent-encoding: br\r\ncf-ray: a07b11c27c9c5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12378,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eeb2257e8893e139ae7956a4eb828150","sha1":"377edf2ac88e55bbe6633e08f5cad64105a484ae","sha256":"a12a35b3275fa26726deabfb9a4a7215ec9a73fd3665bb3455c6755cafe8d001","sha512":"60b7b6f096f51dfdbc3a738be9a099586205e7dd02d8a318fcff0bf10ef902a5326fc4611aa6fa811e1a27295a34cc8731e40ea1d9cd2f1c601f55877cbec3d2","ssdeep":"384:uhFrxe1i+b1+3IMEEhz+kmgjS9hfXAHDDMD:244FmgihfYcD","tlshash":"804286ef67e4b2f0f405e3fad65651b13a1b58fe3566ca29cba91e90f51202c8c488c5","first_seen":"2025-11-18T00:46:11.715684Z","last_seen":"2026-06-06T23:07:11.542567Z","times_seen":8,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/bricks.svg","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /bricks.svg HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EpM7rYW6h3woZGM8GO5%2BYOwwwchBrYc26kIJmTt%2BQCKHBATWbYt75rXp2kBb6GRslZCyfx%2BGda4t2FRKdh0umyW1lVdH3d%2BIR6ROVr4FFibWLrsE8C6%2B%2BeOw4Z6gqGoo%2BsEmMEGpBkRq4Q%3D%3D\"}]}\r\netag: W/\"6a24514c-943\"\r\ncontent-encoding: br\r\ncf-ray: a07b11c27ca45690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2371,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e73b019dee38ef231b474dfa67c6a36","sha1":"a9c16489a60749258f68eb995e7d08d4c36eb4f3","sha256":"5a59b76597fb989178119dcf0331dec128b1ae14621bd514bc11998808b0e914","sha512":"0cfc21f49c43c8918b68dc54949d7f5b802b263671657c9bfb74d47aed77a75e15fd5b94d4c74a3095033dbb2f5a3375d2bd19823cb9fb3836bf6307d63ae29d","ssdeep":"","tlshash":"a9419921de2cdd17e20b8462e3b50034ad514f966107f44474c8fa246e85abee52adbf","first_seen":"2023-05-22T19:55:01Z","last_seen":"2026-06-06T23:07:11.54442Z","times_seen":115,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/slider-navigation.css","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /slider-navigation.css HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/homepage.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=2,i=?0\r\netag: W/\"6a24514c-4fb\"\r\ncontent-encoding: gzip\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G1Pl0FyP1arZDXtvwaUCsvb%2B%2BVyB1an%2FwAcNWS3kiFYxzjKaztd%2BFSQ6vgbGiZDfnjx73q%2FztXL9ElN02LR%2F%2BTjOfYpfbsMwRpETZLiBR9QwR95uaZCkecXoOIZ9vY%2Bb2iClX0LMW4UtHw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07b11c35d085690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1275,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d16c5e0263652e84b75f4268672bb5c0","sha1":"fe6fbba2a1b1a78c619c74c7d8d9189f4548cf34","sha256":"88c90ca1819c5660c6a629bae83754181d2c403a1edb7630ba1da4b04389cf3f","sha512":"474dc67aa2186d24fb8c0f9797c6bcce2599cd387c03238cc3afc48c06f36c15c77bea862a4701434f490ed1b844b0c84693cf20a4b03e7770f82a4695bc44c7","ssdeep":"","tlshash":"542168e091a101a71637d2620f3a9814e1c3e367c70a1184f5d2226e4ff46b88be2fcc","first_seen":"2026-05-11T20:17:28.840119Z","last_seen":"2026-06-06T23:07:11.5457Z","times_seen":3,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/mipd@0.0.7/es2022/mipd.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:53.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 00:17:13 GMT","end":"Wed, 22 Jul 2026 01:16:57 GMT"},"fingerprint":{"sha1":"45:3E:C5:5F:48:B3:35:74:79:06:9F:5E:85:3C:D2:6B:EF:4A:1A:1A","sha256":"F1:38:CB:CC:A1:8C:58:F9:30:C8:7C:35:34:D9:A0:86:E4:49:E7:E9:95:20:12:48:94:32:76:96:19:4D:00:E8"}}},"request":{"raw":"GET /mipd@0.0.7/es2022/mipd.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 638\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 17 Nov 2025 23:17:09 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nage: 375021\r\ncf-cache-status: HIT\r\ncf-ray: a07b11f268df56c6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1111,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1051)","md5":"e27f01505d3b2b0d7e37a489a1643bbe","sha1":"fcc0c28426a74da52b56598e904c94480c94b312","sha256":"362f8af6b974b302df4cb1e8025c65db1dc7217fb5789a0f65ff2eacc605ff5f","sha512":"5e0bf97d23034bacea36a6e213d16a1463b3722367cb32f46722b06fc7214af716fefee6b21ebeb56366dce7d6e187d62cbd3484ae2c5a42dd969982957d9c96","ssdeep":"","tlshash":"1a2166e571576a7517610a8fa7dfdf00a7097ac2a015422cc46121fe705dc8788adae0","first_seen":"2026-04-20T20:39:03.040451Z","last_seen":"2026-06-07T04:19:09.851042Z","times_seen":123,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:53.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Jun 2026 01:46:47 GMT\r\nexpires: Fri, 04 Jun 2027 01:46:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 249606\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T08:20:47.227313Z","times_seen":205648,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dns.google/resolve?name=wan-milkshake.mom\u0026type=TXT","fqdn":"dns.google","domain":"dns.google","tld":"google"},"ip":{"addr":"8.8.8.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dns.google","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:38:13 GMT","end":"Mon, 10 Aug 2026 18:38:12 GMT"},"fingerprint":{"sha1":"30:AB:10:C7:AF:87:92:8A:4E:FD:78:4F:45:1B:C7:01:D9:7C:D4:90","sha256":"F5:39:DC:4D:EA:D8:09:93:0D:99:66:2D:28:C0:D1:CC:04:6C:71:D4:49:9C:72:55:0E:BB:F0:E6:CC:B6:22:CC"}}},"request":{"raw":"GET /resolve?name=wan-milkshake.mom\u0026type=TXT HTTP/1.1\r\nHost: dns.google\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://foundation-starknet.xyz/\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\ndate: Sat, 06 Jun 2026 23:06:46 GMT\r\nexpires: Sat, 06 Jun 2026 23:06:46 GMT\r\ncache-control: private, max-age=60\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: gzip\r\nserver: HTTP server (unknown)\r\ncontent-length: 260\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":332,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"fc1ca92bf848e0cd76a21e31013727a8","sha1":"ebfabf85d4e33408cecf77329cb3265f93ed7a67","sha256":"4d67fd3e5e5fbe84dabe425e57d8e8194dca535b692a329d746d9f6e5c735a74","sha512":"c820a7ef47114d5d1d5a3c2eed77125e0b985c5fe7ea6c83aa7540d340269cd924a5e9893c361a8220f2e7e0c1b8a8348e92d6e06acd3be310de03c32b20b2c0","ssdeep":"","tlshash":"55e07dc5488141f86f1212a0446b002fbed22373b1cd0ca9e4242f12f39a2b5d8f5607","first_seen":"2026-06-06T23:01:52.865599Z","last_seen":"2026-06-06T23:07:11.54722Z","times_seen":2,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":93,"dns":18,"connect":9,"send":0,"wait":23,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/SN-Symbol-Flat-colour.png","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:46.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /SN-Symbol-Flat-colour.png HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:46 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=6,i=?0\r\netag: W/\"6a24514c-902\"\r\ncontent-encoding: gzip\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4aGNJ5ajdsHyv8T84KOBZccI129E%2Fm0fyie81wK%2B6Ed4R0FG4Qia9rMVq0ziywS6lZ5ksVL98JMlsMFqRDbKJerJAqT2AgAMsY8B7KIrXAJ3oEnSOczkJ5tqEDSlnft9uNzjl3DZVQ1rmg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07b11c61e7b5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2306,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 158 x 158, 8-bit colormap, non-interlaced","md5":"b30c418e17ea4749e5c0c6c0d4c930e0","sha1":"68bff2323b84910f8ff8ee8fe66e37eeddd7b609","sha256":"c2fd79027a84a2a023ec94be48e539890a049705bdd4f1e6ef0ce9f6755c1720","sha512":"dcef21a3f78c5564efa4a60fa13ea85a6e524fe977fb543e7e1df17e5984c6540ed3bc3ef1eb92fe929023e574ed8717c9c0ff941a8561570f64e1c0d49a75ca","ssdeep":"","tlshash":"17412b0a7aad4ed8abf4aeca4364004cd99ce71f671395c69e06f4383517ce0e609d1e","first_seen":"2026-06-06T23:01:52.839865Z","last_seen":"2026-06-06T23:07:11.548493Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/styles__ltr.css","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://foundation-starknet.xyz/index_3.html","date":"2026-06-06T23:06:45.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /styles__ltr.css HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/index_3.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=2,i=?0\r\netag: W/\"6a24514c-7e06\"\r\ncontent-encoding: gzip\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YovnsrNrdkA6QSrNiN4VBqUWhchTrw7oQ%2FjnPUW9Wx0tv7JURiFMGMNCPQuWbAZEdib3pyoRPdUXXcULaKbc8FKW8EmahXA6b2TuTZrYspiiQuSmL8Dit6EECxBU8G%2Frvm7jwnVVIdZ3jA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07b11c54df95690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32262,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (32262), with no line terminators","md5":"e611cf33ab6ee7996abb0b374af3f47e","sha1":"0b7c45c412be250333bb7f63ba01b7eb68be2625","sha256":"cc5f787a04286bb4bfa6d5a2b5ef8344fb5db68bbd0f0aafdfc026cb30c536a9","sha512":"a7a5adce469ca6d5b90caa9889533aa5f719c9a023b08e9a879d772e0ca00ff5b26739d42394f3c1b9bbff77813134eb1525b312dd5cf442611823ad8e777c08","ssdeep":"384:87aH72PReA2yBOq+CM54PtSqxaG9eoc+NFs1gyDpLhvPTodVcVkcCCA1x8cEPc7:8LpebyBzM54P5x5ugyFrVdCCOxVEE7","tlshash":"23e2b96378903b2af8279b6121d56efdf22cc913e5524fb9a646b630c3cb1994163b07","first_seen":"2026-05-17T07:58:12.764376Z","last_seen":"2026-06-06T23:07:11.54967Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/assets/secure.php?req=ping","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:53.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /assets/secure.php?req=ping HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://foundation-starknet.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 06 Jun 2026 23:06:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W4YXXR%2BR%2FDihRbKtVjhtyLNdD8iYFUp6rhzmDj1aV4rFlPESWkeUEwfh1nvb4kr89%2FYwxDhrPX9%2BezQMZ892V7okfcxOH5Nfa3HtIR%2F8%2BWPTZUOHRysgU6Dl3zumWz6YgxWeD%2B18B5jykA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a07b11f25ff15690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"eb1be3f5478c6751f0de6e9128fecbf2","sha1":"94b9d1087b2551a6ab432abc63d64cafb5c212ad","sha256":"6e95d3011ecc51a72fec8b2a8e5b06b4e134c2b2cfe513bfce42d9029c6c8dd1","sha512":"78753808ec755c160823978aa8ebcc391c7c2c71a0b27c2271f2aa0be61349fff888e3775a9fbe9bef7f22d01adb60e1480356fa4654999ee40e6439e32f28e4","ssdeep":"","tlshash":"61c02b7d3513bc4cc5a3317422c37090c0da833764ba81128440810331cf3998ac3397","first_seen":"2026-03-26T19:37:59.367855Z","last_seen":"2026-06-07T01:46:18.198229Z","times_seen":1585,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance.llamarpc.com/","fqdn":"binance.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:53.445Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: binance.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://foundation-starknet.xyz/\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T13:09:49.815178Z","times_seen":16212590,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/hcb--dark.css","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /hcb--dark.css HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=2,i=?0\r\netag: W/\"6a24514c-163d\"\r\ncontent-encoding: gzip\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2dQdjv2LlUMuKNIwxcHsBHGIXaNGLmVyatiOWlyz0Xfs0jo14pxzLFvPZx3KqbEGTT9syRKaui3LFCJtiLRbBjQYk%2FniH43rpmpfxjbpE%2FgpbitxcXTi8T74pJX7KnQK9SGDJexQ14TMJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07b11c24c7d5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5693,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (5691), with no line terminators","md5":"405cb79062452ac3ec3664e496017c96","sha1":"62e1ee73fddbc68c538b356871e32324da752775","sha256":"5f559af348fea9a733f4e415115ebcf04503f94a3e03eea4e9c1d9545e72df55","sha512":"29afb62abca6e1007cc1c539a570fc99086244b8a6672db63b91fd91e922186ae56db45e9ca3f762822429b3ffc4c573599af81bf322f91967f182a2f9e3553f","ssdeep":"96:cNJ2GoGiccaRNsONMUhSMAMdDCR5+FHdrkijWgHDNOl3ECqkRuopx:cNJJ/iwR7OUhSMXWREbAijtHDNOl3ECL","tlshash":"bbc14373e63c6b9a6b1bac16b998e34c50302553f845065ceeff58605ec36a723d370a","first_seen":"2026-06-06T23:01:52.861242Z","last_seen":"2026-06-06T23:07:11.552058Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elliptical-rabbit.icu/api/ping","fqdn":"elliptical-rabbit.icu","domain":"elliptical-rabbit.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:53.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elliptical-rabbit.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 00:47:39 GMT","end":"Thu, 27 Aug 2026 00:47:38 GMT"},"fingerprint":{"sha1":"B8:07:56:A2:C6:45:C4:49:04:87:03:AE:02:C1:FA:FD:A2:0B:3B:B2","sha256":"4A:DD:80:D4:17:D9:63:93:7C:DD:D1:5D:40:D3:06:33:C0:96:2C:47:94:D9:89:22:52:3A:47:98:44:D5:94:79"}}},"request":{"raw":"GET /api/ping HTTP/1.1\r\nHost: elliptical-rabbit.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://foundation-starknet.xyz/\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 14\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FNlDZoD%2FVz%2B5rl9xUZWh%2FeoGokJdKm0JUlOuj%2Fk6%2FyEoRS110xSDT9YwCoPeiZzKaZ%2B5UonrDkmGBaLhg3xT9tax9l%2BR2vjNXAqn0rRt6JuYzgMYJedNoLXfAOM%2FlEIg21osbOI06LY%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a07b11f69951b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"594d96ea0628a6a87187b8e17a7fa4b0","sha1":"5fbf4e5362196240e62d4e192bd93777898755b2","sha256":"cb100e693b55b36a08dc2b04eb312835069a4f2fc406ff374b21313b1f56b5cd","sha512":"c92fac11849dbd07dd610982d2d2e49f7aa59ec6048782145992bed639b1a518c539d9603bea6b79e4f29aa745e301923edaa9d96e1dec3ce27a8a2f4c2f2f4c","ssdeep":"","tlshash":"d96000330c0c0330030c0cc0300fcf030cc0c0c00000fcc000000300c300c000c00300","first_seen":"2025-10-03T14:25:47.505502Z","last_seen":"2026-06-07T04:19:09.845807Z","times_seen":796,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":95,"dns":93,"connect":1,"send":0,"wait":228,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"elliptical-rabbit.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"elliptical-rabbit.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/slick.css","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /slick.css HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=2,i=?0\r\netag: W/\"6a24514c-6f0\"\r\ncontent-encoding: gzip\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EbE0SJ28mz2%2FQDOZrH7cjVO8YoRykB3AgzJQ0WXe2U7OSayBQTAspGgI1joAoF7rHEbaAChfxy4zStC4GQrufr5whVcuyj38HljmVzUxuzsmh7j1PcETLfDjvVZ2Zhgw9MHPew%2FgoZULwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07b11c26c935690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1776,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f38b2db10e01b1572732a3191d538707","sha1":"a94a059b3178b4adec09e3281ace2819a30095a4","sha256":"de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5","sha512":"c11e283612c11dfeec9a3cb42b8a2acdd5ae99dfabe7ffba40efef0dd6bbe8c5b98ae8383d3eeff3a168124c922097eddd703401ee9ac6122f1ebab09bbf7737","ssdeep":"","tlshash":"c931294845b389468416808d5fd7ca6d2bfff0130829e199ba8d1306cfce7d8a9c26b2","first_seen":"2023-04-05T08:37:21Z","last_seen":"2026-06-07T08:20:47.136058Z","times_seen":65661,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.foundation-starknet.xyz/?req=ping","fqdn":"api.foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:52.711Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?req=ping HTTP/1.1\r\nHost: api.foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://foundation-starknet.xyz/\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T13:09:49.815178Z","times_seen":16212590,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/mipd@0.0.7","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:52.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 00:17:13 GMT","end":"Wed, 22 Jul 2026 01:16:57 GMT"},"fingerprint":{"sha1":"45:3E:C5:5F:48:B3:35:74:79:06:9F:5E:85:3C:D2:6B:EF:4A:1A:1A","sha256":"F1:38:CB:CC:A1:8C:58:F9:30:C8:7C:35:34:D9:A0:86:E4:49:E7:E9:95:20:12:48:94:32:76:96:19:4D:00:E8"}}},"request":{"raw":"GET /mipd@0.0.7 HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wan-milkshake.mom/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-ESM-Path, X-TypeScript-Types\r\ncache-control: public, max-age=31536000, immutable\r\nserver: cloudflare\r\nvary: User-Agent\r\nx-esm-path: /mipd@0.0.7/es2022/mipd.mjs\r\nx-typescript-types: https://esm.sh/mipd@0.0.7/dist/types/index.d.ts\r\nage: 375021\r\nlast-modified: Sat, 06 Jun 2026 23:01:22 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a07b11f0af6d56c6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"c086cf4bfd6eff57b5209b43659c1697","sha1":"f7052fed487141e6f548a8318071d65a51ae2cd8","sha256":"d10981647c684009f82945a2b89daa0e45b5ff6bcb095e641d10608d9c6fa163","sha512":"97dafc1ec705f4235e906819727bd0bbe7dc297ff1832d01cc049e24a949fb1007e41a0975b5f8ba4bd4696e73bf54abd4f427c5f78bed59dbbaf02b5b635816","ssdeep":"","tlshash":"08a002a501d7053c3b3139d4223fd12ad3a31784e48386cc24b9174159c4850993d1bb","first_seen":"2026-04-20T20:39:03.019439Z","last_seen":"2026-06-07T04:19:09.8452Z","times_seen":124,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/styles.css","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=2,i=?0\r\netag: W/\"6a24514c-772\"\r\ncontent-encoding: gzip\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mOUtPUQWlUbT3fe4oIz3j8NUzB5dzZPUGj5LT60oah9hITgVonHbFh40S1j0i86efxpxbdq3ydFsuCxI78XDzazt8dJgJxnYwBkQ20JRcqYNpefigy1dXjOuxuReO7wtLhf2k6QSeholfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07b11c23c775690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1906,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a3c7c2ea66d27d39d83aa6f253b58a12","sha1":"eb63102891e0faf0744478022e90be7535047e1a","sha256":"d13738a217a33474f837cc14a3462875feea6d9f94b819db9bd2d7d6f245ac67","sha512":"d54ce994ce2dfe69ad812ce2d0763e107e9ed0521dffbe375101792d263fb5bd4ebb871950f5c234d4ea986a1d89e4e64449cdad3d52013b1200360c98791658","ssdeep":"","tlshash":"b841af06ee678240f15b962a3bb7fbb93e3810038917cd78778177208fab6d2664074d","first_seen":"2024-11-25T09:31:52.958665Z","last_seen":"2026-06-06T23:07:11.555178Z","times_seen":374,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Jun 2026 01:46:47 GMT\r\nexpires: Fri, 04 Jun 2027 01:46:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 249598\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T08:20:47.227313Z","times_seen":205648,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":91,"dns":2,"connect":31,"send":0,"wait":38,"receive":12,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://foundation-starknet.xyz/index_3.html","date":"2026-06-06T23:06:46.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/index_3.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40128\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=4,i=?0\r\netag: \"6a24514c-9cc0\"\r\naccept-ranges: bytes\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jeVNveHPSQB%2Bj6cdbIgpppcicoFOciOglhI7tfF2zbHDVe1oMXvbNPFL5J%2BjQkzn%2Fp9INDXNz51R%2BA3FP%2Fgijt4Hdlr7kurEqJ9Lz8Muuwx63dyEcYWJn5yC%2F%2BNGn4VQyIJgOlizPYuJnA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07b11c5ae2c5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-07T08:20:47.127655Z","times_seen":872407,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc.drpc.org/","fqdn":"bsc.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:53.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 18:57:31 GMT","end":"Wed, 15 Jul 2026 19:57:24 GMT"},"fingerprint":{"sha1":"29:DF:72:3C:C4:08:05:61:23:A7:6E:9E:35:44:4A:4D:E1:E7:67:7E","sha256":"D3:D5:73:E5:27:98:A5:7C:64:E1:82:6C:59:11:09:64:8E:9A:E2:34:EE:B7:72:8E:63:C5:83:3F:7B:77:04:1A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://foundation-starknet.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x6981E9EA7023a8407E4B08ad97f186A5CBDaFCf5\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:53 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-core-free\r\nx-drpc-trace-id: 7ddb2b3e36d29c851a4d4cf55e4c9371\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a07b11f50e0a32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":806,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8bd4f556e66eddf85ded08ffe5fc4855","sha1":"0d97a25fdd5bb69e29fa65df4d7139a16c371a2c","sha256":"591b3eb243b8379b499076e0cd65562451be80798d672bb0a6fab95c18ce2521","sha512":"56624d3639cef656cd83e3348abd40e5c8ef94cf23c87af6af611aa54c829846ee92b3b993ee26ec492745ff7826dfdba841c975b9a0f0497f4ff327eac74443","ssdeep":"","tlshash":"6f0112f6425bcee1e0fe988c14547a5923173c67a8de2f419e4cddc4206c682727a229","first_seen":"2026-04-26T14:03:09.575663Z","last_seen":"2026-06-06T23:07:11.555722Z","times_seen":14,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"public-bsc.nownodes.io/","fqdn":"public-bsc.nownodes.io","domain":"nownodes.io","tld":"io"},"ip":{"addr":"104.20.35.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:53.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nownodes.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 May 2026 03:29:14 GMT","end":"Sat, 08 Aug 2026 04:29:11 GMT"},"fingerprint":{"sha1":"FC:86:CC:AE:CD:57:74:97:D8:3A:25:3B:27:36:B0:7A:B4:04:63:4F","sha256":"05:5D:E0:7C:4D:70:40:BC:B5:C0:BD:2D:A1:F6:9B:4F:B0:C4:7C:54:4B:BA:A0:EA:2E:A6:BA:35:9A:2C:77:E3"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: public-bsc.nownodes.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://foundation-starknet.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x6981E9EA7023a8407E4B08ad97f186A5CBDaFCf5\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nvary: accept-encoding, origin, access-control-request-method, access-control-request-headers\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a07b11f55feeb505-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":210,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"575c01f6bcde515b6a43255cee59c7d4","sha1":"9aca79e0a2126fcf728be1a35e6d63c900461d9e","sha256":"f8779b9c508d4d209e46671e53f612a3bda427368be806b7322951ea2f8bcaf2","sha512":"524e4019fb5fb78a06707b06d594835fa192489b53db1d56751d588664db40491b8c1dd3d08eac7418ef39481645350659417dba72d7b082e1567f6701087498","ssdeep":"","tlshash":"cad023444944027f095783426dcc3941576567e153525f2078eccd14350d515e245335","first_seen":"2026-06-06T23:01:52.878118Z","last_seen":"2026-06-06T23:07:11.556394Z","times_seen":2,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/menus.css","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /menus.css HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=2,i=?0\r\netag: W/\"6a24514c-32b3\"\r\ncontent-encoding: gzip\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nJyCFxE%2BVqq3d%2Box1sXh9ioflMXzXpAcDdzfaDh3uKCh2%2Fc0GWOLxTUi%2BlNPLevLa9Uh7VZG4Y%2BGBK3g3Zj3pR8B2Y%2F4dge7sinsykVTLZJrbW8YCFlp37IttATPk5nxIj8w5VO4tkVLcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07b11c25c8d5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12979,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"01f53f5f2af80570256ddad3ca69eb76","sha1":"eea30a345d1ec4cbfc794c34db0644799ae7ad1d","sha256":"2e950124c97812f1862bfa18fc06a5ba14ae101abad4e6f89361284a07237985","sha512":"9dfe3452f1262048d509dc8b31271a8cdc3694adfba1f7c2393181ad61946482f8741aaa740b033c0a0453da23a6500082a072c941e300517ad1062313ff85ce","ssdeep":"192:u+mFw2NGcF1kFSyqMd9LNt7meeY9nDQ5GquSlK3CP1snFJtgXYjl8ChAvNi24hQ:u5ssUi","tlshash":"3a421348e667a075aa37977aabe60749e3198053870a41e87efc53440ff327c61a1fdc","first_seen":"2025-11-18T00:46:11.661465Z","last_seen":"2026-06-06T23:07:11.556947Z","times_seen":8,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/assets/editor-byte.js","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /assets/editor-byte.js HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=3,i=?0\r\netag: W/\"6a24514c-5fd0e\"\r\ncontent-encoding: gzip\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JYvRL3dAc2CGhzfuNN%2BSnj4%2FseFeQWQCmLEwQK2V3ZM3hL%2BASK%2BM%2FYx28OJMbFmwG9UsGJr%2BHeOyUN6miJF0i6NDlkR1HUrAcLby0HDYXUTCigxpAnRT6jHDd43sixxHIMmv33474ab5%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07b11c27c9a5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":392462,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27585), with NEL line terminators","md5":"55274a38600f0ed61ea53418b4b68ed6","sha1":"d8eddb4fe23fcba4534c97d222efebf35d5b157f","sha256":"7b9f813d4a0ca8e4520b60597f162a72c39bd2574491041e0040400029bc8274","sha512":"25f28f225d19f934167b99b75cba0a255fd97a10449e631e9c08f398e5041cd67eef80ed3e99a611e6f1e5a73f65d4ce1a2241ddac1377a6801642a08e4a5649","ssdeep":"6144:wmXq/UoKAB9yy81q+pijHhM50thrd84pY:+/Uo5B9ycC2BMgi4pY","tlshash":"bf84c56893deac61436e853c892d35de3d959308bf5d81e7b7d0cc0ea2164bd7a80b47","first_seen":"2026-06-06T23:01:52.882152Z","last_seen":"2026-06-06T23:07:11.557544Z","times_seen":2,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/e159ea22a5c0ef75c15f193231d7897ca83ffcc2.png","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /e159ea22a5c0ef75c15f193231d7897ca83ffcc2.png HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=4,i=?0\r\netag: W/\"6a24514c-3185c\"\r\ncontent-encoding: gzip\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6N2GEZpd2jlXSKfY9wAjU3ReySV%2FVf5%2BpQR6wMKU72PJYZZSC1T%2BieL5xpcl%2Brg5NwajpeTBfjQxHh3%2FgQxZm%2BSvAIb1gCB2jR5n1v9PeVk7YqPcFsExTFyNCxTalVfUbH1gMc%2Fic5qZUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07b11c27ca35690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202844,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 790 x 597, 8-bit/color RGBA, non-interlaced","md5":"b11207eaeb9a86b33e4e5cd099191214","sha1":"e159ea22a5c0ef75c15f193231d7897ca83ffcc2","sha256":"508b33f89a04869958868a7596e7a8b84bf64b81e0677277476f6989fff1ce8d","sha512":"b63b69464ddfabe0993bc619aed6e90c615de66d3711c3392ee0fb67b80c6537e3ec9db2be970f2297b97886ca9ed07af029771743e859d11c0288c6a55b33ef","ssdeep":"3072:5g32W6MlIJNhAcNQw1OUyBMXWz1t+IXfnBb+fXVvRd/Z/WelmMnDabFgoWH3/r64:D0yhLNQ37U2zXZyXV1WeJnDxn3j6SR8A","tlshash":"46141207c1c2dc4086dfec6a70f382c0b94e60bd6b3ad47cab1be292f59ac65d565d44","first_seen":"2026-06-06T23:01:52.876847Z","last_seen":"2026-06-06T23:07:11.558134Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Jun 2026 01:46:47 GMT\r\nexpires: Fri, 04 Jun 2027 01:46:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 249598\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T08:20:47.227313Z","times_seen":205648,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":95,"dns":1,"connect":16,"send":0,"wait":17,"receive":23,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:53.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Jun 2026 01:46:47 GMT\r\nexpires: Fri, 04 Jun 2027 01:46:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 249606\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T08:20:47.227313Z","times_seen":205648,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed.bnbchain.org/","fqdn":"bsc-dataseed.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"108.133.23.216","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:53.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:51:35:3C:6A:BD:00:80:7E:C2:BB:61:75:B1:0A:D8:28:8C:62:89","sha256":"3E:F5:AA:B6:AF:7A:6B:4C:8C:99:02:80:C8:8D:C7:A8:56:7D:40:10:01:15:9D:68:B3:94:4D:05:F5:41:C3:94"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-dataseed.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://foundation-starknet.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x6981E9EA7023a8407E4B08ad97f186A5CBDaFCf5\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: a390eba0abcae9be8c9afcba191bfdf0\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":806,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d925be8d5701b36f14c1fe2f4923141a","sha1":"8c392eed0024a8fc5b20d173339dde8d8b4165c3","sha256":"6a5ac30b0c84cb8de2a2eed6d00fc93b2003e86011e7184824126c02b9b948af","sha512":"4706ba99835739e5fd936bafb424e1cd318f003a9a6d1e4ff8025d279e594e5a05e763fcf8545954da0d1e2bba7f593bceb0c3ec135991468f3c2175319365aa","ssdeep":"","tlshash":"68011df5415fce91d0fd988c14547a5523173c6768de2f419d4cddc4206c6427279235","first_seen":"2026-04-26T14:03:09.562126Z","last_seen":"2026-06-06T23:07:11.55929Z","times_seen":20,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:53.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Jun 2026 01:46:47 GMT\r\nexpires: Fri, 04 Jun 2027 01:46:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 249606\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T08:20:47.227313Z","times_seen":205648,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed.bnbchain.org/","fqdn":"bsc-dataseed.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"108.133.23.216","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:53.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:51:35:3C:6A:BD:00:80:7E:C2:BB:61:75:B1:0A:D8:28:8C:62:89","sha256":"3E:F5:AA:B6:AF:7A:6B:4C:8C:99:02:80:C8:8D:C7:A8:56:7D:40:10:01:15:9D:68:B3:94:4D:05:F5:41:C3:94"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://foundation-starknet.xyz/\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 06 Jun 2026 23:06:53 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T13:09:49.815178Z","times_seen":16212590,"resource_available":true,"data":null}},"time_used":527,"timings":{"blocked":244,"dns":56,"connect":36,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elliptical-rabbit.icu/api/fp","fqdn":"elliptical-rabbit.icu","domain":"elliptical-rabbit.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:54.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elliptical-rabbit.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 00:47:39 GMT","end":"Thu, 27 Aug 2026 00:47:38 GMT"},"fingerprint":{"sha1":"B8:07:56:A2:C6:45:C4:49:04:87:03:AE:02:C1:FA:FD:A2:0B:3B:B2","sha256":"4A:DD:80:D4:17:D9:63:93:7C:DD:D1:5D:40:D3:06:33:C0:96:2C:47:94:D9:89:22:52:3A:47:98:44:D5:94:79"}}},"request":{"raw":"OPTIONS /api/fp HTTP/1.1\r\nHost: elliptical-rabbit.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://foundation-starknet.xyz/\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 06 Jun 2026 23:06:54 GMT\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6pIZf%2FHXskWb%2Bim7f7PWCsaYV5ZoDU2TrtXLDuqg8GwfLN9dVkX4ncOiHjorTnD%2BPWNDdK1ALVRaetbM0YaNk6TqGRc0qrydqh21KWVw5gKVn2TG%2BiXNBBQ27JaKUQFekcV6%2FdSpaNU%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a07b11f84cafb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T13:09:49.815178Z","times_seen":16212590,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"elliptical-rabbit.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"elliptical-rabbit.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:52.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:22 GMT","end":"Mon, 10 Aug 2026 18:37:21 GMT"},"fingerprint":{"sha1":"09:D4:FC:2F:81:37:26:42:91:15:6F:27:1B:72:A7:D2:1A:FC:31:72","sha256":"E9:45:95:A3:A1:F2:6E:F0:08:73:C1:35:32:67:E6:72:BB:89:C7:27:C0:8F:D7:48:6F:0A:88:7E:8B:00:2F:B9"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 06 Jun 2026 23:06:52 GMT\r\ndate: Sat, 06 Jun 2026 23:06:52 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-06-07T12:42:54.42164Z","times_seen":29513,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/algolia.autocomplete-theme-classic.min.css","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /algolia.autocomplete-theme-classic.min.css HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=2,i=?0\r\netag: W/\"6a24514c-6887\"\r\ncontent-encoding: gzip\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JGf0hVAfF7MpZ%2FhOMqfq0cFE%2BFfuHU%2BtDsiE0%2FWR4%2BYwXbEIJJ2m8UcwNteNO1mQ0x261cLSepR1aj9GA6QrYbNxhKld4x2aGNiJZLYGZhP%2BXvbMa56uWbmF1BMeAUZetJ9Dz84IU6AdYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07b11c24c7f5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26759,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13859)","md5":"ec7720c72c7c2ce71542998f8a4f6663","sha1":"2cd31e3f260199376b62cafb4c9b10b007cf074a","sha256":"ce11f26be05b3c43e4f1348acb4f066770b91a60cbf99b118fc275c1afec46f7","sha512":"91f2e5ba96c897aba2118516a52c2ca5ff808ec7007668f7cf3f8fa7d3262d869d6e603abed27b61e7d669f0738624cc6ab211d8cc4dcc7302ca1b0d4db57780","ssdeep":"768:NWbm2n3Q/myWwyvcCq2O1pXUbXrWlWu+8H+M6+kOwVn1ptCFDU0ipvZSI5O2OQx/:e3Q/3WuBkbXZBFVShW","tlshash":"11c226b3b558a539fc37bc7f0a9dd74c529aa431ee224fa4bc59531a80c6bf70163a01","first_seen":"2025-11-18T00:46:11.690086Z","last_seen":"2026-06-06T23:07:11.560386Z","times_seen":8,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"foundation-starknet.xyz/variables.css","fqdn":"foundation-starknet.xyz","domain":"foundation-starknet.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:45.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"foundation-starknet.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 13:46:07 GMT","end":"Mon, 31 Aug 2026 14:43:47 GMT"},"fingerprint":{"sha1":"A1:EE:4D:C9:FF:FE:43:34:2B:AF:36:3E:BC:95:42:51:74:EC:93:D2","sha256":"93:C6:17:8B:BA:3A:B7:A9:5E:88:AB:34:06:49:90:CE:EC:10:5D:D8:CA:21:A8:CA:19:4B:97:25:04:D4:44:52"}}},"request":{"raw":"GET /variables.css HTTP/1.1\r\nHost: foundation-starknet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://foundation-starknet.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:45 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Jun 2026 16:56:44 GMT\r\npriority: u=2,i=?0\r\netag: W/\"6a24514c-4649\"\r\ncontent-encoding: gzip\r\nage: 329\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qK%2BNGq8KwxYcs15tJWlQARpkqjQ4sO4hItvy%2F%2FPkFy31h%2Fh9xMstpHLuwyZ66ri5XHtAtAQYyBKI2g3v96pBNzXkXLVqdBJ7UwRIiL%2BuryWWvR1TUM7i2bvHOh1w4BudDG9eaB6fEIk%2B%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07b11c25c8c5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17993,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"3a40413b4354418b9bf27a490c59d32e","sha1":"933befd25c8f5be7b24023f296fe5754ac4f2de9","sha256":"aed0b6af312e25da3af57f3f67c1a589532da8862ba8020a1b462ffe9a63f42f","sha512":"5bfd0d14c853a5c2a60bc004cc2724f61b74dbf9255a3619d910de0ec38d24ac305d70deb5c6b6d633f4c0b0fa128624723a9658a595b1f20b79eb0ffde56165","ssdeep":"192:++hmWaaiJ1PuQahrKoFE2TAGv6aVXjkFyWg+TK5+SY5qWavDdtwiJaJUCLKGDf8r:05yAC3qzg+TK5++wRZngy855hMz9HhpU","tlshash":"8f82b896d540257c1f3a42eb7bc22433f7b888d7d146baf5b1d29084efb51d044bd2aa","first_seen":"2025-11-18T00:46:11.748687Z","last_seen":"2026-06-06T23:07:11.561283Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"foundation-starknet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:53.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Jun 2026 01:46:47 GMT\r\nexpires: Fri, 04 Jun 2027 01:46:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 249606\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T08:20:47.227313Z","times_seen":205648,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":16,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-rpc.publicnode.com/","fqdn":"bsc-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:53.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 23:57:50 GMT","end":"Fri, 10 Jul 2026 00:57:42 GMT"},"fingerprint":{"sha1":"FA:41:42:B5:59:CD:F2:75:9C:78:CB:D0:5E:1F:F6:83:58:D2:EE:5F","sha256":"07:86:2C:E3:AD:0C:A4:31:FD:57:1E:C8:01:EA:80:5B:24:9B:5E:3F:7B:09:9D:D4:1B:FE:A9:2B:34:AC:3E:B4"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://foundation-starknet.xyz/\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 06 Jun 2026 23:06:53 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a07b11f46d135695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T13:09:49.815178Z","times_seen":16212590,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":17,"connect":1,"send":0,"wait":47,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elliptical-rabbit.icu/api/fp","fqdn":"elliptical-rabbit.icu","domain":"elliptical-rabbit.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://foundation-starknet.xyz/","date":"2026-06-06T23:06:54.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elliptical-rabbit.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 00:47:39 GMT","end":"Thu, 27 Aug 2026 00:47:38 GMT"},"fingerprint":{"sha1":"B8:07:56:A2:C6:45:C4:49:04:87:03:AE:02:C1:FA:FD:A2:0B:3B:B2","sha256":"4A:DD:80:D4:17:D9:63:93:7C:DD:D1:5D:40:D3:06:33:C0:96:2C:47:94:D9:89:22:52:3A:47:98:44:D5:94:79"}}},"request":{"raw":"POST /api/fp HTTP/1.1\r\nHost: elliptical-rabbit.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://foundation-starknet.xyz/\r\nContent-Type: application/json\r\nContent-Length: 2646\r\nOrigin: https://foundation-starknet.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2646,"data":"{\"payload\":\"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\",\"reserve\":false}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 23:06:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7A3sAG7blX%2BktYKksKhbGpMk%2BSAdiLU%2BsxqtQRxQhbOAj8IgHd%2BtakuFbZXE5A%2BzksWG%2BavuGpv%2BlvBdUUmGXqRFEx2NPKVwB%2FNlCZcz%2BinaHxYkwu2ts1z3UCe5WfPKPoO9qHXqhgI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a07b11f8a8fe56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":588331,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"842b2930640d21ce8a5f0ab8f2cf5553","sha1":"6cc9168172f388d04500235a98c0e9bbbef0d5c0","sha256":"78a43a4e5be5939b9cba06204230766f1721adc5f4286b22dcf89d7af06fe13d","sha512":"2e5d562fccde204838558606f376210137772f0fbeefbfdd2629f62f97263305a908a3ee200dc60663dad3666f5c2f153cade2d56c783e4194e41d88ccb07ad8","ssdeep":"12288:poMsIVHWvjqZNrkHnmNSjEa1nr4Eyiz9Kktx7mjri418o2P:pzV278r6D9nr4EyipRDf4R2P","tlshash":"13c42326e34b516d03ac3671b48b46183bcc0b6549fca7df8ac4d2c22a67b156937d8e","first_seen":"2026-06-06T23:07:11.56206Z","last_seen":"2026-06-06T23:07:11.56206Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1487,"timings":{"blocked":0,"dns":1,"connect":0,"send":0,"wait":1316,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"elliptical-rabbit.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"elliptical-rabbit.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}
