{"report_id":"170d1124-5325-4e51-b145-521f03db5391","version":6,"status":"done","tags":[],"date":"2026-05-24T11:17:46Z","url":{"schema":"http","addr":"chooseriches.xyz","fqdn":"chooseriches.xyz","domain":"chooseriches.xyz","tld":"xyz"},"ip":{"addr":"104.21.84.147","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"chooseriches.xyz/","fqdn":"chooseriches.xyz","domain":"chooseriches.xyz","tld":"xyz"},"title":"$RICH DISTRIBUTION","dom":{"size":15995,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1238)","md5":"83d8dd7c380971168e1e36f6466e6daf","sha1":"d1987ceca75a9778f20eed7045ca2e2f1ed3aee6","sha256":"25a06a4ae8f9d768be0ae20038b72e6f9579efe9945467a35328101448291722","sha512":"375f85ca2f5bec3348926b591b222341bd31a880632ec2ac833282fb63d49be51a96a3aa8f8795d0f1045024e4b6d89dc621fcc86a933240fd2b767bf55252ae","ssdeep":"192:6N1m1AQPuYWMJVkrpMhGllFltvZG7D3wcoy4/6p/yu0J9J0ZRq5xMGVWYLCG:4g8F3qZRqHMGVW0X","tlshash":"cc72535a92f3155b7923e4a95feb670a73a4a013d00acd283fce624c8fcd9d5997230d","dom_hash":"domhashd2d3ef5582d286f398b11246298b29ed","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"chooseriches.xyz","fqdn":"chooseriches.xyz","domain":"chooseriches.xyz","tld":"xyz"},"ip":{"addr":"104.21.84.147","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-28T11:17:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"chooseriches.xyz","ip":{"addr":"104.21.84.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-24","domain_rank":0,"first_seen":"2026-05-24T11:15:43.14237Z","last_seen":"2026-05-24T11:15:43.14237Z","alert_count":0,"request_count":6,"received_data":657605,"sent_data":2822,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"chooseriches.xyz/","fqdn":"chooseriches.xyz","domain":"chooseriches.xyz","tld":"xyz"},"ip":{"addr":"104.21.84.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f472523e15c5acac3442c164d97e1a8","sha1":"08b0556156f38988eebd514dbe6672f17b348174","sha256":"aa9def1e3d6710244488ba4834d37cd8d1f4d93ab2badc0b67d02468b6cb3531","sha512":"2501b248bb0f227a44eaeb58c2868597782ab910039d620c290f9362acb8a95c51308a06e3e28d6193214496d7a377765e4a8ca4053aa3ade9a6c27abd13b566","ssdeep":"","tlshash":"82c02211c3ac89b5111a209920bcc298702029ad6051a085c2bc8ecb1c18fc3068aa2a","size":187,"data":"","first_seen":"2026-05-24T11:15:46.487171Z","last_seen":"2026-05-25T21:03:17.62836Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chooseriches.xyz/pUcghose.php?s=%2Fipfs%2FLPbRqJYCRyWkhFuwSWUBxga2a961e42248929c2d062c1a7b429ab9%3Ft%3D1779621444128","fqdn":"chooseriches.xyz","domain":"chooseriches.xyz","tld":"xyz"},"ip":{"addr":"104.21.84.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"64a8a45b9edb84c5df619383a3fcbbfa","sha1":"7bead4589eb3b6eac4a676cad5a39eb27d860f10","sha256":"d10210603060aadb8ad3f650d184c1e9b5e4ad9fdf5d88eedfeea454b8eb63ca","sha512":"fd0f3c1dfec69546341c8ce30e366c635145251376693e6098ac97d15d76e3ae91bf70460b7c6c8e472d6b2a2c266b842d32845fe7daae22c4fa7a0c69caca90","ssdeep":"6144:rh5gDmimdV6bIK1GzE2nT36RzaILAzrryoMo2w64HollUz7rBdBQo7oSYbwI4LQO:zsmimmbNgTqmIMz6oD","tlshash":"afd4c6ea834e9777e08a22f71673447fefaa2d18856feae057c0ddd953c8b0214e4158","size":602502,"data":"","first_seen":"2026-05-24T11:17:47.722503Z","last_seen":"2026-05-24T11:17:47.722503Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chooseriches.xyz/","fqdn":"chooseriches.xyz","domain":"chooseriches.xyz","tld":"xyz"},"ip":{"addr":"104.21.84.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ae5cbfd7441566837c8d4634236acf19","sha1":"62c3abd6d82cfdb5d082c3b0eceb1add0646794a","sha256":"1ec3ffc9b117980a790a2c3eb21faa2bfcabe474cde9135e39d522999761b579","sha512":"ea2ad867bc322ba9397d02574d61cafdb86ccff4484d7dcf6536fc25f14e2b95ae4010bbd51f1a20023c08cacc2dcc43469b10ab58dedff5615bce6d486b8a8d","ssdeep":"","tlshash":"c221524862f71d2c07aa965b9fcb500832a33413654dca5c3e1cc3059fe1ea6e8d9adf","size":1260,"data":"","first_seen":"2026-05-24T11:15:46.489539Z","last_seen":"2026-05-24T11:17:47.731251Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"chooseriches.xyz/","fqdn":"chooseriches.xyz","domain":"chooseriches.xyz","tld":"xyz"},"ip":{"addr":"104.21.84.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-24T11:17:23.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chooseriches.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 01:52:06 GMT","end":"Sat, 22 Aug 2026 01:52:05 GMT"},"fingerprint":{"sha1":"73:1B:0A:7C:BE:93:91:10:07:24:6E:4F:2B:B0:53:93:2A:C9:8F:BC","sha256":"89:9E:23:07:30:8D:CF:BB:B8:3E:52:51:36:EF:2A:C7:8E:B4:B2:6E:A3:8C:94:53:B3:92:E2:F2:0A:AE:62:1B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: chooseriches.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 24 May 2026 11:17:23 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 24 May 2026 03:00:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZJWZ5qqEkUDMxJR10werVsWGD2lCnMcYOSVgHEYMppIkcRCejlO9JEfx1pk0XwRl3ppUUN6z5wZoKBrk8k0ySPAue%2Bm%2BmDVOc2aOuJLlaEuldmvMUu%2FaPL5%2F085l5%2BEBlrz9\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a00be4c89810569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15747,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"9cc4c6f27ce862105b7f0465307e0901","sha1":"036245d87742e57c6eba721f9d8e4d1b373b515e","sha256":"75eae572d263b7b86b3b54929065cea7a7ce605fe4f2b275d96e9096c5abf292","sha512":"5b939d90ffb35128ed67782c348df18963ceec4548bcf8c0817ec187c3ec349bce9a4a71b5efc676699c55d76f251a5997f0060aa59f28a47c578ae2b5eb5db4","ssdeep":"192:QNy1AQPuYWMJVkrpMhGllFltvZG7D3wcoy4/6p/yu0Jw0ZRqsMGVWYLCe:6y8FPZRqsMGVW0b","tlshash":"a962315a92f315567923e0a96feb670a77a5a013d00acd283fce624c8fcd8d595b330d","first_seen":"2026-05-24T11:15:46.482003Z","last_seen":"2026-05-24T11:17:47.719688Z","times_seen":3,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":19,"dns":0,"connect":1,"send":0,"wait":45,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chooseriches.xyz/favicon.png","fqdn":"chooseriches.xyz","domain":"chooseriches.xyz","tld":"xyz"},"ip":{"addr":"104.21.84.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chooseriches.xyz/","date":"2026-05-24T11:17:24.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chooseriches.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 01:52:06 GMT","end":"Sat, 22 Aug 2026 01:52:05 GMT"},"fingerprint":{"sha1":"73:1B:0A:7C:BE:93:91:10:07:24:6E:4F:2B:B0:53:93:2A:C9:8F:BC","sha256":"89:9E:23:07:30:8D:CF:BB:B8:3E:52:51:36:EF:2A:C7:8E:B4:B2:6E:A3:8C:94:53:B3:92:E2:F2:0A:AE:62:1B"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: chooseriches.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chooseriches.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Sun, 24 May 2026 02:59:40 GMT\r\netag: \"18d8-6528773ff7153\"\r\naccept-ranges: bytes\r\ncontent-length: 6360\r\ncontent-type: image/png\r\ndate: Sun, 24 May 2026 11:17:24 GMT\r\nserver: cloudflare\r\nage: 123\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nGVKFtDzCerCmtCNamvoE04ps3Da4l59ACN1H%2FQ9XvTG2esqfGY22t06kvm1F5qXKMaN2FVZaTnf4Qhnf0J33zeBykxlhmess5DCJX5iddkv421a9vibcaDGp92FW1sv01vX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a00be4cad8165ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6360,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"204250ce131380f5fc891082ce63a468","sha1":"1adc4ff732eb8838f5da40b1a4fe15ae6d6b3363","sha256":"b0accc289af239b801e0d8d8a15603441b248c2f8fc386fe3aa5dbd91abd6a13","sha512":"98d255c3e04e176712707f6404aa342df2efb22272ec5b204891ea12140e0b3c1ac804745cd5ccb60893a686f89d7d92f00ea38d206ede571934f6f36298f368","ssdeep":"192:lOfgzvH+xxgCN4auA+XBlGwotq/29fjNuso0dQXdTN:rzvHmn4auLRlGAZveQNp","tlshash":"9dd1ae106a480ab137eccc6de6e32486a1e21f1f7a15135f6e51872957903c56e5f33b","first_seen":"2026-05-24T11:15:46.48439Z","last_seen":"2026-05-24T11:17:47.721154Z","times_seen":3,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chooseriches.xyz/pUcghose.php?s=%2Fipfs%2FLPbRqJYCRyWkhFuwSWUBxga2a961e42248929c2d062c1a7b429ab9%3Ft%3D1779621444128","fqdn":"chooseriches.xyz","domain":"chooseriches.xyz","tld":"xyz"},"ip":{"addr":"104.21.84.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chooseriches.xyz/","date":"2026-05-24T11:17:24.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chooseriches.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 01:52:06 GMT","end":"Sat, 22 Aug 2026 01:52:05 GMT"},"fingerprint":{"sha1":"73:1B:0A:7C:BE:93:91:10:07:24:6E:4F:2B:B0:53:93:2A:C9:8F:BC","sha256":"89:9E:23:07:30:8D:CF:BB:B8:3E:52:51:36:EF:2A:C7:8E:B4:B2:6E:A3:8C:94:53:B3:92:E2:F2:0A:AE:62:1B"}}},"request":{"raw":"GET /pUcghose.php?s=%2Fipfs%2FLPbRqJYCRyWkhFuwSWUBxga2a961e42248929c2d062c1a7b429ab9%3Ft%3D1779621444128 HTTP/1.1\r\nHost: chooseriches.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chooseriches.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 24 May 2026 11:17:26 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F6RcU5eWbAPyS4Q7yaLWS34lXUdymIt1L%2FJbACQDXA2JVCvtsx7t9oBb7CaddGhzyF2A58Mnce9XpKLpLf4Kni1nkQtU4UppcDBNuC%2Ff%2FUK6EdE0Qrdt8vOp4St096w%2FbL%2Bb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00be4c9efeb5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":602502,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"64a8a45b9edb84c5df619383a3fcbbfa","sha1":"7bead4589eb3b6eac4a676cad5a39eb27d860f10","sha256":"d10210603060aadb8ad3f650d184c1e9b5e4ad9fdf5d88eedfeea454b8eb63ca","sha512":"fd0f3c1dfec69546341c8ce30e366c635145251376693e6098ac97d15d76e3ae91bf70460b7c6c8e472d6b2a2c266b842d32845fe7daae22c4fa7a0c69caca90","ssdeep":"6144:rh5gDmimdV6bIK1GzE2nT36RzaILAzrryoMo2w64HollUz7rBdBQo7oSYbwI4LQO:zsmimmbNgTqmIMz6oD","tlshash":"afd4c6ea834e9777e08a22f71673447fefaa2d18856feae057c0ddd953c8b0214e4158","first_seen":"2026-05-24T11:17:47.722503Z","last_seen":"2026-05-24T11:17:47.722503Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2359,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chooseriches.xyz/logo.jpg","fqdn":"chooseriches.xyz","domain":"chooseriches.xyz","tld":"xyz"},"ip":{"addr":"104.21.84.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chooseriches.xyz/","date":"2026-05-24T11:17:24.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chooseriches.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 01:52:06 GMT","end":"Sat, 22 Aug 2026 01:52:05 GMT"},"fingerprint":{"sha1":"73:1B:0A:7C:BE:93:91:10:07:24:6E:4F:2B:B0:53:93:2A:C9:8F:BC","sha256":"89:9E:23:07:30:8D:CF:BB:B8:3E:52:51:36:EF:2A:C7:8E:B4:B2:6E:A3:8C:94:53:B3:92:E2:F2:0A:AE:62:1B"}}},"request":{"raw":"GET /logo.jpg HTTP/1.1\r\nHost: chooseriches.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chooseriches.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Sun, 24 May 2026 02:59:39 GMT\r\netag: \"57a3-6528773ed7f9c\"\r\naccept-ranges: bytes\r\ncontent-length: 22435\r\ncontent-type: image/jpeg\r\ndate: Sun, 24 May 2026 11:17:24 GMT\r\nserver: cloudflare\r\nage: 123\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zQun4eYYEbgpdEP9Yy3qusKKg3vgPSpAfydyknkuDI4ArvJw3RBqJQqxkVk%2BG2iHqArEJUBzivdAhljrFBAqDHWrgKV8HnPjahw94j4Oo%2BfLE0dJdaxFqdVOkJRawJ20bjED\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a00be4c9dfe85ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22435,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"77d6e695664ea9a5b605e064d8b8ed35","sha1":"78bb56e749e5900b96e0ae9195126c84271c26e2","sha256":"96961cec1736d14fd1d3c836867395a68c62cca084a22822c8e0172b69d11b95","sha512":"6f7b4aebaf7a7cf818afbdf776798f0edda819444fc1211cf9ce86f7a766f598c6cbe4eea36a50fa0a12b65e11e007f53bf0f52f9290db977bbb796ac30bfd35","ssdeep":"384:sNnKVRvNqjE8EfMf2ga5nk0hckjionwotQHxAix2RwPiN/b82Yd7sucFccJPY:XVRlccM+gHYluonwoaLxPiRb8bzAJA","tlshash":"39a2ce7c3b33080ae52c57f3312593728bf2fa2b871f331a5996495b63254db59814ab","first_seen":"2026-05-24T11:15:46.47399Z","last_seen":"2026-05-24T11:17:47.727075Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chooseriches.xyz/favicon.png","fqdn":"chooseriches.xyz","domain":"chooseriches.xyz","tld":"xyz"},"ip":{"addr":"104.21.84.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chooseriches.xyz/","date":"2026-05-24T11:17:24.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chooseriches.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 01:52:06 GMT","end":"Sat, 22 Aug 2026 01:52:05 GMT"},"fingerprint":{"sha1":"73:1B:0A:7C:BE:93:91:10:07:24:6E:4F:2B:B0:53:93:2A:C9:8F:BC","sha256":"89:9E:23:07:30:8D:CF:BB:B8:3E:52:51:36:EF:2A:C7:8E:B4:B2:6E:A3:8C:94:53:B3:92:E2:F2:0A:AE:62:1B"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: chooseriches.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chooseriches.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Sun, 24 May 2026 02:59:40 GMT\r\netag: \"18d8-6528773ff7153\"\r\naccept-ranges: bytes\r\ncontent-length: 6360\r\ncontent-type: image/png\r\ndate: Sun, 24 May 2026 11:17:24 GMT\r\nserver: cloudflare\r\nage: 123\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1SsKtprP2lKEgIbrrHt3S0%2FVFITBYtCzdv9Ifwr4CbMx1hIb1kaSohubiKYOMYAH6FceW1JWeOLv3%2F%2FuzinSAIWRfuEVmAIVz6X9CEE6GO6Le8GEntb2rentrfLFIJco%2FMkZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a00be4cad8175ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6360,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"204250ce131380f5fc891082ce63a468","sha1":"1adc4ff732eb8838f5da40b1a4fe15ae6d6b3363","sha256":"b0accc289af239b801e0d8d8a15603441b248c2f8fc386fe3aa5dbd91abd6a13","sha512":"98d255c3e04e176712707f6404aa342df2efb22272ec5b204891ea12140e0b3c1ac804745cd5ccb60893a686f89d7d92f00ea38d206ede571934f6f36298f368","ssdeep":"192:lOfgzvH+xxgCN4auA+XBlGwotq/29fjNuso0dQXdTN:rzvHmn4auLRlGAZveQNp","tlshash":"9dd1ae106a480ab137eccc6de6e32486a1e21f1f7a15135f6e51872957903c56e5f33b","first_seen":"2026-05-24T11:15:46.48439Z","last_seen":"2026-05-24T11:17:47.721154Z","times_seen":3,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chooseriches.xyz/pUcghose.php?s=%2Fjmpd%2F","fqdn":"chooseriches.xyz","domain":"chooseriches.xyz","tld":"xyz"},"ip":{"addr":"104.21.84.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chooseriches.xyz/","date":"2026-05-24T11:17:27.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chooseriches.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 01:52:06 GMT","end":"Sat, 22 Aug 2026 01:52:05 GMT"},"fingerprint":{"sha1":"73:1B:0A:7C:BE:93:91:10:07:24:6E:4F:2B:B0:53:93:2A:C9:8F:BC","sha256":"89:9E:23:07:30:8D:CF:BB:B8:3E:52:51:36:EF:2A:C7:8E:B4:B2:6E:A3:8C:94:53:B3:92:E2:F2:0A:AE:62:1B"}}},"request":{"raw":"POST /pUcghose.php?s=%2Fjmpd%2F HTTP/1.1\r\nHost: chooseriches.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chooseriches.xyz/\r\ncontent-type: application/json\r\nContent-Length: 1422\r\nOrigin: https://chooseriches.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1422,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QBFgPBAi4AEAD_ArACHADRAhcAAgABMgMAAO8nhn2XtsKCAfmh-tkQsqA0GjmyXmcCAABknxdxIAaFBt4wV6EKD5gU6jI119xCbzsoegAhaPrrqs1AFyp-sDGhzl81EAk50IfYa75rrkn1c91RFhTQbmbyytOyPSJYjULoxjc54YyKXmzfOrORC90XQ9nSQTYIl5dEQB2xHWOqqyurdym_Gqn3Sp5WaYkb80xEzcl3II-M1CazMdGk22AmHeFZbmXVYxilOQHfKMpBITp9giTfJrAogV29woV88lwYvVNWJVvLX577XUfxrfgWe9DFFi1iZXPin9JjuHOM403Yi91OrRyr_DBr5segRbViBFfSemeYdejd9XWKTNAth5_nSeKd7VPd4IHt2jxAeKAmmGvr0_jogdAbT3Sxv0yIQ8dRHUyc_YnbgCIoOo16mDBP_EXykAaZgTfVFmcB60TTkCfZBe-uEJJpt3epXcAbSzsi3-vdN0QlHMdjAbxG8Nk1fPjYIcEQ5d59SO8hY9wZVCgxj-dvVTnZZp_tRh8XKOqUTwzS6EuAtI8Bbgi_YBUjz72s6mef1U4LgEKSc90-CgsWDW0W4Lov_R2xmftYVlDwytLGwkwmE3ktk8i7a5FAphBTGZeyeusrN-Be_EEYOdPRFrwYmbP5VAcPLVSkG_VCJg8bUel4oMDskgqUoslAVArsVh7sKSY_zGl37qjCYjFaml-CD5Lrmqx7hAyRugom3edQ3NK5n0KLXjmJ1fswEXiTX13vH3LvTLTt0m-w9sz-SRg3VVbbM71n6pih-9JVPSRgSkVGb2n6_cbFlwOIvi4AbbYo3smddAq447vDiXgIRvrzZUjt93klBzTeiR0db3kAppV9VUWED-463XZXKtg7wUTKPOzEnQ2V6oAGllTUs9-x9807JCPhHP9NG0Mi1iAEgTobw3LiDQi5WFF0MSzhnz2UMAqKa1XqR1OBco2FoBVjJnoUvvX7C9C6GmuIQYn8xlWfDA02uGpJcoicecu4IHBmXJNWhFvVB9rjC7qwgRQB8aZHEUBopikLpxxGj9RMpy_Pi0kOXCVP4qs7EkIU3kJdqLp7N3B9qxkNx_G5NEEic--qUsqXEsKDaVGNN5nulHJyUeSSKDlIKCW8mzca1x72Yyo6HUDIYF7KJVpWowFvk6HST4lMyJdhEA\",\"challenge\":\"eyJpZCI6Imp2eFpMMUZJLUx3Y2R1TFVWYm9aUUEiLCJub25jZSI6MjkzLCJoYXNoIjoiMDA5ZjU1N2I5NjBmMGVlMWE1MzUzYzM1YjQ5NjI2ZDM5YzNiMzM1NThlMDNiY2ZhNjAxY2I2ZjkzYzU3NDZlNSJ9\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ndate: Sun, 24 May 2026 11:17:29 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fs1kabvTLGVnu%2BEBJnhcIhOaKrljLe%2BH5bTzUASfuGZxMltIVj9oo1vN7xKM%2Fro5%2BNV0JoskiGhaMaI8jwaU58rcZQqSjPm%2FRt0tQeQa%2BFOdTVF8C54ckgIMDDaHGG%2FTbZjR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00be4decbc65ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":1619,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1619,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}