{"report_id":"196682cc-c59d-41eb-94a8-282a87c6ebaa","version":0,"status":"done","tags":[],"date":"2026-06-30T21:35:16Z","url":{"schema":"http","addr":"allocations-grove.xyz","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"104.21.4.201","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"New Private Tab","dom":{"size":4247,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"c7871ab1865ca0f39c538e309f570fe9","sha1":"d7e318dd5416daffaf2cce9cb00c7922b77185b9","sha256":"ad9d2febfed7df1bf18ba66f3190a0f91a092522d8c3601923cf85f9f3618543","sha512":"10e8d12bd776969351af2cc1f6033bf9a7abd26ec619de8eb74e0d2c1f17a675fece5305a07438eae24ed2b2010365104eac184eb24cb3a595e7d64428e1dc44","ssdeep":"96:DJFs1Bx13gb61j1l0NxS7gx10UFZV4jl22D+i8kDNLeOl:H61rpWxvmULV4jM2D+z0sI","tlshash":"2d9161a544f1663b18a386a9e9d17f47af817607ce8d29407baf00e31f87d54886f20c","dom_hash":"domhashe55c5b0a9b0c37e90d2a11b31f2bc448","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"allocations-grove.xyz","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"104.21.4.201","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-04T21:35:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"side-still-sky.megaeth-mainnet.quiknode.pro","ip":{"addr":"64.31.51.141","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"United States","country_code":"US"},"domain_registered":"2018-01-05","domain_rank":0,"first_seen":"2026-05-12T17:14:21.517294Z","last_seen":"2026-06-28T11:37:22.211695Z","alert_count":0,"request_count":1,"received_data":129,"sent_data":654,"comment":"","tags":null,"fingerprints":null},{"fqdn":"allocations-grove.xyz","ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-28","domain_rank":0,"first_seen":"2026-06-30T21:35:22.29947Z","last_seen":"2026-06-30T21:35:22.29947Z","alert_count":50,"request_count":25,"received_data":25269457,"sent_data":12957,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"meow-rpc-mainnet.com","ip":{"addr":"172.67.179.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-11","domain_rank":0,"first_seen":"2026-06-12T09:25:41.610108Z","last_seen":"2026-06-28T11:33:14.091615Z","alert_count":0,"request_count":2,"received_data":1994,"sent_data":1283,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"side-still-sky.sei-pacific.quiknode.pro","ip":{"addr":"208.115.248.54","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"Germany","country_code":"DE"},"domain_registered":"2018-01-05","domain_rank":0,"first_seen":"2026-05-12T17:15:36.755254Z","last_seen":"2026-06-28T11:37:22.639197Z","alert_count":0,"request_count":1,"received_data":129,"sent_data":650,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts-css2-sans.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2026-05-12T17:14:21.513377Z","last_seen":"2026-06-28T11:37:22.165443Z","alert_count":0,"request_count":3,"received_data":4682229,"sent_data":1444,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"lb.drpc.live","ip":{"addr":"185.26.10.103","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-10T05:28:32.633791Z","last_seen":"2026-06-28T11:37:24.257257Z","alert_count":0,"request_count":2,"received_data":460,"sent_data":1266,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"data-image-svg--base64.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2026-05-12T17:14:21.516492Z","last_seen":"2026-06-23T19:14:27.742036Z","alert_count":0,"request_count":10,"received_data":3363244,"sent_data":5175,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"evm-ws.sei-apis.com","ip":{"addr":"172.66.165.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-24","domain_rank":0,"first_seen":"2026-05-12T17:14:21.523342Z","last_seen":"2026-06-28T11:37:22.200276Z","alert_count":0,"request_count":1,"received_data":672,"sent_data":590,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-28T22:47:06.167692Z","alert_count":0,"request_count":3,"received_data":606657,"sent_data":1454,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"allocations-grove.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-01T11:18:18.508668Z","times_seen":383530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f5b767c078c6813816231552aca1d562","sha1":"34f99579b527c24b3a5af82abb42079a0d3e1a51","sha256":"c17d50bae5a02a35e0ae5d0005c694495952f093629bb5193c668070161b0f7a","sha512":"7b4aed1d33c4891894a556505047a8f7afd72efc1c30c064b5a428fac50a5475e895f3937869de6d047128910d762069084c41d12fbacecffd43cd98e84b2e48","ssdeep":"","tlshash":"70c0125d7010696614ce687d4ccf088ebe368812a20809c999dcd4547bb1e6c42e484c","size":185,"data":"","first_seen":"2024-04-08T19:47:46Z","last_seen":"2026-06-30T21:35:28.667254Z","times_seen":682,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"895f526ab37305311d1e998fa4d5a6e8","sha1":"06d0220830c81bf254c70552e908371c6dc1f18f","sha256":"90916b8b1fb2fbbd765a22eba866c30d8829f59aa2d7ee86869abd20207b2117","sha512":"6b087d2e2025f4d11073254448b124af8839ce24ff37eb45bf2fd1a2b66bee8fd4fdca2b4d23c08786d217dd71dbc660d1054b7876b37752dee3baaefdaeaa4e","ssdeep":"","tlshash":"2871bc3beb00173bdc8fa9fdced5b4c02e62497262496960691ce102a16cd7487bed88","size":3743,"data":"","first_seen":"2025-08-14T22:47:51.287187Z","last_seen":"2026-06-30T21:35:28.667827Z","times_seen":1353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@6.16.0/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"556e49c10fd81a990b6281dcdc87bcd9","sha1":"4e5c00395339a8f4fdfa2ed3eb37a0dc00a7909b","sha256":"9a85a5aa81305f85e6546452fd2093a8a68932bed3cec4f6491e4d031a90bc95","sha512":"7e2dcc5cbe076d1c2d18053dda25b46c21f667367c1b28d13a2b489c507dbf8500a9f083328f1e54d417647ea8ff79cba9b7a97c9a1e5e35043cae9aba9861b6","ssdeep":"12288:2u8zZJf+vZGJzPfQAqa24VcpPfC1WgplCvPPko2Nz7jTO:2u8z7f+vZGJzPfQAqa2T4FAs1Nz7fO","tlshash":"dbb44cd132e3647287c618e52c650902f238f952705d44ecf66cdde26eabd8994bbf38","size":522095,"data":"","first_seen":"2025-12-21T04:14:54.672175Z","last_seen":"2026-07-01T05:46:56.294627Z","times_seen":347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b03b75162e10e6226e0cd5b209d29161","sha1":"cb53e88d7e51a2c2b97abf0335daa078e1afebaf","sha256":"c5182fc6ba614b92226af14ea8398954c1f1ef683513037692c73c8ca9f935b9","sha512":"529367a5378adcd540159a8cff38ca25e2cdb027ceba7364ec7f7e404cd662985eee7a80ec3a12fdd8d0e518a196c6ceef208f7ca4d398b3a3c433614605204a","ssdeep":"6144:TjloRAcFtrLMJtLHJ6ETmfE8c/+1Db2h67m3vRTUbNZV4sXoZYrxd7IY+J:TjeRNFtU8Ldz7IY+J","tlshash":"e2f4116223924c3c8b5e52527d7deb4da0f42c9b45daf878f89f2048e47d6a69ff0211","size":779540,"data":"","first_seen":"2026-06-30T17:37:51.789388Z","last_seen":"2026-06-30T21:45:28.583248Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/Y8bMVF1qei.js","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e79d4c70e52ba920d68b1ad8e622bd95","sha1":"10a8bfa031b9ccaf3d2703c0bfe2e91f746ca69c","sha256":"e2fde6a6a7420492da1f9655943470bdee02110efbd3aa0725a1570e1cf40700","sha512":"d29eb7ac6618fa6fc1ec3e5c71d946d6e9294d56f8c10cd2528f2d4586eda4102bcf4f11f95ba07ae1e2d67c445ba9127b85f659b4784c07307e382e246440d8","ssdeep":"6144:WX5E9Ych5fLMttLHP6ETmfEYc/+1DP2h6Dm3vRTUbNpb4QXoZYtpL7IkQV:WXO9Vh5ASzpl7IkQV","tlshash":"720563a32381883c8b5ed1527d7ddf4ca0f46d8b8dea6868e89f1049f56d7b68ef4140","size":804974,"data":"","first_seen":"2026-06-30T17:37:51.740047Z","last_seen":"2026-06-30T21:45:28.576638Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ff951fed8445f8ba919128a1148a4901","sha1":"b94514bf00f9f777fca5601f033ac5bdf6713909","sha256":"cf942a6d624ac01ac8fb216eb2a36a0bca8d8a9d6937dbfaf9404898de3df600","sha512":"4368400b2518b17c08b9d75db75b04a6b2125573c3a7c778c26c205f892ac634066183c000fd66119b90a38779336e4e284da552c898db7d8126317d87f9852b","ssdeep":"3072:CfzYzbF1QWyEjF1YlRw8RuniphPU0iHDh8L9x05C7TG2CDqee8snarBwxa5MkJUx:CLWWCipPeuarBwYQX3D8YY6ka","tlshash":"bd159a85a34ec007638c619f7910d9ba66ec741355be52cef463e9ac104bf938fa4c6e","size":927399,"data":"","first_seen":"2026-06-30T17:37:51.788254Z","last_seen":"2026-06-30T21:35:28.669381Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-5qqqoukwf.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2154bb1168373249b3a536c474b5fa75","sha1":"19e1aa24650c58b667ab5bff9fc33fd71ae4ab51","sha256":"0236d69bbb647262b0312850e42c6d643d4a55ee2700ee02ae6d7c00e935dfa2","sha512":"612ba452659d2ead11520b0c12a968e314533482974f5e90dbc133fc0010d229ca9acd3480787d12cc33fe295d45cd115e0064bc27850b3fea419c8758655d56","ssdeep":"3072:1airhPUgiZrhy59TUTu5TsGG+ImnmXjK9xbxv8YY6UE:1aiDTGqmXjK9dxv8YY6UE","tlshash":"7f259d469b4ec002b39c919f6914cdba56e9741365be12cff412e9dd6007f638fa0e2e","size":979304,"data":"","first_seen":"2026-06-30T17:37:51.768127Z","last_seen":"2026-06-30T21:45:28.571173Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/crypto-js@4.2.0/crypto-js.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb060f78b05401c0002626a0181dc176","sha1":"55877c78eb8580073eb71c6df76a8f0a59565177","sha256":"40e6e5d2212a00ff614d787856aa7f1af1fa6aac274022929f2b7541397f1a41","sha512":"6200c9a40b1cf14f7e39629efa29f716e6c6592b2ea6a169aded33f26749b0bfaf2e8feffad895c2039214ced244ba7b43afd799d0ab7b8a4b40ebb14f84a6de","ssdeep":"768:rzVGxaNQhg3p7nRmBjXXNmin9M9OT81h79etCU8VzrtNASU9ArHM+3wi:rzVi8We7n8jXXwFd9Q9ePtNPU9ArHMli","tlshash":"32533ac0769c609153eb29c0487f344b707b353a1b099998f265f9efacac5da803dd7a","size":63432,"data":"","first_seen":"2025-04-10T00:28:33.110782Z","last_seen":"2026-07-01T05:46:56.290162Z","times_seen":428,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"v3.0","filename":"https://fonts-css2-sans.b-cdn.net/index-33bmtv859.js line 1 \u003e Function","line_number":3,"column_number":2150275},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj77 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.6814339433554187] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":13399},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj78 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.782855307302e+12] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":14498},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj79 class:Function displayName:value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:14772 line:1 url:https://cdn.jsdelivr.net/npm/disable-devtool] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":14875},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj141 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj142 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj143 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj144 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj145 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj146 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj147 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj148 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj149 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj150 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj151 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":15485},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj213 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj214 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj215 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj216 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj217 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj218 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj219 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj220 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj221 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj222 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj223 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":15485},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj285 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj286 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj287 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj288 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj289 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj290 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj291 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj292 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj293 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj294 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj295 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":15485},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":7982},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj304 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.6814339433554187] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":13399},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj305 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.782855307302e+12] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":14498},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj306 class:Function displayName:value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:14772 line:1 url:https://cdn.jsdelivr.net/npm/disable-devtool] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":14875},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj368 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj369 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj370 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj371 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj372 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj373 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj374 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj375 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj376 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj377 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj378 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":15485},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":7982}]},"http":[{"url":{"schema":"https","addr":"allocations-grove.xyz/Y8bMVF1qei.js","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:49.491Z","timestamp":1782855289491,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocations-grove.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 02:33:14 GMT","end":"Sat, 26 Sep 2026 03:30:48 GMT"},"fingerprint":{"sha1":"84:F2:4E:08:08:E6:B8:02:0F:3F:25:4D:44:55:9F:52:2C:FA:0A:2E","sha256":"97:AA:7B:F5:27:C9:47:0F:37:9A:1D:8E:06:80:30:32:B9:18:A4:98:58:20:C6:98:4E:13:10:2C:7B:EC:BE:B7"}}},"request":{"raw":"GET /Y8bMVF1qei.js HTTP/1.1\r\nHost: allocations-grove.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:34:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 30 Jun 2026 21:08:52 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a443064-c486e\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wDK8aYfxfGDk3jEcbHK08xSvvzAJEeTBeeZxBwht5NYQBWJ6pilDXaWQx7ipyRigm4HQvs49HgZrobyK1HDHcGYWeKmusi0QD20xTjMvFNU02UeXPyeqFgVA3pBa7kDtWV6lVQv5%2Ft0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1404c178e6c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":804974,"size_decoded":209633,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e79d4c70e52ba920d68b1ad8e622bd95","sha1":"10a8bfa031b9ccaf3d2703c0bfe2e91f746ca69c","sha256":"e2fde6a6a7420492da1f9655943470bdee02110efbd3aa0725a1570e1cf40700","sha512":"d29eb7ac6618fa6fc1ec3e5c71d946d6e9294d56f8c10cd2528f2d4586eda4102bcf4f11f95ba07ae1e2d67c445ba9127b85f659b4784c07307e382e246440d8","ssdeep":"6144:WX5E9Ych5fLMttLHP6ETmfEYc/+1DP2h6Dm3vRTUbNpb4QXoZYtpL7IkQV:WXO9Vh5ASzpl7IkQV","tlshash":"720563a32381883c8b5ed1527d7ddf4ca0f46d8b8dea6868e89f1049f56d7b68ef4140","first_seen":"2026-06-30T17:37:51.740047Z","last_seen":"2026-06-30T21:45:28.576638Z","times_seen":3,"resource_available":true,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":277,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/sky-trees.png","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:49.507Z","timestamp":1782855289507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocations-grove.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 02:33:14 GMT","end":"Sat, 26 Sep 2026 03:30:48 GMT"},"fingerprint":{"sha1":"84:F2:4E:08:08:E6:B8:02:0F:3F:25:4D:44:55:9F:52:2C:FA:0A:2E","sha256":"97:AA:7B:F5:27:C9:47:0F:37:9A:1D:8E:06:80:30:32:B9:18:A4:98:58:20:C6:98:4E:13:10:2C:7B:EC:BE:B7"}}},"request":{"raw":"GET /sky-trees.png HTTP/1.1\r\nHost: allocations-grove.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:34:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 30 Jun 2026 21:08:52 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a443064-43ba2\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y5ynIbcevGZW9FI9BJ0U2M8z%2BHSeqHW7LXqDGcP2ZwzuXrg2w0ojJSfcI7uhOk4AvbSTsf9vv4G4UPcTr6Hh3YOE%2FXRxtPkFLBwyfppnfRMCHYC%2FDwtrqPe9iBtC0SMrYWgRgNBn3Kw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1404c179e74120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":277410,"size_decoded":277199,"mime_type":"image/png","magic":"PNG image data, 567 x 367, 8-bit/color RGBA, non-interlaced","md5":"39e5f807c1b4c1b47dd4ce9057ef8521","sha1":"6329c86a067a7b0ceefda292a2a7c2711469c7bb","sha256":"0d0bebd5eede91fcf4d06f686373fad6c47af74c9e0aedd8c5029604770eff86","sha512":"85166e50ff9f7a457caea0a600261713ac8e38af0ea316c1502e181362e50cf858cacef1750ab959b21bea497238add146ac5e18b9312def8996defccc52b3f3","ssdeep":"6144:A55MBRCAIXd5J3+29IWHXOvJ2hRrkNJ9s3Q0yILlnksDHYAi:A55Eo/N3u2AEiaQ0yILRksD8","tlshash":"c14423f2250bbaa3436e3d1fdbe5bcb4d78532177a05eb5484c7346221a8b90ca1cd5e","first_seen":"2026-06-30T21:35:28.626436Z","last_seen":"2026-06-30T21:35:28.626436Z","times_seen":1,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":297,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/hero-glyph.svg","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:50.546Z","timestamp":1782855290546,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocations-grove.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 02:33:14 GMT","end":"Sat, 26 Sep 2026 03:30:48 GMT"},"fingerprint":{"sha1":"84:F2:4E:08:08:E6:B8:02:0F:3F:25:4D:44:55:9F:52:2C:FA:0A:2E","sha256":"97:AA:7B:F5:27:C9:47:0F:37:9A:1D:8E:06:80:30:32:B9:18:A4:98:58:20:C6:98:4E:13:10:2C:7B:EC:BE:B7"}}},"request":{"raw":"GET /hero-glyph.svg HTTP/1.1\r\nHost: allocations-grove.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:34:50 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443064-20ce\"\r\nlast-modified: Tue, 30 Jun 2026 21:08:52 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XEPOcM0KvL0%2BLparmvYq0fcYE3JufHwvYDpoaRXlxUsXe%2BsEi4wjWQgUCKog%2Bc%2FCeyOmPcYJmBpgREdrPzd3K1TFbvl9cHaR8K42PeDyThDD1iAEJZztMW4WRiwfVGyM6PZN0tnXSbk%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1404c1e2fd5120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8398,"size_decoded":4434,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f6cfc0ff1da13ebf209a2946f535451b","sha1":"5b7c78000be6092b40a9327ac3a886307eb9b648","sha256":"4376c70dd3d6e51d57519492b0b954be0e960aa8cc4b56ca26bdca9104235bb0","sha512":"35b192c25a239308fd5254b18832a9ac70c41823464e4a2dc2724b2ba24e157866a8fbe63976abbe19b8faec3f93a5a9f9f38869315a9a225d0dc140bb238c29","ssdeep":"192:uoOw55E+UpqOGKBRfinyVZZZTishSMHFxpEHno+gie:Fy+9O9BZjishSMHvpEHoX","tlshash":"c502e85c63b9e3fcf001f7f8a51798757a9f24e63a024538c6446d94e86206ccea4ce7","first_seen":"2026-06-30T21:35:28.627805Z","last_seen":"2026-06-30T21:35:28.627805Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://lb.drpc.live/sei/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac","fqdn":"lb.drpc.live","domain":"drpc.live","tld":"live"},"ip":{"addr":"185.26.10.103","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:51.201Z","timestamp":1782855291201,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.drpc.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:CC:CB:80:17:FE:C1:17:2E:DA:C3:DF:4D:57:DD:44:BB:C7:75:7D","sha256":"43:B9:8E:E0:9E:BC:DA:26:35:3B:5B:06:7C:11:C8:98:F9:61:9C:63:4C:61:6A:4C:5C:47:7D:36:65:71:56:17"}}},"request":{"raw":"GET /sei/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac HTTP/1.1\r\nHost: lb.drpc.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://allocations-grove.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: nX6SGETJovdcr/oqDdI+jg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 30 Jun 2026 21:34:51 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: pQNSuGrkyaMl3gO9Y50z99Sznsk=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":230,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T11:18:39.62786Z","times_seen":16888305,"resource_available":true,"data":null}},"time_used":889,"timings":{"blocked":0,"dns":350,"connect":371,"send":0,"wait":83,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/vanilla-a524d433.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:35:08.391Z","timestamp":1782855308391,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/vanilla-a524d433.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://allocations-grove.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:35:08 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a014f7f-15f1\"\r\nlast-modified: Mon, 11 May 2026 03:39:43 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/28/2026 09:35:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b07b38ad7dd147d31ac6d011b5599089\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5617,"size_decoded":3555,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3750)","md5":"4969575c75181110cbdc633bb7727682","sha1":"e8dde53790ceb1b191e0244b13974d4544a96749","sha256":"4ef69cf1cbebf4cd3e511de09298e18f63248af091557d6722db017b7a5a1a56","sha512":"25d5208a37afdb1951ce79c1cdfc8c71d83db4968726fe20fc0751ff24f0fce334ade5ad0c7691cfc635c73928b53b9f0e17830aea090b24709adcc7f54f489c","ssdeep":"96:wNxSpBMEo4B20RY0B1WCigGZ6qY49EW9tM6TiuvnZb/GnD6GO+wyqVlYI9q8+hAn:wNxSoz4B2mY+Wb6d8S6TiufED6GbTOlv","tlshash":"7cc1e99475d771387f9589c6583e4433ba593823342dd460f1ae8d292f0e587c13ef6a","first_seen":"2026-01-02T19:16:12.734093Z","last_seen":"2026-07-01T04:46:52.226564Z","times_seen":170,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/hero-image-42-6.png","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:49.505Z","timestamp":1782855289505,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocations-grove.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 02:33:14 GMT","end":"Sat, 26 Sep 2026 03:30:48 GMT"},"fingerprint":{"sha1":"84:F2:4E:08:08:E6:B8:02:0F:3F:25:4D:44:55:9F:52:2C:FA:0A:2E","sha256":"97:AA:7B:F5:27:C9:47:0F:37:9A:1D:8E:06:80:30:32:B9:18:A4:98:58:20:C6:98:4E:13:10:2C:7B:EC:BE:B7"}}},"request":{"raw":"GET /hero-image-42-6.png HTTP/1.1\r\nHost: allocations-grove.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:34:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 30 Jun 2026 21:08:52 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a443064-e06b4\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UCanFppRssQ21XU%2Bowas65IEGnw3m22I0NOSUXPjKDaf2SpCnww6WP7E7szM4xGpuHeGfhGK2467dZ9bUoJFI6kctNR434LREFp5t2xtRSkU%2B%2BCJPB%2BwcARaTedYWCIRjqqLQZw63uQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1404c179e73120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":919220,"size_decoded":919477,"mime_type":"image/png","magic":"PNG image data, 1920 x 1446, 8-bit colormap, non-interlaced","md5":"6b6db15cb68181240b944b75d7d1a132","sha1":"ccba7d353d5234b096acc297de3e97ed6ae9a8de","sha256":"b87ace2cd9d1838a9823cb9f6fc67c2b488a56bb4c47576f7ec6bc748c9141d1","sha512":"bfb8db44768e327855a59a6e490e043836cd61eacd9b3c85e3604a3f9cbd1c8bf7c004610ceead858cd29f4d0c1f827f0652bdb2913ccad20ddae15f0ab8d622","ssdeep":"24576:qKeOVruhFqnJyLXmbZScUQnuxQaRwOSQm/3B0o8b:qKtSUSwUQnuK//3Bi","tlshash":"8b153340ccc394a6c60b107557648b0474a37f4ab935abeed5db7ad4c0cfa6a01babe4","first_seen":"2026-06-30T21:35:28.630949Z","last_seen":"2026-06-30T21:35:28.630949Z","times_seen":1,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":383,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/community-birds.png","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:49.513Z","timestamp":1782855289513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocations-grove.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 02:33:14 GMT","end":"Sat, 26 Sep 2026 03:30:48 GMT"},"fingerprint":{"sha1":"84:F2:4E:08:08:E6:B8:02:0F:3F:25:4D:44:55:9F:52:2C:FA:0A:2E","sha256":"97:AA:7B:F5:27:C9:47:0F:37:9A:1D:8E:06:80:30:32:B9:18:A4:98:58:20:C6:98:4E:13:10:2C:7B:EC:BE:B7"}}},"request":{"raw":"GET /community-birds.png HTTP/1.1\r\nHost: allocations-grove.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:34:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 30 Jun 2026 21:08:52 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a443064-1442853\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2BeLcFpC%2BCUe4fRoPRrZ%2FEXnbgdMGc0Gh1901hLQTjAODiqhjCaeH%2FLtI%2ByLOBnAooaCMxxg91Il249SalqQ4IX8Vve689YL6caAMmjJhkaK9kLYcgzZdwbHdWSBLu5OhXe0LldA2o0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1404c17ae7a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21243987,"size_decoded":21197119,"mime_type":"image/png","magic":"PNG image data, 3000 x 2539, 16-bit/color RGBA, non-interlaced","md5":"8a9f9c0da872751b261f3d51c48e5efb","sha1":"91d1463122182b3c56ec07ac99e9d2f044b42ca4","sha256":"f46f6e830779870b4c6594afe9c404ff3b85d04183a71c467f8ff8e6dcbd1243","sha512":"0c866b20552cfa6f86393325ecbe241844bfbfe3effeae1fd8c8678709c02e43254378e2d799060da0250e93f33a71e854f2c682c5fa9531151b550b36e72abb","ssdeep":"24576:fHGEEium29/T6oURGen6797YD5ppL1fXDtJcf:fHGblTqkenSeD5p7TA","tlshash":"fb2512606b67e94cb346246ec9b898d2ef9345f6dc016ccaf59f21899f42f804c4f4e6","first_seen":"2026-06-30T21:35:28.632361Z","last_seen":"2026-06-30T21:35:28.632361Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":1128,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/WebCryptoP256-75947b09.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:35:08.402Z","timestamp":1782855308402,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/WebCryptoP256-75947b09.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://allocations-grove.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:35:08 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a014ffd-18af6\"\r\nlast-modified: Mon, 11 May 2026 03:41:49 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 385\r\ncdn-proxyver: 1.57\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/18/2026 15:17:48\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 883aebab3d00708cfacb2768ad5f3bd4\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":101110,"size_decoded":34032,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (25222)","md5":"a5feffbcac020bf864c25ad8eba39311","sha1":"c88751cfb6b9d164f416b29413b91fff2b51e65e","sha256":"0acd1bfc4ca717b00d6bcf0ac59bda01c3b4c028a257c3183363cfecd6c820c2","sha512":"0669109d9876b501e2d66f2727d1fc8a062f87586dd8b15a983b3348043231c96fa3bf171a59926bc75208e0459d8759ca5ca69a038dfaef95bb0848f51d2918","ssdeep":"3072:c+d4Zd4nd4Dd4Dd4PpuE0pKVTsEfndAk2B4uJF0ccsjo1o8D:0pf0pKVTsEfnF2qAF0Cjoi8D","tlshash":"36a30a806196b4a94ef375e955138001f470ec6174dd8481b2ecd9bb3eee88987ebf39","first_seen":"2026-05-12T17:14:33.807348Z","last_seen":"2026-07-01T01:44:53.112906Z","times_seen":79,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meow-rpc-mainnet.com/","fqdn":"meow-rpc-mainnet.com","domain":"meow-rpc-mainnet.com","tld":"com"},"ip":{"addr":"172.67.179.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:35:08.412Z","timestamp":1782855308412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meow-rpc-mainnet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 15:56:30 GMT","end":"Wed, 09 Sep 2026 16:55:16 GMT"},"fingerprint":{"sha1":"BC:D6:57:2C:F9:40:B1:C5:9C:A2:8E:FE:60:8D:F5:B8:53:FA:17:B9","sha256":"DE:19:F7:9E:15:18:78:DC:34:34:05:50:91:CB:0C:53:50:56:08:82:4D:95:BE:D4:F9:8E:FF:94:65:BE:C5:34"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: meow-rpc-mainnet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,user-agent,x-client-transaction-id,x-hmac-signature,x-nonce,x-payload-hash\r\nReferer: https://allocations-grove.xyz/\r\nOrigin: https://allocations-grove.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:35:09 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-Client-Transaction-ID, X-HMAC-Signature, X-Nonce, X-Payload-Hash, Referer, Sec-Ch-Ua, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Platform, User-Agent, Cache\r\naccess-control-max-age: 1728000\r\ncontent-type: text/plain; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oWp0mmJ21PjzXDKI2sD5iKJhml3Gc7%2FHdl%2FAUqNiFvXTvGk6r0PjcOC4hGM%2FTXjK%2FXxxow7ocTDlidbry8%2BZbZ1CS1n1mFF8KH7RYqI37dv488ofve2N25VSk4DUaeDybmuKGEK5AA%3D%3D\"}]}\r\ncf-ray: a1404c8e895c712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":885,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T11:18:39.62786Z","times_seen":16888305,"resource_available":true,"data":null}},"time_used":781,"timings":{"blocked":0,"dns":61,"connect":68,"send":0,"wait":652,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/sky-grove-emblem-new.svg","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:49.511Z","timestamp":1782855289511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocations-grove.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 02:33:14 GMT","end":"Sat, 26 Sep 2026 03:30:48 GMT"},"fingerprint":{"sha1":"84:F2:4E:08:08:E6:B8:02:0F:3F:25:4D:44:55:9F:52:2C:FA:0A:2E","sha256":"97:AA:7B:F5:27:C9:47:0F:37:9A:1D:8E:06:80:30:32:B9:18:A4:98:58:20:C6:98:4E:13:10:2C:7B:EC:BE:B7"}}},"request":{"raw":"GET /sky-grove-emblem-new.svg HTTP/1.1\r\nHost: allocations-grove.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:34:49 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443064-2378\"\r\nlast-modified: Tue, 30 Jun 2026 21:08:52 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LDzDSqjU0F7Ghc3fc7Z6egTS1HY5tHAXXZCFgjgNnO2QaQGwq%2BDaWOhm0fqn6Gxo0gaEKw%2FtZpoPem%2Ful%2F02j4B1vLlpD9UW%2BW1SzTokebmkcKrJkLM5VInnWgG13bBm1EzL5DCF%2Fb4%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1404c17ae78120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9080,"size_decoded":4680,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a2dbca30cb6f6320b025e415ce1c5511","sha1":"0cb933b2f07dbcda16eba9e82a4a5063cf7d7b8f","sha256":"421dc422aa7d2ce112311cf358288e0e61dc21bb960816690250a5c4394cbe8a","sha512":"d6f8b28b5de39886546abb75a8fbf354ac1b39b6c3953942ee63fcfa3a59420d48a8ed57ab2062e1b0e7957e85f3e34d1a9d1687943cbf0dd680f7d85da3c39c","ssdeep":"192:4ZgZc1WkI+RHZi/38Ee07ELbf0cgSWyQ4MdJFoFnCgJzic8QYaO+ic:yp1WkI+R5+3uG2jWr9YFb78KT","tlshash":"341295cda3b591e4f402e3f8d83254763b172dfb2e51caa8c3e44c01e5a24ad8d56c47","first_seen":"2026-06-30T21:35:28.634861Z","last_seen":"2026-06-30T21:35:28.634861Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/Apollo_Figma.svg","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:50.552Z","timestamp":1782855290552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocations-grove.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 02:33:14 GMT","end":"Sat, 26 Sep 2026 03:30:48 GMT"},"fingerprint":{"sha1":"84:F2:4E:08:08:E6:B8:02:0F:3F:25:4D:44:55:9F:52:2C:FA:0A:2E","sha256":"97:AA:7B:F5:27:C9:47:0F:37:9A:1D:8E:06:80:30:32:B9:18:A4:98:58:20:C6:98:4E:13:10:2C:7B:EC:BE:B7"}}},"request":{"raw":"GET /Apollo_Figma.svg HTTP/1.1\r\nHost: allocations-grove.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:34:50 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443064-1099\"\r\nlast-modified: Tue, 30 Jun 2026 21:08:52 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s6n5M3IBb6qe7lz%2F9e478cyQPp5R13lZeJmL6QnN6xCkAgl%2BH4Paj5YRuvu0YmeLsW2IR1ES%2FGQPLqblvb3o8WNcxamatrCBTwKfh88YM57z%2ByMgS4exGs%2FQTE00KvRUxRoL%2B0aCUN0%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1404c1e2fdc120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4249,"size_decoded":2638,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8ab119058b84392bffe3deed45ca9d8a","sha1":"2eb83c2d98d899cbbaf25398fff34ee13d3ef2c8","sha256":"a26050589eaf5077dfc425a5c92594422bbd28c7143b34f64a05e376ff022eda","sha512":"f73b938d0a2883f4eddd6e4d07d27b15d45e1d12f847f52d381b8f081bc04362422a4e8ca333ef97cc8462ac3e134005b551b5f6224d8d72b878738c9e7fe187","ssdeep":"96:uobZtJ+FpLG/TT0dFkpu6EDLRsP2bVE02GkHd88:uobZP+FpLG/TT0Epu6EDiWVMG18","tlshash":"50912aef3af082e9de46d2d7b60454af724d54fe8992cb68c2ac5f257491079dc04c92","first_seen":"2026-06-30T21:35:28.635958Z","last_seen":"2026-06-30T21:35:28.635958Z","times_seen":1,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/JanusHenderson_Figma.svg","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:50.554Z","timestamp":1782855290554,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocations-grove.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 02:33:14 GMT","end":"Sat, 26 Sep 2026 03:30:48 GMT"},"fingerprint":{"sha1":"84:F2:4E:08:08:E6:B8:02:0F:3F:25:4D:44:55:9F:52:2C:FA:0A:2E","sha256":"97:AA:7B:F5:27:C9:47:0F:37:9A:1D:8E:06:80:30:32:B9:18:A4:98:58:20:C6:98:4E:13:10:2C:7B:EC:BE:B7"}}},"request":{"raw":"GET /JanusHenderson_Figma.svg HTTP/1.1\r\nHost: allocations-grove.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:34:50 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443064-2e10\"\r\nlast-modified: Tue, 30 Jun 2026 21:08:52 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vhNW2Exe%2BXM0qAshhCaOd%2BOuOlb5UDcNU%2BnnLq%2BslcHfT5Q8pvUxaptKfBNwPI4sRyJHV32viRXQtXDDWciqtKEQ8nDKcp2CYVYiszxxboSgvTTMTJnIRpMoO%2FLhcxFziJph5AGU%2FsU%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1404c1e2fde120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11792,"size_decoded":5429,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0236f4eb1f0938ec108d1843453bf8cd","sha1":"20492d194b1d9bc7381c97a595903a72289d2d67","sha256":"f7c073589166d09be4adf08d7c418409c39b8fd5c87d92fef8c99e413c1e98fb","sha512":"aa161c04d82fc1a12714d5ff9a9aaa8e0733df2a7f6c55de74d7f2f908c95904092186831b5f3789102999bdbf52de27749cba60d328d420e42570d73b5474b4","ssdeep":"192:uoDDOAlGmPvyDKEMaO4B7kg72sOUImAKWi9s3Gj8QphW5ayk/C:+AlBDEvO4B7kg7rvI6WBWjl/W5Hv","tlshash":"383241df76a451f1de43e3d7fb99409f700f64fa4a918f60c35d6a2a3c86998d805883","first_seen":"2026-06-30T21:35:28.637061Z","last_seen":"2026-06-30T21:35:28.637061Z","times_seen":1,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:49.497Z","timestamp":1782855289497,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocations-grove.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 02:33:14 GMT","end":"Sat, 26 Sep 2026 03:30:48 GMT"},"fingerprint":{"sha1":"84:F2:4E:08:08:E6:B8:02:0F:3F:25:4D:44:55:9F:52:2C:FA:0A:2E","sha256":"97:AA:7B:F5:27:C9:47:0F:37:9A:1D:8E:06:80:30:32:B9:18:A4:98:58:20:C6:98:4E:13:10:2C:7B:EC:BE:B7"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: allocations-grove.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Thu, 02 Jul 2026 21:34:49 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sKJLesEo7DJ03QucF%2BodAst2vYVUvCbS2QQur%2FFTFMU3JUlCKC4MFkZX%2Fyaa%2BLmcAngqQDo76poViar8dm7KQPWqNBCUkegfeoLodcjIUbfylDXO6%2BXss9fOS%2BsNHWEbkEHJ2EyH0NU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Tue, 30 Jun 2026 21:34:49 GMT\r\nserver: cloudflare\r\ncf-ray: a1404c178e6f120a-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1304,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-01T11:18:18.508668Z","times_seen":383530,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/secp256k1-e313781b.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:35:08.400Z","timestamp":1782855308400,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/secp256k1-e313781b.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://allocations-grove.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:35:08 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a014de3-8955\"\r\nlast-modified: Mon, 11 May 2026 03:32:51 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.57\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/18/2026 15:17:48\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a4466dcf95dffb2bcbcffc5135986f1f\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":35157,"size_decoded":15924,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35156)","md5":"9396674f0307715f7a19ae45515db869","sha1":"b1bef3376cb51b33b53e4c1363a8c6667e801229","sha256":"abda17e7e460aea577ca9d2be0cf579f5b1c05fdd030be174d3ac925b49348e9","sha512":"7b5b6239e994bec283b811c092781a37333b4a7e48e4200d4a0d4e530b1dd103854541744e1480b6f06d54dc65a3aba56057d933ce3a5a8914318b2c0d7b627d","ssdeep":"768:6+qWy9oCX0XkPbiCAb168K/JkYaiqVVvmRoNwiz5RdUgDq34L2lR2KaYkm2XKFtS:ll9163MNq3+UbhB+Kt+p4VoIbA","tlshash":"b7f2e84422d1747293fa28d005725102f679ec64b5cf8c90e59c8dbb3ef34a98ab6e3d","first_seen":"2026-05-12T17:14:33.792388Z","last_seen":"2026-07-01T01:44:53.090233Z","times_seen":79,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/Aave_Figma.svg","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:50.548Z","timestamp":1782855290548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocations-grove.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 02:33:14 GMT","end":"Sat, 26 Sep 2026 03:30:48 GMT"},"fingerprint":{"sha1":"84:F2:4E:08:08:E6:B8:02:0F:3F:25:4D:44:55:9F:52:2C:FA:0A:2E","sha256":"97:AA:7B:F5:27:C9:47:0F:37:9A:1D:8E:06:80:30:32:B9:18:A4:98:58:20:C6:98:4E:13:10:2C:7B:EC:BE:B7"}}},"request":{"raw":"GET /Aave_Figma.svg HTTP/1.1\r\nHost: allocations-grove.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:34:50 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443064-9a1\"\r\nlast-modified: Tue, 30 Jun 2026 21:08:52 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BVoRoKrDMyswEcwXMGYblH9bvUZO79YzFQUlkzMvq3IU%2BR5tpTIO5OP7u5HRPmBd6Lr%2FUnc1gcTmDGBtY9m8V%2BP2PCJAGFNSRGAX3WXWJyAK%2FFIAymh%2F3SytJFcXLnSc90YkUnsTChk%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1404c1e2fd7120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2465,"size_decoded":1589,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"792e969f96b89c4f10e56237b6d74e45","sha1":"79bdf934a87c57de065c1d29bc58fa2a7adea5c6","sha256":"aa07305b136798951c15315511d164c2bc85e27319208189958d8060ed1ca065","sha512":"e1fc90f580c84e60cf6979161ffa6d72f98a1ebba029ff900650be3b488a75c5a67ab6407b8696f747bbc5542e408d05ac61356eea21676229e5c3837c768c41","ssdeep":"","tlshash":"c851eccc7b25dcdc788a53d0ff0200a95416ad5c9a8d4a95d30cde387891d985a299a7","first_seen":"2026-06-30T21:35:28.639911Z","last_seen":"2026-06-30T21:35:28.639911Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://evm-ws.sei-apis.com/","fqdn":"evm-ws.sei-apis.com","domain":"sei-apis.com","tld":"com"},"ip":{"addr":"172.66.165.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:51.161Z","timestamp":1782855291161,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sei-apis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 16:31:02 GMT","end":"Thu, 17 Sep 2026 17:30:59 GMT"},"fingerprint":{"sha1":"F7:54:4A:9D:6B:E1:CD:3A:65:6E:78:70:32:E7:F7:52:52:4B:BB:3F","sha256":"05:07:06:AE:71:D9:04:67:14:12:6F:4C:BA:D4:3F:4B:04:0A:99:26:A0:34:D1:22:42:4E:76:04:43:CA:B9:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: evm-ws.sei-apis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://allocations-grove.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 0XoK62V24IvTzftDufcvew==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 30 Jun 2026 21:34:53 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: DETh/cyikyX5iIrY95EIH2NJLgI=\r\nx-via: het-fal-2075395\r\nx-servername: ovh-fra-31750947\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nSet-Cookie: __cflb=0H28ux4xzBpPxFMeuxdenTbi6MmBqwWAzU27oPJiBgf; SameSite=None; Secure; path=/; expires=Tue, 30-Jun-26 22:34:53 GMT; HttpOnly\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Allow-Methods: POST, GET, PUT, HEAD, OPTIONS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Max-Age: 86400\r\nServer: cloudflare\r\nCF-RAY: a1404c244ef6b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":672,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T11:18:39.62786Z","times_seen":16888305,"resource_available":true,"data":null}},"time_used":2401,"timings":{"blocked":0,"dns":247,"connect":241,"send":0,"wait":1845,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:35:06.702Z","timestamp":1782855306702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/disable-devtool HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 30 Jun 2026 21:35:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6646\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.3.9\r\nx-jsd-version-type: version\r\netag: W/\"4514-YJEJ2C3rDH3T2dISgI3LoFSM49E\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230179-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 23725\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JD01mvOHwFvCgdboPBC%2FPwxOwdBHjwIJH2UL%2FpcrqnXc9sMOnBi00MyhOZIJGY%2Fy84YqpyXbRN68qX5R7TcUxab0pMUTm45AIUdsxbGFASWJlEr%2FfrL%2BhtmvOVJ4g2s6fho%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a1404c82fddf56c6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17684,"size_decoded":7771,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17663)","md5":"7fa174926682313cc5a067077b0bb22d","sha1":"609109d82deb0c7dd3d9d212808dcba0548ce3d1","sha256":"5a7b9b2c807f85575c9ebc1f508e849b53430870b2d0fb6c02b2de3df661cb63","sha512":"83a593d4b8648b78031259becd96b4c33226e9462c2e26013ee0746ff58a7b710159d0d380d001d7740e9485ee346491c16e3fdb0d334f5b6cfabe6f90cda9b6","ssdeep":"192:m+5ekRvDLCpBK+BpP78nPk6O9ShgzsqcSYV0GtI+uwicvsbIUiJE2KmnyKU:mLiPCvRvT8nPk6cSCzsqGVJeZcsb8S9","tlshash":"0582c4ccb48270715b77a9e9507f454ab23aae96888c8040f13ed8e42c7c56ec267f7d","first_seen":"2025-08-02T03:49:54.562881Z","last_seen":"2026-07-01T06:07:00.083424Z","times_seen":4670,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/localBatchGatewayRequest-67d3b9fa.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:35:08.397Z","timestamp":1782855308397,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/localBatchGatewayRequest-67d3b9fa.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://allocations-grove.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:35:08 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a014dbd-6f5\"\r\nlast-modified: Mon, 11 May 2026 03:32:13 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.57\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/18/2026 15:17:48\r\ncdn-edgestorageid: 830\r\ncdn-requestid: bb202cb36dfbdc8f5be50620be7b39e0\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1781,"size_decoded":1850,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1780)","md5":"e48c53f166d2984de394c6de464f477c","sha1":"8f55478ff132d0c9529939eb18ca867fe946a4a9","sha256":"6facfd5edbe7658d2e5055a71202a63f155954024af5568265575df49aac0f03","sha512":"98c3b21f0d404fc4a6906125766afb096407acef4b944488509e93fc775b5eff8514d0fffed059160c4a947efab19edfb8ff4781d2fea76ed909f02c80030338","ssdeep":"","tlshash":"fe3171c8b609da32d4af2932640ff45090312945b82d80b1d90f30f39f305c4aaafd0c","first_seen":"2026-05-12T17:14:33.809283Z","last_seen":"2026-07-01T04:46:52.25373Z","times_seen":80,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/sky-grove-wordmark-new.svg","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:49.510Z","timestamp":1782855289510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocations-grove.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 02:33:14 GMT","end":"Sat, 26 Sep 2026 03:30:48 GMT"},"fingerprint":{"sha1":"84:F2:4E:08:08:E6:B8:02:0F:3F:25:4D:44:55:9F:52:2C:FA:0A:2E","sha256":"97:AA:7B:F5:27:C9:47:0F:37:9A:1D:8E:06:80:30:32:B9:18:A4:98:58:20:C6:98:4E:13:10:2C:7B:EC:BE:B7"}}},"request":{"raw":"GET /sky-grove-wordmark-new.svg HTTP/1.1\r\nHost: allocations-grove.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:34:49 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443064-2ac1\"\r\nlast-modified: Tue, 30 Jun 2026 21:08:52 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NAh%2F7JqO%2BtZlYClUM374ps%2BDK8Py4%2BENXOhbTEmO1mnj6phff3SdDF66E9XLRfi4RsEYRWOWFOGSfRfSDWbkz1k8bE%2B24wHLcJmy88ABh4iFOrbIX7EVMQ%2FZxcaa3Ftq3hbfSy5parg%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1404c179e77120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10945,"size_decoded":5299,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a6594063fcb74fcd0a7cd08b010bbba4","sha1":"b6b9e5b6140cc6eb01585cdad0958cdb4b62e33c","sha256":"99395203056ab37c3a39a9bc831bbbd252de4c5d9e4c239da4dbc9be2f17ebfe","sha512":"a40a79bb728dfd927c7c0a3e0e7dd434f7a71c4a709468adadd56ead589b784f5e0f6b5cd2cda557ec3d7d7750ecb89d875661a415ae47077854670044bfb73a","ssdeep":"192:46GZogjmEb1C1c/nQCEVdjw1IeNybTPGytyRU6BlqpSJiZImfA:HG2WJ1T/nQCELk19NyfPGytO5jgZImfA","tlshash":"bc3295ec6b7a53bcf581f1fada2768c86e0e74e6b3414174cb2a3d1660520d4de5a0e2","first_seen":"2026-06-30T21:35:28.642135Z","last_seen":"2026-06-30T21:35:28.642135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://side-still-sky.megaeth-mainnet.quiknode.pro/33b9c3d0862e8dddb88b3efd2737305bd754fbf0","fqdn":"side-still-sky.megaeth-mainnet.quiknode.pro","domain":"quiknode.pro","tld":"pro"},"ip":{"addr":"64.31.51.141","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:51.215Z","timestamp":1782855291215,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaeth-mainnet.quiknode.pro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 07:03:24 GMT","end":"Sun, 09 Aug 2026 07:03:23 GMT"},"fingerprint":{"sha1":"8D:E1:FE:F0:FA:BA:70:B9:6E:F9:36:61:5C:4E:D9:2E:16:39:40:CD","sha256":"BB:DF:85:3A:9F:F9:99:C8:62:B3:D9:52:16:FA:9D:4D:7A:88:62:75:36:87:33:DC:A6:D9:85:4B:DE:2F:80:3D"}}},"request":{"raw":"GET /33b9c3d0862e8dddb88b3efd2737305bd754fbf0 HTTP/1.1\r\nHost: side-still-sky.megaeth-mainnet.quiknode.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://allocations-grove.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: R+edMRPIIC3z3yRJ8oUlMA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: mKu9c39OsJtarAohYZ1qrvTCf3w=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":129,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T11:18:39.62786Z","times_seen":16888305,"resource_available":true,"data":null}},"time_used":3401,"timings":{"blocked":0,"dns":1301,"connect":1518,"send":0,"wait":303,"receive":0,"ssl":278},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://lb.drpc.live/megaeth/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac","fqdn":"lb.drpc.live","domain":"drpc.live","tld":"live"},"ip":{"addr":"185.26.10.103","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:51.824Z","timestamp":1782855291824,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.drpc.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:CC:CB:80:17:FE:C1:17:2E:DA:C3:DF:4D:57:DD:44:BB:C7:75:7D","sha256":"43:B9:8E:E0:9E:BC:DA:26:35:3B:5B:06:7C:11:C8:98:F9:61:9C:63:4C:61:6A:4C:5C:47:7D:36:65:71:56:17"}}},"request":{"raw":"GET /megaeth/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac HTTP/1.1\r\nHost: lb.drpc.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://allocations-grove.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: yCMGm6dzNyWYCvc4b1uoIw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 30 Jun 2026 21:34:51 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: MvH1a2KhEoAludMCQjtLaHXByTI=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":230,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T11:18:39.62786Z","times_seen":16888305,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":76,"send":0,"wait":26,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meow-rpc-mainnet.com/","fqdn":"meow-rpc-mainnet.com","domain":"meow-rpc-mainnet.com","tld":"com"},"ip":{"addr":"172.67.179.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:35:08.409Z","timestamp":1782855308409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meow-rpc-mainnet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 15:56:30 GMT","end":"Wed, 09 Sep 2026 16:55:16 GMT"},"fingerprint":{"sha1":"BC:D6:57:2C:F9:40:B1:C5:9C:A2:8E:FE:60:8D:F5:B8:53:FA:17:B9","sha256":"DE:19:F7:9E:15:18:78:DC:34:34:05:50:91:CB:0C:53:50:56:08:82:4D:95:BE:D4:F9:8E:FF:94:65:BE:C5:34"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: meow-rpc-mainnet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Client-Transaction-ID: H6A+fzr6HywO8akzGLUbuXnYAk6lrjwmcC4p6e5T2WzF3u22b2+mztmF69WHsrw1Q5U0xjtfzYOeZGWXwJlg1w==\r\nX-HMAC-Signature: 1782855308H=e\r\nX-Nonce: 5aWOaN1CyPDHypl0\r\nX-Payload-Hash: siteVisit\r\nContent-Type: application/json\r\nReferer: https://allocations-grove.xyz/\r\nContent-Length: 2272\r\nOrigin: https://allocations-grove.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:35:09 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \"\"\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-Client-Transaction-ID, X-HMAC-Signature, X-Nonce, X-Payload-Hash, Referer, Sec-Ch-Ua, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Platform, User-Agent, Cache\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zf07X9NIwxUW0WbRKzg2i%2F%2F9r%2BdzRcvL5VipFqa4W%2FHh%2FX95zfwc3h8MpnFSHTOoUkcpkNZ%2FlcKeNz8zic37PxV%2FzvOsWQT7y0QezAPanc052AWsbKlZe7pesNKh7OS4tIS5AFHshQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1404c92b972712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85,"size_decoded":1129,"mime_type":"application/json","magic":"JSON text data","md5":"18beef3854dc2d189dba09b3497b6c3e","sha1":"cda5334b2d0830258454dcb507a12cff3ff6e791","sha256":"70f7be58684b00cc1369eb33a64a889ae2f76553ac09c10f496316b72ecaa74e","sha512":"e55c09fbef1d9f47442d0ac8cc808f756f3821556ad6ec57caa5a32ecef8e4f8df7e2665ff13a67a728c12bf5458781b97141ea399ad838e3e6e9e091187a7ea","ssdeep":"","tlshash":"90a0120450060e1b07c3840a720015b464c0faa51194184520bc95990718800470b221","first_seen":"2026-06-30T21:35:28.643174Z","last_seen":"2026-06-30T21:35:28.643174Z","times_seen":1,"resource_available":false,"data":null}},"time_used":645,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":645,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@6.16.0/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:50.490Z","timestamp":1782855290490,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/ethers@6.16.0/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:34:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 158543\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 6.16.0\r\nx-jsd-version-type: version\r\netag: W/\"7f76f-TlwAOVM5qPT9+i7T6zeg3ACnkJs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230156-FRA, cache-bma-essb1270054-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2301200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tm7c1nrvI5Us%2F8keSaxEtVphM4MbvPvwo3SIgY%2FRsJ%2BwOs958SjMmOSTNeN%2FdfC%2Fj3W%2FGrTQlZQjMAbqkun1cFK5UGeWWfThYbxpyWw0yGLW9jsMN8UFMC7gmfR6WKz4VZI%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a1404c1f9c6e56ca-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":522095,"size_decoded":159699,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"556e49c10fd81a990b6281dcdc87bcd9","sha1":"4e5c00395339a8f4fdfa2ed3eb37a0dc00a7909b","sha256":"9a85a5aa81305f85e6546452fd2093a8a68932bed3cec4f6491e4d031a90bc95","sha512":"7e2dcc5cbe076d1c2d18053dda25b46c21f667367c1b28d13a2b489c507dbf8500a9f083328f1e54d417647ea8ff79cba9b7a97c9a1e5e35043cae9aba9861b6","ssdeep":"12288:2u8zZJf+vZGJzPfQAqa24VcpPfC1WgplCvPPko2Nz7jTO:2u8z7f+vZGJzPfQAqa2T4FAs1Nz7fO","tlshash":"dbb44cd132e3647287c618e52c650902f238f952705d44ecf66cdde26eabd8994bbf38","first_seen":"2025-12-21T04:14:54.672175Z","last_seen":"2026-07-01T05:46:56.294627Z","times_seen":347,"resource_available":true,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":62,"connect":67,"send":0,"wait":86,"receive":136,"ssl":149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/Maple_Figma.svg","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:50.556Z","timestamp":1782855290556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocations-grove.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 02:33:14 GMT","end":"Sat, 26 Sep 2026 03:30:48 GMT"},"fingerprint":{"sha1":"84:F2:4E:08:08:E6:B8:02:0F:3F:25:4D:44:55:9F:52:2C:FA:0A:2E","sha256":"97:AA:7B:F5:27:C9:47:0F:37:9A:1D:8E:06:80:30:32:B9:18:A4:98:58:20:C6:98:4E:13:10:2C:7B:EC:BE:B7"}}},"request":{"raw":"GET /Maple_Figma.svg HTTP/1.1\r\nHost: allocations-grove.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:34:50 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443064-bad\"\r\nlast-modified: Tue, 30 Jun 2026 21:08:52 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0oaFD5lUoIMZ97mpLQLG%2Fomu6ZfEM69TzEiPHbQxSKEb4nk8Rh22I%2BmQ28McOKOBJQFddMoGocuuncs69OeS5MaRP5Rzlo67vP9%2BfUszyBQkcyZ9aQ8ADUp3sfcILYmu2qz5%2FHQqsOw%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1404c1e3fe1120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2989,"size_decoded":2016,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1fae55597f663dd4cf76d5053218ccc4","sha1":"69f832d5a52d3613ae9d69d91748bc694d6376b3","sha256":"fb5062f58af6cf57dfa89e72a121978b2154dcbeac680e33a952cbc79af444a1","sha512":"613b19b1931c8c86f874a8f2a3956b577efaefe77a2582e33bba264840c8d6d642a664e8936b7be0dfeda44be9a2fd79c8bf7ca044d0fa79215bbfcf17630831","ssdeep":"","tlshash":"ce5142cc333651a8f488a7e85d5b962abf0668d4df89c58ac310ad15708359d8c7a5d3","first_seen":"2026-06-30T21:35:28.644868Z","last_seen":"2026-06-30T21:35:28.644868Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://side-still-sky.sei-pacific.quiknode.pro/33b9c3d0862e8dddb88b3efd2737305bd754fbf0","fqdn":"side-still-sky.sei-pacific.quiknode.pro","domain":"quiknode.pro","tld":"pro"},"ip":{"addr":"208.115.248.54","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:51.196Z","timestamp":1782855291196,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sei-pacific.quiknode.pro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 20:08:32 GMT","end":"Wed, 19 Aug 2026 20:08:31 GMT"},"fingerprint":{"sha1":"81:A8:2C:BA:5E:9B:1C:0F:5B:E4:1C:EE:54:08:DE:00:B4:DB:EF:C1","sha256":"7F:81:39:68:7E:41:01:03:CE:63:BD:EF:42:A9:76:DE:E0:38:1C:D9:86:E0:E9:11:24:1E:DC:9B:E8:E2:1F:E8"}}},"request":{"raw":"GET /33b9c3d0862e8dddb88b3efd2737305bd754fbf0 HTTP/1.1\r\nHost: side-still-sky.sei-pacific.quiknode.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://allocations-grove.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 8BYURXuLWRgn2yI2f2XcQA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: cWnKU59upl3MkrHYO1vKpJj4cK8=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":129,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T11:18:39.62786Z","times_seen":16888305,"resource_available":true,"data":null}},"time_used":895,"timings":{"blocked":0,"dns":385,"connect":355,"send":0,"wait":77,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/crypto-js@4.2.0/crypto-js.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:52.867Z","timestamp":1782855292867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/crypto-js@4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 30 Jun 2026 21:34:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 23305\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.2.0\r\nx-jsd-version-type: version\r\netag: W/\"f7c8-VYd8eOuFgAc+txxt92qPCllWUXc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220089-FRA, cache-ber1080035-BER\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 4103755\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zhYWGW1WbeME6G1CCeH9uNC58qaCN493Vt0ahB36VRnY0VBgXegwW5W%2FLJkDFc6yrK149zJhqpL5jj6Tm%2BErO9l7j4UrgZRKcUyzXNzBR2i5uxhMxczOX6wFSzLzRkfdjP8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a1404c2c684556c6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63432,"size_decoded":24470,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31809)","md5":"bb060f78b05401c0002626a0181dc176","sha1":"55877c78eb8580073eb71c6df76a8f0a59565177","sha256":"40e6e5d2212a00ff614d787856aa7f1af1fa6aac274022929f2b7541397f1a41","sha512":"6200c9a40b1cf14f7e39629efa29f716e6c6592b2ea6a169aded33f26749b0bfaf2e8feffad895c2039214ced244ba7b43afd799d0ab7b8a4b40ebb14f84a6de","ssdeep":"768:rzVGxaNQhg3p7nRmBjXXNmin9M9OT81h79etCU8VzrtNASU9ArHM+3wi:rzVi8We7n8jXXwFd9Q9ePtNPU9ArHMli","tlshash":"32533ac0769c609153eb29c0487f344b707b353a1b099998f265f9efacac5da803dd7a","first_seen":"2025-04-10T00:28:33.110782Z","last_seen":"2026-07-01T05:46:56.290162Z","times_seen":428,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/hooks.module-dd6ad649.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:35:08.393Z","timestamp":1782855308393,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/hooks.module-dd6ad649.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://allocations-grove.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:35:08 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a014db1-3bfd\"\r\nlast-modified: Mon, 11 May 2026 03:32:01 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/28/2026 09:35:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7df54cd4f102b99a6e8c0a2329a67213\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":15357,"size_decoded":7661,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15356)","md5":"e738a91efda645df6c05215968c73cdf","sha1":"591b0b9436b3fea68b89554ae55babd6bc58aa71","sha256":"04a81f7864b13e02bb550bf5ef1e51998ccdafc578012145ef7a105156bee12b","sha512":"ff3b697b36f0e08e23b4fba384dd0959becb1fd678e2212b5a9eee2e31b65b7cbe7171263d2c324b5771e7453e85573df0fc7ec26fb1582893bae2ed18e13f46","ssdeep":"384:a+ZSEWrpbLLsAWFogygj5yyBfUjgUsaGU+ZaQ:Ferpu2ibfYgUFmR","tlshash":"2462e8f839b4746043ea787261bf690bb7b65c1bac8c94a09606e4da3fb040c5157fec","first_seen":"2025-09-20T14:27:23.100129Z","last_seen":"2026-07-01T04:46:52.221602Z","times_seen":176,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/android-chrome-512x512.png","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:50.941Z","timestamp":1782855290941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocations-grove.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 02:33:14 GMT","end":"Sat, 26 Sep 2026 03:30:48 GMT"},"fingerprint":{"sha1":"84:F2:4E:08:08:E6:B8:02:0F:3F:25:4D:44:55:9F:52:2C:FA:0A:2E","sha256":"97:AA:7B:F5:27:C9:47:0F:37:9A:1D:8E:06:80:30:32:B9:18:A4:98:58:20:C6:98:4E:13:10:2C:7B:EC:BE:B7"}}},"request":{"raw":"GET /android-chrome-512x512.png HTTP/1.1\r\nHost: allocations-grove.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:34:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 30 Jun 2026 21:08:52 GMT\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\netag: W/\"6a443064-c5d3\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E7eNTykFJPxZMZHlyQdvToMp3jY6lOj1nr%2BAggBJIL4D06Khk5NukCFPtUH%2FtnQijU%2Ft9ut1tBXBmwHjnAjS33KikeCoDWwwClVX0Vv1fOsD3WdCgxRjV1khydD%2B1MSaD3nfcgH6nKM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1404c209837120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50643,"size_decoded":50347,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"11c2b0842745b1ca17bc8e073b089c1f","sha1":"abe8cf5d9020f45c8eca04f8f9275c1824db6a80","sha256":"8f79598102e00d6bb060c3ee4084571a05f9de33d6025d5b9666ff7f43133fec","sha512":"e5e3347038709ccf465fed6c779f18d9e78885bc2f82351a45ce140ccd08022be59f1c460134b3f9cb9b78874d78c0bf767f1cf3be7ef1022dc123aec814dea2","ssdeep":"1536:aEBrcjnIP1gl6qnWJhLMGj0+PNnJW7wAo/:dzPelDWJ5TAUNnJWUV/","tlshash":"8033f19e80c013899dd41437cbe27cfba17139bde18d9f62d96ba3fa98d75428601f06","first_seen":"2026-06-30T21:35:28.64696Z","last_seen":"2026-06-30T21:35:28.64696Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/favicon-dark.ico","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:50.943Z","timestamp":1782855290943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocations-grove.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 02:33:14 GMT","end":"Sat, 26 Sep 2026 03:30:48 GMT"},"fingerprint":{"sha1":"84:F2:4E:08:08:E6:B8:02:0F:3F:25:4D:44:55:9F:52:2C:FA:0A:2E","sha256":"97:AA:7B:F5:27:C9:47:0F:37:9A:1D:8E:06:80:30:32:B9:18:A4:98:58:20:C6:98:4E:13:10:2C:7B:EC:BE:B7"}}},"request":{"raw":"GET /favicon-dark.ico HTTP/1.1\r\nHost: allocations-grove.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:34:51 GMT\r\ncontent-type: image/x-icon\r\netag: W/\"6a443064-2c62\"\r\nlast-modified: Tue, 30 Jun 2026 21:08:52 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WzGlEtehwDMdBYRbg98nKbF1Jj9qCrPHNyCl%2Ft%2FiUDzGaR6H%2FDkSNe7GxA2yT9x9WyzD6P9fg2ScoOChXRnVgrHyGQY8OuiOSxWxzswrE9heMY%2F8WEwlvTRYaL97dIKrXoxuxIy2dXw%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1404c209838120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11362,"size_decoded":12057,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"7eec57713a6ea4acb99b6a56b077f1c9","sha1":"c205150bc71c05f6b5b19a0a4dfab3adcbae38d8","sha256":"4b7ad08d963f4d447f3b20fa1248ad2f09b238a566ba43e119acc1de4a420c90","sha512":"4b4d034d70e1cba2d4b36f6cc20dd6397bf95138b8b6da0e9d5f58b5c6690a743a7a12e076281d27614e6a41dbb46031eb177a794e07003d9e474810e2a6eb64","ssdeep":"192:RbccICLtZfBZVXFtNlS+Jvl/h0G3z+ssve33Hflw2sDECQJGsyDPJ8BtBj65yr4N:6KZVlTlR3zgWPlw2sDE3J9cJktBj652k","tlshash":"dc32bf902920c4d4caf91432c5bcc06dfb60936c99636e59a484ede863303be6ca3b36","first_seen":"2026-06-30T21:35:28.648007Z","last_seen":"2026-06-30T21:35:28.648007Z","times_seen":1,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/parseSignature-edf243f0.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:35:08.394Z","timestamp":1782855308394,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/parseSignature-edf243f0.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://allocations-grove.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:35:08 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a014dc2-8d0a\"\r\nlast-modified: Mon, 11 May 2026 03:32:18 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.57\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/18/2026 15:17:48\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f1a4913e37b80dbf5aca304d6b23eda8\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":36106,"size_decoded":14398,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32522)","md5":"b539a1c365180cff94f4dd729b08d1c5","sha1":"9f3dafee17f80546c013e2a3430be45e27b55080","sha256":"29f416ca74d4b1319e4923d4a2db8c0518547e4c2290e3bd9ea88f75d6f3a9f3","sha512":"97f453397458785f7943a86af49de97f2ffa6622077f36716134295b140612ac606839b00ee3af76887e557394df908eb94d995e623b0df2c00973abd1249e76","ssdeep":"768:+JPPndqOMYbr4og+vxQg+hUD7fnaDRJDOkPYXHmyN9KuTS5HiDwf3LXwMwp4Ys0v:+fNEogBL4G10Pu+hcnXb11a","tlshash":"04f22b88b5b9b07193546894d05b6202a228f9ddf40e80d1f36ecd7b2ff944cd9e5a3e","first_seen":"2026-05-12T17:14:33.793181Z","last_seen":"2026-07-01T04:46:52.236748Z","times_seen":80,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/hashTypedData-8194bb83.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:35:08.401Z","timestamp":1782855308401,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/hashTypedData-8194bb83.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://allocations-grove.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:35:08 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a014db0-10c2\"\r\nlast-modified: Mon, 11 May 2026 03:32:00 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 385\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/28/2026 09:53:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9021a98a3894b5a5e7efd13bc57fa9ec\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4290,"size_decoded":2819,"mime_type":"application/javascript","magic":"data","md5":"4b7ac05b8531436116eeb0c7e81cca55","sha1":"a952a0fa626aef9d78deb774798c61e688a62668","sha256":"2c52581fe6c914245c13dbcee7187ea8213c973b1d6b6e4d1f2a197cf8e5d653","sha512":"8e8baecb09261a746091d5f519bdc61c3c3966a9d5c7b8758a51bf59f3d87b53f73ae29c21865306aaa6e3df188ae63d921a91a29910fccc544a8eb53fc8cd35","ssdeep":"96:sBV/EknhWyp2xv8KtEZkFUz5oeKeKkKhSTlWtEhsLvXL46sGoWyPw:sr/9nh3SvMz5oex9DlWtEhIXLrszY","tlshash":"1e91238c71a5f1b42ec909e8e0e72101e6e4ac11f47488e3f1ec64f334a296ca57a72c","first_seen":"2026-05-12T17:14:33.778186Z","last_seen":"2026-07-01T01:44:53.080187Z","times_seen":79,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/flowers-2-6.png","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:49.503Z","timestamp":1782855289503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocations-grove.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 02:33:14 GMT","end":"Sat, 26 Sep 2026 03:30:48 GMT"},"fingerprint":{"sha1":"84:F2:4E:08:08:E6:B8:02:0F:3F:25:4D:44:55:9F:52:2C:FA:0A:2E","sha256":"97:AA:7B:F5:27:C9:47:0F:37:9A:1D:8E:06:80:30:32:B9:18:A4:98:58:20:C6:98:4E:13:10:2C:7B:EC:BE:B7"}}},"request":{"raw":"GET /flowers-2-6.png HTTP/1.1\r\nHost: allocations-grove.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:34:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 30 Jun 2026 21:08:52 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a443064-f21cb\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RwhUtVbz%2B2d0bKaSVlyNTeJZF1nEnL4YyCzq9Uunh16JuzG6sH1ozSYjTmLfwVCFgkDVAqSncxcVNo7Eni47dxRX4GIb%2BWW42sKYMoeG3icMYDpFal8y2i2J0fmii8DDpeJxsfD2aQA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1404c179e70120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":991691,"size_decoded":991018,"mime_type":"image/png","magic":"PNG image data, 1920 x 2494, 8-bit colormap, non-interlaced","md5":"d0fdd8d59304b3c4ff16e14c78e29245","sha1":"8cf99bfab410b2dac64c197640a23f3cec0b40fa","sha256":"9f577e7e98ea1d97cdfa0d399b37aea7188d57c8e2cce511751c02124fc19a27","sha512":"cc1b6e2f0ea0389a59d2ad6d9d21413ec835eb495a5709afb60e2a8d2eab79bf11236b60d9ab32bb49bd19302ab978d97692905da94936b729d38742df33ff93","ssdeep":"24576:Clefw70Y6BHs67gyInP744HuPYOMxS2nkRC1gG4G+P+iOuvI:CAfw7d6WjHHuQ3xSWkUaG+P+JqI","tlshash":"e4253340accca670dd7f523905c66fa02441add3beb98420043e7ded7b762671baca97","first_seen":"2026-06-30T21:35:28.650219Z","last_seen":"2026-06-30T21:35:28.650219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":389,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/BlackRock_Figma.svg","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:50.551Z","timestamp":1782855290551,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocations-grove.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 02:33:14 GMT","end":"Sat, 26 Sep 2026 03:30:48 GMT"},"fingerprint":{"sha1":"84:F2:4E:08:08:E6:B8:02:0F:3F:25:4D:44:55:9F:52:2C:FA:0A:2E","sha256":"97:AA:7B:F5:27:C9:47:0F:37:9A:1D:8E:06:80:30:32:B9:18:A4:98:58:20:C6:98:4E:13:10:2C:7B:EC:BE:B7"}}},"request":{"raw":"GET /BlackRock_Figma.svg HTTP/1.1\r\nHost: allocations-grove.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:34:50 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443064-1473\"\r\nlast-modified: Tue, 30 Jun 2026 21:08:52 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pQ5yM2xLZgfQzM86q67ZI9SfGJiV6xjr%2BQKRz68FVMRhS%2BVzqXnan0CDjQvxehRGAvtmn%2FxXihw2oSZUTOcmPRDyGxbecQulTsTlr43Zu5VBqLC2io1nAKc3BDetvmeBGK%2Fh%2BhC1oJs%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1404c1e2fda120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5235,"size_decoded":2953,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"22821c20b22b054cb7c33f2e840358e2","sha1":"a54443537d026134bccb56034d09c34f69947982","sha256":"b2473d4935f181149700c2a8ab9224492d792b09a29c0d83aed766314ae61421","sha512":"57ea8adbeef084c4d0bfc85198923cd6201ffa06d90665f587e8e1cd75ad9f2f3fcbc5ab3f9c02bcd8535bf7f6f8de731b958067a6cc475c447c1ce7ea411e4d","ssdeep":"96:uovpfUBG2UEL7bx5g5KvC0ehEJ/CRO23TDtova:uovpfUXUEHbTg5KvCxhEJyOATDtoS","tlshash":"2eb152efb2e461b1cd43d3c7fa85808e711f64ea8f814f50c24d9b363e9556caa85d81","first_seen":"2026-06-30T21:35:28.651397Z","last_seen":"2026-06-30T21:35:28.651397Z","times_seen":1,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/Morpho_Figma.svg","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:50.549Z","timestamp":1782855290549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocations-grove.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 02:33:14 GMT","end":"Sat, 26 Sep 2026 03:30:48 GMT"},"fingerprint":{"sha1":"84:F2:4E:08:08:E6:B8:02:0F:3F:25:4D:44:55:9F:52:2C:FA:0A:2E","sha256":"97:AA:7B:F5:27:C9:47:0F:37:9A:1D:8E:06:80:30:32:B9:18:A4:98:58:20:C6:98:4E:13:10:2C:7B:EC:BE:B7"}}},"request":{"raw":"GET /Morpho_Figma.svg HTTP/1.1\r\nHost: allocations-grove.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:34:50 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443064-101d\"\r\nlast-modified: Tue, 30 Jun 2026 21:08:52 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d95ABt8pZPCj1R8zQ0v5%2FilyT3ZbNQ00ch5mU33mFm629iMsg%2FZ2M61q7vnugrLAnUBLHeaUCSfJSrT39yK1vESaKYl9VsVdQOBVSSie8SX9lmm5SkB7iTdx8p8TysapCKmDPi8fs1k%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1404c1e2fd8120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4125,"size_decoded":2313,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"42e57a5062998d543bb645a559231e2c","sha1":"f9e3b6053a5b2ae0d3f6349822b4263b81ce584d","sha256":"0b1319bfcab05256392161be654f999b715c13b8cfa9027af79ad87ee9ebf770","sha512":"d2d18ca98cd77680c074d84969f08f3c450a58cf7de85980a26b2d3f38db2fea8bd56da462486d0bc368f9ff0d04199103a2ec404086eb9cc35d90f1f1c75406","ssdeep":"96:0OsYDlZbBSGrUg3UGGfkP3YhB40Y/gtOn/fWxrWinugGTnKAjDXF:0Os2BNrbUG7P3Yf4j/gwnWhaLDj7F","tlshash":"9781b9cc233d93bce608ebad972350372c7150f2a9aac099c7112e3d9b4152d4ca5ed7","first_seen":"2026-06-30T21:35:28.652465Z","last_seen":"2026-06-30T21:35:28.652465Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/1aacc29bf930b044.css","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:49.487Z","timestamp":1782855289487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocations-grove.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 02:33:14 GMT","end":"Sat, 26 Sep 2026 03:30:48 GMT"},"fingerprint":{"sha1":"84:F2:4E:08:08:E6:B8:02:0F:3F:25:4D:44:55:9F:52:2C:FA:0A:2E","sha256":"97:AA:7B:F5:27:C9:47:0F:37:9A:1D:8E:06:80:30:32:B9:18:A4:98:58:20:C6:98:4E:13:10:2C:7B:EC:BE:B7"}}},"request":{"raw":"GET /1aacc29bf930b044.css HTTP/1.1\r\nHost: allocations-grove.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:34:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 30 Jun 2026 21:08:52 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a443064-22bce\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=smkCGQrOaUMPVgQv2eIH7yd76eg%2BHBNttUBNNf5JTZ5ZFN90vDWCbw%2FXUSAyz9oUETukW8PVWvcXgmzc6OyAX1vzi9bOr1rYqYNv1ZcCoeCpFkOeXqUipfpOOWQCjK9ngnLijXchn%2BY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1404c177e69120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142286,"size_decoded":29500,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c1c184ddcec6a7a02a935042d3fb0955","sha1":"b14088f1e98e69153db76665f6240dcb90e9e8b6","sha256":"2d38570531d0ae932dc3bff2dd6f752bcb3076ab60047d8f1bbac303ee4cc0ab","sha512":"f6f7965d54dc7810765c0f8111258c0fd05067c029b87799f84ff2c1744838c0fd45fe2216000305776901cd00acbd73dc3cd4e54f6283d694289dc5224c6c01","ssdeep":"3072:rV/SjSESLmXeE4RwT7ilWez7pQz58spxMVQlhlwKtSFAMxij8XhqSROyaJLuUNEb:rV/SjSESLmXeE4RwT7ilWez7pQz58szk","tlshash":"48d3c5a0b229f43fbc3364bad39ce88c6119b091de2557edfe41221227c7bf66d16614","first_seen":"2026-06-30T21:35:28.653637Z","last_seen":"2026-06-30T21:35:28.653637Z","times_seen":1,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/flowers-decoration-left.png","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:49.516Z","timestamp":1782855289516,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocations-grove.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 02:33:14 GMT","end":"Sat, 26 Sep 2026 03:30:48 GMT"},"fingerprint":{"sha1":"84:F2:4E:08:08:E6:B8:02:0F:3F:25:4D:44:55:9F:52:2C:FA:0A:2E","sha256":"97:AA:7B:F5:27:C9:47:0F:37:9A:1D:8E:06:80:30:32:B9:18:A4:98:58:20:C6:98:4E:13:10:2C:7B:EC:BE:B7"}}},"request":{"raw":"GET /flowers-decoration-left.png HTTP/1.1\r\nHost: allocations-grove.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:34:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 30 Jun 2026 21:08:52 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a443064-2f070\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NJw%2BNZrOT9L4Pc4neIvRv2N6IYmuITX%2FnNxhe3JggJne%2BAM75go0ZOtJAAXKAVohxFbsXjh6cUs%2BK1VghCT1qqYyrlYcXps21SHAWENeY7qVveU2CbgDyHjYoNfnuCbjfQz9iLL8iE8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1404c17ae83120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":192624,"size_decoded":191613,"mime_type":"image/png","magic":"PNG image data, 664 x 677, 8-bit/color RGBA, non-interlaced","md5":"8211d9763e80fe779faae9bdb8c23c9c","sha1":"d461cdbc3ee61dbd60c547b05092319a65b3bf03","sha256":"7d3b07ab8ccc7fdf92953e29ca5392e76850b9d553c3fcd0f8e129db654f29b7","sha512":"6363850b6f51bc346d16ee47881e46b22ddfeca955a934fb9bafc75da645c823860cebfed10a3c1f93c661c96c0bf6c825d0b516c40a7dedf176e0161d7f3863","ssdeep":"3072:6zPFk1me4g/N8NUb1048+NIBRxaLGBKjnr3StwO+Sn0cnEKGFvBru7IEwk8yqISS:6ztk1me4g/OCQjaRf3FOpn0cnkFliNUQ","tlshash":"5214131ed017d216f82516fa7ff1684814ac3b842b2e5e9aac5879cc2386352cfdc57d","first_seen":"2026-06-30T21:35:28.654725Z","last_seen":"2026-06-30T21:35:28.654725Z","times_seen":1,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":279,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-5qqqoukwf.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:52.384Z","timestamp":1782855292384,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /index-5qqqoukwf.js HTTP/1.1\r\nHost: fonts-css2-sans.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:34:52 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5833071\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a4376e1-ef168\"\r\nlast-modified: Tue, 30 Jun 2026 07:57:21 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 585\r\ncdn-proxyver: 1.57\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/30/2026 13:44:33\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e8a22512ed099ba64712ac7aabde6ea5\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":979304,"size_decoded":157162,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2154bb1168373249b3a536c474b5fa75","sha1":"19e1aa24650c58b667ab5bff9fc33fd71ae4ab51","sha256":"0236d69bbb647262b0312850e42c6d643d4a55ee2700ee02ae6d7c00e935dfa2","sha512":"612ba452659d2ead11520b0c12a968e314533482974f5e90dbc133fc0010d229ca9acd3480787d12cc33fe295d45cd115e0064bc27850b3fea419c8758655d56","ssdeep":"3072:1airhPUgiZrhy59TUTu5TsGG+ImnmXjK9xbxv8YY6UE:1aiDTGqmXjK9dxv8YY6UE","tlshash":"7f259d469b4ec002b39c919f6914cdba56e9741365be12cff412e9dd6007f638fa0e2e","first_seen":"2026-06-30T17:37:51.768127Z","last_seen":"2026-06-30T21:45:28.571173Z","times_seen":3,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":38,"connect":1,"send":0,"wait":6,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/waitForCallsStatus-469a6eba.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:35:08.398Z","timestamp":1782855308398,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/waitForCallsStatus-469a6eba.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://allocations-grove.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:35:08 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a014ff9-a2c6\"\r\nlast-modified: Mon, 11 May 2026 03:41:45 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 385\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/28/2026 09:35:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a48dd8cf4d62c62fec2662207bfdecfc\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":41670,"size_decoded":15186,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23600)","md5":"3305e655a66e9995e30737e549208367","sha1":"a614489cad7d0c7921aad08dc492f9817b13f92a","sha256":"1bcb2d7f8e29803693290fc8a6dec7ddbb7b380545137859337e19b66a5de3f8","sha512":"a176b316bdc23fd34b13be260edd64825320455502813fd76c2490c22bb666692ec8f7d52e4fded53c75854bfa4f927e0848a16955648fa14e6c016b9bfa6d19","ssdeep":"768:MsFJm34YSu7vFmzqwECaEJbn8QwMBuqDgi3LDwT9LvAjW7s3hOl/dPzL7WnUaF9A:Ms3mopEwBE+k8wVlUo","tlshash":"d613f96573d570a18782b5f820a70001f5386dd5b84d90ecb2ace9973eebc18d6e7e39","first_seen":"2026-05-12T17:14:33.77898Z","last_seen":"2026-07-01T01:44:53.086803Z","times_seen":79,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-30T21:34:48.923Z","timestamp":1782855288923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocations-grove.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 02:33:14 GMT","end":"Sat, 26 Sep 2026 03:30:48 GMT"},"fingerprint":{"sha1":"84:F2:4E:08:08:E6:B8:02:0F:3F:25:4D:44:55:9F:52:2C:FA:0A:2E","sha256":"97:AA:7B:F5:27:C9:47:0F:37:9A:1D:8E:06:80:30:32:B9:18:A4:98:58:20:C6:98:4E:13:10:2C:7B:EC:BE:B7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: allocations-grove.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:34:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Tue, 30 Jun 2026 21:29:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z4%2Fmnx3OrpO09X8ZZnv1rslJJb5fyLhiySUTrCikcBmAY6eJmuvusE%2Fuboto49Sj8rkfdOyLURTtG1m7TU33d0cmFX%2FlBlEIfn6uZnQ5kRCmzx54xSqo%2FhlTBvbwGoLrf0OFtAJndGw%3D\"}]}\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1404c14fde7120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":180688,"size_decoded":33650,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6883)","md5":"3d1ff40f108b612b2db02ffa74c78a53","sha1":"404f3da40fca759be5a476a27062c702fa3da4f1","sha256":"ab18a64b6a36384e18092527cfa915163962944ee98ae14a1e6aeac9a21aaf71","sha512":"a317e4a9ac9f375b96f4a4aafccdebf1a516aba8574c53bf94c6b762847df72ec1ca5152e5ea759328defd43172a7b236d8095aaeddaeb6317dbf4ca686af2cd","ssdeep":"1536:hoYEJ/lARr5wLv142nBAD1x63F1sK5h1Kn1x4RPEScqe1XMsvzoC5:35S14es18111A1xB18w","tlshash":"b1042ab0337023ba600b83e8a972fa1d7246a657da079509b3ec25d27fc7cd5cd53989","first_seen":"2026-06-30T21:35:28.657489Z","last_seen":"2026-06-30T21:35:28.657489Z","times_seen":1,"resource_available":true,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":95,"connect":70,"send":0,"wait":153,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/ce2a3db78863df74.css","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:49.489Z","timestamp":1782855289489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocations-grove.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 02:33:14 GMT","end":"Sat, 26 Sep 2026 03:30:48 GMT"},"fingerprint":{"sha1":"84:F2:4E:08:08:E6:B8:02:0F:3F:25:4D:44:55:9F:52:2C:FA:0A:2E","sha256":"97:AA:7B:F5:27:C9:47:0F:37:9A:1D:8E:06:80:30:32:B9:18:A4:98:58:20:C6:98:4E:13:10:2C:7B:EC:BE:B7"}}},"request":{"raw":"GET /ce2a3db78863df74.css HTTP/1.1\r\nHost: allocations-grove.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:34:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 30 Jun 2026 21:08:52 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a443064-805\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hk%2FQA2z9QTm%2F0ysfZinbvPR0NuZ760dCTWDVLxFEUQF0sZlkv3WxSdxsZo0G%2B%2BQPvsxbHitcfp9wHmBxPaV9CrQNyDIcp%2FWXTGQo6j4Iw8X1%2By52i3PNARAdmtdZhwYCRqnpjGbZ2iQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1404c177e6a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2053,"size_decoded":1210,"mime_type":"text/css","magic":"ASCII text, with very long lines (2053), with no line terminators","md5":"32219946261581fab3567b5d699ab066","sha1":"407e5437ad1f5ac3d8e1bfa94ba65d56da466d02","sha256":"bf1130672b584e3379588d95373d498ae3a47d2bea3814d2c08da6ea0d5ed8a6","sha512":"2618e4176871833b773e2547cd76a09cdfdd5ab9e400b0ac07fccaac67f2b42c9f23ae3db1458e3bf33fd23a542324544400c87e2d559578397a973c63143dee","ssdeep":"","tlshash":"24412460911fd005d8798c83bbaebf16b91a682495b90d31e26b4c5e9ce74f743d1b3c","first_seen":"2026-06-30T21:35:28.65854Z","last_seen":"2026-06-30T21:35:28.65854Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/index-b637b742.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:35:06.485Z","timestamp":1782855306485,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/index-b637b742.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://allocations-grove.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:35:06 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a014dba-2bd6be\"\r\nlast-modified: Mon, 11 May 2026 03:32:10 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/04/2026 18:52:25\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 6b32772b121b6b211ec7109f781174d9\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2873022,"size_decoded":779435,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37695)","md5":"849741a6bc846f187893ca06e5bcbadf","sha1":"9d42a22be7be2916c34b8b19aff4cef68ce0f07b","sha256":"49c14d0463110a058d5b3cfeff7525dcbd034e0795222b9ede522fee7caa2ef6","sha512":"f39a2f14d7020dd230ef5528ebd21b435f8ef56d8dd7c2adccff3a8fda0f703484b3f20a2558754773871dc2e246236fe44a125d32a3a5914dd8887b4426e30c","ssdeep":"24576:Cieh7jQTrNzRZT7p+mO2Z2iVPxQDpf4YzCLyAPBFT:Cieh7jQTrNtZXp+mO2Z2WqDpffzyyAPf","tlshash":"3d256c9472a5b07543e755d8502b1102f138ac51700d80e8f7acedfb6eb988a86bff79","first_seen":"2026-05-12T17:14:33.795822Z","last_seen":"2026-07-01T05:46:56.290757Z","times_seen":142,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":12,"connect":1,"send":0,"wait":5,"receive":0,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-33bmtv859.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:35:06.555Z","timestamp":1782855306555,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /index-33bmtv859.js HTTP/1.1\r\nHost: fonts-css2-sans.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://allocations-grove.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:35:06 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5833071\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a4376ce-2450c5\"\r\nlast-modified: Tue, 30 Jun 2026 07:57:02 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 585\r\ncdn-proxyver: 1.57\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/30/2026 13:44:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 072f708d6906195f98a538e582c7cb55\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2379973,"size_decoded":491542,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"84b62671f1a1d3866c74518b0c39b79e","sha1":"3959be3a3015cd414e807d23e9a7d472eb705643","sha256":"37650b600d0653d5d295cf727c555abcde939daea09ac0e71323175c269d11de","sha512":"ca14e466385edd3c6e9cd1955c3ff19c66af3a1989fd32e82dca49133a61b2e124c93b7e0a68b55aae9a2b6ffe1296bd28e0b74fcad4ee724f393ea9dd13c049","ssdeep":"24576:l7IJDWuk2apFHa8ZQf4SJv5k38rhbDG396ogC/YvIe9i56eYDpymoA3jW5m41Inp:l78R","tlshash":"a225abfb0bc1982eb3afc9558d354d7c80b1d2626e875503e863f6caee4c7724994b84","first_seen":"2026-06-30T21:35:28.660246Z","last_seen":"2026-06-30T21:35:28.660246Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/Centrifuge_Figma.svg","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:50.553Z","timestamp":1782855290553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocations-grove.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 02:33:14 GMT","end":"Sat, 26 Sep 2026 03:30:48 GMT"},"fingerprint":{"sha1":"84:F2:4E:08:08:E6:B8:02:0F:3F:25:4D:44:55:9F:52:2C:FA:0A:2E","sha256":"97:AA:7B:F5:27:C9:47:0F:37:9A:1D:8E:06:80:30:32:B9:18:A4:98:58:20:C6:98:4E:13:10:2C:7B:EC:BE:B7"}}},"request":{"raw":"GET /Centrifuge_Figma.svg HTTP/1.1\r\nHost: allocations-grove.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:34:50 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443064-1504\"\r\nlast-modified: Tue, 30 Jun 2026 21:08:52 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hd%2BUb9VzKuyez84OLFe7dfyGTdEC8W5TJA%2Fkdjcgu3TKFiXpbVlERx8UlSgPYlcEoqyAhRByb9UUYOBjmW6KVMevWp9qCqFx0wVcPHTk89KschLiAlX%2B8LHYP8YqjBIaLEIim0bQKt8%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1404c1e2fdd120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5380,"size_decoded":3002,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"20f3192013bc14bd374f9965e86c5073","sha1":"91a985ce56fe2d4e69857a5fb9fa02a7e5e4a53c","sha256":"532f375dbd9df7a92c349be1b598dc73e4a4286e51a22bb0926b814fe979c446","sha512":"a0af91f77fa0437b246aa73a78a11ee5794d2c999476f5432c410ee50b4dec7e311f85a553f3573efcc5d49bb29a3f0e5719ae2bd2cd933a983f5958d6a296e0","ssdeep":"96:uoZ4+hPbAIA2aQyr+yjq7QV2FdFRRBEuiwCIPngcbPcuN5d/JchfVkC31+kVq:uoa40J2dPysQV2FdFRRBEuiwbPngcDbN","tlshash":"8bb143df62a491f6ce0be3e7f78a44de200e54fd8b514f60c29d2b253c895dd5c01a92","first_seen":"2026-06-30T21:35:28.661668Z","last_seen":"2026-06-30T21:35:28.661668Z","times_seen":1,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/Galaxy_Figma.svg","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:50.555Z","timestamp":1782855290555,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocations-grove.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 02:33:14 GMT","end":"Sat, 26 Sep 2026 03:30:48 GMT"},"fingerprint":{"sha1":"84:F2:4E:08:08:E6:B8:02:0F:3F:25:4D:44:55:9F:52:2C:FA:0A:2E","sha256":"97:AA:7B:F5:27:C9:47:0F:37:9A:1D:8E:06:80:30:32:B9:18:A4:98:58:20:C6:98:4E:13:10:2C:7B:EC:BE:B7"}}},"request":{"raw":"GET /Galaxy_Figma.svg HTTP/1.1\r\nHost: allocations-grove.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:34:50 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443064-b2a\"\r\nlast-modified: Tue, 30 Jun 2026 21:08:52 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rwpCbMwt2h%2Ft4jcOKYFp5BD%2Bj2NvnztGxPUgbvb5q1SYtqhGDh4kM9zd1SbYItRNKScIo2DNGjQv8wvBlrdzSLelXu3RJ2IdOr5RQdOeBjXnzQAmTga%2BEqJtlE%2BPfFhZAZnNME0BG00%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1404c1e2fdf120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2858,"size_decoded":1854,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"375e847d2b88245d03668c3508588cdc","sha1":"98cc127493fbde2bec9d41b4661b974955002674","sha256":"17b768a99accefd95fc86d903697ef648e5e003cc5ebcf7c4df9c39ecb4514f2","sha512":"ec3c0832b0f755e4f02146182b46254fa9691c445b4788aec200f813081e134e7ba91bd10ecc7fbb563fc3a875ae72f20dc11943040759bc06bcba64db72ad4c","ssdeep":"","tlshash":"255112bb03a11afe990d5f5e18f810803a0a9099f7b4a3fd4773b21625056f24536d6c","first_seen":"2026-06-30T21:35:28.662803Z","last_seen":"2026-06-30T21:35:28.662803Z","times_seen":1,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/flowers-decoration.png","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:49.515Z","timestamp":1782855289515,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocations-grove.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 02:33:14 GMT","end":"Sat, 26 Sep 2026 03:30:48 GMT"},"fingerprint":{"sha1":"84:F2:4E:08:08:E6:B8:02:0F:3F:25:4D:44:55:9F:52:2C:FA:0A:2E","sha256":"97:AA:7B:F5:27:C9:47:0F:37:9A:1D:8E:06:80:30:32:B9:18:A4:98:58:20:C6:98:4E:13:10:2C:7B:EC:BE:B7"}}},"request":{"raw":"GET /flowers-decoration.png HTTP/1.1\r\nHost: allocations-grove.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:34:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 30 Jun 2026 21:08:52 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a443064-59478\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pDcJMj4iVBBIXuSYYjGoMBlnVEYarU33OTpO682QZQktSwQ5ntAJ8D07lDHT%2FIsuP4EezNF9ayQstyCuU6OiL9nAipU3OoVtel%2BwhRD3sqNSNyb9wsdv20Z5qmcg4e4qwFw%2FaP%2BgrFM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1404c17ae7b120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":365688,"size_decoded":364360,"mime_type":"image/png","magic":"PNG image data, 791 x 677, 8-bit/color RGBA, non-interlaced","md5":"7df61b664f2b9dcc0748568b27d55626","sha1":"85c66cc1efea5ee3757a0b3ae22e4fa0172a84fd","sha256":"ce24da2a78da2090e9443252314035642398ee6b19b8022e4e08cf8ea9e21490","sha512":"4cc4ac3a147939ee80319323d873b1d75d3f081b104fe635dca95c1a2cd9bdcdba7267e747ef980ec77a1a981017fbe7284a79e0d9efd556befffc91b91799bf","ssdeep":"6144:3+HH3lM8OnzUhxo4+aajMKs5PP2QJK81cErNHyyiWlkSiAYMVYs1:ei8OnMq4+DwK+P2QJLSyibZtg","tlshash":"52742200653dd48c5f9f6a71ec00af438ebf9af393f45aa8cb19462d1268d3c9651b9c","first_seen":"2026-06-30T21:35:28.663937Z","last_seen":"2026-06-30T21:35:28.663937Z","times_seen":1,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":383,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-lwodi2u88.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:35:06.418Z","timestamp":1782855306418,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /index-lwodi2u88.js HTTP/1.1\r\nHost: fonts-css2-sans.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:35:06 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5833071\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a1e0042-142492\"\r\nlast-modified: Mon, 01 Jun 2026 21:57:22 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 385\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/04/2026 18:52:24\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 11b39abc66fca3a1829d7a386f443656\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1320082,"size_decoded":282438,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7a06dcf0ae36eb0d74fafb9d09c6033d","sha1":"1960604fc7fc992a758d80ee2873c12fb0ff3848","sha256":"80242312c3b0d9ea60b6832c3fbc11b201dd03ffeecd83166eb6eb92f77530d9","sha512":"c5bc4dbeaae92111099a1d44e55f9e596c5f10e451cadb0cec44d9e2f2613990e1b79c01e55d013862f847eac6b65ff16e400de43867a066004b4694e981cd76","ssdeep":"6144:QhivC79jNxCwz0SVwnFf7ogej4YPHZsnP9BqWdw7wF5SdwZFsGD:QQqJr/0SVwZmzHCD","tlshash":"22255deb0bd1892db4afd951de3c4c7c40f686622d69218be613e9cbd68c3744f49b48","first_seen":"2026-06-02T08:49:54.145531Z","last_seen":"2026-07-01T05:46:56.283258Z","times_seen":108,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/index-9aad6a44.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:35:08.389Z","timestamp":1782855308389,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/index-9aad6a44.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://allocations-grove.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:35:08 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a014db9-3a7dd\"\r\nlast-modified: Mon, 11 May 2026 03:32:09 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.57\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/18/2026 15:17:47\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 4c43cdacab50f2db44024dbbe7c78431\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":239581,"size_decoded":80741,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a7330f5262a85c8680236d664b6d2e54","sha1":"1d1ec8ebaa9a274240cb7eb5c9a9800847aee6a3","sha256":"afa8a44f7a6df4f95a16614192068f0a266f9852bd984f5439f17947a824e909","sha512":"45b0fecb842b168f32e1de16877f491be6ee3ff5c4ca120c915e09783ed7cd53aa7dada12caff0d3310d7e296bd44be9ea4b4c02093ebebb05b2d9bcb9138241","ssdeep":"6144:r5Iqk8ruUV8qeg5NDypZKrCsdLcOrbGQiRuDhT:VIa4qDDNBcCbGc","tlshash":"c8346c84b2947178cbe644e5a0373202a2357d05f4c9c47cf6bd9edb1ea89895723b3e","first_seen":"2026-05-12T17:14:33.808349Z","last_seen":"2026-07-01T01:44:53.079504Z","times_seen":79,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocations-grove.xyz/circle-arrow.svg","fqdn":"allocations-grove.xyz","domain":"allocations-grove.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://allocations-grove.xyz/","date":"2026-06-30T21:34:50.547Z","timestamp":1782855290547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocations-grove.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 02:33:14 GMT","end":"Sat, 26 Sep 2026 03:30:48 GMT"},"fingerprint":{"sha1":"84:F2:4E:08:08:E6:B8:02:0F:3F:25:4D:44:55:9F:52:2C:FA:0A:2E","sha256":"97:AA:7B:F5:27:C9:47:0F:37:9A:1D:8E:06:80:30:32:B9:18:A4:98:58:20:C6:98:4E:13:10:2C:7B:EC:BE:B7"}}},"request":{"raw":"GET /circle-arrow.svg HTTP/1.1\r\nHost: allocations-grove.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocations-grove.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:34:50 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a443064-310\"\r\nlast-modified: Tue, 30 Jun 2026 21:08:52 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sJYy837nK5Po%2BpoUCOC6pi4nDjpe0IBapmajq%2BFVLw%2B%2BOXcCpHY8%2FMreJLUdE%2Bs1RbQ5fRRnvCiu5cH%2FqcTJiDULhTQ8P2rTTeICRSJcUw%2BEFk01RaTbSeKsDnaySxjcNPKNquHx%2B6c%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1404c1e2fd6120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":784,"size_decoded":1141,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fec6554b9b2e552e4e6b3d87b221513f","sha1":"c225fee26260c58da4bc871c8b905fd89ab8b16b","sha256":"a45f33a3941a277230594c057986168c078a6f96d8fb9b820ab63c294d7237fd","sha512":"e1b6e8561ca87bd20fb633a4c17e6f4fa9f4e6665039ae1de9ce121821043ccddaa9c2fd606fe98069f53f46cc184244b6c35da4ebe9bad83fd7d5dc69c84db2","ssdeep":"","tlshash":"57012b69c1b055d19f827351bd9bf13b35a22cadbad8cf2fc0ce20052581dac25f3195","first_seen":"2026-06-30T21:35:28.666156Z","last_seen":"2026-06-30T21:35:28.666156Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"allocations-grove.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}