{"report_id":"1c0d2b0c-3b31-4414-9146-2ee1b29cc58f","version":6,"status":"done","tags":[],"date":"2026-01-24T13:48:01Z","url":{"schema":"https","addr":"cascade-preallocation.com/","fqdn":"cascade-preallocation.com","domain":"cascade-preallocation.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cascade-preallocation.com/","fqdn":"cascade-preallocation.com","domain":"cascade-preallocation.com","tld":"com"},"title":"Cascade","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"cascade-preallocation.com/","fqdn":"cascade-preallocation.com","domain":"cascade-preallocation.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T13:48:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cascade-preallocation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cascade-preallocation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cascade.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cascade.xyz","ip":{"addr":"104.26.15.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-12-23","domain_rank":0,"first_seen":"2026-01-02T19:31:55.089846Z","last_seen":"2026-01-24T13:42:14.103727Z","alert_count":3,"request_count":3,"received_data":9506,"sent_data":1429,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"cascade-preallocation.com","ip":{"addr":"104.21.62.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-04","domain_rank":0,"first_seen":"2026-01-24T13:42:13.646648Z","last_seen":"2026-01-24T13:42:13.646648Z","alert_count":8,"request_count":4,"received_data":4423722,"sent_data":1931,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cascade-preallocation.com/react.js","fqdn":"cascade-preallocation.com","domain":"cascade-preallocation.com","tld":"com"},"ip":{"addr":"104.21.62.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea492cd62a7bd743c2041716dd1b36ba","sha1":"5d23c3962cbb841f412ebbb8ce142f193c51a98b","sha256":"2221a7e370d4436d9176d54786c80d75549f8c2cfb60e532e34ebc68cccf7ba0","sha512":"28df8a4b25db11962e1429497d85178bd5d7ebf93f8e1951d0979267fa4adf14ad2e184c5edd853334bdc77f528923a7eaaa7c40091ccbe9451e6d6d21f81ea4","ssdeep":"768:F8wcpGcNubXBeMEbXBeMNzY/HWAq7poJSE0FIcztLZTtk9cahcgeAusUcnG:L6gD/HTkoAE0xZBuVG","tlshash":"9253a5da5606d2d6ae2110dec473f928e5640a43deacf053b63cdcd6765ef22908723b","size":63748,"data":"","first_seen":"2026-01-10T14:18:46.708211Z","last_seen":"2026-01-24T13:48:02.650334Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cascade-preallocation.com/","fqdn":"cascade-preallocation.com","domain":"cascade-preallocation.com","tld":"com"},"ip":{"addr":"104.21.62.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2c68b3f88d2da4ea03341490a8339229","sha1":"c6cba6f474253193d059e798ce9d56b8db963681","sha256":"dedd17ad8d36c81679d771fec9dc08a2aaf84895f3d6c4d2b51e1a6bd71306e9","sha512":"f05448a09085b27af479b924c6889b82e5983956296d2104109a074ad4ae9509b9f42342e5aac2c823369a3b1157f758ad99645d3ff4adde05ae318f4f595975","ssdeep":"768:KAwkpScvubXBeMkbXBeMNyi4PyoVNmqZb9IDo570dmcPtFZBV5+Pc0hcCeyQ0wc2:+UkEIz6qFCs0JZ75Oj2","tlshash":"ce53c7d99a16d2d1ae6220ded873e925e5240e03de6cf163b63cecd1365df22908713b","size":60684,"data":"","first_seen":"2026-01-10T14:18:46.721248Z","last_seen":"2026-01-24T13:48:02.651337Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cascade-preallocation.com/secureproxy?e=jscdn/getFile","fqdn":"cascade-preallocation.com","domain":"cascade-preallocation.com","tld":"com"},"ip":{"addr":"104.21.62.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cascade-preallocation.com/","date":"2026-01-24T13:47:39.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cascade-preallocation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 06:11:21 GMT","end":"Sat, 04 Apr 2026 07:09:08 GMT"},"fingerprint":{"sha1":"86:96:9D:15:92:49:00:9F:45:CF:C9:94:D7:E2:F3:7D:60:CD:56:B0","sha256":"C9:0D:57:72:F6:2E:F3:4C:B7:E6:D0:84:7E:B2:B7:B2:45:D7:40:B5:A3:18:41:23:50:14:CF:EF:75:C1:77:33"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: cascade-preallocation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cascade-preallocation.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://cascade-preallocation.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"106o4mg0rzh731iit1pw\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=50Tj%2F8lucAwlZYyxoZNTGDQQFTPYw32W5MXOA8lCbY8tGGaZU0AXinnLFmLtktFt69Wn7zyZXxjttLg%2FN%2B94GPq%2FOF7H8Hxm7ajU9GRg2JWNyg%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffbe12e2f723c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4344055,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"60e3b4ddcdb9815a3718c928bb82414a","sha1":"74c58158f23c298f1a7889b245a236436826e9d7","sha256":"4f6f0fc1fe809a770ad2ad396b33cc371442071caa31ddcbcd9c68267f36416b","sha512":"77f91196086efdbec162cab460007976eee8aa0934d0b88a7171589dc57fc556ae0c07f2992ab2a3e7fd5ce8955ee0143375c7852dbe307fb8eb9351e507d327","ssdeep":"12288:DzmBVBTBpd/KopSZBzTsU4VzoPGBvBGufXPlnABwGH6TGC6NoI9bkcP/mwwiDrg6:eBVTb/rEbzTEJvshBv6R0oI9bh5/16i","tlshash":"862523e7e024e042bf31d123e2ebadde55ca511a67cc45f22a6c9c1490e61668bf4fd3","first_seen":"2026-01-24T13:42:17.486007Z","last_seen":"2026-01-24T13:48:02.639115Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":1011,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cascade-preallocation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cascade-preallocation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cascade.xyz/_next/static/media/hero-48-1440p-light.b5fbcad4.mp4","fqdn":"cascade.xyz","domain":"cascade.xyz","tld":"xyz"},"ip":{"addr":"104.26.15.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://cascade-preallocation.com/","date":"2026-01-24T13:47:39.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cascade.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 01:03:31 GMT","end":"Fri, 03 Apr 2026 02:03:29 GMT"},"fingerprint":{"sha1":"D5:23:F1:72:34:43:B4:9C:CF:2C:7A:63:EF:51:94:FB:90:F9:D7:60","sha256":"CE:C4:D0:20:72:21:5B:FC:FA:0B:9B:6D:97:FC:8F:44:FE:12:06:C1:F3:0F:FC:4C:B3:DF:6D:70:BD:40:15:C0"}}},"request":{"raw":"GET /_next/static/media/hero-48-1440p-light.b5fbcad4.mp4 HTTP/1.1\r\nHost: cascade.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cascade-preallocation.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 24 Jan 2026 13:47:39 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 9\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"not-found.txt\"\r\netag: \"9d1ead73e678fa2f51a70a933b0bf017\"\r\nlast-modified: Sat, 24 Jan 2026 13:41:51 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/not-found.txt\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::v2z7k-1769262111417-6b71102e8a3d\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VHiSxnFauxRXstraULiIEd42nh1GVhAVjRTQ0dj6EaXakFNmXlPqeQsai8fYbBmKUZKj%2F75FPSzzGqhX8zZjL5Q56BlUq7Sh\"}]}\r\ncf-ray: 9c2ffbe26d52b4eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":194,"dns":102,"connect":2,"send":0,"wait":61,"receive":1,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cascade.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cascade.xyz/icon.svg","fqdn":"cascade.xyz","domain":"cascade.xyz","tld":"xyz"},"ip":{"addr":"104.26.15.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cascade-preallocation.com/","date":"2026-01-24T13:47:39.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cascade.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 01:03:31 GMT","end":"Fri, 03 Apr 2026 02:03:29 GMT"},"fingerprint":{"sha1":"D5:23:F1:72:34:43:B4:9C:CF:2C:7A:63:EF:51:94:FB:90:F9:D7:60","sha256":"CE:C4:D0:20:72:21:5B:FC:FA:0B:9B:6D:97:FC:8F:44:FE:12:06:C1:F3:0F:FC:4C:B3:DF:6D:70:BD:40:15:C0"}}},"request":{"raw":"GET /icon.svg HTTP/1.1\r\nHost: cascade.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cascade-preallocation.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:47:39 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1547\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 49666\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"icon.svg\"\r\ncontent-encoding: br\r\netag: \"5b950857d9231f965042bc878fbd2e2b\"\r\nlast-modified: Fri, 23 Jan 2026 23:54:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /icon.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::grbm4-1769262111546-11458361da76\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ej%2B1e6SwgdhMjN3%2F6t8CbkAG%2BQOBdfsvLckDB84%2F0BVh9zdo0xJD4zLyDm8lXSm3vFxpmjIoa%2FT7lstL2mIMWl%2BqAIa0RCzs\"}]}\r\ncf-ray: 9c2ffbe2ad85b4eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3360,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5b950857d9231f965042bc878fbd2e2b","sha1":"9c8c792df7fad885409d5a53fdeeca7dbd6555b4","sha256":"55da57823a16e7936fbf425d0b2834679c8f897ba483ac1977a961352e1a3a96","sha512":"7a23984a4c8515a66b0ded2668c9038625ce46ceed4866d4d7a361a44ed04ab420610510070558a8691eb92e0379bf5a456f84b82d73a78aee8f42f63ec13c98","ssdeep":"","tlshash":"bd6164f222dc21d868475760aa294c26332e20fff70dd70e8e4d2760a5510dac99fcc0","first_seen":"2026-01-07T13:23:26.438833Z","last_seen":"2026-04-28T14:14:03.89029Z","times_seen":17,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":59,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cascade.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cascade.xyz/apple-icon.png","fqdn":"cascade.xyz","domain":"cascade.xyz","tld":"xyz"},"ip":{"addr":"104.26.15.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cascade-preallocation.com/","date":"2026-01-24T13:47:39.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cascade.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 01:03:31 GMT","end":"Fri, 03 Apr 2026 02:03:29 GMT"},"fingerprint":{"sha1":"D5:23:F1:72:34:43:B4:9C:CF:2C:7A:63:EF:51:94:FB:90:F9:D7:60","sha256":"CE:C4:D0:20:72:21:5B:FC:FA:0B:9B:6D:97:FC:8F:44:FE:12:06:C1:F3:0F:FC:4C:B3:DF:6D:70:BD:40:15:C0"}}},"request":{"raw":"GET /apple-icon.png HTTP/1.1\r\nHost: cascade.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cascade-preallocation.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:47:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 3325\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 24912\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"apple-icon.png\"\r\netag: \"3f13dce7cc4fe57ae8e88d63484779df\"\r\nlast-modified: Sat, 24 Jan 2026 06:46:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /apple-icon.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hv26r-1769262111544-987c15ef3db6\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dihZBl%2FP2iDAnjLw4D4eIIZlawxTGWO5FTCcWuVENle9SJQxAgnLbidVOkxnOgYdW5uPw%2Fnvtk%2BQNq4DrvlvhUSsent3eMRi\"}]}\r\ncf-ray: 9c2ffbe2ad81b4eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3325,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"3f13dce7cc4fe57ae8e88d63484779df","sha1":"469db33808df4aaec239dcbdf9d9d774dbb8f941","sha256":"96c4889ca2f9011e9c2a70b4c2eca3fd4a5d1c3fcb9888e7c23dd0bcd3605a63","sha512":"8ea1a6d997eadf4e6f2d1634b700afa2d2e38a9caff14c79fe9baa320a067fa71eca9d3bd3bb3e127f33a19dd96dfba5ad71a5f747ff9f94b7145043866158bb","ssdeep":"","tlshash":"f961f88be4465c01159ae5b0a4eed243eaa2ce81c98019896cedd5135c396fecd1839f","first_seen":"2026-01-07T13:23:26.452208Z","last_seen":"2026-04-28T14:14:03.888031Z","times_seen":43,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":1,"dns":1,"connect":1,"send":0,"wait":61,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cascade.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cascade-preallocation.com/","fqdn":"cascade-preallocation.com","domain":"cascade-preallocation.com","tld":"com"},"ip":{"addr":"104.21.62.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T13:47:38.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cascade-preallocation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 06:11:21 GMT","end":"Sat, 04 Apr 2026 07:09:08 GMT"},"fingerprint":{"sha1":"86:96:9D:15:92:49:00:9F:45:CF:C9:94:D7:E2:F3:7D:60:CD:56:B0","sha256":"C9:0D:57:72:F6:2E:F3:4C:B7:E6:D0:84:7E:B2:B7:B2:45:D7:40:B5:A3:18:41:23:50:14:CF:EF:75:C1:77:33"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cascade-preallocation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:47:38 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 05 Jan 2026 23:24:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2F6nYXpdnmauIJ7A0hM%2BHZ279gZotwKLIHaZ70EWuKT2xmU6XMdIexH7qiyjYexmfLQjQkIJhTU3Y%2BHhl0Mr4mQWbdS%2FLlHGUnR68XITUQfDjVzISDjDgVc%3D\"}]}\r\nage: 348\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c2ffbdd2c3e8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5751,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"09de8ffd1c064eebe697d95e7d6d23cd","sha1":"6ce8d2699da87abbeddfbff86ea02416ba856ebe","sha256":"9e6bdaa94b7d7547e30aca3b019169547fddc80f4ee6055ff38b76edf97dbcdd","sha512":"0e6a3245c15f26c81cd9765eb35b8ae724c9a5119284a61f8f24dea2c46c095f2f8786f1f1c186bf03fc65810ec6d260ff4cc0ee08c9c290036f449896376076","ssdeep":"96:+TEUslEV8SHGa+20zgA+yfKofCv69wyJoBFsGn:uzi2PGa80A+yfKofCv69wyJEsI","tlshash":"59c1dc9b66f324447907e1a82ff71b496324d007c11acc687fcd6698cf889d59d92bcc","first_seen":"2026-01-13T14:56:20.406754Z","last_seen":"2026-01-24T13:48:02.647037Z","times_seen":3,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":17,"dns":14,"connect":1,"send":0,"wait":12,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cascade-preallocation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cascade-preallocation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cascade-preallocation.com/logo-light.svg","fqdn":"cascade-preallocation.com","domain":"cascade-preallocation.com","tld":"com"},"ip":{"addr":"104.21.62.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cascade-preallocation.com/","date":"2026-01-24T13:47:38.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cascade-preallocation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 06:11:21 GMT","end":"Sat, 04 Apr 2026 07:09:08 GMT"},"fingerprint":{"sha1":"86:96:9D:15:92:49:00:9F:45:CF:C9:94:D7:E2:F3:7D:60:CD:56:B0","sha256":"C9:0D:57:72:F6:2E:F3:4C:B7:E6:D0:84:7E:B2:B7:B2:45:D7:40:B5:A3:18:41:23:50:14:CF:EF:75:C1:77:33"}}},"request":{"raw":"GET /logo-light.svg HTTP/1.1\r\nHost: cascade-preallocation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cascade-preallocation.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:38 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 05 Jan 2026 23:24:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 347\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"695c4822-182d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wvKJ9vILXt1jMbOWHBNLH7w9SozLnhNxmBbhUttNUCquLMtv4xC3funCFm5J3h7q5qOV9tuNuj6H0zfFij7J2y5f9OEibkVjBsQyO%2FjhxHWepqohL7xKD1w%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffbdf5db8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6189,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3d53819197f9fda0a64a5a5b01f97d02","sha1":"e8c4556bdb2068986f831b392b6b4ddb927d3b69","sha256":"8f5cca76ba71ac687d9f45f3f15bdfebc9dac0204974e2488e0e55fdaf5d4bc0","sha512":"6b989d95c0fdfc230668c1351af3e57c7258b007dc28f561140f88300960f7ecb4f71cab812e97d44d95f8330054e83ac60abb9a08b592a649f29b33b29ecf77","ssdeep":"192:ksrfJNk5Lb83yeqAc8RyfBNZRZNz14Z6OvLw:JrspPAF8zZN5Q6Ojw","tlshash":"4cd195ce776452e67a009bf1ea101085fd8fa9fe63020e2cc78cde2918e71bdca459c1","first_seen":"2026-01-13T14:56:20.410415Z","last_seen":"2026-01-24T13:48:02.648771Z","times_seen":3,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cascade-preallocation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cascade-preallocation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cascade-preallocation.com/react.js","fqdn":"cascade-preallocation.com","domain":"cascade-preallocation.com","tld":"com"},"ip":{"addr":"104.21.62.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cascade-preallocation.com/","date":"2026-01-24T13:47:38.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cascade-preallocation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 06:11:21 GMT","end":"Sat, 04 Apr 2026 07:09:08 GMT"},"fingerprint":{"sha1":"86:96:9D:15:92:49:00:9F:45:CF:C9:94:D7:E2:F3:7D:60:CD:56:B0","sha256":"C9:0D:57:72:F6:2E:F3:4C:B7:E6:D0:84:7E:B2:B7:B2:45:D7:40:B5:A3:18:41:23:50:14:CF:EF:75:C1:77:33"}}},"request":{"raw":"GET /react.js HTTP/1.1\r\nHost: cascade-preallocation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cascade-preallocation.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:38 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Mon, 05 Jan 2026 23:24:18 GMT\r\netag: W/\"695c4822-f904\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 347\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XVrwaz%2BI%2Fjtokwea9oFUzJkQiwkilKTIl0VxySUZtrppw209zmc2BzT19e4pVLQCvggTWdsAJZoAzpJmhR1i7KiNFU7Y077zC3aKOTB6D5D5PX8Hj2Ild10%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ffbdf5db7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63748,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (63748), with no line terminators","md5":"ea492cd62a7bd743c2041716dd1b36ba","sha1":"5d23c3962cbb841f412ebbb8ce142f193c51a98b","sha256":"2221a7e370d4436d9176d54786c80d75549f8c2cfb60e532e34ebc68cccf7ba0","sha512":"28df8a4b25db11962e1429497d85178bd5d7ebf93f8e1951d0979267fa4adf14ad2e184c5edd853334bdc77f528923a7eaaa7c40091ccbe9451e6d6d21f81ea4","ssdeep":"768:F8wcpGcNubXBeMEbXBeMNzY/HWAq7poJSE0FIcztLZTtk9cahcgeAusUcnG:L6gD/HTkoAE0xZBuVG","tlshash":"9253a5da5606d2d6ae2110dec473f928e5640a43deacf053b63cdcd6765ef22908723b","first_seen":"2026-01-10T14:18:46.708211Z","last_seen":"2026-01-24T13:48:02.650334Z","times_seen":4,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cascade-preallocation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"cascade-preallocation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}