{"report_id":"2b2dc1fe-3171-4aea-8eaa-b169472a5679","version":6,"status":"done","tags":[],"date":"2026-03-13T22:08:39Z","url":{"schema":"https","addr":"app-ekubo.xyz/snapshot/claims","fqdn":"app-ekubo.xyz","domain":"app-ekubo.xyz","tld":"xyz"},"ip":{"addr":"104.21.14.252","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"app-ekubo.xyz/snapshot/claims","fqdn":"app-ekubo.xyz","domain":"app-ekubo.xyz","tld":"xyz"},"title":"Home - Ekubo","dom":{"size":803080,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (19389)","md5":"7daae44e9b442b86b8de552f0ec89ba3","sha1":"b1039faf6dcc1759d36ccf10d70e163940ddd50f","sha256":"a7c29353679ad7dfd47a50c97f59ef3a514070234b17c116a74a6ac6fb02a04d","sha512":"b6bf144f3d74eec633f8c015dd184ed1ffe2122408482166fa27196afcb9c7de20ab2d6ca5346448dc6c414dc4f76183e91c7375b6ef0f6c47051633648d97e1","ssdeep":"12288:2Gn/cRJuvXKRQuvmwRjuv/CZhOQkgicTy6dmek:E3XLhG","tlshash":"350528b7181be0117d8365bdfb9ea2157e349003fe22c6647aed220e8fc96f415617ac","dom_hash":"domhash2fd809b41f617f983afc0a0284477eb0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"app-ekubo.xyz/snapshot/claims","fqdn":"app-ekubo.xyz","domain":"app-ekubo.xyz","tld":"xyz"},"ip":{"addr":"104.21.14.252","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-17T22:08:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"app-ekubo.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"llama-rpc-mainnet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cca-lite.coinbase.com","ip":{"addr":"104.18.35.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-07-02","domain_rank":2742073,"first_seen":"2023-08-12T20:47:03Z","last_seen":"2026-03-13T09:56:12.19324Z","alert_count":0,"request_count":2,"received_data":2531,"sent_data":993,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"app-ekubo.xyz","ip":{"addr":"104.21.14.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-02","domain_rank":0,"first_seen":"2026-03-13T22:08:54.417528Z","last_seen":"2026-03-13T22:08:54.417528Z","alert_count":15,"request_count":15,"received_data":7971108,"sent_data":7946,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"uploader.irys.xyz","ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-03-25","domain_rank":3825186,"first_seen":"2024-08-27T22:06:03Z","last_seen":"2026-03-13T21:20:05.579213Z","alert_count":0,"request_count":29,"received_data":9742245,"sent_data":14348,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-08T22:29:46.591494Z","alert_count":0,"request_count":1,"received_data":61836,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-08T22:33:42.678774Z","alert_count":0,"request_count":2,"received_data":537418,"sent_data":865,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"lb.drpc.org","ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":1991106,"first_seen":"2023-06-20T22:20:47Z","last_seen":"2026-03-13T21:20:58.727093Z","alert_count":0,"request_count":1,"received_data":336,"sent_data":619,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"llama-rpc-mainnet.com","ip":{"addr":"104.21.55.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-08","domain_rank":0,"first_seen":"2026-03-13T21:20:04.96633Z","last_seen":"2026-03-13T21:20:04.96633Z","alert_count":2,"request_count":2,"received_data":2087,"sent_data":1265,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","size":60819,"data":"","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-06-17T08:13:13.413005Z","times_seen":31273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/As8bvViGADU63W4kY6p8sbTQMxzvCoNQfZ6YHr5Q387W","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33071d20cab22c6e451e07effade289e","sha1":"d463d05af81c486d8a947f2812580f885221816f","sha256":"ac12c5b8a5e43e06a7179109fbdb4c4485da63326958dd145a713bbcfb7d2701","sha512":"1c296e01ce3607edf0a2bf8cf0299244fdb239e48689932f24f729ec04d404ef48051dc5017e29a7ec8f88d068e475eecc11f20194243cba5836b5219b51f7c6","ssdeep":"6144:tBBvOFkQlfdfdKsyCisDGNkrxETPlA+NCmmCshMW:t/2FT9tyCi5NkrxkfCmmCsh9","tlshash":"d545ffea0eddad0cb25ed945cc345e3c80ba61923fa65503e853f6cbe51c3b95d88b48","size":1268638,"data":"","first_seen":"2026-03-13T21:20:12.585538Z","last_seen":"2026-03-26T05:32:56.474754Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/vanilla-a524d433.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4969575c75181110cbdc633bb7727682","sha1":"e8dde53790ceb1b191e0244b13974d4544a96749","sha256":"4ef69cf1cbebf4cd3e511de09298e18f63248af091557d6722db017b7a5a1a56","sha512":"25d5208a37afdb1951ce79c1cdfc8c71d83db4968726fe20fc0751ff24f0fce334ade5ad0c7691cfc635c73928b53b9f0e17830aea090b24709adcc7f54f489c","ssdeep":"96:wNxSpBMEo4B20RY0B1WCigGZ6qY49EW9tM6TiuvnZb/GnD6GO+wyqVlYI9q8+hAn:wNxSoz4B2mY+Wb6d8S6TiufED6GbTOlv","tlshash":"7cc1e99475d771387f9589c6583e4433ba593823342dd460f1ae8d292f0e587c13ef6a","size":5617,"data":"","first_seen":"2026-01-02T19:16:12.734093Z","last_seen":"2026-06-15T11:06:52.431136Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-ekubo.xyz/snapshot/claims","fqdn":"app-ekubo.xyz","domain":"app-ekubo.xyz","tld":"xyz"},"ip":{"addr":"104.21.14.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"31086f1da965adf99cd3eb9293f20e84","sha1":"05283434a0d1054d0cb8549e69c61759748211d2","sha256":"5aa80449bcebfa67fc46c46237e88c7a5af968233c0e4fe598574cce865ddc20","sha512":"dc5a40a1e119b085c339744e23b6c8235afd09c73af686d87381d7f279dd1b44e24825ef24598064c69d65958bb60cd34b1e462ad3827f7d88d28049ee8be511","ssdeep":"","tlshash":"be213a2652b622a63d4bb0fd5efad84d763a9007d8095450789e918c6f70b3505f77cc","size":1235,"data":"","first_seen":"2023-03-11T09:56:06Z","last_seen":"2026-06-14T23:58:23.934539Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-ekubo.xyz/snapshot/claims","fqdn":"app-ekubo.xyz","domain":"app-ekubo.xyz","tld":"xyz"},"ip":{"addr":"104.21.14.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"62fa43ba0c43d17f51843865b975d7ce","sha1":"a21afb9fe4e37719eaadd5427d52008e17242653","sha256":"26e89429538e3eaa519e9a3a7a4e6c36c9379eccf115ff1dd060aec0549d216e","sha512":"89108b5ff4ec5ff0a473f3c6857a4c1eec68c42482c04ea01c59159b2aa2c3e338f09258f95a998afbe8a4ec8e2248f73154446029cbed58ca5a2ffcfe06d60f","ssdeep":"12288:UgMVaAtBB0pHxwivoxvDuxrJdVRt8D4Kg9Ps:UbVHp+wivoxvDuxrJdVRt8D4Kg9Ps","tlshash":"2ca4cd9011a71747818a9f14bebc4ee9a290b9e709c9b7dda523713edc7ce13e2f1601","size":477701,"data":"","first_seen":"2026-03-13T21:20:12.586614Z","last_seen":"2026-03-14T10:40:54.324157Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-ekubo.xyz/snapshot/claims","fqdn":"app-ekubo.xyz","domain":"app-ekubo.xyz","tld":"xyz"},"ip":{"addr":"104.21.14.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f65f584756d6c623327a3dc89858084d","sha1":"6ed1954de0e9a75e189f6a206f6db9cba739710c","sha256":"cd6d0c6b5e53c8ca938abeec6e33197468eb77d51031523163a6d45556a52be5","sha512":"1a79b4522d22deb236890abe573b50e02f6dd582118440cfcf2bf47d2aa5c6c2aa710b0983a30e2240356476c4ffac981a8acba61d59bee57b892650c20a0c09","ssdeep":"6144:WZBv+pYdfPGQyPHq/N/N+slQLhk8Pgt6G9mW9CLrCcesLMM:WHGpYvZE2cesLj","tlshash":"7e35efed0fed7d5f855ec50f8d31be5c407a28630aaad40ba893f64dc02c39a66d4a5c","size":1106072,"data":"","first_seen":"2026-03-13T21:20:12.588665Z","last_seen":"2026-03-26T05:32:56.472527Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/DSMnkhPXUcdx2sNfYu2EFdbbzb2tSnwg6R8rYVZR7MCW","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a71f67c68e40ace3d1e1759de0ff19f","sha1":"6be07cedc0137c1913f8643b8bdb04cb98e1fcd3","sha256":"b27470f808416b690d3da7e3cab9eb4d15dfb1764df5c9241361af2ca7947bdf","sha512":"9f23d73774043e26532651dbe13365bd03d9047591039c949d23780ca1ef38678009d9d2479c3eea786f88f887c9a91272adf650ee8d267899e9b6242f36c328","ssdeep":"12288:lL33XjEnWfoNFUww8CPjW+fEVcXyb6TendG6H+T:5HXjUjxw8CPvEVw86TenGT","tlshash":"ab1574cd248e12c4866d89454d36cc5d4cdc9acbca4c2b26b4b6e47cfd4c9a0f0e6adb","size":884592,"data":"","first_seen":"2026-03-13T21:20:12.563858Z","last_seen":"2026-03-14T10:40:54.321826Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/compat-41d143b7.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e468fe54558ddc677c01ecf9b105bb28","sha1":"c926566d1d8ff477edf459c0c68b447729646ea3","sha256":"8bdea588fc4e741fca42a2dfe99f481d5b6099012adb9bf9654b44d5bd959866","sha512":"854ec617eb0b2646ca19c627e58cf332cf21970d8fffbc7de20416544f0584df5c8102dce895b7f7349fa15e003ac3dbf8f010887dee5d33ed84e56fc51e7659","ssdeep":"","tlshash":"e271ead94b7ae5b1e15973e1002b57126368bb623d1accb17178fcd129aa7808c72fc7","size":3740,"data":"","first_seen":"2026-01-02T19:16:12.701237Z","last_seen":"2026-05-03T08:33:54.541688Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/WebCryptoP256-d0b64a30.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"472eddc37fd55aafc3a64735324a391e","sha1":"51a688c066b4f173e962635474b00eb80603c4a3","sha256":"bd8968b24163cf5075d628903ceb094801843aaca66e3f37ef865f53930ed1bc","sha512":"a02b483394662eaf34380a796fb75b3bb91db29266382a18706970300189c580cc5c572f11861352f6b9ddcddf2746c1a7ca1ec5e491de0b43c60f8b0e49510b","ssdeep":"3072:Sm+d4Zd4nd4Dd4Dd46QppXMtjIzQjuCtzvt/XUeHw0kInK:S9QDXMtszQjum/XXw0JnK","tlshash":"67a30a806196b4e94ee365e955138001f470dc6174dc8881b7ecd9bb3ede88987ebf39","size":100630,"data":"","first_seen":"2026-01-02T19:16:12.630055Z","last_seen":"2026-05-03T08:33:54.561564Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fa174926682313cc5a067077b0bb22d","sha1":"609109d82deb0c7dd3d9d212808dcba0548ce3d1","sha256":"5a7b9b2c807f85575c9ebc1f508e849b53430870b2d0fb6c02b2de3df661cb63","sha512":"83a593d4b8648b78031259becd96b4c33226e9462c2e26013ee0746ff58a7b710159d0d380d001d7740e9485ee346491c16e3fdb0d334f5b6cfabe6f90cda9b6","ssdeep":"192:m+5ekRvDLCpBK+BpP78nPk6O9ShgzsqcSYV0GtI+uwicvsbIUiJE2KmnyKU:mLiPCvRvT8nPk6cSCzsqGVJeZcsb8S9","tlshash":"0582c4ccb48270715b77a9e9507f454ab23aae96888c8040f13ed8e42c7c56ec267f7d","size":17684,"data":"","first_seen":"2025-08-02T03:49:54.562881Z","last_seen":"2026-06-17T08:23:52.967187Z","times_seen":4503,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/index-a0304aba.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d07300fd7526caed44da5faffd8d9eb0","sha1":"8fe271044fa339f4519597a5e0eeefeaef6defdb","sha256":"7bac697d7a2e1c3723910449f011aa6e842888951355d643fc37bb0ce8f60e52","sha512":"095b8a72c6635858f6429a849892bc247e984ab2760deb3c9d138000e920bd7e3686d97b9b6f7c5227469637671d3f272823250b38b898c1a420edceac55296b","ssdeep":"3072:6Lf2VFnO6wounrtsfQyfy071/U7N95IOHV/wxMDP2zj0ZoaIsez4xXEdK5jfM:y29knpsfQya071/U7N92OHexMDP2dPsM","tlshash":"79f37dd5325ab57583d615c8201b1201e23858a8b80d90b4b7accde6bdefe4896f7f3d","size":168881,"data":"","first_seen":"2026-01-02T19:16:12.691623Z","last_seen":"2026-05-03T08:33:54.526912Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/localBatchGatewayRequest-ef5b2645.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4959a257760f517ad9cadd2dff38a79b","sha1":"dc7091d6b433cd08ff97375a80e20064fa108700","sha256":"0b64c7488ff1b72f5d30470facec1d4e432b60782c8277c86ae6503c60844c68","sha512":"90f8fc198ccf7b103a918e56c7ec2da273daedfd355cc5ad0c9476b3a9f4ed93fcf313db9d409b0597ae9f77f92d914f7d7699986404ba6aa6f181efed449847","ssdeep":"","tlshash":"8b3151c8b6099a32d4af2932640fe55090312945b82d80b1d94f35f79f315c5eaafd1d","size":1781,"data":"","first_seen":"2026-01-02T19:16:12.66586Z","last_seen":"2026-05-03T08:33:54.556799Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/parseSignature-19805c2c.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f08cce9145768b2a5c742fc27f68f365","sha1":"5cd25801ecf069d76d2c6e3f2a4afc35de547893","sha256":"3d377af1e1701f7c5458004df347b66c42c9c1a819791757b149ac04fc5ac623","sha512":"ce0c954d157594f2227831c6e56d2401d50b5dc8e8f44078e2f1520299d8080b7b169a63fd285e75582e527a6b0735876720d5be3b288619717e2a9a8e2c0edb","ssdeep":"768:uqWzTTq8BTNnUfPb+vxQOvG+c3Jj3JNLpKRkFtcA8fGH3wSp5HG6BOjOkRT7Fakn:uqwjUfPbd2c39PBKI55a8to","tlshash":"d1f23a887a79b07193952494d06b22026228fdd9b40d80d1f36edd7f2ff944cd9e6a3e","size":35566,"data":"","first_seen":"2026-01-02T19:16:12.605913Z","last_seen":"2026-05-03T08:33:54.529209Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/index-6589d338.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"925833e957f4419fe27aba9b341bf449","sha1":"22730cef7d235f939e8d09dc2ecfa45c294d9941","sha256":"6b9c390e5f0629f53040f165700f166165c07d2b0ca557b67a75b6c5704fbee8","sha512":"fa76d1bbe8f9e049a3f7e938929696112f6bfa9f1e75916b6e0ee3f81f8b7e62b7201d8c025776d21119a1bc0975130d0da60a1afaa9d57faf7fa5bff2d7f945","ssdeep":"6144:C8Iqk8ruUV8qeg5NDypZKrCsdLcOrbGQiRuDhT:dIa4qDDNBcCbGc","tlshash":"ec346c84b2947178cbe644e5a0373202a2357d05f4c9c47cf6bd9edb1ea89895723b3e","size":239581,"data":"","first_seen":"2026-01-02T19:16:12.760173Z","last_seen":"2026-05-03T08:33:54.543161Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/secp256k1-3c5c2b53.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3cee1a1745f46efb52613663d95ae6c7","sha1":"0bead77e381857bb89ccbf4b4740619eecae9c60","sha256":"1f99ece9648c4f33dc1a64c0b3fe02b6fe8b61328c7decf65b88edae59680a11","sha512":"120deb910a9dfff8a535c9b5eb5b24a594982d4e3343c11489b606cddb2aa361c5046a7d584b16c87f86a194fff28fa6cec6539559bd164fe9b0c00bc50db782","ssdeep":"768:t+qWy9oCX0XkPbiCAb168K/JkYaiqVVvmRoNwiz5RdUgDq34L2lR2KaYkm2XKFtS:Yl9163MNq3+UbhB+Kt+p4VoIbA","tlshash":"52f2e84422d1747293fa28d005765102f675ec64b1cf8c90e59c8dbb3ef34a98ab6e3d","size":35157,"data":"","first_seen":"2026-01-02T19:16:12.672297Z","last_seen":"2026-05-03T08:33:54.55559Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-ekubo.xyz/tracker.js","fqdn":"app-ekubo.xyz","domain":"app-ekubo.xyz","tld":"xyz"},"ip":{"addr":"104.21.14.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"46440b0bd3c0a48d1e6dd7a35084123e","sha1":"6386775d3ed93629ecc850a2e5810e1b8682a02b","sha256":"c5d5b2974b80e0932dfc133aed634b0491d00aa581ab769bd607eb4ac31cfea9","sha512":"fae63b0ca3bbc6aa247ee5626f975eaac97b36ef80591ff2046a7feed6555b9acc0cb975a7ac62000db3b3645f7a55ebbd54ab3d41bba5b4654a501fc010e787","ssdeep":"192:U92I4ZzZj8iomtfcKZ+QysCcuOK3MozI9x1aJ6uCKbaD:UsPZPywuO3ozI7qt0","tlshash":"96f11e5b23f23271453b62ad4b9f76a6b23410032009d9b47edd47143f85b268bb5aef","size":7517,"data":"","first_seen":"2026-02-23T12:44:16.252459Z","last_seen":"2026-04-16T17:01:51.151456Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/E33YvLhE5YJ5J7QjnET64hQacxNvvYSatFr4hkQUphmL","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c23a77e2254964e429874c091c4f2d7","sha1":"935ac912cc03656686835ea0debc43f563762b58","sha256":"0f600b6e410120edf61300ae622cbe176f5a0a7255080f7d81d75ef8fb796fee","sha512":"e63e3de64ecac4ef9e1fa4361b072dbb551eb041aff6a09d01cf6b6bda8a66016f1e31642474be2322ba2b8d2669d6bceb6c2c79e6e9e41703395ee82204bce2","ssdeep":"12288:1kID3KKsGpf/sFRl8ivoxvDuxrJdVRt8Doug9/+:1LDZpns8ivoxvDuxrJdVRt8Doug9/+","tlshash":"31b4ef9511a7134a918adf10bebc4eeda190b9d70dc877d9a523f17eec3ce12e2e1601","size":523764,"data":"","first_seen":"2026-03-13T21:20:12.578427Z","last_seen":"2026-03-14T10:40:54.303887Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-ekubo.xyz/snapshot/claims","fqdn":"app-ekubo.xyz","domain":"app-ekubo.xyz","tld":"xyz"},"ip":{"addr":"104.21.14.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"409627d26de470fc3d66e389b7aea638","sha1":"2155f2e313fa038d38cb1c6a346a4377d03e7a9b","sha256":"68a16fec98fb3a609f7b40dfd8434ab6187fad9c1b5205071346b9346701fcdf","sha512":"77731401a0bd51be7e5a842038488f9b2437907c21a9093ef76af7ee272b4e09dd9ba19bd289f0defc52edd12aa3e8e4e45b0951772f79a2af2fe73398e62461","ssdeep":"12288:QL/HD/EfBvGAGEf7WkPm1g14D2Jerdumb+T:2PD/cB+AGEfXm1Co2Jer+T","tlshash":"420573cc218e26c8866d8a450d3ac05d4cdc9adbc24c2b56b4b6e53cfc5c9d1f1e9adb","size":823967,"data":"","first_seen":"2026-03-13T21:20:12.587676Z","last_seen":"2026-03-14T10:40:54.325444Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/index-f549b8bf.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d23c8f627953a656e2fd3236fae9f081","sha1":"ba95d6aac3cd3c27e6f6ac55d999a653ef209150","sha256":"65a134a36f20f91abd2f8ef2081e10d1615e79f6eee1664adf19feb4af355e06","sha512":"bb934c2dfd29158469e1045798ba5ae7f000e2fe3a0b76418010fae3b7f6aecca3225477b84319978b0a858c1cd49028551a065aac5d99da7836863a9148575b","ssdeep":"49152:gVPP8wHCtqFXPSWiZidKCHEH/FryRXsFPV9eH7DlsFaz7/61SP5Ic4IZmvOjAxdp:NEHEHByFYPV9eHXrm7","tlshash":"41d55ca0725964ac4fa715d4446f2002f234ac93608dc099f79ceaf76fe58c589bbb3d","size":2859514,"data":"","first_seen":"2026-01-02T19:16:12.770433Z","last_seen":"2026-05-03T08:33:54.577415Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/hashTypedData-920862f5.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ff33297b4628b53c26b1d0de79840860","sha1":"d42859e57182dc785a1cb64d7fdf8cf850a92392","sha256":"90d93f5a1e080299aabea0320cd9b8a3c8fb63689b93553ceb72788879569c91","sha512":"6003f2fe5c71bb1ec4c55aca39e4239ba0130fce79a58c95b30e1e7537914177fc11d7dc691e3a173e1ad0979a8c1fa325677fce0fc783485db2832eb1c88ba5","ssdeep":"96:sB4/EknhGyonxvMKuEZkFhC7gVKAdKwKAe1L7WtsIN9evXY4VajYufrA:s2/9nhHcvQC7gVNJ07WtT90XYKEYu8","tlshash":"109114cd71a5f1b82ecc05ece1eb2101e6a4ac15f07598e3f1ec24b735a196da479b2c","size":4331,"data":"","first_seen":"2026-01-02T19:16:12.686534Z","last_seen":"2026-05-03T08:33:54.548401Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/hooks.module-dd6ad649.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e738a91efda645df6c05215968c73cdf","sha1":"591b0b9436b3fea68b89554ae55babd6bc58aa71","sha256":"04a81f7864b13e02bb550bf5ef1e51998ccdafc578012145ef7a105156bee12b","sha512":"ff3b697b36f0e08e23b4fba384dd0959becb1fd678e2212b5a9eee2e31b65b7cbe7171263d2c324b5771e7453e85573df0fc7ec26fb1582893bae2ed18e13f46","ssdeep":"384:a+ZSEWrpbLLsAWFogygj5yyBfUjgUsaGU+ZaQ:Ferpu2ibfYgUFmR","tlshash":"2462e8f839b4746043ea787261bf690bb7b65c1bac8c94a09606e4da3fb040c5157fec","size":15357,"data":"","first_seen":"2025-09-20T14:27:23.100129Z","last_seen":"2026-06-15T11:06:52.416119Z","times_seen":170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/waitForCallsStatus-972ca315.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"72ef75778e6372cd03f799665a7088ca","sha1":"bed87b5c51b6eb9cafd728b10f8c5454710a17eb","sha256":"1665d8bb4f99680d6f8a82f67b2f1a2ae7c7b2a150b50ff428db185c67a9e104","sha512":"87157ce9d1b4d750b378c55f86e41986c645988552ea1321e9beda14014c6d8291d3206b3b30750fd225bdacceada5537cce22118f56052dab4331c75315c0bb","ssdeep":"768:Zc54qqTGgEyOE1HN/4VQErZIWejquSu+ZiB/zZrTyLPA3W7s3hOl/dioyCum3xDu:qq//hwCIb0sDHRg","tlshash":"3c03fb6573d570b18782b5f820a30001f5346de5b84d94ecb2ace9973eebc18d6e7e29","size":41222,"data":"","first_seen":"2026-01-02T19:16:12.632199Z","last_seen":"2026-05-03T08:33:54.554029Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-ekubo.xyz/snapshot/claims","fqdn":"app-ekubo.xyz","domain":"app-ekubo.xyz","tld":"xyz"},"ip":{"addr":"104.21.14.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe939cf3f0791aa4393c2e098237378a","sha1":"45a838d73a4c606d484413fc4cd18f297f525b78","sha256":"373bcdaea9398c1f586404f0a39045e09a11949d361ec9c58a46ca5e010f75a4","sha512":"b37d1247e638dc4a9390521e286cb785b14762697361c79d70d05afad9cf8b920e149817aa036b409f55b7ab888684589b5fb98bab250946a3e15d01ee8e9a74","ssdeep":"1536:vKoxoAlcC30xcdayrkrWkhAW87hPsrRET6kjOWDWX:y94c80adayQrW9mdX","tlshash":"d883289cf385b23543f75075e52f2602773b1e09e849c4a4e166eac52cb94ce6223b7e","size":83300,"data":"","first_seen":"2025-07-30T09:26:14.123327Z","last_seen":"2026-06-16T07:12:37.433247Z","times_seen":1910,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-ekubo.xyz/assets/a7163330-6ab7-4d74-93fa-c445141c7abd?chain=evm","fqdn":"app-ekubo.xyz","domain":"app-ekubo.xyz","tld":"xyz"},"ip":{"addr":"104.21.14.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5388453c2d4a1a045a7ef93f46ebdc43","sha1":"80bf248349b93548afe609f9077a5a0010ea7cf1","sha256":"173499a2fdd9d0f530a35a1815574852f459a663fb8e792907c06c2fdf694790","sha512":"a547db9b366d9f2969161e5be4ada99fd8bdd1b6a9a4aa6d154ae0231a81eaa9843ae3a1b540ed01957bb38b46b7a8c1d4489ba637dd331d6fb77e16cffea902","ssdeep":"96:KDAI7bpn0SqdwzAOXfUC/uAL2cORqadq3Yr6SxBO0a6oMz29Yn5TVmhVAFPIDpa:BdkZuWmsMq3YhxBXJY6nWhM+pa","tlshash":"6af18dbb9322a27449df81be557fa782339680937acace0973edd4853f55c2080a52dd","size":7815,"data":"","first_seen":"2026-03-13T21:20:12.569566Z","last_seen":"2026-03-14T10:40:54.309173Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@6.15.0/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"518af9546defb8b07198e49db9d665d8","sha1":"f2802c31859cb95e66edfdc5ef9f7551630fe4d9","sha256":"fcfd9597005606eabed524ed9f97df69dbc5cac461119a9bb8a4c6b280cfa3f1","sha512":"5176044e3faf5ca494445d549605512f35914bd662413bf795c2f8adb78bcaa4d708f3590ba3d32c5fc8937bb19b6668f84d74f5c52924f65f2f126c0a02929e","ssdeep":"12288:wlzZJf+vZG7+ufQloa24VcpPfC1DgLlCvPKko2Nz7jTO:wlz7f+vZG7+ufQloa2T4GAH1Nz7fO","tlshash":"00b44cd132e3647287c618e52c650902f238f952705d44ecf66cdde26eabd8994bbf38","size":517486,"data":"","first_seen":"2025-07-06T11:14:17.557904Z","last_seen":"2026-05-03T08:33:54.550454Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"app-ekubo.xyz/snapshot/claims","fqdn":"app-ekubo.xyz","domain":"app-ekubo.xyz","tld":"xyz"},"ip":{"addr":"104.21.14.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:08.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-ekubo.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 18:54:21 GMT","end":"Sun, 31 May 2026 18:54:20 GMT"},"fingerprint":{"sha1":"C3:8E:41:0D:9D:AF:3B:B8:80:0C:E0:21:46:0F:58:5C:0F:F9:C5:39","sha256":"7A:BB:1A:83:EF:0B:C6:22:1D:01:64:F8:12:77:ED:20:54:C2:A5:AD:26:CA:E0:F4:A2:A8:8C:D0:38:F7:BE:F9"}}},"request":{"raw":"GET /snapshot/claims HTTP/1.1\r\nHost: app-ekubo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-ekubo.xyz/snapshot/claims\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visit_session=18ead3d3c66acd1234bec254e8593684154873f2a02939f5c4f2289a6222b3e2; visited=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 22:08:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XYK6iJRLUky2k7s2DWjvOCIXHehNqvmm%2Fxq%2FatSLmreRyGq0dPnWFelqlO7mhkQvsrrE5GQLtg9cT1eMdHUuapi4l6Tdis4TplSQdhE%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbe5b02feab562f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":793494,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (19389)","md5":"280c873127c6ac066d7748beacb98fe8","sha1":"164fce446f2e94b226aaa447339050ad6af9d181","sha256":"496c7842aa0d0f64d6f3d30ee1a2f91ee43342bf25979b3d9b7ff4de263873c2","sha512":"697fb405d749d48431cdc776edf1c7a7fba670fb08d868ea3349e5ed6f621fb1c33f449afbc0d7d609212e7671b52837b67cf15ae7d5f26f36219dc7a51e5fa6","ssdeep":"12288:sEP9cRJuvXKRQuvmwRjuv/CZhsQkgicTy6dmez:q3XLhz","tlshash":"58f418b7181be0117d8325bdfb9e62156e349007fe22c6687aed220f8fc96f415617ac","first_seen":"2026-03-13T22:08:59.822652Z","last_seen":"2026-03-13T22:08:59.822652Z","times_seen":1,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":140,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"app-ekubo.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/parseSignature-19805c2c.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:09.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/parseSignature-19805c2c.js HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-ekubo.xyz/\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-origin: https://app-ekubo.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 35566\r\ncache-control: max-age=2592000\r\nx-cache-status: BYPASS\r\nlast-modified: Fri, 13 Mar 2026 22:08:09 GMT\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9dbe5b0a6fd90d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35566,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32034)","md5":"f08cce9145768b2a5c742fc27f68f365","sha1":"5cd25801ecf069d76d2c6e3f2a4afc35de547893","sha256":"3d377af1e1701f7c5458004df347b66c42c9c1a819791757b149ac04fc5ac623","sha512":"ce0c954d157594f2227831c6e56d2401d50b5dc8e8f44078e2f1520299d8080b7b169a63fd285e75582e527a6b0735876720d5be3b288619717e2a9a8e2c0edb","ssdeep":"768:uqWzTTq8BTNnUfPb+vxQOvG+c3Jj3JNLpKRkFtcA8fGH3wSp5HG6BOjOkRT7Fakn:uqwjUfPbd2c39PBKI55a8to","tlshash":"d1f23a887a79b07193952494d06b22026228fdd9b40d80d1f36edd7f2ff944cd9e6a3e","first_seen":"2026-01-02T19:16:12.605913Z","last_seen":"2026-05-03T08:33:54.529209Z","times_seen":90,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/hashTypedData-920862f5.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:09.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/hashTypedData-920862f5.js HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-ekubo.xyz/\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-origin: https://app-ekubo.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 4331\r\ncache-control: max-age=2592000\r\nx-cache-status: BYPASS\r\nlast-modified: Fri, 13 Mar 2026 22:08:09 GMT\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9dbe5b0a7ff30d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4331,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"ff33297b4628b53c26b1d0de79840860","sha1":"d42859e57182dc785a1cb64d7fdf8cf850a92392","sha256":"90d93f5a1e080299aabea0320cd9b8a3c8fb63689b93553ceb72788879569c91","sha512":"6003f2fe5c71bb1ec4c55aca39e4239ba0130fce79a58c95b30e1e7537914177fc11d7dc691e3a173e1ad0979a8c1fa325677fce0fc783485db2832eb1c88ba5","ssdeep":"96:sB4/EknhGyonxvMKuEZkFhC7gVKAdKwKAe1L7WtsIN9evXY4VajYufrA:s2/9nhHcvQC7gVNJ07WtT90XYKEYu8","tlshash":"109114cd71a5f1b82ecc05ece1eb2101e6a4ac15f07598e3f1ec24b735a196da479b2c","first_seen":"2026-01-02T19:16:12.686534Z","last_seen":"2026-05-03T08:33:54.548401Z","times_seen":90,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/vanilla-a524d433.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:10.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/vanilla-a524d433.js HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uploader.irys.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-origin: https://app-ekubo.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 5617\r\ncache-control: max-age=2592000\r\nx-cache-status: BYPASS\r\nage: 0\r\nlast-modified: Fri, 13 Mar 2026 22:08:09 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9dbe5b0fa82e0d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5617,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3750)","md5":"4969575c75181110cbdc633bb7727682","sha1":"e8dde53790ceb1b191e0244b13974d4544a96749","sha256":"4ef69cf1cbebf4cd3e511de09298e18f63248af091557d6722db017b7a5a1a56","sha512":"25d5208a37afdb1951ce79c1cdfc8c71d83db4968726fe20fc0751ff24f0fce334ade5ad0c7691cfc635c73928b53b9f0e17830aea090b24709adcc7f54f489c","ssdeep":"96:wNxSpBMEo4B20RY0B1WCigGZ6qY49EW9tM6TiuvnZb/GnD6GO+wyqVlYI9q8+hAn:wNxSoz4B2mY+Wb6d8S6TiufED6GbTOlv","tlshash":"7cc1e99475d771387f9589c6583e4433ba593823342dd460f1ae8d292f0e587c13ef6a","first_seen":"2026-01-02T19:16:12.734093Z","last_seen":"2026-06-15T11:06:52.431136Z","times_seen":165,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/WebCryptoP256-d0b64a30.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:10.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/WebCryptoP256-d0b64a30.js HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uploader.irys.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-origin: https://app-ekubo.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 100630\r\ncache-control: max-age=2592000\r\nx-cache-status: BYPASS\r\nage: 0\r\nlast-modified: Fri, 13 Mar 2026 22:08:09 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9dbe5b0fa8430d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100630,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (24954)","md5":"472eddc37fd55aafc3a64735324a391e","sha1":"51a688c066b4f173e962635474b00eb80603c4a3","sha256":"bd8968b24163cf5075d628903ceb094801843aaca66e3f37ef865f53930ed1bc","sha512":"a02b483394662eaf34380a796fb75b3bb91db29266382a18706970300189c580cc5c572f11861352f6b9ddcddf2746c1a7ca1ec5e491de0b43c60f8b0e49510b","ssdeep":"3072:Sm+d4Zd4nd4Dd4Dd46QppXMtjIzQjuCtzvt/XUeHw0kInK:S9QDXMtszQjum/XXw0JnK","tlshash":"67a30a806196b4e94ee365e955138001f470dc6174dc8881b7ecd9bb3ede88987ebf39","first_seen":"2026-01-02T19:16:12.630055Z","last_seen":"2026-05-03T08:33:54.561564Z","times_seen":90,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/E33YvLhE5YJ5J7QjnET64hQacxNvvYSatFr4hkQUphmL","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:05.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /E33YvLhE5YJ5J7QjnET64hQacxNvvYSatFr4hkQUphmL HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-ekubo.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:06 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 523764\r\ncache-control: max-age=2592000\r\nx-cache-status: HIT\r\nage: 108638\r\nlast-modified: Thu, 12 Mar 2026 15:57:27 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9dbe5af56d280d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":523764,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8c23a77e2254964e429874c091c4f2d7","sha1":"935ac912cc03656686835ea0debc43f563762b58","sha256":"0f600b6e410120edf61300ae622cbe176f5a0a7255080f7d81d75ef8fb796fee","sha512":"e63e3de64ecac4ef9e1fa4361b072dbb551eb041aff6a09d01cf6b6bda8a66016f1e31642474be2322ba2b8d2669d6bceb6c2c79e6e9e41703395ee82204bce2","ssdeep":"12288:1kID3KKsGpf/sFRl8ivoxvDuxrJdVRt8Doug9/+:1LDZpns8ivoxvDuxrJdVRt8Doug9/+","tlshash":"31b4ef9511a7134a918adf10bebc4eeda190b9d70dc877d9a523f17eec3ce12e2e1601","first_seen":"2026-03-13T21:20:12.578427Z","last_seen":"2026-03-14T10:40:54.303887Z","times_seen":11,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":61,"dns":33,"connect":8,"send":0,"wait":30,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/2s2AH5Efo562mN9BsS3V6KTnYYsYB3YcJ6SsSYNzJs8b/wordlist.json","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:07.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /2s2AH5Efo562mN9BsS3V6KTnYYsYB3YcJ6SsSYNzJs8b/wordlist.json HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-ekubo.xyz/\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:07 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-origin: https://app-ekubo.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-content-type: application/json\r\nx-content-length: 17223\r\ncache-control: max-age=2592000\r\nx-cache-status: BYPASS\r\nlast-modified: Fri, 13 Mar 2026 22:08:07 GMT\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9dbe5afcc93d0d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3c4c8b1fc5825d101fe4d1a50239c719","sha1":"da353f715fb7db7bdc9c7b9ed9739b83fd520788","sha256":"25d1005bce9bea39fbbc8d8dc60c28137e800d3cb5e4e30447f44df7d3b75a31","sha512":"e20858f3793353ffb4bfe57e50537cc3df66165ed07aeac713322e2a3b0ea54626412598607ef9c73c22661962a495c030c2fa979643fc1e4454929f598a8246","ssdeep":"384:dD55TEeRlkjZcCXn5X3ucIJK8EkJTQLyto8Vx59uePnCcx:d99xkjpn5Xe7K8EkJUyto8Vx5F/x","tlshash":"db72022e9a0e8c3fcbdd13de38eb0d4c45ed0453b209056adddedaa4565eb84b00b69d","first_seen":"2025-02-06T12:20:23.355846Z","last_seen":"2026-05-31T12:25:23.260742Z","times_seen":198,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-ekubo.xyz/snapshot/claims","fqdn":"app-ekubo.xyz","domain":"app-ekubo.xyz","tld":"xyz"},"ip":{"addr":"104.21.14.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:08.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-ekubo.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 18:54:21 GMT","end":"Sun, 31 May 2026 18:54:20 GMT"},"fingerprint":{"sha1":"C3:8E:41:0D:9D:AF:3B:B8:80:0C:E0:21:46:0F:58:5C:0F:F9:C5:39","sha256":"7A:BB:1A:83:EF:0B:C6:22:1D:01:64:F8:12:77:ED:20:54:C2:A5:AD:26:CA:E0:F4:A2:A8:8C:D0:38:F7:BE:F9"}}},"request":{"raw":"GET /snapshot/claims HTTP/1.1\r\nHost: app-ekubo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-ekubo.xyz/snapshot/claims\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visit_session=18ead3d3c66acd1234bec254e8593684154873f2a02939f5c4f2289a6222b3e2; visited=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 22:08:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2TCxUtROdiCSjA3HSRtg6uMK9p4%2BE508lpYJqDv2S%2B2KJ1Qoo1BzzbP5O%2FkapE7facg4jb0%2B4pRoVESgSx4C1Ff9IggsOZJJznFsQgg%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbe5b02fea8562f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":793494,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (19389)","md5":"2dc59031de04e5ff6bd89d3c3946dc44","sha1":"2e5cde69ea497c011f1fee1e4ecdfaf1214feb0e","sha256":"2cfe332861c8d0a78ac027deab274be23b8959aecb6604c3e68973d7b6ea19d2","sha512":"0a1dfbc4cf694c7f8ab76ab1f28fe1e65892c82a8a9947cae83dd0aa52038e352949c826f47f12bc625189b2d7cb799e805d467f931431cb752e7f838b706310","ssdeep":"12288:IEP9cRJuvXKRQuvmwRjuv/CZhsQkgicTy6dmez:23XLhz","tlshash":"25f418b7181be0117d8325bdfb9e62156e349007fe22c6687aed220f8fc96f415617ac","first_seen":"2026-03-13T22:08:59.834127Z","last_seen":"2026-03-13T22:08:59.834127Z","times_seen":1,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"app-ekubo.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-ekubo.xyz/snapshot/claims","fqdn":"app-ekubo.xyz","domain":"app-ekubo.xyz","tld":"xyz"},"ip":{"addr":"104.21.14.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:08.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-ekubo.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 18:54:21 GMT","end":"Sun, 31 May 2026 18:54:20 GMT"},"fingerprint":{"sha1":"C3:8E:41:0D:9D:AF:3B:B8:80:0C:E0:21:46:0F:58:5C:0F:F9:C5:39","sha256":"7A:BB:1A:83:EF:0B:C6:22:1D:01:64:F8:12:77:ED:20:54:C2:A5:AD:26:CA:E0:F4:A2:A8:8C:D0:38:F7:BE:F9"}}},"request":{"raw":"GET /snapshot/claims HTTP/1.1\r\nHost: app-ekubo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-ekubo.xyz/snapshot/claims\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visit_session=18ead3d3c66acd1234bec254e8593684154873f2a02939f5c4f2289a6222b3e2; visited=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 22:08:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TDuf17NjMIjsAY23rplPcTiv2CePS%2Fr71JYQlUZyT%2F96JHVBKKh95Ft1lDEyawSO028c4rOqSRjlHPB%2BL%2BypKJE7oxhjHpd3vWmnp9M%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbe5b030eaf562f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":793494,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (19389)","md5":"fcd661ddb3120d3bfb7b1cd06d7cfb61","sha1":"79a3bbac591c9a18764f54e8cb4c8e85b8ec514e","sha256":"a239e051ed0d2f59a11342a4b00714101ff5e9ae3b501a181f05487c9f808c33","sha512":"36efa225ab2889afea7ed24faae0d9a8c64618e428afbbada8c67804acec49a49badb6a4e582a6b72edc1b4ff6fc1ddb32e8e4e115976bcfba766bc0504c6aba","ssdeep":"12288:YEP9cRJuvXKRQuvmwRjuv/CZhsQkgicTy6dmez:G3XLhz","tlshash":"c5f418b7181be0117d8325bdfb9e62156e349007fe22c6687aed220f8fc96f415617ac","first_seen":"2026-03-13T22:08:59.835846Z","last_seen":"2026-03-13T22:08:59.835846Z","times_seen":1,"resource_available":false,"data":null}},"time_used":552,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"app-ekubo.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/index-a0304aba.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:08.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/index-a0304aba.js HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uploader.irys.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-origin: https://app-ekubo.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 168881\r\ncache-control: max-age=2592000\r\nx-cache-status: BYPASS\r\nage: 0\r\nlast-modified: Fri, 13 Mar 2026 22:08:08 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9dbe5b04bd6d0d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168881,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25980)","md5":"d07300fd7526caed44da5faffd8d9eb0","sha1":"8fe271044fa339f4519597a5e0eeefeaef6defdb","sha256":"7bac697d7a2e1c3723910449f011aa6e842888951355d643fc37bb0ce8f60e52","sha512":"095b8a72c6635858f6429a849892bc247e984ab2760deb3c9d138000e920bd7e3686d97b9b6f7c5227469637671d3f272823250b38b898c1a420edceac55296b","ssdeep":"3072:6Lf2VFnO6wounrtsfQyfy071/U7N95IOHV/wxMDP2zj0ZoaIsez4xXEdK5jfM:y29knpsfQya071/U7N92OHexMDP2dPsM","tlshash":"79f37dd5325ab57583d615c8201b1201e23858a8b80d90b4b7accde6bdefe4896f7f3d","first_seen":"2026-01-02T19:16:12.691623Z","last_seen":"2026-05-03T08:33:54.526912Z","times_seen":90,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/hooks.module-dd6ad649.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:09.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/hooks.module-dd6ad649.js HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-ekubo.xyz/\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-origin: https://app-ekubo.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 15357\r\ncache-control: max-age=2592000\r\nx-cache-status: BYPASS\r\nlast-modified: Fri, 13 Mar 2026 22:08:09 GMT\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9dbe5b0a6fcd0d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15357,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15356)","md5":"e738a91efda645df6c05215968c73cdf","sha1":"591b0b9436b3fea68b89554ae55babd6bc58aa71","sha256":"04a81f7864b13e02bb550bf5ef1e51998ccdafc578012145ef7a105156bee12b","sha512":"ff3b697b36f0e08e23b4fba384dd0959becb1fd678e2212b5a9eee2e31b65b7cbe7171263d2c324b5771e7453e85573df0fc7ec26fb1582893bae2ed18e13f46","ssdeep":"384:a+ZSEWrpbLLsAWFogygj5yyBfUjgUsaGU+ZaQ:Ferpu2ibfYgUFmR","tlshash":"2462e8f839b4746043ea787261bf690bb7b65c1bac8c94a09606e4da3fb040c5157fec","first_seen":"2025-09-20T14:27:23.100129Z","last_seen":"2026-06-15T11:06:52.416119Z","times_seen":170,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/waitForCallsStatus-972ca315.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:10.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/waitForCallsStatus-972ca315.js HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uploader.irys.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-origin: https://app-ekubo.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 41222\r\ncache-control: max-age=2592000\r\nx-cache-status: BYPASS\r\nage: 0\r\nlast-modified: Fri, 13 Mar 2026 22:08:09 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9dbe5b0fb84e0d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41222,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23600)","md5":"72ef75778e6372cd03f799665a7088ca","sha1":"bed87b5c51b6eb9cafd728b10f8c5454710a17eb","sha256":"1665d8bb4f99680d6f8a82f67b2f1a2ae7c7b2a150b50ff428db185c67a9e104","sha512":"87157ce9d1b4d750b378c55f86e41986c645988552ea1321e9beda14014c6d8291d3206b3b30750fd225bdacceada5537cce22118f56052dab4331c75315c0bb","ssdeep":"768:Zc54qqTGgEyOE1HN/4VQErZIWejquSu+ZiB/zZrTyLPA3W7s3hOl/dioyCum3xDu:qq//hwCIb0sDHRg","tlshash":"3c03fb6573d570b18782b5f820a30001f5346de5b84d94ecb2ace9973eebc18d6e7e29","first_seen":"2026-01-02T19:16:12.632199Z","last_seen":"2026-05-03T08:33:54.554029Z","times_seen":90,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-ekubo.xyz/snapshot/claims","fqdn":"app-ekubo.xyz","domain":"app-ekubo.xyz","tld":"xyz"},"ip":{"addr":"104.21.14.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:10.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-ekubo.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 18:54:21 GMT","end":"Sun, 31 May 2026 18:54:20 GMT"},"fingerprint":{"sha1":"C3:8E:41:0D:9D:AF:3B:B8:80:0C:E0:21:46:0F:58:5C:0F:F9:C5:39","sha256":"7A:BB:1A:83:EF:0B:C6:22:1D:01:64:F8:12:77:ED:20:54:C2:A5:AD:26:CA:E0:F4:A2:A8:8C:D0:38:F7:BE:F9"}}},"request":{"raw":"HEAD /snapshot/claims HTTP/1.1\r\nHost: app-ekubo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-ekubo.xyz/snapshot/claims\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visit_session=18ead3d3c66acd1234bec254e8593684154873f2a02939f5c4f2289a6222b3e2; visited=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 22:08:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1N%2FS%2FfnCmtgwDaeSEUh6Y2b1Yf7Gq3ftPvYxVAOLpaVwqf952pPoyLcod6GQXg35OpK2iS5KPrAMPsS8tI2m0B1t6QKsAZd4brXCWLA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbe5b103ff7562f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"app-ekubo.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-ekubo.xyz/snapshot/claims","fqdn":"app-ekubo.xyz","domain":"app-ekubo.xyz","tld":"xyz"},"ip":{"addr":"104.21.14.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:08.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-ekubo.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 18:54:21 GMT","end":"Sun, 31 May 2026 18:54:20 GMT"},"fingerprint":{"sha1":"C3:8E:41:0D:9D:AF:3B:B8:80:0C:E0:21:46:0F:58:5C:0F:F9:C5:39","sha256":"7A:BB:1A:83:EF:0B:C6:22:1D:01:64:F8:12:77:ED:20:54:C2:A5:AD:26:CA:E0:F4:A2:A8:8C:D0:38:F7:BE:F9"}}},"request":{"raw":"GET /snapshot/claims HTTP/1.1\r\nHost: app-ekubo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-ekubo.xyz/snapshot/claims\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visit_session=18ead3d3c66acd1234bec254e8593684154873f2a02939f5c4f2289a6222b3e2; visited=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 22:08:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iC0G5fDMyRYzrkpE5dcx0nKl25ZvPpfUJqCag58HP%2FonsUXBbIFJatnuPfWVEPvw%2B0OAvidSLPqhMi9v6mepszIgxgydf1WAnPsD4eQ%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbe5b02fea7562f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]}],"data":{"size":793494,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (19389)","md5":"9c3fcce1a918606c3f48c415f0dd5703","sha1":"76aa41cd0207fccd6a24159dcc8020f25985bd21","sha256":"3a25306562b002f33bf6df24961d337159b25962eef1593fb8e486f3efce667c","sha512":"f1b4ebbfdb0cf7d924e2f60edc7c85d68d5eba7c110f31849f4e9e627cfe2c8c95b845cf3e194bb443bf2098318ca08bbb6e0d3bf2f8f2ae05b1a9a62d692caa","ssdeep":"12288:4EP9cRJuvXKRQuvmwRjuv/CZhsQkgicTy6dmez:m3XLhz","tlshash":"15f418b7181be0117d8325bdfb9e62156e349007fe22c6687aed220f8fc96f415617ac","first_seen":"2026-03-13T22:08:59.840623Z","last_seen":"2026-03-13T22:08:59.840623Z","times_seen":1,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"app-ekubo.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-ekubo.xyz/snapshot/claims","fqdn":"app-ekubo.xyz","domain":"app-ekubo.xyz","tld":"xyz"},"ip":{"addr":"104.21.14.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:08.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-ekubo.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 18:54:21 GMT","end":"Sun, 31 May 2026 18:54:20 GMT"},"fingerprint":{"sha1":"C3:8E:41:0D:9D:AF:3B:B8:80:0C:E0:21:46:0F:58:5C:0F:F9:C5:39","sha256":"7A:BB:1A:83:EF:0B:C6:22:1D:01:64:F8:12:77:ED:20:54:C2:A5:AD:26:CA:E0:F4:A2:A8:8C:D0:38:F7:BE:F9"}}},"request":{"raw":"GET /snapshot/claims HTTP/1.1\r\nHost: app-ekubo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-ekubo.xyz/snapshot/claims\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visit_session=18ead3d3c66acd1234bec254e8593684154873f2a02939f5c4f2289a6222b3e2; visited=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 22:08:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QRWdrKFF5hLL%2FHVci%2BHstiw0BjaV1rZyeBhfXPYvessMwcZG67iylm%2Baccc7eaTh3%2F3ncP5HqUdnkqGtnXFiPdyizzLHDCGBgQ1%2BsQg%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbe5b030eb4562f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":793494,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (19389)","md5":"7ccf82df2ac66619138d970551a748fd","sha1":"f4b07cfd294b49b7b179e0d9e9458175036c32dc","sha256":"f020c289dbd82b1e332a86bde8b325a666969589dfbbe9f20b951b7fde5991b5","sha512":"fad0e5459020326582b2822fe8babcfd12d5cf62a3840a70e3a6353ce0ae3624f5130f5ad21feccd6d82ab1f439ee650facc64dbdb437837f41f1225619e2b19","ssdeep":"12288:YEP9cRJuvXKRQuvmwRjuv/CZhsQkgicTy6dmez:G3XLhz","tlshash":"86f418b7181be0117d8325bdfb9e62156e349007fe22c6687aed220f8fc96f415617ac","first_seen":"2026-03-13T22:08:59.841598Z","last_seen":"2026-03-13T22:08:59.841598Z","times_seen":1,"resource_available":false,"data":null}},"time_used":699,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":531,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"app-ekubo.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/localBatchGatewayRequest-ef5b2645.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:09.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/localBatchGatewayRequest-ef5b2645.js HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-ekubo.xyz/\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-origin: https://app-ekubo.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 1781\r\ncache-control: max-age=2592000\r\nx-cache-status: BYPASS\r\nlast-modified: Fri, 13 Mar 2026 22:08:09 GMT\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9dbe5b0a6fdd0d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1781,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1780)","md5":"4959a257760f517ad9cadd2dff38a79b","sha1":"dc7091d6b433cd08ff97375a80e20064fa108700","sha256":"0b64c7488ff1b72f5d30470facec1d4e432b60782c8277c86ae6503c60844c68","sha512":"90f8fc198ccf7b103a918e56c7ec2da273daedfd355cc5ad0c9476b3a9f4ed93fcf313db9d409b0597ae9f77f92d914f7d7699986404ba6aa6f181efed449847","ssdeep":"","tlshash":"8b3151c8b6099a32d4af2932640fe55090312945b82d80b1d94f35f79f315c5eaafd1d","first_seen":"2026-01-02T19:16:12.66586Z","last_seen":"2026-05-03T08:33:54.556799Z","times_seen":90,"resource_available":true,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-ekubo.xyz/snapshot/claims","fqdn":"app-ekubo.xyz","domain":"app-ekubo.xyz","tld":"xyz"},"ip":{"addr":"104.21.14.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-13T22:08:05.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-ekubo.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 18:54:21 GMT","end":"Sun, 31 May 2026 18:54:20 GMT"},"fingerprint":{"sha1":"C3:8E:41:0D:9D:AF:3B:B8:80:0C:E0:21:46:0F:58:5C:0F:F9:C5:39","sha256":"7A:BB:1A:83:EF:0B:C6:22:1D:01:64:F8:12:77:ED:20:54:C2:A5:AD:26:CA:E0:F4:A2:A8:8C:D0:38:F7:BE:F9"}}},"request":{"raw":"GET /snapshot/claims HTTP/1.1\r\nHost: app-ekubo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:05 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\nset-cookie: visit_session=18ead3d3c66acd1234bec254e8593684154873f2a02939f5c4f2289a6222b3e2; Max-Age=86400; Path=/; Expires=Sat, 14 Mar 2026 22:08:05 GMT; HttpOnly; Secure; SameSite=Lax\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tk0PDLa9NIJkY6iP5Yfw3L9zT%2FJN%2BQBISv5cErHQ01VBt9p7mdPSXGCi0wD0%2FaWmB0vm1rWIUnac9oSgtoHK1KqVe31oNc5GZ%2FbuTDc%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9dbe5af1082a9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":793494,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (19389)","md5":"c452aa521c34fdae3b7a8d335e4c53f1","sha1":"192ba802ddf03eab58f38c4434ea699dcbceef25","sha256":"22d4406e473419a3ce132b98c375b507a059d5229f6625baf78a46b88d3bb920","sha512":"d51accf727dff58ac01b8c5df28f63fe56b2c9c3a343b7e7b261707cc0bda675b6786e645bf32c1b8789a97ef4df7fa6d383d0336baf2807bbfc758bb08088cf","ssdeep":"12288:wEP9cRJuvXKRQuvmwRjuv/CZhsQkgicTy6dmez:O3XLhz","tlshash":"faf418b7181be0117d8325bdfb9e62156e349007fe22c6687aed220f8fc96f415617ac","first_seen":"2026-03-13T22:08:59.843113Z","last_seen":"2026-03-13T22:08:59.843113Z","times_seen":1,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":82,"dns":60,"connect":8,"send":0,"wait":266,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"app-ekubo.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-ekubo.xyz/assets/a7163330-6ab7-4d74-93fa-c445141c7abd?chain=evm","fqdn":"app-ekubo.xyz","domain":"app-ekubo.xyz","tld":"xyz"},"ip":{"addr":"104.21.14.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:05.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-ekubo.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 18:54:21 GMT","end":"Sun, 31 May 2026 18:54:20 GMT"},"fingerprint":{"sha1":"C3:8E:41:0D:9D:AF:3B:B8:80:0C:E0:21:46:0F:58:5C:0F:F9:C5:39","sha256":"7A:BB:1A:83:EF:0B:C6:22:1D:01:64:F8:12:77:ED:20:54:C2:A5:AD:26:CA:E0:F4:A2:A8:8C:D0:38:F7:BE:F9"}}},"request":{"raw":"GET /assets/a7163330-6ab7-4d74-93fa-c445141c7abd?chain=evm HTTP/1.1\r\nHost: app-ekubo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-ekubo.xyz/snapshot/claims\r\nCookie: visit_session=18ead3d3c66acd1234bec254e8593684154873f2a02939f5c4f2289a6222b3e2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 22:08:05 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uKdV%2BFn%2B2j2ydOzu9wt2EqxH2sefbCbsi8FM%2FOohPzYUTjBOT00FmHMYFdGnKl5thm3XkTr2Lrwg1GmHaV4OvELzLWAvFH7hD7jnyZA%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbe5af3dc9c562f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7815,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (6836)","md5":"5388453c2d4a1a045a7ef93f46ebdc43","sha1":"80bf248349b93548afe609f9077a5a0010ea7cf1","sha256":"173499a2fdd9d0f530a35a1815574852f459a663fb8e792907c06c2fdf694790","sha512":"a547db9b366d9f2969161e5be4ada99fd8bdd1b6a9a4aa6d154ae0231a81eaa9843ae3a1b540ed01957bb38b46b7a8c1d4489ba637dd331d6fb77e16cffea902","ssdeep":"96:KDAI7bpn0SqdwzAOXfUC/uAL2cORqadq3Yr6SxBO0a6oMz29Yn5TVmhVAFPIDpa:BdkZuWmsMq3YhxBXJY6nWhM+pa","tlshash":"6af18dbb9322a27449df81be557fa782339680937acace0973edd4853f55c2080a52dd","first_seen":"2026-03-13T21:20:12.569566Z","last_seen":"2026-03-14T10:40:54.309173Z","times_seen":11,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"app-ekubo.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-ekubo.xyz/tracker.js","fqdn":"app-ekubo.xyz","domain":"app-ekubo.xyz","tld":"xyz"},"ip":{"addr":"104.21.14.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:05.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-ekubo.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 18:54:21 GMT","end":"Sun, 31 May 2026 18:54:20 GMT"},"fingerprint":{"sha1":"C3:8E:41:0D:9D:AF:3B:B8:80:0C:E0:21:46:0F:58:5C:0F:F9:C5:39","sha256":"7A:BB:1A:83:EF:0B:C6:22:1D:01:64:F8:12:77:ED:20:54:C2:A5:AD:26:CA:E0:F4:A2:A8:8C:D0:38:F7:BE:F9"}}},"request":{"raw":"GET /tracker.js HTTP/1.1\r\nHost: app-ekubo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-ekubo.xyz/snapshot/claims\r\nCookie: visit_session=18ead3d3c66acd1234bec254e8593684154873f2a02939f5c4f2289a6222b3e2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 22:08:05 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mIIDYGeqL80Dgqgsx2SxzyGJ3d%2Fxe92vETKOE0Wni4rDmC4TFsz80Xr5pxWaTVSBwTjZIYzFqW6oAamovjDLoL2J5cT3XWK7cKzHPKc%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\ncontent-encoding: br\r\ncache-control: public, max-age=0, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\nlast-modified: Mon, 19 Jan 2026 02:48:23 GMT\r\netag: W/\"1d5d-19bd427499e\"\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbe5af3ec9d562f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7517,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"46440b0bd3c0a48d1e6dd7a35084123e","sha1":"6386775d3ed93629ecc850a2e5810e1b8682a02b","sha256":"c5d5b2974b80e0932dfc133aed634b0491d00aa581ab769bd607eb4ac31cfea9","sha512":"fae63b0ca3bbc6aa247ee5626f975eaac97b36ef80591ff2046a7feed6555b9acc0cb975a7ac62000db3b3645f7a55ebbd54ab3d41bba5b4654a501fc010e787","ssdeep":"192:U92I4ZzZj8iomtfcKZ+QysCcuOK3MozI9x1aJ6uCKbaD:UsPZPywuO3ozI7qt0","tlshash":"96f11e5b23f23271453b62ad4b9f76a6b23410032009d9b47edd47143f85b268bb5aef","first_seen":"2026-02-23T12:44:16.252459Z","last_seen":"2026-04-16T17:01:51.151456Z","times_seen":75,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"app-ekubo.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:06.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-ekubo.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19621\r\ncf-ray: 9dbe5af74964120a-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65384d58-4ca5\"\r\nlast-modified: Tue, 24 Oct 2023 23:03:52 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 224459\r\nexpires: Wed, 03 Mar 2027 22:08:06 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5Z0Nmamgn1sPUj54pc22JXArnVc7ZEQBRuQchvEsXNt0ER5rvNjINP%2FYdSx43iI82C9Mrk5p3nnMMke3P2IvI8sL%2FmDOAYBhDjsgC2CQeg38Bz8ChAoMkaKQMKIQ%2F6f6Sxvmruss\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-06-17T08:13:13.413005Z","times_seen":31273,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":33,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/DSMnkhPXUcdx2sNfYu2EFdbbzb2tSnwg6R8rYVZR7MCW","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:06.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /DSMnkhPXUcdx2sNfYu2EFdbbzb2tSnwg6R8rYVZR7MCW HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-ekubo.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-origin: https://app-ekubo.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 884592\r\ncache-control: max-age=2592000\r\nx-cache-status: BYPASS\r\nlast-modified: Fri, 13 Mar 2026 22:08:07 GMT\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9dbe5afa1d240d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":884592,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3a71f67c68e40ace3d1e1759de0ff19f","sha1":"6be07cedc0137c1913f8643b8bdb04cb98e1fcd3","sha256":"b27470f808416b690d3da7e3cab9eb4d15dfb1764df5c9241361af2ca7947bdf","sha512":"9f23d73774043e26532651dbe13365bd03d9047591039c949d23780ca1ef38678009d9d2479c3eea786f88f887c9a91272adf650ee8d267899e9b6242f36c328","ssdeep":"12288:lL33XjEnWfoNFUww8CPjW+fEVcXyb6TendG6H+T:5HXjUjxw8CPvEVw86TenGT","tlshash":"ab1574cd248e12c4866d89454d36cc5d4cdc9acbca4c2b26b4b6e47cfd4c9a0f0e6adb","first_seen":"2026-03-13T21:20:12.563858Z","last_seen":"2026-03-14T10:40:54.321826Z","times_seen":11,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-ekubo.xyz/snapshot/claims","fqdn":"app-ekubo.xyz","domain":"app-ekubo.xyz","tld":"xyz"},"ip":{"addr":"104.21.14.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:08.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-ekubo.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 18:54:21 GMT","end":"Sun, 31 May 2026 18:54:20 GMT"},"fingerprint":{"sha1":"C3:8E:41:0D:9D:AF:3B:B8:80:0C:E0:21:46:0F:58:5C:0F:F9:C5:39","sha256":"7A:BB:1A:83:EF:0B:C6:22:1D:01:64:F8:12:77:ED:20:54:C2:A5:AD:26:CA:E0:F4:A2:A8:8C:D0:38:F7:BE:F9"}}},"request":{"raw":"GET /snapshot/claims HTTP/1.1\r\nHost: app-ekubo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-ekubo.xyz/snapshot/claims\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visit_session=18ead3d3c66acd1234bec254e8593684154873f2a02939f5c4f2289a6222b3e2; visited=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 22:08:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rP42r2HeMnj%2FX3eptFD%2BBDMHt7PK%2Bec%2BvrohOa%2BSJCF%2F5n27Z1DyEp9ihpP3qIGxB5HeOrRStFsViWTsTYuwFcoZOXEtEV7zAfwOvWA%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbe5b02fea9562f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":793494,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (19389)","md5":"dfc5cdc8a2da1a511c88cc40e705743a","sha1":"f0e28927a92924de1f6d731d26b66f15539855a9","sha256":"57ae0f479611a23e6129839cb24a2536d2d88a22deb3d0808c20daa6f2681ddf","sha512":"9b882c14e185d28d82286a792837be37178d1277e792206071b107154341c0a51d093f57853eb73ccbeb7d91920296bcc195f6e1b826828c6ec5573f966127f3","ssdeep":"12288:wEP9cRJuvXKRQuvmwRjuv/CZhsQkgicTy6dmez:O3XLhz","tlshash":"70f418b7181be0117d8325bdfb9e62156e349007fe22c6687aed220f8fc96f415617ac","first_seen":"2026-03-13T22:08:59.847491Z","last_seen":"2026-03-13T22:08:59.847491Z","times_seen":1,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":509,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"app-ekubo.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/index-a0304aba.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:08.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/index-a0304aba.js HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-ekubo.xyz/\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-origin: https://app-ekubo.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 168881\r\ncache-control: max-age=2592000\r\nx-cache-status: BYPASS\r\nlast-modified: Fri, 13 Mar 2026 22:08:08 GMT\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9dbe5b04bd5c0d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168881,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25980)","md5":"d07300fd7526caed44da5faffd8d9eb0","sha1":"8fe271044fa339f4519597a5e0eeefeaef6defdb","sha256":"7bac697d7a2e1c3723910449f011aa6e842888951355d643fc37bb0ce8f60e52","sha512":"095b8a72c6635858f6429a849892bc247e984ab2760deb3c9d138000e920bd7e3686d97b9b6f7c5227469637671d3f272823250b38b898c1a420edceac55296b","ssdeep":"3072:6Lf2VFnO6wounrtsfQyfy071/U7N95IOHV/wxMDP2zj0ZoaIsez4xXEdK5jfM:y29knpsfQya071/U7N92OHexMDP2dPsM","tlshash":"79f37dd5325ab57583d615c8201b1201e23858a8b80d90b4b7accde6bdefe4896f7f3d","first_seen":"2026-01-02T19:16:12.691623Z","last_seen":"2026-05-03T08:33:54.526912Z","times_seen":90,"resource_available":true,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/compat-41d143b7.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:08.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/compat-41d143b7.js HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-ekubo.xyz/\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-origin: https://app-ekubo.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 3740\r\ncache-control: max-age=2592000\r\nx-cache-status: BYPASS\r\nlast-modified: Fri, 13 Mar 2026 22:08:08 GMT\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9dbe5b04bd620d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3740,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3739)","md5":"e468fe54558ddc677c01ecf9b105bb28","sha1":"c926566d1d8ff477edf459c0c68b447729646ea3","sha256":"8bdea588fc4e741fca42a2dfe99f481d5b6099012adb9bf9654b44d5bd959866","sha512":"854ec617eb0b2646ca19c627e58cf332cf21970d8fffbc7de20416544f0584df5c8102dce895b7f7349fa15e003ac3dbf8f010887dee5d33ed84e56fc51e7659","ssdeep":"","tlshash":"e271ead94b7ae5b1e15973e1002b57126368bb623d1accb17178fcd129aa7808c72fc7","first_seen":"2026-01-02T19:16:12.701237Z","last_seen":"2026-05-03T08:33:54.541688Z","times_seen":90,"resource_available":true,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@6.15.0/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:06.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/ethers@6.15.0/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-ekubo.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 157483\r\ncf-ray: 9dbe5af63b320883-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 6.15.0\r\nx-jsd-version-type: version\r\netag: W/\"7e56e-8oAsMYWcuV5m7f3F7591UWMP5Nk\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220102-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 2416493\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=HDllyCh6lIMkuZNpuHSsMGZUdUMCBTBH474fFGcnTcgmbYMIKD1zheWLLNKUim4Lukhbu10phw5GX3n0E25bHOvc3Z1Tuw9MT5oRO0E53rNlLAvp5WY0WZkOzEp5uEsgMXE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":517486,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"518af9546defb8b07198e49db9d665d8","sha1":"f2802c31859cb95e66edfdc5ef9f7551630fe4d9","sha256":"fcfd9597005606eabed524ed9f97df69dbc5cac461119a9bb8a4c6b280cfa3f1","sha512":"5176044e3faf5ca494445d549605512f35914bd662413bf795c2f8adb78bcaa4d708f3590ba3d32c5fc8937bb19b6668f84d74f5c52924f65f2f126c0a02929e","ssdeep":"12288:wlzZJf+vZG7+ufQloa24VcpPfC1DgLlCvPKko2Nz7jTO:wlz7f+vZG7+ufQloa2T4GAH1Nz7fO","tlshash":"00b44cd132e3647287c618e52c650902f238f952705d44ecf66cdde26eabd8994bbf38","first_seen":"2025-07-06T11:14:17.557904Z","last_seen":"2026-05-03T08:33:54.550454Z","times_seen":117,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":44,"receive":6,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:06.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/disable-devtool HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-ekubo.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6646\r\ncf-ray: 9dbe5afa1e5b49c5-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.3.9\r\nx-jsd-version-type: version\r\netag: W/\"4514-YJEJ2C3rDH3T2dISgI3LoFSM49E\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230109-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 9263\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=u%2Bq82DCDYajm8aQcy6p1YM%2Bls7NTjsTI1yoZdm95EckCJrIGadZOYAxelNUr%2FEwVk3OT2UTOePrZaa0oV8HmOfvzm%2BkiTPzxXwj8W2ACOvLlx5yOosZM%2BLRIHnuyYlU53RE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17684,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17663)","md5":"7fa174926682313cc5a067077b0bb22d","sha1":"609109d82deb0c7dd3d9d212808dcba0548ce3d1","sha256":"5a7b9b2c807f85575c9ebc1f508e849b53430870b2d0fb6c02b2de3df661cb63","sha512":"83a593d4b8648b78031259becd96b4c33226e9462c2e26013ee0746ff58a7b710159d0d380d001d7740e9485ee346491c16e3fdb0d334f5b6cfabe6f90cda9b6","ssdeep":"192:m+5ekRvDLCpBK+BpP78nPk6O9ShgzsqcSYV0GtI+uwicvsbIUiJE2KmnyKU:mLiPCvRvT8nPk6cSCzsqGVJeZcsb8S9","tlshash":"0582c4ccb48270715b77a9e9507f454ab23aae96888c8040f13ed8e42c7c56ec267f7d","first_seen":"2025-08-02T03:49:54.562881Z","last_seen":"2026-06-17T08:23:52.967187Z","times_seen":4503,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"lb.drpc.org/ogws?network=apechain\u0026dkey=AvUWu76ThUTjhL4ZNx2pRdQTxENTMrgR76QThkHL9tz4","fqdn":"lb.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:07.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 16:14:00 GMT","end":"Sun, 17 May 2026 17:13:51 GMT"},"fingerprint":{"sha1":"6E:2D:5A:72:A1:75:4A:F0:C7:96:F2:E8:26:78:F5:FC:54:0C:73:93","sha256":"18:E9:96:29:98:D2:5D:4E:19:CD:75:98:36:ED:EB:40:40:C4:23:2C:76:E1:95:F1:4C:85:59:D2:48:CB:AF:4A"}}},"request":{"raw":"GET /ogws?network=apechain\u0026dkey=AvUWu76ThUTjhL4ZNx2pRdQTxENTMrgR76QThkHL9tz4 HTTP/1.1\r\nHost: lb.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://app-ekubo.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: yUmpHMRiSrJrTN15CuVruA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 13 Mar 2026 22:08:08 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: M141hSky72eUqy32OXUViwpP/oo=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nServer: cloudflare\r\nCF-RAY: 9dbe5b01e9fca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":0,"dns":20,"connect":20,"send":0,"wait":130,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-ekubo.xyz/snapshot/claims","fqdn":"app-ekubo.xyz","domain":"app-ekubo.xyz","tld":"xyz"},"ip":{"addr":"104.21.14.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:08.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-ekubo.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 18:54:21 GMT","end":"Sun, 31 May 2026 18:54:20 GMT"},"fingerprint":{"sha1":"C3:8E:41:0D:9D:AF:3B:B8:80:0C:E0:21:46:0F:58:5C:0F:F9:C5:39","sha256":"7A:BB:1A:83:EF:0B:C6:22:1D:01:64:F8:12:77:ED:20:54:C2:A5:AD:26:CA:E0:F4:A2:A8:8C:D0:38:F7:BE:F9"}}},"request":{"raw":"GET /snapshot/claims HTTP/1.1\r\nHost: app-ekubo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-ekubo.xyz/snapshot/claims\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visit_session=18ead3d3c66acd1234bec254e8593684154873f2a02939f5c4f2289a6222b3e2; visited=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 22:08:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BTeG%2BDXSXV5PBkFI3DCatMYPPzljeB7wegspi9o7HTmAxPWftwX8jNuMx4Wggwz24Qi7LGjYPzVU3DqjEUXPOYnH4%2BRRYvM5ZVbuDfs%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbe5b030eb0562f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":793494,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (19389)","md5":"1d543839375555d8b6557fe4d7de3004","sha1":"d098a31d3b667bc5cb37004e49c25733cf066677","sha256":"6e5c9cdfe0d029512adbbb4e81e38d2f82417bde11560e511ff88bc80a3cf055","sha512":"f83911cb2824233133cc3ca9f385cad0eca18b0523fd8ecad04692768be4733593b6a64f8f8321775343ace9580a2de812be71abe425ccb215b820079dd1e9e3","ssdeep":"12288:IEP9cRJuvXKRQuvmwRjuv/CZhsQkgicTy6dmez:23XLhz","tlshash":"d9f418b7181be0117d8325bdfb9e62156e349007fe22c6687aed220f8fc96f415617ac","first_seen":"2026-03-13T22:08:59.850389Z","last_seen":"2026-03-13T22:08:59.850389Z","times_seen":1,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"app-ekubo.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-ekubo.xyz/snapshot/claims","fqdn":"app-ekubo.xyz","domain":"app-ekubo.xyz","tld":"xyz"},"ip":{"addr":"104.21.14.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:08.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-ekubo.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 18:54:21 GMT","end":"Sun, 31 May 2026 18:54:20 GMT"},"fingerprint":{"sha1":"C3:8E:41:0D:9D:AF:3B:B8:80:0C:E0:21:46:0F:58:5C:0F:F9:C5:39","sha256":"7A:BB:1A:83:EF:0B:C6:22:1D:01:64:F8:12:77:ED:20:54:C2:A5:AD:26:CA:E0:F4:A2:A8:8C:D0:38:F7:BE:F9"}}},"request":{"raw":"GET /snapshot/claims HTTP/1.1\r\nHost: app-ekubo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-ekubo.xyz/snapshot/claims\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visit_session=18ead3d3c66acd1234bec254e8593684154873f2a02939f5c4f2289a6222b3e2; visited=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 22:08:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yyM1Zuxy5HvYpxkghHHOvTVd7HosxvfUD0W9%2B7Nzsgf4d%2FNXsDuVq4gPMi2pvXZpDRfwRCiKfpPDiPgouMXMVBznyTUIPya7dUnhK%2BE%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbe5b030eb2562f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":793494,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (19389)","md5":"65b432f8bf2904892095be4e72323188","sha1":"74c9febe9de6f902fa28d430b43470072cb1318b","sha256":"f4d833dea4545b5a044bc3e28fbcef5c4d16a807a10d9e78747fdfd4e7b5e466","sha512":"6417ec21b76cf68e2aec4b42b635dc511a3646e72c0f46c5f46c3e55aa9854ca04a0738945c630a5ca15617a0bab10ff69c899d1faae60c5ea0077476fb75f71","ssdeep":"12288:0EP9cRJuvXKRQuvmwRjuv/CZhsQkgicTy6dmez:C3XLhz","tlshash":"f9f418b7181be0117d8325bdfb9e62156e349007fe22c6687aed220f8fc96f415617ac","first_seen":"2026-03-13T22:08:59.851332Z","last_seen":"2026-03-13T22:08:59.851332Z","times_seen":1,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"app-ekubo.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/index-6589d338.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:09.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/index-6589d338.js HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-ekubo.xyz/\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-origin: https://app-ekubo.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 239581\r\ncache-control: max-age=2592000\r\nx-cache-status: BYPASS\r\nlast-modified: Fri, 13 Mar 2026 22:08:09 GMT\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9dbe5b0a6fbe0d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239581,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"925833e957f4419fe27aba9b341bf449","sha1":"22730cef7d235f939e8d09dc2ecfa45c294d9941","sha256":"6b9c390e5f0629f53040f165700f166165c07d2b0ca557b67a75b6c5704fbee8","sha512":"fa76d1bbe8f9e049a3f7e938929696112f6bfa9f1e75916b6e0ee3f81f8b7e62b7201d8c025776d21119a1bc0975130d0da60a1afaa9d57faf7fa5bff2d7f945","ssdeep":"6144:C8Iqk8ruUV8qeg5NDypZKrCsdLcOrbGQiRuDhT:dIa4qDDNBcCbGc","tlshash":"ec346c84b2947178cbe644e5a0373202a2357d05f4c9c47cf6bd9edb1ea89895723b3e","first_seen":"2026-01-02T19:16:12.760173Z","last_seen":"2026-05-03T08:33:54.543161Z","times_seen":90,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/vanilla-a524d433.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:09.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/vanilla-a524d433.js HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-ekubo.xyz/\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-origin: https://app-ekubo.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 5617\r\ncache-control: max-age=2592000\r\nx-cache-status: BYPASS\r\nlast-modified: Fri, 13 Mar 2026 22:08:09 GMT\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9dbe5b0a6fc80d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5617,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3750)","md5":"4969575c75181110cbdc633bb7727682","sha1":"e8dde53790ceb1b191e0244b13974d4544a96749","sha256":"4ef69cf1cbebf4cd3e511de09298e18f63248af091557d6722db017b7a5a1a56","sha512":"25d5208a37afdb1951ce79c1cdfc8c71d83db4968726fe20fc0751ff24f0fce334ade5ad0c7691cfc635c73928b53b9f0e17830aea090b24709adcc7f54f489c","ssdeep":"96:wNxSpBMEo4B20RY0B1WCigGZ6qY49EW9tM6TiuvnZb/GnD6GO+wyqVlYI9q8+hAn:wNxSoz4B2mY+Wb6d8S6TiufED6GbTOlv","tlshash":"7cc1e99475d771387f9589c6583e4433ba593823342dd460f1ae8d292f0e587c13ef6a","first_seen":"2026-01-02T19:16:12.734093Z","last_seen":"2026-06-15T11:06:52.431136Z","times_seen":165,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/index-6589d338.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:09.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/index-6589d338.js HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uploader.irys.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-origin: https://app-ekubo.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 239581\r\ncache-control: max-age=2592000\r\nx-cache-status: BYPASS\r\nage: 0\r\nlast-modified: Fri, 13 Mar 2026 22:08:09 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9dbe5b0a7ffd0d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239581,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"925833e957f4419fe27aba9b341bf449","sha1":"22730cef7d235f939e8d09dc2ecfa45c294d9941","sha256":"6b9c390e5f0629f53040f165700f166165c07d2b0ca557b67a75b6c5704fbee8","sha512":"fa76d1bbe8f9e049a3f7e938929696112f6bfa9f1e75916b6e0ee3f81f8b7e62b7201d8c025776d21119a1bc0975130d0da60a1afaa9d57faf7fa5bff2d7f945","ssdeep":"6144:C8Iqk8ruUV8qeg5NDypZKrCsdLcOrbGQiRuDhT:dIa4qDDNBcCbGc","tlshash":"ec346c84b2947178cbe644e5a0373202a2357d05f4c9c47cf6bd9edb1ea89895723b3e","first_seen":"2026-01-02T19:16:12.760173Z","last_seen":"2026-05-03T08:33:54.543161Z","times_seen":90,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/2s2AH5Efo562mN9BsS3V6KTnYYsYB3YcJ6SsSYNzJs8b/index-00kL0zT0.css","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:06.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /2s2AH5Efo562mN9BsS3V6KTnYYsYB3YcJ6SsSYNzJs8b/index-00kL0zT0.css HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-ekubo.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:06 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nx-content-type: text/css\r\nx-content-length: 10597\r\ncache-control: max-age=2592000\r\nx-cache-status: HIT\r\nage: 35023\r\nlast-modified: Fri, 13 Mar 2026 12:24:23 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9dbe5afa0d080d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10597,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d910f7af6333f81aa9ed8b26ac4b6346","sha1":"9b5bb8ffc3ec00e0f18d2040df054d399735ac8d","sha256":"9fc9278897d908bcca2bf38c20a9012c72c30d675fd6ed800b1bb40ee4390ab2","sha512":"7d1ce357324711f4fa15e232c91bea7d9083da4ac9dc40370df8d3c644e77b5eff3a6f97d9d558c2a3200da848ed540a93ba6d8519c9a1f78597990f7253ee8c","ssdeep":"192:6h7U3F4uV/ukuTj4Ct7+BQGd0bY+bp8hcnjUQnyTagz6QwGiiZ0:y7U14U/funPt72d0bYgmhcjdyWRnim","tlshash":"6f2220fa2da10151315f99e536227f18bb61c1135a8ac9f8aff2948ccd897cd23d274e","first_seen":"2025-02-06T12:20:23.305953Z","last_seen":"2026-03-29T22:40:16.975437Z","times_seen":175,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"llama-rpc-mainnet.com/","fqdn":"llama-rpc-mainnet.com","domain":"llama-rpc-mainnet.com","tld":"com"},"ip":{"addr":"104.21.55.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:08.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llama-rpc-mainnet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:14:03 GMT","end":"Sat, 06 Jun 2026 14:14:02 GMT"},"fingerprint":{"sha1":"1B:10:70:12:01:7F:2C:B1:D1:92:E6:8F:78:22:11:8D:59:46:0E:B8","sha256":"55:47:74:9C:FF:5F:DE:46:6F:A0:43:00:34:34:14:89:22:C5:6B:4D:1C:A8:90:40:D4:9E:12:55:F9:EA:86:46"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: llama-rpc-mainnet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,user-agent,x-client-transaction-id,x-hmac-signature,x-nonce,x-payload-hash\r\nReferer: https://app-ekubo.xyz/\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 13 Mar 2026 22:08:08 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-Client-Transaction-ID, X-HMAC-Signature, X-Nonce, X-Payload-Hash, Referer, Sec-Ch-Ua, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Platform, User-Agent, Cache\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HgMIrD%2FO1mRykgOxQ%2BTomP5EtSROnxEn2uhrCmFdO2mQ2sIgGNXCOOro5Wdg1ivSONOpp2xCdqtwhd65IMYS%2BDi87ZIblJHyWEKrKpaBzAcpqSGlug%3D%3D\"}]}\r\ncf-ray: 9dbe5b06a8fc75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":51,"dns":19,"connect":8,"send":0,"wait":100,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"llama-rpc-mainnet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/secp256k1-3c5c2b53.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:09.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/secp256k1-3c5c2b53.js HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-ekubo.xyz/\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-origin: https://app-ekubo.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 35157\r\ncache-control: max-age=2592000\r\nx-cache-status: BYPASS\r\nlast-modified: Fri, 13 Mar 2026 22:08:09 GMT\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9dbe5b0a7fec0d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35157,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35156)","md5":"3cee1a1745f46efb52613663d95ae6c7","sha1":"0bead77e381857bb89ccbf4b4740619eecae9c60","sha256":"1f99ece9648c4f33dc1a64c0b3fe02b6fe8b61328c7decf65b88edae59680a11","sha512":"120deb910a9dfff8a535c9b5eb5b24a594982d4e3343c11489b606cddb2aa361c5046a7d584b16c87f86a194fff28fa6cec6539559bd164fe9b0c00bc50db782","ssdeep":"768:t+qWy9oCX0XkPbiCAb168K/JkYaiqVVvmRoNwiz5RdUgDq34L2lR2KaYkm2XKFtS:Yl9163MNq3+UbhB+Kt+p4VoIbA","tlshash":"52f2e84422d1747293fa28d005765102f675ec64b1cf8c90e59c8dbb3ef34a98ab6e3d","first_seen":"2026-01-02T19:16:12.672297Z","last_seen":"2026-05-03T08:33:54.55559Z","times_seen":90,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/hooks.module-dd6ad649.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:10.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/hooks.module-dd6ad649.js HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uploader.irys.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-origin: https://app-ekubo.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 15357\r\ncache-control: max-age=2592000\r\nx-cache-status: BYPASS\r\nage: 0\r\nlast-modified: Fri, 13 Mar 2026 22:08:09 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9dbe5b0fa8340d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15357,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15356)","md5":"e738a91efda645df6c05215968c73cdf","sha1":"591b0b9436b3fea68b89554ae55babd6bc58aa71","sha256":"04a81f7864b13e02bb550bf5ef1e51998ccdafc578012145ef7a105156bee12b","sha512":"ff3b697b36f0e08e23b4fba384dd0959becb1fd678e2212b5a9eee2e31b65b7cbe7171263d2c324b5771e7453e85573df0fc7ec26fb1582893bae2ed18e13f46","ssdeep":"384:a+ZSEWrpbLLsAWFogygj5yyBfUjgUsaGU+ZaQ:Ferpu2ibfYgUFmR","tlshash":"2462e8f839b4746043ea787261bf690bb7b65c1bac8c94a09606e4da3fb040c5157fec","first_seen":"2025-09-20T14:27:23.100129Z","last_seen":"2026-06-15T11:06:52.416119Z","times_seen":170,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/secp256k1-3c5c2b53.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:10.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/secp256k1-3c5c2b53.js HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uploader.irys.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-origin: https://app-ekubo.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 35157\r\ncache-control: max-age=2592000\r\nx-cache-status: BYPASS\r\nage: 0\r\nlast-modified: Fri, 13 Mar 2026 22:08:09 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9dbe5b0fb8610d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35157,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35156)","md5":"3cee1a1745f46efb52613663d95ae6c7","sha1":"0bead77e381857bb89ccbf4b4740619eecae9c60","sha256":"1f99ece9648c4f33dc1a64c0b3fe02b6fe8b61328c7decf65b88edae59680a11","sha512":"120deb910a9dfff8a535c9b5eb5b24a594982d4e3343c11489b606cddb2aa361c5046a7d584b16c87f86a194fff28fa6cec6539559bd164fe9b0c00bc50db782","ssdeep":"768:t+qWy9oCX0XkPbiCAb168K/JkYaiqVVvmRoNwiz5RdUgDq34L2lR2KaYkm2XKFtS:Yl9163MNq3+UbhB+Kt+p4VoIbA","tlshash":"52f2e84422d1747293fa28d005765102f675ec64b1cf8c90e59c8dbb3ef34a98ab6e3d","first_seen":"2026-01-02T19:16:12.672297Z","last_seen":"2026-05-03T08:33:54.55559Z","times_seen":90,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-ekubo.xyz/snapshot/claims","fqdn":"app-ekubo.xyz","domain":"app-ekubo.xyz","tld":"xyz"},"ip":{"addr":"104.21.14.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:10.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-ekubo.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 18:54:21 GMT","end":"Sun, 31 May 2026 18:54:20 GMT"},"fingerprint":{"sha1":"C3:8E:41:0D:9D:AF:3B:B8:80:0C:E0:21:46:0F:58:5C:0F:F9:C5:39","sha256":"7A:BB:1A:83:EF:0B:C6:22:1D:01:64:F8:12:77:ED:20:54:C2:A5:AD:26:CA:E0:F4:A2:A8:8C:D0:38:F7:BE:F9"}}},"request":{"raw":"HEAD /snapshot/claims HTTP/1.1\r\nHost: app-ekubo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-ekubo.xyz/snapshot/claims\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visit_session=18ead3d3c66acd1234bec254e8593684154873f2a02939f5c4f2289a6222b3e2; visited=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 22:08:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NpKmo9jjoo1mMFajwrdyb4VY5eMHzxWdPm%2BxKm7KwIGIN%2BznMLPS1FzqumedbQ5zglO0kBgeYM4p%2FqxfpD4%2B5gcFZLEDTZvbD635xek%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbe5b105ffb562f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"app-ekubo.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cca-lite.coinbase.com/amp","fqdn":"cca-lite.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"104.18.35.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:15.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 01:45:26 GMT","end":"Mon, 08 Jun 2026 02:45:17 GMT"},"fingerprint":{"sha1":"8A:89:A5:16:20:75:2F:EF:05:7F:EB:F9:8C:CF:43:60:49:CE:3D:BD","sha256":"62:0B:58:05:A3:D2:25:FF:B9:B1:F6:05:36:05:7F:12:26:9B:18:B6:DA:0F:D9:A0:32:1B:66:12:AB:2D:23:1A"}}},"request":{"raw":"POST /amp HTTP/1.1\r\nHost: cca-lite.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 4458\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-ekubo.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4458,"data":"e=%5B%7B%22device_id%22%3A%22f9bb88db-e05d-4bd1-9628-98a55da95e50%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1773439690323%2C%22event_id%22%3A1%2C%22session_id%22%3A1773439695343%2C%22event_type%22%3A%22perf_first_contentful_paint%22%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3A%22Firefox%22%2C%22os_version%22%3A%22134%22%2C%22device_model%22%3A%22Windows%22%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22measurement%22%2C%22duration%22%3A746%2C%22vitalsScore%22%3A%22good%22%2C%22deviceMemory%22%3A0%2C%22hardwareConcurrency%22%3A48%2C%22isLowEndDevice%22%3Afalse%2C%22isLowEndExperience%22%3Afalse%2C%22serviceWorkerStatus%22%3A%22unsupported%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22page%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1773439690281%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%227a187bb2-768e-4976-98c9-d427b782c558%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%229a9844ee-b78d-41de-8010-112a020f4c92%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A1%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%2C%7B%22device_id%22%3A%22f9bb88db-e05d-4bd1-9628-98a55da95e50%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1773439690325%2C%22event_id%22%3A2%2C%22session_id%22%3A1773439695343%2C%22event_type%22%3A%22perf_storage_estimate%22%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3A%22Firefox%22%2C%22os_version%22%3A%22134%22%2C%22device_model%22%3A%22Windows%22%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22measurement%22%2C%22quota%22%3A6016.7793%2C%22usage%22%3A0%2C%22caches%22%3Anull%2C%22indexedDB%22%3Anull%2C%22serviceWorker%22%3Anull%2C%22deviceMemory%22%3A0%2C%22hardwareConcurrency%22%3A48%2C%22isLowEndDevice%22%3Afalse%2C%22isLowEndExperience%22%3Afalse%2C%22serviceWorkerStatus%22%3A%22unsupported%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22page%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1773439690281%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%227a187bb2-768e-4976-98c9-d427b782c558%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%22af8e468e-c47b-4276-8080-d32ae7680ab9%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A2%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%2C%7B%22device_id%22%3A%22f9bb88db-e05d-4bd1-9628-98a55da95e50%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1773439690342%2C%22event_id%22%3A3%2C%22session_id%22%3A1773439695343%2C%22event_type%22%3A%22perf_time_to_first_byte%22%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3A%22Firefox%22%2C%22os_version%22%3A%22134%22%2C%22device_model%22%3A%22Windows%22%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22measurement%22%2C%22duration%22%3A367%2C%22vitalsScore%22%3A%22good%22%2C%22deviceMemory%22%3A0%2C%22hardwareConcurrency%22%3A48%2C%22isLowEndDevice%22%3Afalse%2C%22isLowEndExperience%22%3Afalse%2C%22serviceWorkerStatus%22%3A%22unsupported%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22page%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1773439690281%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%227a187bb2-768e-4976-98c9-d427b782c558%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%226e8e7f68-ef07-49c1-9116-413c545840ab%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A3%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%5D\u0026v=2\u0026upload_time=1773439695346\u0026client=c66737ad47ec354ced777935b0af822e\u0026checksum=627738bcea21e8fe9ad069c443056377"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:15 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 7\r\ncf-ray: 9dbe5b302c67723c-OSL\r\naccess-control-allow-origin: *\r\nset-cookie: cb_dm=7e93aef2-14c4-4472-acd0-f1dbad01a373; Path=/; Domain=coinbase.com; Expires=Thu, 13 Mar 2036 22:08:15 GMT; HttpOnly; Secure\n__cf_bm=Bz.cAo.xA3YJCyXyV2Z7uKMzBx_UDP1buNXthU_BAQ8-1773439695-1.0.1.1-6sKvr7.8fQWEqn2KwwrArUeclW5Dsq0rrGOMRxD6fe..dj0R6RHTDAzBUrYKcwX6ORTrbtQ_sSBv2BQ8ZCcDjG0OZWloCOXUJOW_6xv27zQ; path=/; expires=Fri, 13-Mar-26 22:38:15 GMT; domain=.coinbase.com; HttpOnly; Secure; SameSite=None\n_cfuvid=XrD45N6021fmYrnHObLYfURhB4hG0NF0X12apxldxBo-1773439695570-0.0.1.1-604800000; path=/; domain=.coinbase.com; HttpOnly; Secure; SameSite=None\r\ntrace-id: 9113119466182385690\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=boeVW0jxG9hTN8NRPE3Kf0ka7h7MUtBnPI1H7HXMZ9CmB8du6k%2F6Avzp3TsX0XLXVI%2FOz2%2FpBOaqggsrP24dCsEZOYRjr6Aq%2FuIrow%2BQOu0kNMAgueyB9EXNR1kddLgWb86B8reBQA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":198,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"llama-rpc-mainnet.com/","fqdn":"llama-rpc-mainnet.com","domain":"llama-rpc-mainnet.com","tld":"com"},"ip":{"addr":"104.21.55.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:08.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llama-rpc-mainnet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:14:03 GMT","end":"Sat, 06 Jun 2026 14:14:02 GMT"},"fingerprint":{"sha1":"1B:10:70:12:01:7F:2C:B1:D1:92:E6:8F:78:22:11:8D:59:46:0E:B8","sha256":"55:47:74:9C:FF:5F:DE:46:6F:A0:43:00:34:34:14:89:22:C5:6B:4D:1C:A8:90:40:D4:9E:12:55:F9:EA:86:46"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: llama-rpc-mainnet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-ekubo.xyz/\r\nX-Client-Transaction-ID: W5RkpWW1ijcy1BOC5UqZzCAE2Z1h/Q1g6WwKfQelz1H57R0DWfT+ZxJRuK76i8/C\r\nX-HMAC-Signature: 1773439688WCm\r\nX-Nonce: 51zwS9axFSJAQKnw\r\nX-Payload-Hash: siteVisit\r\nContent-Type: application/json\r\nContent-Length: 2513\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2513,"data":"{\"jsonrpc\":\"2.0\",\"id\":176,\"method\":\"eth_sendRawTransaction\",\"params\":[{\"data\":\"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\",\"from\":\"0x8c0d1742efb1af02d89a24990c1ba5a934a46874\",\"to\":\"0xe111eb4f781e69168a48261766b15c2128135714\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:08 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \"\"\r\naccess-control-allow-methods: GET, POST, OPTIONS, GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-Client-Transaction-ID, X-HMAC-Signature, X-Nonce, X-Payload-Hash, Referer, Sec-Ch-Ua, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Platform, User-Agent, Cache, Content-Type, X-Client-Transaction-ID, X-HMAC-Signature, X-Nonce, X-Payload-Hash, Referer, Sec-Ch-Ua, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Platform, User-Agent, Cache\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tTt6n5ZSmlVeEmUxik8mL1ibTjBePZOzx%2B3Nq%2FmBcLtCvQq%2FGtnSRk%2Bj17%2BWJjbXNj7rp2F24nQwBbHrQc%2Bee0Usavl9Ok%2FJYXP%2FFDFa1OnN2E%2By0w%3D%3D\"}]}\r\ncf-ray: 9dbe5b075a3d75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d323de4cd921b39269b003e3feac8c30","sha1":"0e8e2d4a866a1a23978112eb86da51532ba2c720","sha256":"e039a6504816e9333c3b18debc91076dfc245991753df9cc2b2c32c08fd970a7","sha512":"2fdddb2a4785bef33ee20c6fd334a3541dcb542c3c26c12c5639851df260c46a2aa2c190ed996434b734d9c779aa159c2b2f7471f92027ad379788dfdad356f5","ssdeep":"","tlshash":"7ba0121410717c0b9e110044f004c88524d8409040c148331c5f1001966c8081b55146","first_seen":"2026-03-13T22:08:59.854062Z","last_seen":"2026-03-13T22:08:59.854062Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":1,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"llama-rpc-mainnet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/compat-41d143b7.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:09.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/compat-41d143b7.js HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uploader.irys.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-origin: https://app-ekubo.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 3740\r\ncache-control: max-age=2592000\r\nx-cache-status: BYPASS\r\nage: 0\r\nlast-modified: Fri, 13 Mar 2026 22:08:08 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9dbe5b09ae6a0d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3740,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3739)","md5":"e468fe54558ddc677c01ecf9b105bb28","sha1":"c926566d1d8ff477edf459c0c68b447729646ea3","sha256":"8bdea588fc4e741fca42a2dfe99f481d5b6099012adb9bf9654b44d5bd959866","sha512":"854ec617eb0b2646ca19c627e58cf332cf21970d8fffbc7de20416544f0584df5c8102dce895b7f7349fa15e003ac3dbf8f010887dee5d33ed84e56fc51e7659","ssdeep":"","tlshash":"e271ead94b7ae5b1e15973e1002b57126368bb623d1accb17178fcd129aa7808c72fc7","first_seen":"2026-01-02T19:16:12.701237Z","last_seen":"2026-05-03T08:33:54.541688Z","times_seen":90,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/waitForCallsStatus-972ca315.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:09.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/waitForCallsStatus-972ca315.js HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-ekubo.xyz/\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-origin: https://app-ekubo.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 41222\r\ncache-control: max-age=2592000\r\nx-cache-status: BYPASS\r\nlast-modified: Fri, 13 Mar 2026 22:08:09 GMT\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9dbe5b0a6fe20d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41222,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23600)","md5":"72ef75778e6372cd03f799665a7088ca","sha1":"bed87b5c51b6eb9cafd728b10f8c5454710a17eb","sha256":"1665d8bb4f99680d6f8a82f67b2f1a2ae7c7b2a150b50ff428db185c67a9e104","sha512":"87157ce9d1b4d750b378c55f86e41986c645988552ea1321e9beda14014c6d8291d3206b3b30750fd225bdacceada5537cce22118f56052dab4331c75315c0bb","ssdeep":"768:Zc54qqTGgEyOE1HN/4VQErZIWejquSu+ZiB/zZrTyLPA3W7s3hOl/dioyCum3xDu:qq//hwCIb0sDHRg","tlshash":"3c03fb6573d570b18782b5f820a30001f5346de5b84d94ecb2ace9973eebc18d6e7e29","first_seen":"2026-01-02T19:16:12.632199Z","last_seen":"2026-05-03T08:33:54.554029Z","times_seen":90,"resource_available":true,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/WebCryptoP256-d0b64a30.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:09.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/WebCryptoP256-d0b64a30.js HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-ekubo.xyz/\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-origin: https://app-ekubo.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 100630\r\ncache-control: max-age=2592000\r\nx-cache-status: BYPASS\r\nlast-modified: Fri, 13 Mar 2026 22:08:09 GMT\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9dbe5b0a7ff80d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100630,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (24954)","md5":"472eddc37fd55aafc3a64735324a391e","sha1":"51a688c066b4f173e962635474b00eb80603c4a3","sha256":"bd8968b24163cf5075d628903ceb094801843aaca66e3f37ef865f53930ed1bc","sha512":"a02b483394662eaf34380a796fb75b3bb91db29266382a18706970300189c580cc5c572f11861352f6b9ddcddf2746c1a7ca1ec5e491de0b43c60f8b0e49510b","ssdeep":"3072:Sm+d4Zd4nd4Dd4Dd46QppXMtjIzQjuCtzvt/XUeHw0kInK:S9QDXMtszQjum/XXw0JnK","tlshash":"67a30a806196b4e94ee365e955138001f470dc6174dc8881b7ecd9bb3ede88987ebf39","first_seen":"2026-01-02T19:16:12.630055Z","last_seen":"2026-05-03T08:33:54.561564Z","times_seen":90,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/localBatchGatewayRequest-ef5b2645.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:10.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/localBatchGatewayRequest-ef5b2645.js HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uploader.irys.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-origin: https://app-ekubo.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 1781\r\ncache-control: max-age=2592000\r\nx-cache-status: BYPASS\r\nage: 0\r\nlast-modified: Fri, 13 Mar 2026 22:08:09 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9dbe5b0fb8590d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1781,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1780)","md5":"4959a257760f517ad9cadd2dff38a79b","sha1":"dc7091d6b433cd08ff97375a80e20064fa108700","sha256":"0b64c7488ff1b72f5d30470facec1d4e432b60782c8277c86ae6503c60844c68","sha512":"90f8fc198ccf7b103a918e56c7ec2da273daedfd355cc5ad0c9476b3a9f4ed93fcf313db9d409b0597ae9f77f92d914f7d7699986404ba6aa6f181efed449847","ssdeep":"","tlshash":"8b3151c8b6099a32d4af2932640fe55090312945b82d80b1d94f35f79f315c5eaafd1d","first_seen":"2026-01-02T19:16:12.66586Z","last_seen":"2026-05-03T08:33:54.556799Z","times_seen":90,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cca-lite.coinbase.com/metrics","fqdn":"cca-lite.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"104.18.35.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:15.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 01:45:26 GMT","end":"Mon, 08 Jun 2026 02:45:17 GMT"},"fingerprint":{"sha1":"8A:89:A5:16:20:75:2F:EF:05:7F:EB:F9:8C:CF:43:60:49:CE:3D:BD","sha256":"62:0B:58:05:A3:D2:25:FF:B9:B1:F6:05:36:05:7F:12:26:9B:18:B6:DA:0F:D9:A0:32:1B:66:12:AB:2D:23:1A"}}},"request":{"raw":"POST /metrics HTTP/1.1\r\nHost: cca-lite.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-ekubo.xyz/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1999\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1999,"data":"{\"metrics\":[{\"metric_name\":\"perf_redirect_time\",\"page_path\":null,\"value\":0,\"tags\":{\"authed\":\"false\",\"platform\":\"web\",\"is_low_end_device\":false,\"is_low_end_experience\":false,\"page_key\":\"\",\"save_data\":false,\"service_worker\":\"unsupported\",\"is_perf_metric\":true,\"project_name\":\"base_account_sdk\",\"version_name\":\"1.0.0\"},\"type\":\"histogram\"},{\"metric_name\":\"perf_web_vitals_fcp_good\",\"page_path\":null,\"value\":1,\"tags\":{\"authed\":\"false\",\"platform\":\"web\",\"is_low_end_device\":false,\"is_low_end_experience\":false,\"page_key\":\"\",\"save_data\":false,\"service_worker\":\"unsupported\",\"is_perf_metric\":true,\"project_name\":\"base_account_sdk\",\"version_name\":\"1.0.0\"},\"type\":\"count\"},{\"metric_name\":\"perf_storage_estimate_caches\",\"page_path\":null,\"value\":null,\"tags\":{\"authed\":\"false\",\"platform\":\"web\",\"is_low_end_device\":false,\"is_low_end_experience\":false,\"page_key\":\"\",\"save_data\":false,\"service_worker\":\"unsupported\",\"is_perf_metric\":true,\"project_name\":\"base_account_sdk\",\"version_name\":\"1.0.0\"},\"type\":\"histogram\"},{\"metric_name\":\"perf_storage_estimate_indexed_db\",\"page_path\":null,\"value\":null,\"tags\":{\"authed\":\"false\",\"platform\":\"web\",\"is_low_end_device\":false,\"is_low_end_experience\":false,\"page_key\":\"\",\"save_data\":false,\"service_worker\":\"unsupported\",\"is_perf_metric\":true,\"project_name\":\"base_account_sdk\",\"version_name\":\"1.0.0\"},\"type\":\"histogram\"},{\"metric_name\":\"perf_time_to_first_byte\",\"page_path\":null,\"value\":367,\"tags\":{\"authed\":\"false\",\"platform\":\"web\",\"is_low_end_device\":false,\"is_low_end_experience\":false,\"page_key\":\"\",\"save_data\":false,\"service_worker\":\"unsupported\",\"is_perf_metric\":true,\"project_name\":\"base_account_sdk\",\"version_name\":\"1.0.0\"},\"type\":\"histogram\"},{\"metric_name\":\"perf_web_vitals_ttfb_good\",\"page_path\":null,\"value\":1,\"tags\":{\"authed\":\"false\",\"platform\":\"web\",\"is_low_end_device\":false,\"is_low_end_experience\":false,\"page_key\":\"\",\"save_data\":false,\"service_worker\":\"unsupported\",\"is_perf_metric\":true,\"project_name\":\"base_account_sdk\",\"version_name\":\"1.0.0\"},\"type\":\"count\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:15 GMT\r\ncontent-length: 0\r\ncf-ray: 9dbe5b2fffd48be6-OSL\r\naccess-control-allow-origin: *\r\nset-cookie: cb_dm=6e925d8e-2abf-4708-bc28-ae45f0b9e7a8; Path=/; Domain=coinbase.com; Expires=Thu, 13 Mar 2036 22:08:15 GMT; HttpOnly; Secure\n__cf_bm=vCVBs2jBo.wkTQqB939okTZ3qwi.RZmhpLn7VHEMsh0-1773439695-1.0.1.1-ILFDCkV.d8V6lfiwMfkVoUj3ykaCAoV7Gln5Mq8eOhMzVWiwWdWgbHpdhogqHAQy73_g7NU.eqvI95G9VRSGjZwe8H3rh5lVai1fcVciijE; path=/; expires=Fri, 13-Mar-26 22:38:15 GMT; domain=.coinbase.com; HttpOnly; Secure; SameSite=None\n_cfuvid=0byjJig6QSbnaUITXaOmT2Tv18vuv8m4MWr7IcUfTWQ-1773439695853-0.0.1.1-604800000; path=/; domain=.coinbase.com; HttpOnly; Secure; SameSite=None\r\ntrace-id: 3025695414059717144\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2la%2BuwhlCEQBmxMCHapaAPSJr2B2nPGYmO6KZc0%2Bwvoxy1MJv3pM2bJyBfkYKjVegNJm3mNYbtdZlzVEUk02HgqL2vR2iWaWq6xaT3O3hoxkQy8g93VWw3dzrjjm3vKgR5N8NQo72g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":561,"timings":{"blocked":28,"dns":6,"connect":1,"send":0,"wait":504,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-ekubo.xyz/snapshot/claims","fqdn":"app-ekubo.xyz","domain":"app-ekubo.xyz","tld":"xyz"},"ip":{"addr":"104.21.14.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:08.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-ekubo.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 18:54:21 GMT","end":"Sun, 31 May 2026 18:54:20 GMT"},"fingerprint":{"sha1":"C3:8E:41:0D:9D:AF:3B:B8:80:0C:E0:21:46:0F:58:5C:0F:F9:C5:39","sha256":"7A:BB:1A:83:EF:0B:C6:22:1D:01:64:F8:12:77:ED:20:54:C2:A5:AD:26:CA:E0:F4:A2:A8:8C:D0:38:F7:BE:F9"}}},"request":{"raw":"GET /snapshot/claims HTTP/1.1\r\nHost: app-ekubo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-ekubo.xyz/snapshot/claims\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visit_session=18ead3d3c66acd1234bec254e8593684154873f2a02939f5c4f2289a6222b3e2; visited=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 22:08:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hi83tE7y%2F0lT398go86PJwIkUW%2FMrU1lwIz4zPsnHvvcQCygOepgCM11wwenNBvj2exweQgVO9pwlzENZT7zp0to7kYo0SBMZIqwd%2FY%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbe5b02feae562f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":793494,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (19389)","md5":"9a4a60e0c5f0508773b13fdcfc1a69cf","sha1":"12be34abfe41c9ecf5422a3bf502c5693d69942d","sha256":"82ae200d3fc8d7afe8933f5eed41ff1aa12f5efd4880079e5c4a684850870a2c","sha512":"9d34b2ca5c9992c791f0c32924dd1291a86e2525a81fd9fdc77c533993fc4e7ab56a918a0d41fcfed0bbefc1587c0768f1a9e02d47266256831eb8ddf71b3ecb","ssdeep":"12288:IEP9cRJuvXKRQuvmwRjuv/CZhsQkgicTy6dmez:23XLhz","tlshash":"fef418b7181be0117d8325bdfb9e62156e349007fe22c6687aed220f8fc96f415617ac","first_seen":"2026-03-13T22:08:59.855102Z","last_seen":"2026-03-13T22:08:59.855102Z","times_seen":1,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":460,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"app-ekubo.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/index-f549b8bf.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:09.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/index-f549b8bf.js HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-ekubo.xyz/\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-origin: https://app-ekubo.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 2859514\r\ncache-control: max-age=2592000\r\nx-cache-status: BYPASS\r\nage: 2\r\nlast-modified: Fri, 13 Mar 2026 22:08:07 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9dbe5b0a6fd30d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2859514,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37695)","md5":"1f1eb4af7a420a8ae8a0f8471705bf25","sha1":"6de52ac35496309af8c0973fb22c2d1687d264f0","sha256":"226e6ee130591696f50cd5b72a403ac9e88c53ff258f9b2ec149b1889bcbf977","sha512":"ec094c5a1aa07af200a83ac8698bc85bd135b93aadc2e540ab417432e128922e5e0d60e893ac083de254268c95f50ecb1bf66d0b70b801d44fb0bea50ca89e27","ssdeep":"24576:gVPP8wHCIeqFXPSWiZiGCkRCHEHIyHlryRXsFPV9eH7ASq:gVPP8wHCtqFXPSWiZidKCHEH/FryRXsB","tlshash":"b3255c9472a5b07547e755d8502b1102f238a851300dc0a8f7acedfb7ee948a86bff79","first_seen":"2026-01-02T19:16:12.662577Z","last_seen":"2026-05-03T08:33:54.549537Z","times_seen":90,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/parseSignature-19805c2c.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:10.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/parseSignature-19805c2c.js HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uploader.irys.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-origin: https://app-ekubo.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 35566\r\ncache-control: max-age=2592000\r\nx-cache-status: BYPASS\r\nage: 0\r\nlast-modified: Fri, 13 Mar 2026 22:08:09 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9dbe5b0fa83a0d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35566,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32034)","md5":"f08cce9145768b2a5c742fc27f68f365","sha1":"5cd25801ecf069d76d2c6e3f2a4afc35de547893","sha256":"3d377af1e1701f7c5458004df347b66c42c9c1a819791757b149ac04fc5ac623","sha512":"ce0c954d157594f2227831c6e56d2401d50b5dc8e8f44078e2f1520299d8080b7b169a63fd285e75582e527a6b0735876720d5be3b288619717e2a9a8e2c0edb","ssdeep":"768:uqWzTTq8BTNnUfPb+vxQOvG+c3Jj3JNLpKRkFtcA8fGH3wSp5HG6BOjOkRT7Fakn:uqwjUfPbd2c39PBKI55a8to","tlshash":"d1f23a887a79b07193952494d06b22026228fdd9b40d80d1f36edd7f2ff944cd9e6a3e","first_seen":"2026-01-02T19:16:12.605913Z","last_seen":"2026-05-03T08:33:54.529209Z","times_seen":90,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/hashTypedData-920862f5.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:10.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/hashTypedData-920862f5.js HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uploader.irys.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-origin: https://app-ekubo.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 4331\r\ncache-control: max-age=2592000\r\nx-cache-status: BYPASS\r\nage: 0\r\nlast-modified: Fri, 13 Mar 2026 22:08:09 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9dbe5b0fa84b0d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4331,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"ff33297b4628b53c26b1d0de79840860","sha1":"d42859e57182dc785a1cb64d7fdf8cf850a92392","sha256":"90d93f5a1e080299aabea0320cd9b8a3c8fb63689b93553ceb72788879569c91","sha512":"6003f2fe5c71bb1ec4c55aca39e4239ba0130fce79a58c95b30e1e7537914177fc11d7dc691e3a173e1ad0979a8c1fa325677fce0fc783485db2832eb1c88ba5","ssdeep":"96:sB4/EknhGyonxvMKuEZkFhC7gVKAdKwKAe1L7WtsIN9evXY4VajYufrA:s2/9nhHcvQC7gVNJ07WtT90XYKEYu8","tlshash":"109114cd71a5f1b82ecc05ece1eb2101e6a4ac15f07598e3f1ec24b735a196da479b2c","first_seen":"2026-01-02T19:16:12.686534Z","last_seen":"2026-05-03T08:33:54.548401Z","times_seen":90,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-ekubo.xyz/assets/a7163330-6ab7-4d74-93fa-c445141c7abd?chain=evm","fqdn":"app-ekubo.xyz","domain":"app-ekubo.xyz","tld":"xyz"},"ip":{"addr":"104.21.14.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:05.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-ekubo.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 18:54:21 GMT","end":"Sun, 31 May 2026 18:54:20 GMT"},"fingerprint":{"sha1":"C3:8E:41:0D:9D:AF:3B:B8:80:0C:E0:21:46:0F:58:5C:0F:F9:C5:39","sha256":"7A:BB:1A:83:EF:0B:C6:22:1D:01:64:F8:12:77:ED:20:54:C2:A5:AD:26:CA:E0:F4:A2:A8:8C:D0:38:F7:BE:F9"}}},"request":{"raw":"GET /assets/a7163330-6ab7-4d74-93fa-c445141c7abd?chain=evm HTTP/1.1\r\nHost: app-ekubo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-ekubo.xyz/snapshot/claims\r\nCookie: visit_session=18ead3d3c66acd1234bec254e8593684154873f2a02939f5c4f2289a6222b3e2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 22:08:05 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lw4xuUouaZI%2FhEICNVLAT9JuMXNhaCVYpHHskxkD87Fp22FNIr2w6lXtxsBGQf%2FWEIXysrrzgerfzyeuIYWl0DXbNR9XTOfPcmQ%2FeA8%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbe5af3fc9e562f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7815,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (6836)","md5":"5388453c2d4a1a045a7ef93f46ebdc43","sha1":"80bf248349b93548afe609f9077a5a0010ea7cf1","sha256":"173499a2fdd9d0f530a35a1815574852f459a663fb8e792907c06c2fdf694790","sha512":"a547db9b366d9f2969161e5be4ada99fd8bdd1b6a9a4aa6d154ae0231a81eaa9843ae3a1b540ed01957bb38b46b7a8c1d4489ba637dd331d6fb77e16cffea902","ssdeep":"96:KDAI7bpn0SqdwzAOXfUC/uAL2cORqadq3Yr6SxBO0a6oMz29Yn5TVmhVAFPIDpa:BdkZuWmsMq3YhxBXJY6nWhM+pa","tlshash":"6af18dbb9322a27449df81be557fa782339680937acace0973edd4853f55c2080a52dd","first_seen":"2026-03-13T21:20:12.569566Z","last_seen":"2026-03-14T10:40:54.309173Z","times_seen":11,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"app-ekubo.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/As8bvViGADU63W4kY6p8sbTQMxzvCoNQfZ6YHr5Q387W","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:06.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /As8bvViGADU63W4kY6p8sbTQMxzvCoNQfZ6YHr5Q387W HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-ekubo.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:06 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 1268638\r\ncache-control: max-age=2592000\r\nx-cache-status: HIT\r\nage: 418966\r\nlast-modified: Mon, 09 Mar 2026 01:45:20 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9dbe5afa0d190d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1268638,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"790d2f46196270559d7568752ae161a9","sha1":"50644fe352e5f171f03f0dd77e34b5b9bd8299a9","sha256":"1743a45439ad5a0c1ee2910f0f2a85fc14cb8b0d2cc6f824bbd7b0f1b6a9b53f","sha512":"0e27af4323deb009e91410aa890acca1cab4dfd7aa235534d942679ab05430b0fcd84d063ed058eec74f49391344e4e9e9084a9cb1b44d91457c180263781029","ssdeep":"3072:tBBvObjgPPKCGC3o/lN4+Vb4TA4tnAQkWCLR+DaVvR/jdyg7isDNcNkg6xsfT7V2:tBBvOFkQlfdfdKsyCisDGNkrxETPlA+4","tlshash":"a925cbea0eedad1cb16ed945cc385e7c40ba91923fa66203e853f5c7e50c3b95d48b48","first_seen":"2026-03-13T21:20:12.582089Z","last_seen":"2026-03-26T05:32:56.450982Z","times_seen":15,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploader.irys.xyz/quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/index-f549b8bf.js","fqdn":"uploader.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-ekubo.xyz/snapshot/claims","date":"2026-03-13T22:08:06.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploader.irys.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 02:53:04 GMT","end":"Mon, 27 Apr 2026 02:53:03 GMT"},"fingerprint":{"sha1":"5C:96:6B:EA:7D:B5:80:1A:FA:38:F0:4E:C2:93:64:BD:85:77:18:D3","sha256":"95:1D:53:9F:EB:31:6B:7A:6C:F0:AA:EF:A4:6C:69:5C:1D:8B:73:9A:1B:66:D1:33:63:1E:3F:5E:B7:D3:BD:E7"}}},"request":{"raw":"GET /quMvWMQ3xGk7BcSQac8ZMiURaPYDjQDgrt7vUJfnsvY/index-f549b8bf.js HTTP/1.1\r\nHost: uploader.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://app-ekubo.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-ekubo.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 22:08:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-origin: https://app-ekubo.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-content-type: application/javascript\r\nx-content-length: 2859514\r\ncache-control: max-age=2592000\r\nx-cache-status: BYPASS\r\nlast-modified: Fri, 13 Mar 2026 22:08:07 GMT\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9dbe5afa0d200d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2859514,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37695)","md5":"1f1eb4af7a420a8ae8a0f8471705bf25","sha1":"6de52ac35496309af8c0973fb22c2d1687d264f0","sha256":"226e6ee130591696f50cd5b72a403ac9e88c53ff258f9b2ec149b1889bcbf977","sha512":"ec094c5a1aa07af200a83ac8698bc85bd135b93aadc2e540ab417432e128922e5e0d60e893ac083de254268c95f50ecb1bf66d0b70b801d44fb0bea50ca89e27","ssdeep":"24576:gVPP8wHCIeqFXPSWiZiGCkRCHEHIyHlryRXsFPV9eH7ASq:gVPP8wHCtqFXPSWiZidKCHEH/FryRXsB","tlshash":"b3255c9472a5b07547e755d8502b1102f238a851300dc0a8f7acedfb7ee948a86bff79","first_seen":"2026-01-02T19:16:12.662577Z","last_seen":"2026-05-03T08:33:54.549537Z","times_seen":90,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}