{"report_id":"334913fa-68a5-491d-a7bc-eb6b48bc9f78","version":0,"status":"done","tags":[],"date":"2026-09-22T20:45:58Z","url":{"schema":"http","addr":"testdomain23232.top/","fqdn":"testdomain23232.top","domain":"testdomain23232.top","tld":"top"},"ip":{"addr":"172.67.161.66","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"testdomain23232.top/","fqdn":"testdomain23232.top","domain":"testdomain23232.top","tld":"top"},"title":"ELEVEN TEST","dom":{"size":55036,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (30017)","md5":"8af39c691993bc3e561d8363d4e17aee","sha1":"5c7c7f6a6b268ed0760525b00ec12ddc62cd7dce","sha256":"73197313457998c0ed5dfdf7d0c2f243b742486ea564670f24d7da6683f18743","sha512":"6fada95e9e17bb27794b08961ae00824dcd133f311786668e325d75757daa7fdb5df27b7bc67fa00429d3e04b3ad0399389ac8cb17a1237d766d0b6ba9a7c4b7","ssdeep":"768:MXu2GIZuFBr+degjMJrwep5Rc+qnCNlizc/vlOfpqArl2ixhwPZk4wKMnRKrUGFB:g7Iw+qnCNz/vupDRxhY9Mn6UGdl","tlshash":"0933c83167b211597027da9722d6a7dafa248107e3030e3dbaefb0b0cf49d8d5963749","dom_hash":"domhashc0e756b9ce07c87885919be2b01ca0f5","first_seen":"2026-09-22T20:46:18.467274Z","last_seen":"2026-09-22T20:46:18.467274Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"testdomain23232.top/","fqdn":"testdomain23232.top","domain":"testdomain23232.top","tld":"top"},"ip":{"addr":"172.67.161.66","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-27T20:45:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":175}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.testdomain23232.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"testdomain23232.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"arbitrum.gateway.tenderly.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"pinky-goat.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:16.415795Z","last_seen":"2026-08-13T23:41:17.365981Z","alert_count":3,"request_count":1,"received_data":1946,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.12039Z","last_seen":"2026-08-13T23:41:16.891648Z","alert_count":3,"request_count":1,"received_data":2314,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"esm.sh","ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-06","domain_rank":47501,"first_seen":"2020-09-23T23:39:41Z","last_seen":"2026-09-15T11:06:52.746021Z","alert_count":0,"request_count":2,"received_data":19573,"sent_data":950,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.508965Z","last_seen":"2026-08-13T23:41:17.495366Z","alert_count":3,"request_count":1,"received_data":2518,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.502245Z","last_seen":"2026-08-13T23:41:14.736804Z","alert_count":3,"request_count":1,"received_data":1835,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:20.987253Z","last_seen":"2026-09-22T20:43:03.766743Z","alert_count":3,"request_count":1,"received_data":2876,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-13T04:41:16.549772Z","last_seen":"2026-08-13T23:41:11.575864Z","alert_count":3,"request_count":1,"received_data":1790,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.791287Z","last_seen":"2026-08-13T23:41:10.902034Z","alert_count":3,"request_count":1,"received_data":1274,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:17.372315Z","last_seen":"2026-08-13T23:41:16.437557Z","alert_count":3,"request_count":1,"received_data":3232,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:15.397557Z","last_seen":"2026-08-13T23:41:18.713222Z","alert_count":3,"request_count":1,"received_data":2139,"sent_data":611,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-20T23:17:00.144243Z","alert_count":0,"request_count":1,"received_data":23703,"sent_data":514,"comment":"","tags":null,"fingerprints":[{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:17.165286Z","last_seen":"2026-08-31T08:37:13.328176Z","alert_count":3,"request_count":1,"received_data":2510,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:17.107648Z","last_seen":"2026-08-13T23:41:11.157922Z","alert_count":3,"request_count":1,"received_data":3414,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:16.300482Z","last_seen":"2026-08-13T23:41:16.856533Z","alert_count":3,"request_count":1,"received_data":2138,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:16.986881Z","last_seen":"2026-08-13T23:41:11.352493Z","alert_count":3,"request_count":1,"received_data":5724,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-14T13:17:43.117422Z","last_seen":"2026-08-13T23:41:13.680143Z","alert_count":3,"request_count":1,"received_data":2080,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.915588Z","last_seen":"2026-08-13T23:41:14.380115Z","alert_count":3,"request_count":1,"received_data":1696,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.347276Z","last_seen":"2026-08-13T23:41:15.06385Z","alert_count":3,"request_count":1,"received_data":1282,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"gateway.irys.xyz","ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-03-25","domain_rank":2119884,"first_seen":"2023-11-30T18:58:13Z","last_seen":"2026-09-01T19:50:14.100535Z","alert_count":0,"request_count":57,"received_data":30493,"sent_data":32944,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:21.665153Z","last_seen":"2026-08-13T23:41:15.823044Z","alert_count":3,"request_count":1,"received_data":2594,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:21.213765Z","last_seen":"2026-08-13T23:41:11.396196Z","alert_count":3,"request_count":1,"received_data":3350,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":7,"received_data":345415,"sent_data":4046,"comment":"","tags":null,"fingerprints":null},{"fqdn":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:22.683703Z","last_seen":"2026-09-22T20:45:15.469104Z","alert_count":3,"request_count":1,"received_data":2302,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.508579Z","last_seen":"2026-08-13T23:41:16.15563Z","alert_count":3,"request_count":1,"received_data":2742,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.511071Z","last_seen":"2026-08-13T23:41:13.931136Z","alert_count":3,"request_count":1,"received_data":2752,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.219188Z","last_seen":"2026-08-13T23:41:14.014371Z","alert_count":3,"request_count":1,"received_data":1622,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:15.423894Z","last_seen":"2026-08-13T23:41:11.861596Z","alert_count":3,"request_count":1,"received_data":2898,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:15.472116Z","last_seen":"2026-08-13T23:41:13.337186Z","alert_count":3,"request_count":1,"received_data":2754,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:20.160193Z","last_seen":"2026-08-13T23:41:18.887715Z","alert_count":3,"request_count":1,"received_data":2148,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.510149Z","last_seen":"2026-08-13T23:41:17.42209Z","alert_count":3,"request_count":1,"received_data":2198,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":2,"received_data":24091,"sent_data":1074,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:16.930397Z","last_seen":"2026-09-22T20:45:10.668363Z","alert_count":3,"request_count":1,"received_data":3468,"sent_data":611,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:17.159815Z","last_seen":"2026-08-13T23:41:10.598035Z","alert_count":3,"request_count":1,"received_data":1827,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arbitrum.gateway.tenderly.co","ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-05-11","domain_rank":0,"first_seen":"2025-08-03T10:23:07.270939Z","last_seen":"2026-09-13T05:29:36.387499Z","alert_count":2,"request_count":2,"received_data":1144,"sent_data":1099,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:22.138569Z","last_seen":"2026-08-13T23:41:17.07609Z","alert_count":3,"request_count":1,"received_data":2108,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:22.091142Z","last_seen":"2026-08-13T23:41:19.000505Z","alert_count":3,"request_count":1,"received_data":2482,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"testdomain23232.top","ip":{"addr":"104.21.34.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":3,"request_count":3,"received_data":2893052,"sent_data":1444,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-13T04:41:16.529093Z","last_seen":"2026-08-13T23:41:09.887641Z","alert_count":3,"request_count":1,"received_data":3041,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.1075Z","last_seen":"2026-08-13T23:41:12.532775Z","alert_count":3,"request_count":1,"received_data":2262,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.507258Z","last_seen":"2026-08-13T23:41:09.846478Z","alert_count":3,"request_count":1,"received_data":2312,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:22.220629Z","last_seen":"2026-08-13T23:41:10.814565Z","alert_count":3,"request_count":1,"received_data":1818,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:20.285114Z","last_seen":"2026-08-31T08:40:19.245747Z","alert_count":3,"request_count":1,"received_data":2052,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:18.148619Z","last_seen":"2026-08-13T23:41:11.06138Z","alert_count":3,"request_count":1,"received_data":3390,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:21.92935Z","last_seen":"2026-08-13T23:41:14.192346Z","alert_count":3,"request_count":1,"received_data":4224,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pinky-goat.digital","ip":{"addr":"104.21.17.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-28T16:44:53.164795Z","last_seen":"2026-09-14T13:18:52.422124Z","alert_count":1,"request_count":1,"received_data":5205346,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.990078Z","last_seen":"2026-08-13T23:41:10.856105Z","alert_count":3,"request_count":1,"received_data":3964,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:17.285132Z","last_seen":"2026-08-13T23:41:13.351669Z","alert_count":3,"request_count":1,"received_data":3766,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.237113Z","last_seen":"2026-08-13T23:41:16.850899Z","alert_count":3,"request_count":1,"received_data":2876,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arbitrum.drpc.org","ip":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":1951970,"first_seen":"2024-10-14T17:26:29.664661Z","last_seen":"2026-09-22T20:43:14.084195Z","alert_count":0,"request_count":2,"received_data":1423,"sent_data":1077,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"vote.88mph.app","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":592855,"sent_data":1494,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:18.248141Z","last_seen":"2026-08-13T23:41:09.334025Z","alert_count":3,"request_count":1,"received_data":2356,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:17.33794Z","last_seen":"2026-09-22T20:45:53.42414Z","alert_count":3,"request_count":1,"received_data":2286,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:18.271691Z","last_seen":"2026-08-13T23:41:12.494118Z","alert_count":3,"request_count":1,"received_data":1918,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:15.954615Z","last_seen":"2026-08-13T23:41:11.701472Z","alert_count":3,"request_count":1,"received_data":1850,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.209311Z","last_seen":"2026-08-13T23:41:10.716855Z","alert_count":3,"request_count":1,"received_data":2326,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:21.123145Z","last_seen":"2026-08-13T23:41:14.187329Z","alert_count":3,"request_count":1,"received_data":143033,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:16.433983Z","last_seen":"2026-08-13T23:41:09.026773Z","alert_count":3,"request_count":1,"received_data":2168,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:21.819472Z","last_seen":"2026-08-13T23:41:14.689513Z","alert_count":3,"request_count":1,"received_data":2302,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:18.453427Z","last_seen":"2026-08-13T23:41:16.856369Z","alert_count":3,"request_count":1,"received_data":3918,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.50592Z","last_seen":"2026-08-13T23:41:10.857551Z","alert_count":3,"request_count":1,"received_data":2896,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arbitrum-one.publicnode.com","ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":3618652,"first_seen":"2023-07-09T07:25:43Z","last_seen":"2026-09-14T04:21:36.921972Z","alert_count":0,"request_count":2,"received_data":1597,"sent_data":1097,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.testdomain23232.top","ip":{"addr":"172.67.161.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":6,"request_count":6,"received_data":11261,"sent_data":3213,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.5.10","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arb1.arbitrum.io","ip":{"addr":"172.66.171.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-03","domain_rank":513999,"first_seen":"2021-05-28T20:40:01Z","last_seen":"2026-09-13T05:29:37.657442Z","alert_count":0,"request_count":2,"received_data":1219,"sent_data":1081,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:22.495466Z","last_seen":"2026-08-13T23:41:15.415102Z","alert_count":3,"request_count":1,"received_data":3056,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:17.356019Z","last_seen":"2026-08-13T23:41:13.399494Z","alert_count":3,"request_count":1,"received_data":1946,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:20.202753Z","last_seen":"2026-08-13T23:41:09.124781Z","alert_count":3,"request_count":1,"received_data":2024,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.514043Z","last_seen":"2026-08-13T23:41:14.415603Z","alert_count":3,"request_count":1,"received_data":1616,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.51194Z","last_seen":"2026-08-13T23:41:18.895319Z","alert_count":3,"request_count":1,"received_data":2158,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.504231Z","last_seen":"2026-08-13T23:41:09.978939Z","alert_count":3,"request_count":1,"received_data":1654,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.714098Z","last_seen":"2026-08-31T08:34:04.283689Z","alert_count":3,"request_count":1,"received_data":1862,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6f134aa0a4c14df6fe081e2a6643f4bf","sha1":"61989a9857651a3e6e67a4f56bd65a0ac61e1faf","sha256":"f24cb4d56e23c43c0f5927a4ab308c23741e40fbb13e3996e3c42679982559a9","sha512":"b2b21f9c85678b62e77b009768a4ce7fcd1332410817c76f1fc8bff5595edf99fa48b353886413d0952504c7d1629fd4983751c8361bff9edf79d5bec6db839f","ssdeep":"384:XTkAes3CkB0YatnIE3EmI/N62D7LI2fU6HFvQxCN:P3Ck5ibEPt7bU6lvECN","tlshash":"b982c5dcf55770706bb2b9b4403f450ab2367856908c8440e669c8e06eb856fe27bf3e","size":18401,"data":"","first_seen":"2026-05-26T18:42:46.16671Z","last_seen":"2026-09-22T20:50:19.801112Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"testdomain23232.top/d9e920c9-a70f-4862-a3cf-f1b4b194693d","fqdn":"testdomain23232.top","domain":"testdomain23232.top","tld":"top"},"ip":{"addr":"104.21.34.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"fe8234cbd1cdd5966074b3037cada479","sha1":"b14ac475b831cc60c9da81068952475258c1e67c","sha256":"31dd9f4ece4c6a0d7855391ebe01e3c21bfb6f7748b825e30b3223a43b69078e","sha512":"0e5d7a91b427121bda2e1119c5fbe92db55bf53f045f492dda47e16786c5b14938d337591a9d5d392a5d69c8db7e6c277c5a6b5e9daafa1dccfd9c11b8a14096","ssdeep":"","tlshash":"4a517250b734a5ae0792cac778f63263a5244b283d6ed811d1af8e4337970d205dbf38","size":2995,"data":"","first_seen":"2026-06-10T00:36:37.858875Z","last_seen":"2026-09-22T22:59:39.944973Z","times_seen":192,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinky-goat.digital/g2t0siNXwZrp3P1qccRfr.js","fqdn":"pinky-goat.digital","domain":"pinky-goat.digital","tld":"digital"},"ip":{"addr":"104.21.17.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"614c2d320f53e5620f0782922034369c","sha1":"1b08f011aef0227ff617a66eb33428ac26dac9ef","sha256":"e7a8c834b7aab046acb8ee7de175645f96290b1248147ac04a401c02cbc90ea7","sha512":"9fbea76ef0ab11b3f9fb0e00afdca15d8c9335e7d93cc210f924c9225daaa54f0261bcdf5a69ce8624c0c0da0ee4d91424f484ea338d50a4bf60e853cc1740b8","ssdeep":"49152:ShPEUyG+obRqVK3K6IZjaaX9kG5tKdsmhiPTf1lxCQi:SFEUyEYIaX9kGTKdFh0Rzi","tlshash":"b736ccbbd7d6f13727b38609e6bf1022d858051eb37496e63bee1320e07e55271d290a","size":5204547,"data":"","first_seen":"2026-09-22T20:43:18.335706Z","last_seen":"2026-09-22T20:50:19.810615Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"testdomain23232.top/","fqdn":"testdomain23232.top","domain":"testdomain23232.top","tld":"top"},"ip":{"addr":"104.21.34.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8fa7c3e0c41a7d3094575514609aa565","sha1":"9a15fe9d269822ebae21ed40c80be4e3c0fe2fc4","sha256":"1bbe6f4124c7b60a16a99295b0229611254d48183fcd49f570588113dd927c7f","sha512":"10c18f1f5589af7f90ac3770478647aac189cdcbae8edaa64cc2c467ac08d61ea5210d31e1838d646c66c19883d8b3e14809f9c6a62b1b36b21c4b416d1dc7ab","ssdeep":"49152:mJUzCtAegZfWuHdkGtlKnA8nENVDtVV8Yq:DkuHdkGTKn7nSdtq","tlshash":"fe164abbd7d6f13767b38609e6bf1022d858051eb37496e63bee1320e07e55271c290a","size":4407046,"data":"","first_seen":"2026-09-22T20:43:18.337466Z","last_seen":"2026-09-22T20:50:19.807029Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"testdomain23232.top/","fqdn":"testdomain23232.top","domain":"testdomain23232.top","tld":"top"},"ip":{"addr":"104.21.34.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b435ca6750125a5e0317e0dbb30c2219","sha1":"cce99e246b6b61f9bf5db21d4111049ee9db7bef","sha256":"c5f6a3b39da5853d4899c67dc1de641282fe9d64a066941612212e15b5ed22d4","sha512":"7abbe007b3ac86ff9edef72b919b4c3982afb16d3934702b09e3fd36195fc884af856a759347e3aea4d595a799d476b57918c13e0cbee2b29e91a721bc4ef0f0","ssdeep":"6144:OlNFwyLTXKk0WZsDYjHKMJDgl6dpfe/SvJi2xHOmZrILRc6o+:eN5xQ2xHOmZrILW6o+","tlshash":"a0c551c812e9d51b968d5a03ae80fefd90fad16389d8f10ba098b75d49ed1cbc1c8dd4","size":2605549,"data":"","first_seen":"2026-09-22T20:45:22.624306Z","last_seen":"2026-09-22T20:46:18.522057Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote.88mph.app/VmMCJGSn0d3iF4K.js?v=3","fqdn":"vote.88mph.app","domain":"88mph.app","tld":"app"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"e7db85be86b63b0a80b101f162451357","sha1":"6a3d44c90d262d8c573e85302c496813dac5c75e","sha256":"a09d895f3902eeee47c2d1d34d1f3139154874c11d5be50211b2d20dbf76bcde","sha512":"5ca33c2e2f2f25e715eadf8513b70910c76efda39446227ba54f87602e7e65f1eccaa290433ef76aca518d9d485f1fb471482daa404a9bc5951e2186aceb38bd","ssdeep":"3072:VqiVnv40OFTikYdji2RmGO8gBwi2RmGO8SHY+NcByLNNYpNntaIIbVEzmxbvvy0e:rGliHdoIWEK1vPXi4s49GiUlLFGZo","tlshash":"dfc42a95b3b4b022839d65a5482b2045f33af96d580a002cf668fcfb7da5544ab7ff70","size":582087,"data":"","first_seen":"2026-09-22T20:45:22.597306Z","last_seen":"2026-09-22T20:46:18.49749Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote.88mph.app/LjjKLFLseByZ8Sz.js?v=3","fqdn":"vote.88mph.app","domain":"88mph.app","tld":"app"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe2718948e75a18f006312971787a278","sha1":"35edbae2538948c2936749e4339cf7d130bca214","sha256":"5e86eba892ccf44a9c898eb57ca739ae0e91027eb9d76ea729e359325786b751","sha512":"d63cf2cd07bf4feedebaa14a79186b8f8097006ad3f67ae481e3f0d979034c18d696f6daa02c7bd15d464202a7422d39a4efe1b178fca74d49c184711a0a4660","ssdeep":"192:uZERENIJLi4BYVuSNdJt8cyWAcLoxYYp0t:uGREKJ2GYVnfJt8cyWXeot","tlshash":"cdf184d9f3d1b0a513a70a34357f6646f13b6191560d10208399d8f23ef7dab8927f88","size":7878,"data":"","first_seen":"2026-09-22T20:45:22.605281Z","last_seen":"2026-09-22T20:46:18.488604Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"testdomain23232.top/","fqdn":"testdomain23232.top","domain":"testdomain23232.top","tld":"top"},"ip":{"addr":"104.21.34.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"673b010065099926099210668840b99f","sha1":"f39d7ab299643e3e31b97e70baea2b440fe8f15b","sha256":"554b358f88baa0c43d7c4bb623b9407204758a5f7495ad022153c93129d9bb44","sha512":"f2f12af850d333cda264ad065416ab9c29eef65f95f0a18b44a7b5529cd13147354ef548fadda976ef9181bdcf37386040e036ba1688132a3a353e0b15b4478b","ssdeep":"","tlshash":"07f02b2657563a401e61216c42c7637425a0acd3808d4e9c3e0cc3c05ff1d72cc532dc","size":465,"data":"","first_seen":"2026-06-08T16:14:00.668857Z","last_seen":"2026-09-22T20:46:18.522698Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"testdomain23232.top/assets/bridge-store.js","fqdn":"testdomain23232.top","domain":"testdomain23232.top","tld":"top"},"ip":{"addr":"104.21.34.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b884a1480290002e8ab111349f0bf0e0","sha1":"98f15a1747f4142dbc44f52563ca417e4653ba71","sha256":"6349864b10f0520397ea257b54c891b4a97098f46321933e9a241702ba3a7bce","sha512":"c18d4953198e5007f4941053e98d8ac5e44673e7bfcf81938b00a4a929f064ebf6be3352a7cedc70d2da81b92bf893e6b06b5c5ad40838a3ff08b5f1942f87af","ssdeep":"3072:gzVTwSLqjkzfGWbIs5z29CuW0W0TI3eKz1fRgDJSvLRojNAuGMgo/vMnNAVEM8Mk:gztJJhdBfIJSv1O2xHOmZrI5R0Gop","tlshash":"f6d59ac50ee6a518b6aed2034d58ddfd90b7c46279d0b207e588fadae8583b78dc0f50","size":2879905,"data":"","first_seen":"2026-09-22T20:45:22.633119Z","last_seen":"2026-09-22T20:46:18.523712Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/disable-devtool","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"97c69ddec5a41bfd71d4e46f03aa3a66","sha1":"6632a0a55d48d322450a0a0147526f0e91b4cc0b","sha256":"bbd0cbecbc43488ec920e0660e7a0b903af3d9fcd3114421a7620f55ffa98792","sha512":"80e5b974e51b127e2b9c0f227c6cc0b302351806ae1947f0691cb18a67d3743f4390cfe8d0d45f57ab6f5ba899eae8775fdd776edcdb2c0c733997bb38abd90b","ssdeep":"","tlshash":"66c08c10c033f0382a308cb832b4eaefe3a302c6d20c52b88e04022c93cf100d22cba4","size":181,"data":"","first_seen":"2026-05-26T18:42:46.141539Z","last_seen":"2026-09-22T20:50:19.778296Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"arbitrum-one.publicnode.com/","fqdn":"arbitrum-one.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:23.132Z","timestamp":1790109923132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 02:01:04 GMT","end":"Thu, 05 Nov 2026 03:00:51 GMT"},"fingerprint":{"sha1":"94:5F:9F:32:64:19:A5:50:59:22:7E:16:22:E5:6B:9B:1C:65:F3:ED","sha256":"7D:67:31:E8:80:74:FB:3E:3C:A4:1B:9F:F0:BE:71:56:CE:95:31:97:BD:28:75:B6:47:AA:02:45:08:74:76:65"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum-one.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://testdomain23232.top/\r\nOrigin: https://testdomain23232.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\ndate: Tue, 22 Sep 2026 20:45:23 GMT\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3f4272bb9970883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":641,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/B5sLi9Stwf8xRFrbJ6Bm6wZojhuyzkGcWowZenqKD4fz","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.089Z","timestamp":1790109924089,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /B5sLi9Stwf8xRFrbJ6Bm6wZojhuyzkGcWowZenqKD4fz HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com/B5sLi9Stwf8xRFrbJ6Bm6wZojhuyzkGcWowZenqKD4fz/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427318d784e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/HTRnUQQDU47XpwWJMzeSSqzX7y5GMLuXnowdYk183S2i","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.102Z","timestamp":1790109924102,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /HTRnUQQDU47XpwWJMzeSSqzX7y5GMLuXnowdYk183S2i HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com/HTRnUQQDU47XpwWJMzeSSqzX7y5GMLuXnowdYk183S2i/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731adcc4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com/EtCAcusz6dRAmAEjLhg5caTZC47eQwZ31wgKWofrPc4g/","fqdn":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.315Z","timestamp":1790109924315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /EtCAcusz6dRAmAEjLhg5caTZC47eQwZ31wgKWofrPc4g/ HTTP/1.1\r\nHost: zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: EtCAcusz6dRAmAEjLhg5caTZC47eQwZ31wgKWofrPc4g\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1720\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FcM4HdhMiyVMjIk7DD2LM3eqNSd9%2FSNm5vsVAAbVKPi114n4X%2BuHnxO87WpKpDhnPUMTUemvaQvvrHH2pNvRjscJFHnkCK95Mgy3FIvdn7dIKp2JpfEpGPHu4YA70HDo47vIx0GbhaUv4j6qtcIvU8li2Mp5H1bVHtOmXlAD%2F8wMx6z9VwS5LteITfvurSDh83Qz4Szzi0DMNLXyU2gsajFhf4Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f427337e17b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1720\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1720,"size_decoded":2594,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0314e0b2cc12271fd9c1ffaf13f80c91","sha1":"152c1c56734890372da333fe64cd37e79ec81d36","sha256":"b1e1818d8943c7f10fb99aeac6a0a86ea4b4b646b16adbf9d4c4db2c4e8cb7f7","sha512":"ec6234ac2fa864339199f40e6aa08b33ea986e12c61ec951aa3728a2b045af2a29c2fc200b2f5aa157425bd36dbee1cacd61028a810ece6e448b34c6d18f6efc","ssdeep":"","tlshash":"ec310815a47e31a7e3b1dc8a631b5877bb08888960e99cc8309d7cd6c12780d27ad5a0","first_seen":"2026-06-11T07:30:29.733709Z","last_seen":"2026-09-22T20:50:19.762434Z","times_seen":36,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":12,"connect":55,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com/AhAYuinacUyu1gTLdVFFMVBnVCPnn5hadJ6sQ9oUW2wB/","fqdn":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.317Z","timestamp":1790109924317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /AhAYuinacUyu1gTLdVFFMVBnVCPnn5hadJ6sQ9oUW2wB/ HTTP/1.1\r\nHost: sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: AhAYuinacUyu1gTLdVFFMVBnVCPnn5hadJ6sQ9oUW2wB\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1984\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2FVk19i%2F7HC6oJ%2FIb57%2Bw96Xk5%2F2wksEwO4hySm2%2BvJYdYK9SMhoT1ZRshlRQeLqXcSDEhtH%2FPzEk1s8L5WdXPYnVMeZ%2BDwzQHEbyiZhvlYGWKegxqohjw6QAXbyrGjaCIHlNA4VsU7H8mByzTXn0NQZh8QdbRnIup49cnHtepDD2nFpdBb6YaUjcohoOqp9c%2BtqSb8l2cuLr%2Fq2lpb%2BmT%2BgHSc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f427337ffe56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1984\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1984,"size_decoded":2876,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"21ea491573af9794b3534936fd4f670f","sha1":"11b83fd6b1345bdea5ff04e5e682f9d77dcc514d","sha256":"92401c017701759fbc8e6c250ed653c50b0fffe78b1d628172650d4367e5636d","sha512":"38c070fc984bf3691a0493a762b2c6677a5d59af6dc48be1c318424ae6c041258277529e64a50106c1df0ff1439e2236238c64a9ffbc4708b12b8cc16df30b55","ssdeep":"","tlshash":"29410a1e0ec8958adb25a519873bcc5a5997283cd4fa41c578ce94a5131d181ab3cdf4","first_seen":"2026-06-10T18:04:23.90852Z","last_seen":"2026-09-22T20:50:19.800599Z","times_seen":37,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":11,"connect":53,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com/GYXDFoP5N7zD9drksjJDtzLyuKMxzVC6cxL7hd5FTEmG/","fqdn":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.323Z","timestamp":1790109924323,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /GYXDFoP5N7zD9drksjJDtzLyuKMxzVC6cxL7hd5FTEmG/ HTTP/1.1\r\nHost: 43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: GYXDFoP5N7zD9drksjJDtzLyuKMxzVC6cxL7hd5FTEmG\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 2008\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CNsOrA%2Btz0I31hBZijN%2B3%2BBlSe%2BkDmdsH6bQIzpc6%2BPZniYIUKUrlcwaHULBpPfhAkFQG2NrNdddSYkEdvb6SMWGLeierBwNt0X9t%2F5OWY%2BXFhdDzgNFDFa20UtW9rIWlTfaqAzjnQxxtEgm6z2ac%2F%2FzGLhGWWD0HXVI6%2BLS7wShGxepyLZo%2F1JxcGcuoq3HCO9BRP391vjkXILxT3YqSM9ce1Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f42733ce7f56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2008\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2008,"size_decoded":2898,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ad5cab38c5477b10861597c294caf179","sha1":"c5e68dd36b9b9cfe78e6c8b8c6ca87d9c9975a6b","sha256":"1585361e26918c5ffd73a70b3963bdedd62feda6f8400985db9e85505e7a1ded","sha512":"1273021aac5283372f1a375d9555472c46b2c84000ba7fb89d138defea8184e65bf80a2acc41cd536b8e5d4bb7e58c00557798c89f8d1586bcad083c63b241bc","ssdeep":"","tlshash":"c4412e4541e54a7fc3bf6b47195ee27353434159363f52b70256c4a31504e712e90672","first_seen":"2025-03-05T19:21:16.036556Z","last_seen":"2026-09-22T20:50:19.772792Z","times_seen":220,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":77,"dns":5,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com/Cp3rKQhcxnwLeryCXo65zSv8dYFvXn4b47fC9GiYbXu9/","fqdn":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.372Z","timestamp":1790109924372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /Cp3rKQhcxnwLeryCXo65zSv8dYFvXn4b47fC9GiYbXu9/ HTTP/1.1\r\nHost: v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: Cp3rKQhcxnwLeryCXo65zSv8dYFvXn4b47fC9GiYbXu9\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1248\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wti0QV0FSDbXWNwZvMKg7G6EVDVv6%2B%2F8IJ1A35ssckX2t0U5JmghFxRNNHy%2BgmHjivIhjYsxZjWWo6nXqY9kbR3HY%2Ba%2BUbygpHQl3v00gMaETbUmn%2BEfCBawesW9tY7KACoeW4tud9en%2FP2cOoJm1FxioXiYqLyOSEBMegnsNHFDelQv%2FUs2Sl%2BouziSX%2BbIf6TjsG6xG%2BiL9YFhI6LkPPkQXP8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f42734eea256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1248\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1248,"size_decoded":2138,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2b05fb4b18fe871b8347001697b847b1","sha1":"f8615e5beebf1a23f352508742ba120eb16e5c80","sha256":"c21793083a9ec1cfd7fc610f8c8aee7d77b637cde7534bccdca1e8b6821fbd3a","sha512":"040f3ee9a0b8b3ba63953acde3a12533c29396a99b5795aa2fd435c5468263607bdb57aadda10d88f825edb3f5e331c1b232ee357e3610ebf82cf26a40eaf561","ssdeep":"","tlshash":"5121b7e3b95dac0dd9020a6d5b1127f8ee1c75f6449c02220acf5e5268a1609322e2c2","first_seen":"2026-06-11T07:30:29.694011Z","last_seen":"2026-09-22T20:50:19.784825Z","times_seen":34,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":206,"dns":5,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com/AEdaUbAHJH6uu1qeTC5sgQUzocwS61ZW7xEYJMCzuuq6/","fqdn":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.493Z","timestamp":1790109924493,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /AEdaUbAHJH6uu1qeTC5sgQUzocwS61ZW7xEYJMCzuuq6/ HTTP/1.1\r\nHost: re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 954\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: AEdaUbAHJH6uu1qeTC5sgQUzocwS61ZW7xEYJMCzuuq6\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 954\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yVxfdmaeb7IrXCNYH%2BLHWp791Ks%2FFBkwm4O4Qn%2BuNQa5QQJSrq1przdziv%2BRA3D7EUkMJg0F1KISBBbexY9MWcOXfF%2F12ZZR%2BGxtU6JZSFtaxjUVsWv%2BIzoiKsWYm%2FZZDxE1IHAi6c0PHcIsAKEtc%2FUsIgmnG3QzzhgbCEaQ4NZiSxLGIRTs8qHC0PpmQjstpuVBdh3Xe68kH%2FM612mItzAgcPI%3D\"}]}\r\ncf-ray: a3f427359aaf1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":954,"size_decoded":1818,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"813eff22688096bcf23b96cdad86aada","sha1":"8ead6b927bb8c767eeaf017fd49122cbb22c61d2","sha256":"d3c289f9f99d1b80374afeaf3e7da4b1f46f1efbae526f388f7a2fbbaf0dd121","sha512":"5a26032f16dd583ab22af7bda9d9d8e171d24c43b4acd9a378c6f5944eaacab7765903eab75d72282c699eed3af391d06bb7669c65e78ad6f08ebc70285f4487","ssdeep":"","tlshash":"d111c87fb529b4e1f097b3724d724282fcfaa9671c759840c280b6e108dc3d1498ea5e","first_seen":"2026-02-10T08:05:59.391831Z","last_seen":"2026-09-22T20:50:19.780223Z","times_seen":54,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":236,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com/FGwxtfb99CU7ZWrkGJ1tKhV8vxUmhrTjs6zgp62ko6W7/","fqdn":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.321Z","timestamp":1790109924321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /FGwxtfb99CU7ZWrkGJ1tKhV8vxUmhrTjs6zgp62ko6W7/ HTTP/1.1\r\nHost: 2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: FGwxtfb99CU7ZWrkGJ1tKhV8vxUmhrTjs6zgp62ko6W7\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 4844\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2F17MCvRfiLyQ929RyE7GDvPUKywFOww8o0hnGjtr5w7y9mWMYRFxpo5T5oqXKUDsaYYfTYS3bj%2FKeOc0D5NBZnYfeHWONbUvpySQxxYiWsN7j8S6ESjCpkxpqRZpEoVhclBw1GU%2FAwTMzjwbHBQ99VI6yYH9o3ZGvdVtjM0Vp4IDOG1CDY%2FDEcPSfAe9vO2T0FGE8nckFfajK%2BxNxfo8Xxlpc8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f42733ce7e56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4844\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4844,"size_decoded":5724,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fede23a3362cc6ad2d14390d8dc13767","sha1":"b05217c63e6573c9c272ab9948eff228e3de4cb7","sha256":"a93378956b2085e9cc71239b969063e26489c396fdeec7aab8428149f292608f","sha512":"46b8ed4bc99a69d8d9124a65d2423fcb316f1c3319b033119870988e73b3893947358069d0196c1b9c89ac89aee34fea6fa2ea2fc45b69b75a62910b2bf6c7eb","ssdeep":"96:Fv73oiQWckPHE1kJyks8HBmsG46hlasbX41OBoj6vF1:97kWck/E8u8H/Gvl7gOZvF1","tlshash":"2ca18eb746666bc0d2f8454229466363c9d90ca72fa6cdc7724b6406d0ddf918df8fb0","first_seen":"2026-06-10T18:04:23.898247Z","last_seen":"2026-09-22T20:50:19.79725Z","times_seen":35,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":79,"dns":4,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com/3MT5FBCpHxMz8SpzNZQUrhWmpXbjFb5jKMxSKUbk2HJe/","fqdn":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.377Z","timestamp":1790109924377,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /3MT5FBCpHxMz8SpzNZQUrhWmpXbjFb5jKMxSKUbk2HJe/ HTTP/1.1\r\nHost: el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1626\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: 3MT5FBCpHxMz8SpzNZQUrhWmpXbjFb5jKMxSKUbk2HJe\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1626\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vj35T5i07uwqfUeLR31RXrpjez0BbMS%2FohGUkD32kZGng7ZPKUwCRaywRzzEytfc6o154fLQAhhaJTI0p9Ig8QnfTvdVZKtZ%2FTwoJITY9pe721JHH8f6HDIdB1PeIfPwsYKqXZFilWSprzf0haHGL8VzS%2BAy37thCYPNNuZOUUMHwfAZns8wPfRU3ID5kqLnKVKM4GDpM8RCeu0Pz61c80%2Ft%2FfE%3D\"}]}\r\ncf-ray: a3f4273549b31a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1626,"size_decoded":2482,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f264d3c5f7b7ebe8775107161dc8c0ca","sha1":"60d88c760ebd5a5180312077fd964638849b930e","sha256":"2e6a8da7fb056c2f18249fcaf24e36ad93ecd40c0f6c3dd169061ec809e6662f","sha512":"12e73ec2d942cc782915e702636aa0c9c01cdf1e63099f8ad74532b37f720377f5955b34db3182a4a1eac30f54bf5c569e971551b6d70ce69b4c66ab27e0dec7","ssdeep":"","tlshash":"7931081a0c7fa689c735bc98ff621892b1738115e2f403e3daf39b10888609c0b924e3","first_seen":"2025-04-02T10:59:29.279287Z","last_seen":"2026-09-22T20:50:19.786398Z","times_seen":37,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":268,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.testdomain23232.top/?req=cap/redeem","fqdn":"api.testdomain23232.top","domain":"testdomain23232.top","tld":"top"},"ip":{"addr":"172.67.161.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:26.032Z","timestamp":1790109926032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testdomain23232.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 17:00:54 GMT","end":"Thu, 17 Dec 2026 17:00:53 GMT"},"fingerprint":{"sha1":"A6:0B:EE:23:07:42:18:71:4A:7E:6B:7F:9A:CD:7E:C0:A2:DA:5D:8A","sha256":"B2:DC:27:C0:8E:EE:A7:AE:1B:3D:04:2F:AA:DC:EC:60:F9:4A:6E:04:56:70:6E:B9:64:88:31:EE:B3:9B:40:19"}}},"request":{"raw":"OPTIONS /?req=cap/redeem HTTP/1.1\r\nHost: api.testdomain23232.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://testdomain23232.top/\r\nOrigin: https://testdomain23232.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-headers: Content-Type, Cache-Control\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Tue, 22 Sep 2026 20:45:26 GMT\r\nserver: cloudflare\r\nx-powered-by: PHP/8.5.10\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zFEFWG%2FVZweHlfKa7oIM9DJan%2BO4mcXbFOdxX9BCo1buEQAxyde40yKv%2F8NyX6fihgQhb6pqOnenmNk0X%2FuUQy0FdplDOpTyen0lqoZtW0bGN2O1KnBVMWdp7TldSAKgrJq%2BBI77ZJLrcQ%3D%3D\"}]}\r\ncf-ray: a3f4273db96b56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"PHP:8.5.10","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":796,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.testdomain23232.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/A2nNXgUMwV5nKhUomHb1gTsdg7PQh8kY6o5Xd5fjAGN3","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.111Z","timestamp":1790109924111,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /A2nNXgUMwV5nKhUomHb1gTsdg7PQh8kY6o5Xd5fjAGN3 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com/A2nNXgUMwV5nKhUomHb1gTsdg7PQh8kY6o5Xd5fjAGN3/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731be0e4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com/5ZfwxdeiMwp91zkMTo5ABo4XYBcStqopPe52LZRVUSwr/","fqdn":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.332Z","timestamp":1790109924332,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /5ZfwxdeiMwp91zkMTo5ABo4XYBcStqopPe52LZRVUSwr/ HTTP/1.1\r\nHost: ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 5ZfwxdeiMwp91zkMTo5ABo4XYBcStqopPe52LZRVUSwr\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 972\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GJaVA3Vj4IjoZmNhgNSTqGqG9nl2hTU%2FA8RnZAGXCCkS1ZiuOMZV32vEknW5em%2Byk3h%2Fs6iw8zJ%2F2lgIS89nWjVC34cb0fEvbVmw6o0TrLYhM5hMSrcPeFjj6oQsLHA5YFpmveZl5rK0ZSV6SUvkH09GMrObt%2FVrxHMaCpcQ56otaEqoWizT95etUlBRCELhAHeivql8RhDWmJDTZJtyDvbDH%2F4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f42733ee8456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 972\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":972,"size_decoded":1850,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0c9f6edd760754aeea301e192c1c3c7a","sha1":"79d7e5342bd50b2717e4709912e8657c81f4b7fd","sha256":"9528c5ccadff18933bcdba89cf812c8d82eb2278318d77f636b1fa75aac2859a","sha512":"a49689b3cadaee426b840306686b2f59b72665fef43383319a1e857b9a7af8d18b35a553dbbf2dd62e679b1889b6d31f18bfc1c6da17e3ca26388b60acc00253","ssdeep":"","tlshash":"85119072e7b083d5cf9993a298431ecc829010597ebc0aaa0b2554a250ee9d6bc9144b","first_seen":"2025-02-06T07:36:38.211469Z","last_seen":"2026-09-22T20:50:19.768665Z","times_seen":61,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":91,"dns":9,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com/7CXSgx8jsxLxjzMCMaadAm2zy2HXnfgpYFs2sF6C1kEV/","fqdn":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.339Z","timestamp":1790109924339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /7CXSgx8jsxLxjzMCMaadAm2zy2HXnfgpYFs2sF6C1kEV/ HTTP/1.1\r\nHost: lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 7CXSgx8jsxLxjzMCMaadAm2zy2HXnfgpYFs2sF6C1kEV\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1872\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N8fv%2FiQ8QCl9y%2BnCh6MRyunSsZX7qiSBQmyB5ipFgzCozGQVvv4dNsPmE%2F1XCpfh%2FoRtR%2FFAc4ysIFV5yuIDl77NSkiSxQGpHrZMvFnIDOXJ481sNC4IjSWfFUy9Rbf2XVHpAHEMW98x1%2Bda6DILAWiWj6TVte9Qidd9Lc3GmUg5a4CIrsR63op5DtDLEHl0js2wUG4HKwx0oEMD5tg%2BivPo8no%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f427334e6e56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1872\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1872,"size_decoded":2754,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fa48538b8c0947b346de80dc1db8f9e2","sha1":"96276e1d6db34abd142a0ed483565490254f7f40","sha256":"1524f9642a2f1a5bec991fce624446c42edc2dadd25423bbf62a6cc274907d6d","sha512":"6a0188ae528eb3ab059e6aa4e6c3411c476baaabdad34099c10e60b27bd5aaa82c27df35caeb1edfb62b07763b71e2e4ea83cb419e7a427df38a8a0fc4fdca24","ssdeep":"","tlshash":"20315d5ea4bf54f928c1b41b948392e4e021e121c058b27cc9f1bb7c18f511243a8667","first_seen":"2026-06-10T18:04:23.905993Z","last_seen":"2026-09-22T20:50:19.769879Z","times_seen":36,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":8,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com/8JR7J4bybYjEWs8Ep7tqRFEpqwftdhxQghx2a5EQUaCr/","fqdn":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.375Z","timestamp":1790109924375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /8JR7J4bybYjEWs8Ep7tqRFEpqwftdhxQghx2a5EQUaCr/ HTTP/1.1\r\nHost: nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 8JR7J4bybYjEWs8Ep7tqRFEpqwftdhxQghx2a5EQUaCr\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1274\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rFSPsyoUUPlaMzhXPgZNCy74Veqo6ZUscR6JX6qkZ68XqECvrw2UVVg%2BSVU%2BiFCWjHoR860nFVv4pntxOWd8bXDbSc%2FmoG4xHIYr%2BpNy54zaWVzVAgac8x3cKVKPHsQsK07ZQMIRpKLvEqxAZjZNg4rkkDMUwgxicVfLoxDnAmI%2B%2FFm%2FIkoRDpDu45mHkcenjWGdjZDBt5Ll870rErr2anh%2FXEQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f427338e7a56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1274\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1274,"size_decoded":2158,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2fd3d6ecc45cae27fa8a4e224a23c9f7","sha1":"642381761938ca6dffdb32b5481b4c2d1febe170","sha256":"7e3218626833037cb46dbd0ca48b141b6c084c5c94f11e7b7cf6b2450dbece44","sha512":"18b82655a881b6fe7b49deb081b0336700292a008ee1a57caaa0bf12dbedaa3b67d2dec0b9892b308f5b5704e02b66a760bc7bc29e2664a8373f6b9d3a97f372","ssdeep":"","tlshash":"312117918faa8042edb47a42ff3288907a0290252d6c1b5a34a038bef80874b59ffc10","first_seen":"2026-02-10T08:05:59.35261Z","last_seen":"2026-09-22T20:50:19.775729Z","times_seen":45,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":9,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com/23q4kgVKA71hmzEKL9qhRwSTESeYhDZ84LUNc1HJ8XX2/","fqdn":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.490Z","timestamp":1790109924490,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /23q4kgVKA71hmzEKL9qhRwSTESeYhDZ84LUNc1HJ8XX2/ HTTP/1.1\r\nHost: b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1096\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: 23q4kgVKA71hmzEKL9qhRwSTESeYhDZ84LUNc1HJ8XX2\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1096\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=feyTa7pfkniHy1V9zQxhs3WFkJ%2B3VQrwQcywgbS14hGsmkFfnIiN0knMjLnvlfaBlfg%2FMMUhxSfE03SCcD8II0RVJZmjHzlWqyx4DIBC3JxBMtLhLcYdpJnTV8svL0FSd67NpmmFSALbZYNyOkeMS229CL8nKgux3jfFLkZkuxgoHnu1uvMuxRNnFkQUnN3SqJcN4ho3jtRBfWSg41HjLSGNmS4%3D\"}]}\r\ncf-ray: a3f42735aaec1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1096,"size_decoded":1946,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d1dbbb93d3b934f5af157234adfb688a","sha1":"a0d0976bcd5b4ad1bab1b86b381148e51c1b8457","sha256":"7f497eafd0585f420a2023adefc4e497c9588a598c4fced1c6eb1b9bcbaeb123","sha512":"84a24cf0782fb6fd625e3a6f82c8b2edc677761d23ce4721086f24396dac0fbc39ab65aecae899afbf9f18b0a83552d2defe4552520c9f12a4b5bcdf7ca6f1bc","ssdeep":"","tlshash":"3511e588b2cad020ca96ddd583bab180c214f0dc32ce8c3a15d1e24e0dd60b04b1290e","first_seen":"2024-07-08T23:13:47Z","last_seen":"2026-09-23T01:19:48.623851Z","times_seen":277,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":246,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/3GFibxLTiHvi7DucnoGZGgHbWb3eA9cXG3E85dEnjRsi","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.043Z","timestamp":1790109924043,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /3GFibxLTiHvi7DucnoGZGgHbWb3eA9cXG3E85dEnjRsi HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com/3GFibxLTiHvi7DucnoGZGgHbWb3eA9cXG3E85dEnjRsi/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427317d1a4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":166,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/AA7kJLwyTxzxHDmpsHigApQXVPexXwmEAK6K939kfcX8","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.125Z","timestamp":1790109924125,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /AA7kJLwyTxzxHDmpsHigApQXVPexXwmEAK6K939kfcX8 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com/AA7kJLwyTxzxHDmpsHigApQXVPexXwmEAK6K939kfcX8/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731ce644e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com/Fo5WiNNZWKWpLsBjTE9UVq9c5h2Y9DKF9BCyMd9f4p4H/","fqdn":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.308Z","timestamp":1790109924308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /Fo5WiNNZWKWpLsBjTE9UVq9c5h2Y9DKF9BCyMd9f4p4H/ HTTP/1.1\r\nHost: 3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: Fo5WiNNZWKWpLsBjTE9UVq9c5h2Y9DKF9BCyMd9f4p4H\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/png\r\nx-content-length: 2470\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XDwqtTinVBwZLSFun1lD1ivjWmMPYraDkYVAqalZ%2BxuXrV8NPbe3Zhz2ozMmtLexXlp%2BtBVadRRfGbDK%2FQN6T7ofsjkI9A1sgU7PgIKNLkGksZdcGevXVDP2ofgv%2Fqpkel4gWl4tK%2F8w3TZ97NEijk%2BBXBxzwAGXKG23gWiYKGp%2F3yxpdFD1OzcCZqy2znSMWH44dIO7FLXGaeMY4rj1eA9wJzY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f4273368beb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2470\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2470,"size_decoded":3350,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"4355d3f289b817968cd2b1f249ba51b5","sha1":"477353c1a6a88d3d79647d85af54eccdde58b182","sha256":"3f2a414142b4b1afc8d993da729eaef92ff5d0fe00106794c4e2e0e4bc1a146f","sha512":"d832eabfa8fea1aef11fbdba8460614ad29991aae9ab3b260d9b01c267c2a338c5f1d9c50eaa599b916442a3b96617e47a8ea7f849d2401b14cd03d2e34b2d88","ssdeep":"","tlshash":"b6513b71b53df5f288802ad7318b6995368db17a8225e1c9944a42a4f2a59af700cb03","first_seen":"2026-06-11T07:30:29.726152Z","last_seen":"2026-09-22T20:50:19.768108Z","times_seen":31,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":8,"connect":59,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com/4fknCk58W1hxsN2yyfLGwPmgrvjRZwGoMCtrY6DtfWPA/","fqdn":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.316Z","timestamp":1790109924316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /4fknCk58W1hxsN2yyfLGwPmgrvjRZwGoMCtrY6DtfWPA/ HTTP/1.1\r\nHost: g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 4fknCk58W1hxsN2yyfLGwPmgrvjRZwGoMCtrY6DtfWPA\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 3088\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7jqc3hLMDubroVFjxf77Up156hv%2FKV2WWOuwwYuZ83fK%2BGzcH73szo6py8XgSyRnIBsnnjULAly3gyaQb6Mply4GyWjJUalNAaAho3gVQTMvilli%2F7cG4OuUwLJIHJnORndAAjxB1wKxG36D6S0YOobHJtkhhBzyvc6CmojbRJUjzTEDpbHf0LtKh9UfAR23yBP5rSy8pGfewLAarav1BM%2Bh2Iw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f427337a6556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3088\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3088,"size_decoded":3964,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"945d9baeb17b3b825fac41d17a7c6708","sha1":"d4c7c37a26dbcfb19dab27be959c1557d98c7017","sha256":"5b023ca70029d1de860edbd397ecee29a6a4967ffda6d31ff6f60055ecf4061d","sha512":"23c5193bb3bacee8c6558cfcfcbbb784216f48777bf4e084246f907a4000bbd7836a7c4b6fa266349b3fe93d6af257a16a2f715534b8377b38ccd0e6dde762ce","ssdeep":"","tlshash":"2b514c24286d7d3b8186b91315d85d3f85fb83d2fa4ef34836f69290d040d29c6e0306","first_seen":"2026-06-11T07:30:29.715818Z","last_seen":"2026-09-22T20:50:19.780945Z","times_seen":34,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":12,"connect":54,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com/2NjDWqEJ9EGvxgj9wS1oDfh2jWS7mq5KLYvofQx24YXM/","fqdn":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.480Z","timestamp":1790109924480,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /2NjDWqEJ9EGvxgj9wS1oDfh2jWS7mq5KLYvofQx24YXM/ HTTP/1.1\r\nHost: crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1226\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: 2NjDWqEJ9EGvxgj9wS1oDfh2jWS7mq5KLYvofQx24YXM\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1226\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=acdm3s4%2FO2McwMopuXX3NLJrJSIbzA4voL9Kc3B3Fl2VPywM5LX81DpcIxsTL8fvxecgUo8dXahLRKZzvRK5%2BAvfCxug0UulcPIsbsf6uqEG0cqRJSRwFS%2FNvwwY5cJrDWXDa1w4EtGpyDI5bqrp2sZyxMkwdXnR1wbjnSPqqElN6WGJfSfo4zW%2BVkPyfJiNUQ33nkYbjIB4IYwaEwIiqdvrWKA%3D\"}]}\r\ncf-ray: a3f42735aaea1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1226,"size_decoded":2080,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"deee48bad1fc92c6fd6a9a0e674b79bf","sha1":"4e9111335476a86a3f21ee4d49d4848987a238fd","sha256":"15aae5f5c33873d84b119f28e4d22497a73baff226d0f5fee4d38e0cf409f8c1","sha512":"d9fb58405ee580a2e169ead3209a47627f632a9c8afd0f5c31ef29e6f86cd5bfa6aadd3397312d92f4fedd354220c1f7782679d811bda52fd3996f0035b7881a","ssdeep":"","tlshash":"4521b7afa47fc325c3d238581d19054b0bb6026975c7e33cb954ba81797700dba260f0","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-09-22T20:50:19.805176Z","times_seen":169,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":247,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com/5M61R7ETnvpQLgBp7a6DRVWm759u5Ls8PB1FWJv52rx1/","fqdn":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.341Z","timestamp":1790109924341,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /5M61R7ETnvpQLgBp7a6DRVWm759u5Ls8PB1FWJv52rx1/ HTTP/1.1\r\nHost: ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1452\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: 5M61R7ETnvpQLgBp7a6DRVWm759u5Ls8PB1FWJv52rx1\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1452\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jHPsQRTfYqvTi9AgJbgtsnykyp6CJGJgGntCHEw5%2FDurLRavGq93FW%2FP5kxKJSuYDnUyBOQohts3ZYPvrITyv4rkwN4mFn8ltkiDAbgsrIknVl%2BkDQYsYDqPFR6YtsPskn5B1Mn5EBQ9LGgkI%2B%2FCuRmJOaiIdIXhfWsiCVzigS4Tuorq8jDE%2B8nmwlWS%2B6JsgqfJ2i%2B926BGJcUGKP8VFcqDGPs%3D\"}]}\r\ncf-ray: a3f42734d8541a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1452,"size_decoded":2314,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d81c49695819f693444e4bd4092faff5","sha1":"74ebd3a7b2767141113e39f665a9a62263b9f9c8","sha256":"da70c65bcaa3eb9055680c90a554a442d877b60792e78ba9f028bcbfe90481cf","sha512":"7281103bddc9ce3820382949e7e1132c4ec542e1594649134676474facaa4d2bec1a7668b16380f39d2a46cc78fb9f47170acc006b8387e12c9c8806014ecd1b","ssdeep":"","tlshash":"ac311cdb657b0030a35b442579301afb2370788ca9ea512e41152a7a1e930d3e2d04d3","first_seen":"2026-02-10T08:05:59.361585Z","last_seen":"2026-09-22T20:50:19.785347Z","times_seen":50,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":231,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/1uax15bZQNN9id5YyXCs7XPHXgsx2XaS5z93YrdvjDH","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.067Z","timestamp":1790109924067,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /1uax15bZQNN9id5YyXCs7XPHXgsx2XaS5z93YrdvjDH HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com/1uax15bZQNN9id5YyXCs7XPHXgsx2XaS5z93YrdvjDH/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427317d124e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com/Eodj8znQBik51BJNXiRTw1t2HXyv9p3LNhiNvsoMuDbg/","fqdn":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.331Z","timestamp":1790109924331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /Eodj8znQBik51BJNXiRTw1t2HXyv9p3LNhiNvsoMuDbg/ HTTP/1.1\r\nHost: zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: Eodj8znQBik51BJNXiRTw1t2HXyv9p3LNhiNvsoMuDbg\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 910\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qoZUT7cG9TvBb3TP5WkGk%2FKsZsPmtsUU2UN4dsXBpcuqtbNUL1TqvGXWykHHI73xCGaC80r8%2FX%2FVktVpjVuEPJdTOMCzvoEdugEhdRfa9Jj9Bir1tHpKKz8wvQP1Emik8oazSm2Ku9erpJnpsPIGVvYJtxlpNoZRZHxrDT2%2BjFEHMlJB9kEgxVw0%2FylZ%2Ftfuw%2FplipgWKSTriP7tR4QDE5nqFcY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f427334e6d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 910\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":910,"size_decoded":1790,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"75e06389f1522e8619d51b4aa5249049","sha1":"2be7ecc59449e73efea55ee6f7d1a7ecfe2cebc3","sha256":"8e352c8a9e65670d43fa8709cbde5535226746cc4d4777e07b251e117ca4aa95","sha512":"81767e30786a7529278208cb567b4d4438585fb0983d2bc74704570f01649903875897309a86f4114b569bf17288115813904fe1becc997adc5f6621242fa0fb","ssdeep":"","tlshash":"5611f7e348aacc3ddcbd98325416b475e603ed0802f55e0381202ee420da42697d3a8a","first_seen":"2024-06-14T00:48:21Z","last_seen":"2026-09-22T20:50:19.801599Z","times_seen":4334,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":11,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:22.900Z","timestamp":1790109922900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://testdomain23232.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 103806\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-23T05:49:19.265693Z","times_seen":295730,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":27,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/Cp3rKQhcxnwLeryCXo65zSv8dYFvXn4b47fC9GiYbXu9","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.084Z","timestamp":1790109924084,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /Cp3rKQhcxnwLeryCXo65zSv8dYFvXn4b47fC9GiYbXu9 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com/Cp3rKQhcxnwLeryCXo65zSv8dYFvXn4b47fC9GiYbXu9/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427318d5c4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/ENERkaSEqTZ9HDtcuY5LHchHWY4CPN3Q31Qasqrq4f6k","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.126Z","timestamp":1790109924126,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /ENERkaSEqTZ9HDtcuY5LHchHWY4CPN3Q31Qasqrq4f6k HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com/ENERkaSEqTZ9HDtcuY5LHchHWY4CPN3Q31Qasqrq4f6k/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731ce694e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com/5aFEMn7GceUbCyMFsKjcw8DJY9c9PzWNeJv7ragvUWTT/","fqdn":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.303Z","timestamp":1790109924303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /5aFEMn7GceUbCyMFsKjcw8DJY9c9PzWNeJv7ragvUWTT/ HTTP/1.1\r\nHost: ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BQpPUpAE2UqB1IDIS6qwPp9V7kqGPWYCpfOTVyaKnlrZmJ2nuqNXq8EPJRJqJbIsKbA5EcIC8KW0uIgmoDvcPmm%2B5x12e%2B6ezk%2F5zD2slL2RPN0aucvcy8pHBfEdP%2BzZqmepHUjSjlns0CkYq5gdLhpsU%2BiJYkSzqnq6skbHbaeFw4DxyLYX5cCRGk7f5kHtOblwDEGKkAZM6GJbD6bRuPwh3n4%3D\"}]}\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 5aFEMn7GceUbCyMFsKjcw8DJY9c9PzWNeJv7ragvUWTT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-content-type: image/svg+xml\r\nx-content-length: 2524\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3f427334ffd56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2524,"size_decoded":1984,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76f68d848a2ee54aa90236af5bf82583","sha1":"59bc5aca5c3f80a8e736f67aea193d18f45e95ee","sha256":"28e225b36f393cec73b9e2c434e2f491db66c77a7e64fab84be61a213063e3a6","sha512":"048912e9132f414cc34b667ed2a6edabeb1e2c86b501ac687accfb39cbb79709a0e97020bab41b298589a5d8d7c8156cdb6a3ed30a24844f06f8a133fe9d1ac5","ssdeep":"","tlshash":"50514148376c97eda80097f92f15c82af45730d7d195e9a6c2a02f36748a1be0deddc1","first_seen":"2025-04-09T12:00:28.868199Z","last_seen":"2026-09-22T20:50:19.788998Z","times_seen":101,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":5,"connect":55,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com/BmRja2B3uNcEnmSf4spQwbDhyXoU8SpESENkTyQBN6Wr/","fqdn":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.365Z","timestamp":1790109924365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /BmRja2B3uNcEnmSf4spQwbDhyXoU8SpESENkTyQBN6Wr/ HTTP/1.1\r\nHost: t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: BmRja2B3uNcEnmSf4spQwbDhyXoU8SpESENkTyQBN6Wr\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 404\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GVYOGNQSFStjmX0OmuYP0PP8xNEPhfHXzdQ0Tdgjjnx00jCdXLg92pfo7jhiT9oW8GueV3FIwoGJYmIbnS0QTw4mllUmDKl1ZDsdPOGULx8rmfjsyKSqszU7OX0dvZnv%2F4trc6X4LXAdIhQYhCBfkIi7LM5VxnsnxJycdw6zzgT9C0CyPuHxWWm9RiyT482Id9tdjaubk%2BHlxajR03hB2vMwgCQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f427337e7756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 404\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404,"size_decoded":1274,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"38e0fdddc2ae9c063534c43963acc120","sha1":"807c4dc8578cfd17d503a3dd33a847d70b3df49b","sha256":"ac764ebfd47367399a0ecbc2236a573ad8bab36a76d7b9ff0406b9901b1fc7fc","sha512":"55b13de8dd085096e32e0f1570c8446afc9a2ae48b3f86cfa5a463a8ae2a3aac1a55ff32e72544e431924947b9e168da887e56bf2b0a0a9e9097ceb543dd6674","ssdeep":"","tlshash":"b1e0f1f097225061d3d0b2332e9b3905170cb905552c0d809837b4fd59254c35e60c2e","first_seen":"2025-10-03T06:22:13.531935Z","last_seen":"2026-09-22T20:50:19.804129Z","times_seen":224,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":4,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com/5ALLUP4yuGwDcVHWQu9rkA4iavNi6RPYuFSFagBKuJAX/","fqdn":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.482Z","timestamp":1790109924482,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /5ALLUP4yuGwDcVHWQu9rkA4iavNi6RPYuFSFagBKuJAX/ HTTP/1.1\r\nHost: hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 5ALLUP4yuGwDcVHWQu9rkA4iavNi6RPYuFSFagBKuJAX\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1438\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nk1aiY%2FeRQ2f3eV9T2o8ImMKLSf6Mb%2F0211z4nl05l7z3PzXOGJ3fsnRDNmAXlgvC%2B%2FQ37qzSftEROx%2Fmtdpm2lH9AiQ6mbEkfd4PChOl8%2F9VPUwd9QdM4dq6Ws%2B4amC3lnMxoHQQP6PSXmXAxahmL2%2FmLNNg%2FQovSIJTlOLPYn0ZkCvsnH7AfZt9rUsLpSb08ZFmsWWN0LNJSlBj7Rn%2FQAu8As%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f427347e9e56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1438\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1438,"size_decoded":2326,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"739c17e97821986cee753ce116d27ecf","sha1":"06e069a865b1da92efe4aefc96ae4f088d1fb94b","sha256":"a59b53d6102a24cbc0521f8395b37c6e36f69926ebe63268e389321f871dc529","sha512":"aed4fbd8df5b742900bf36bd92c7734087b7562c9ac0e303a12fa46b3f8b04267e9983b3b7a70e5e35143a7c212d440a74d97266ce3594a7a949dbfe40cea6fa","ssdeep":"","tlshash":"412119f1e42e130ff0f507398c1f634898f24b905834addcb93db2661e603d82268899","first_seen":"2026-06-11T07:30:29.717032Z","last_seen":"2026-09-22T20:50:19.794122Z","times_seen":36,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":56,"dns":19,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testdomain23232.top/","fqdn":"testdomain23232.top","domain":"testdomain23232.top","tld":"top"},"ip":{"addr":"104.21.34.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-22T20:45:22.098Z","timestamp":1790109922098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testdomain23232.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 17:00:54 GMT","end":"Thu, 17 Dec 2026 17:00:53 GMT"},"fingerprint":{"sha1":"A6:0B:EE:23:07:42:18:71:4A:7E:6B:7F:9A:CD:7E:C0:A2:DA:5D:8A","sha256":"B2:DC:27:C0:8E:EE:A7:AE:1B:3D:04:2F:AA:DC:EC:60:F9:4A:6E:04:56:70:6E:B9:64:88:31:EE:B3:9B:40:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: testdomain23232.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html;charset=utf-8\r\npriority: u=0,i\r\nlast-modified: Tue, 22 Sep 2026 17:38:00 GMT\r\ndate: Tue, 22 Sep 2026 20:45:22 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=StUTSCK17fA0UnUCEN8ABWLhdMAIL36tOX9csufwEXSdAoGbP8or8oRDSUVQegr%2BTUIrDYInQcEd4CIR8gEDIBrI1wHEhAI4kl1b3pvOI%2BrYt5EbS%2BqqpH4ZZLxrjX9Zg965daoL\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3f4272548bda0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10351,"size_decoded":3327,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"04df8bb7ef217e137094f1bf5a48b740","sha1":"f91304e06448d2217c85313024201c62456e2027","sha256":"0b266eb085c968f75b2a801ce11090164db2059fa7122c7cca6f2e556613495c","sha512":"9740e8283cab02aec2625d51a3f75ab7ed1dc4f546a2b34953711efce906df3b3b3e8c040ee902b2d2f2fdb835270c082e5a8a7f40e90e9263c0b72a9e14a4c9","ssdeep":"192:GQiwj+tLWHfZBNo9vzKsx/IHw99n+PyJIdToU9OdxM:RTL5oDxM","tlshash":"f3227155e6f33591b52390e827eb5b5a3774d003c409dd283bce72d8cf886e8a963789","first_seen":"2026-09-22T20:45:22.531714Z","last_seen":"2026-09-22T20:46:18.482038Z","times_seen":2,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":4,"connect":19,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"testdomain23232.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/GYXDFoP5N7zD9drksjJDtzLyuKMxzVC6cxL7hd5FTEmG","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.093Z","timestamp":1790109924093,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /GYXDFoP5N7zD9drksjJDtzLyuKMxzVC6cxL7hd5FTEmG HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com/GYXDFoP5N7zD9drksjJDtzLyuKMxzVC6cxL7hd5FTEmG/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427319d984e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/D7p9hb5EEeuut3VvifV1UNAiPEfnuNCrK6ubse1dWiwE","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.103Z","timestamp":1790109924103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /D7p9hb5EEeuut3VvifV1UNAiPEfnuNCrK6ubse1dWiwE HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com/D7p9hb5EEeuut3VvifV1UNAiPEfnuNCrK6ubse1dWiwE/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731add04e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com/5wUerABHQTtos15xuLUSaGKLdHRysPmt8cLkhr169WEp/","fqdn":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.356Z","timestamp":1790109924356,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /5wUerABHQTtos15xuLUSaGKLdHRysPmt8cLkhr169WEp/ HTTP/1.1\r\nHost: jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1450\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: 5wUerABHQTtos15xuLUSaGKLdHRysPmt8cLkhr169WEp\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1450\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RottA3utsNXvNJvfhZ8LGs1MtLTN%2BJt1Zr1bF5A9R5c3hD84GxezWXRodiA0tEI3mQ6WwOwUkJz21qY%2FMO1DPFBRGDgGjp9pRaofBRTJVcAxCXJpqZzvqBYFpTrv8cfbwn9qQCxKSexyUJLO2o%2F71XXY8BMFUsxbzphqPelVrrycH6Ev9xpJ17h4Z4C0NIszFewvWFYEChTgtnHMxugBHnPqvpo%3D\"}]}\r\ncf-ray: a3f42734afc91a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1450,"size_decoded":2302,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0ff24c3bb8a4c2a4c7bcdfab82cadb6f","sha1":"28391d2dad420b9b2b65a1c2e9cc98526569d7dc","sha256":"bd068e47a57725a022e129b2342fd0cfbce3252fbcf393512e423cd56d96bf27","sha512":"f97bbaa8741b0ffed644c2a9d769c3f12dc5aad425abc49f490eed7f9b88babb9363ce7b68d8a961bd4fdf3b55de4a94b912fab619a54640fe79d3ac74287114","ssdeep":"","tlshash":"a131e957be99053fc71b134f4c290e6ccd5a6694fc015ba5cc1666429a8c541e328dd2","first_seen":"2024-07-08T23:13:45Z","last_seen":"2026-09-22T20:50:19.804656Z","times_seen":48,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":170,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com/74njk3B4UNqUutfcYrw4BdPfvw2YHdMC7oXCH4ywgNiK/","fqdn":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.374Z","timestamp":1790109924374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /74njk3B4UNqUutfcYrw4BdPfvw2YHdMC7oXCH4ywgNiK/ HTTP/1.1\r\nHost: lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 74njk3B4UNqUutfcYrw4BdPfvw2YHdMC7oXCH4ywgNiK\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 2882\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1T3ejHB3OkI9iwOPLMUTpLMO%2BkZd3Bv0RE%2FSofhuCAsFjua37M0SYmCUIl32I7f8GcOiOLcVEshODo3Volfrxa%2Bd9s0B548kTJSbSLrNLE5Ql3MBiTuPXClYtNBr23%2FqERyKckFc4%2FDd5eP5ZBclhQTF8mNhsfTNPJ2%2BugJdluP3TlS9pPQbOuX2koEZQTyiKRgjks4Vfi%2FM3uCv%2BtnGHV97WBM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f42734eea356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2882\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2882,"size_decoded":3766,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d8b61c033324d78182bfd7d640196678","sha1":"484f398b8e08e21ba4cf698558e96b279a487f51","sha256":"d6bf599dbff0049dec8d4f08beeb28803a974148c8feeace8345a5237ea6eb40","sha512":"0555bd45dd355a4ce34385e434f1f9c4cfd5eb911a5618166474db77cc9779a376b033149b2945359e78c034d515054cb16aee05141f5698de6c42a690acb31e","ssdeep":"","tlshash":"5d514b3d5ee7c49ac312cdcb342618cb20f9484702815a818c6203fb33b985efd6b8a4","first_seen":"2026-06-10T18:04:23.895397Z","last_seen":"2026-09-22T20:50:19.772197Z","times_seen":38,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":206,"dns":6,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.drpc.org/","fqdn":"arbitrum.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:23.125Z","timestamp":1790109923125,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 01:49:22 GMT","end":"Wed, 11 Nov 2026 02:49:11 GMT"},"fingerprint":{"sha1":"1D:AA:98:9C:F7:ED:CA:BA:5E:92:74:4B:18:3B:83:D6:0C:A4:D7:3C","sha256":"71:EB:00:B8:D0:6F:B9:E3:E0:9D:2C:E5:6B:57:0E:BA:4D:41:8C:64:EB:3E:B0:D8:8E:54:49:8D:2D:50:A2:65"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://testdomain23232.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 22 Sep 2026 20:45:23 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Origin, Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-core-free\r\nx-drpc-trace-id: 2a359bcb934dfd59ee2eb4f9ba00d4fd\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a3f4272c4f8fb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":422,"size_decoded":747,"mime_type":"application/json","magic":"JSON text data","md5":"39d252b3c7ccf1087c0dbcb91a5c9b8c","sha1":"c50504eaf1f871b2aa30b5405573baf78d6c0b3c","sha256":"8ae2968f4bf95b0846ecfda92f1c85ffc6809e8c9a26f681e7cc649873645cb6","sha512":"1dcd0cb9268e47e0254c0271bbab3a0870b8a22954b7728303e20716cc01bce14c6066015242749130b5ad048e83f3a03f468ad363ef6227c0107ff64d45800d","ssdeep":"","tlshash":"79e02bf0291fcb12f9690623a79c3206f112f22497c64e411a0ce69715c5a01bd8d4cd","first_seen":"2026-09-22T20:43:18.283861Z","last_seen":"2026-09-22T20:50:19.776579Z","times_seen":9,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"testdomain23232.top/favicon.ico","fqdn":"testdomain23232.top","domain":"testdomain23232.top","tld":"top"},"ip":{"addr":"104.21.34.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:23.498Z","timestamp":1790109923498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testdomain23232.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 17:00:54 GMT","end":"Thu, 17 Dec 2026 17:00:53 GMT"},"fingerprint":{"sha1":"A6:0B:EE:23:07:42:18:71:4A:7E:6B:7F:9A:CD:7E:C0:A2:DA:5D:8A","sha256":"B2:DC:27:C0:8E:EE:A7:AE:1B:3D:04:2F:AA:DC:EC:60:F9:4A:6E:04:56:70:6E:B9:64:88:31:EE:B3:9B:40:19"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: testdomain23232.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Tue, 22 Sep 2026 20:45:23 GMT\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\nage: 68\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yeC4iBf8W1Tcm4uw0Eof8KoaQzveflohsbGNogSAdDt4asNN7ueXuXeYGxqosbbX3gmR%2FAfCr7n0LKYZWAmBy9FfmwsaKgSBEwZmWyTEULNnlS9VoBsqgbN92v61xh3lFfdMDZk2\"}]}\r\ncf-ray: a3f4272ddad4a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":578,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"testdomain23232.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/disable-devtool","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:23.971Z","timestamp":1790109923971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /disable-devtool HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://testdomain23232.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pinky-goat.digital/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-ESM-Path, X-TypeScript-Types\r\ncache-control: public, max-age=600\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: User-Agent\r\nx-esm-path: /disable-devtool@0.3.9/es2022/disable-devtool.mjs\r\nx-typescript-types: https://esm.sh/disable-devtool@0.3.9/index.d.ts\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 335\r\nlast-modified: Tue, 22 Sep 2026 20:44:17 GMT\r\ncf-ray: a3f42730ed3456ba-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181,"size_decoded":664,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"97c69ddec5a41bfd71d4e46f03aa3a66","sha1":"6632a0a55d48d322450a0a0147526f0e91b4cc0b","sha256":"bbd0cbecbc43488ec920e0660e7a0b903af3d9fcd3114421a7620f55ffa98792","sha512":"80e5b974e51b127e2b9c0f227c6cc0b302351806ae1947f0691cb18a67d3743f4390cfe8d0d45f57ab6f5ba899eae8775fdd776edcdb2c0c733997bb38abd90b","ssdeep":"","tlshash":"66c08c10c033f0382a308cb832b4eaefe3a302c6d20c52b88e04022c93cf100d22cba4","first_seen":"2026-05-26T18:42:46.141539Z","last_seen":"2026-09-22T20:50:19.778296Z","times_seen":142,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":3,"connect":11,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com/3P9VdFHyd9sSnhWw6vt5skH79MDNbmAPLeKZ3WU6GZjD/","fqdn":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.311Z","timestamp":1790109924311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /3P9VdFHyd9sSnhWw6vt5skH79MDNbmAPLeKZ3WU6GZjD/ HTTP/1.1\r\nHost: enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 3P9VdFHyd9sSnhWw6vt5skH79MDNbmAPLeKZ3WU6GZjD\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1164\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3lKCWou2tPiZIKm82cMZNOT7%2FaWVzeGoRgvWVQvwhTt%2BV%2FjW7NAUvtcLq1I%2Fjq1iZZOJ%2FyAVbPHHjprGn7AZblLG%2Bd%2F50KAs9TRdJjVHdT4JYuRLCH3pC8qmCFPmFHoQN2Cm49ihhA%2FpbT9f6Xq1gLEZ6Ffz1wAIgVlyi6ds3qWMhWTdmp4RZ4OI1K4M5FMWaAEJW%2FMEb%2FAzaAVT9yuS1ZlkSu8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f427336f4f56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1164\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1164,"size_decoded":2052,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2b37f561678007760f1900ae79ea02e8","sha1":"9dcc6586c899eaa80a4ac2c2a1994b6749886b40","sha256":"10d87c9ee524e288a101badbd24e59cbb729a6a848e816570c0f3c4f96c04e30","sha512":"8e642ac9f4abc69b5e2c4d0ad2e1571800042d9f03c4a1b0888b346b6fc6e66fe74e743799e70a42c594c0dac5c984e8aea0078394e0c9c4954f97447b2966b6","ssdeep":"","tlshash":"32210dadc1608eb152009e7bca2c35d40640a33a82b7033e95f00fc79c3f5301e80496","first_seen":"2025-06-20T23:38:08.726013Z","last_seen":"2026-09-23T01:19:48.632175Z","times_seen":210,"resource_available":false,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":5,"connect":58,"send":0,"wait":570,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.369Z","timestamp":1790109924369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://testdomain23232.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 103808\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-23T05:49:19.265693Z","times_seen":295730,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com/3m3FKCoECFJAoQovnGLen1UBqXpwQHgYWfhkuFUywtxc/","fqdn":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.370Z","timestamp":1790109924370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /3m3FKCoECFJAoQovnGLen1UBqXpwQHgYWfhkuFUywtxc/ HTTP/1.1\r\nHost: fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 3m3FKCoECFJAoQovnGLen1UBqXpwQHgYWfhkuFUywtxc\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 3334\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b5YsYavMA9Dct%2FCncNvABGl7ioHZU1rKVG3itQeUwd2iNe%2FS%2BQFbhjfA5wzsaVj8yEE56V9ve42BPUUgWSMBqH7BWEq2tcjGBmDTJ7dOpRRA62Cxk%2BE2JKBSsa1ItGaTk61HgT5OSX0t%2BLoRsugniVNmiDpbAfEAhfNakBCWkFzE9HCt%2BX%2FV%2Bjt%2FYxxrFqvfSC%2F0jWyt5X8ayGkGom5beFpP%2BZs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f42734eea456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3334\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3334,"size_decoded":4224,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"adb282163d619a97ec44427f12df5d43","sha1":"a1c10417ed604229709795569d570036980334ae","sha256":"1fbbb4ff9c79d6a4c0d0545c410149d1b69fb38eeb25c787af7a91cc385701de","sha512":"cba016d4aa33a2753e9635ac97245e16d05965403d948a7996528f0514645f34b759b5978c4add2fe7adae5b32c7ce6e7ba50bd76cdda04a8f66108ed350b776","ssdeep":"","tlshash":"53614bdb0b0ea0a5147534360548fc1a315b87f07ba4faae2382cc689ea81f5da7c1d4","first_seen":"2024-07-08T23:13:45Z","last_seen":"2026-09-23T03:05:35.464904Z","times_seen":555,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":207,"dns":6,"connect":0,"send":0,"wait":184,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/4fknCk58W1hxsN2yyfLGwPmgrvjRZwGoMCtrY6DtfWPA","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.083Z","timestamp":1790109924083,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /4fknCk58W1hxsN2yyfLGwPmgrvjRZwGoMCtrY6DtfWPA HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com/4fknCk58W1hxsN2yyfLGwPmgrvjRZwGoMCtrY6DtfWPA/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427318d544e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com/B5sLi9Stwf8xRFrbJ6Bm6wZojhuyzkGcWowZenqKD4fz/","fqdn":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.326Z","timestamp":1790109924326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /B5sLi9Stwf8xRFrbJ6Bm6wZojhuyzkGcWowZenqKD4fz/ HTTP/1.1\r\nHost: sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: B5sLi9Stwf8xRFrbJ6Bm6wZojhuyzkGcWowZenqKD4fz\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 2356\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ifvYo0wXjPHiBP8euJBeVEEbl5QC8JoVJuQGzYgH%2FtvuutcN6tZR6dUxT7Qx8zOatBTs6qirTLKQqUXieNfnKSkNZ3x4RulnGspoGf0tMqh9uupyersfQdNeR0yCKSBIT%2B2nlBIqTrC9GToz%2FslRDwLIevcFh8L%2F8qSo1EWKz50vqlHjQtDAG27pOwGqfo8uyw1083IQyJU1Sn8l6wcb15gvE8A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f42733ce8056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2356\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2356,"size_decoded":3232,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bd6e008d46c0a066bc6c0aac19afbbe5","sha1":"07e1119604e23a43c48944d63195c32b9abea690","sha256":"73e949222e63cad11d0161f059a896dd90a45de74ae22684f8fa4753252e1097","sha512":"db29c6a4b440bf07f9e15f8e32cd1f33de1dd94f5ec1a22ec4b1365429b5e56d02ef833b1c3c9f8734920f09f9ed43e89a47c2daf80370d736dbe91a67498b25","ssdeep":"","tlshash":"fe411ae60c992803a6840e1fac51982808527b683a879cd7bf3066129b9fc6173d71cc","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-09-22T20:50:19.798408Z","times_seen":4183,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":74,"dns":5,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.testdomain23232.top/?req=cap/challenge","fqdn":"api.testdomain23232.top","domain":"testdomain23232.top","tld":"top"},"ip":{"addr":"172.67.161.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.514Z","timestamp":1790109924514,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testdomain23232.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 17:00:54 GMT","end":"Thu, 17 Dec 2026 17:00:53 GMT"},"fingerprint":{"sha1":"A6:0B:EE:23:07:42:18:71:4A:7E:6B:7F:9A:CD:7E:C0:A2:DA:5D:8A","sha256":"B2:DC:27:C0:8E:EE:A7:AE:1B:3D:04:2F:AA:DC:EC:60:F9:4A:6E:04:56:70:6E:B9:64:88:31:EE:B3:9B:40:19"}}},"request":{"raw":"POST /?req=cap/challenge HTTP/1.1\r\nHost: api.testdomain23232.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nOrigin: https://testdomain23232.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-headers: Content-Type, Cache-Control\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\ncontent-type: application/json\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\nserver: cloudflare\r\nx-powered-by: PHP/8.5.10\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l2jeHmbEoJPupssN%2FZms6FVz5S%2BAmluSe9Vwt4PxKqEVyHXzkhlqLXfK9f27Vt8H4YnMLoPmbHk%2FEqoKY2sc4s5v%2FgYtLO7X8uep498v0K0asHDnjPf%2FPNX4zv6GPXT3BusP8XcBv4tZQA%3D%3D\"}]}\r\ncf-ray: a3f42734888056c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.5.10","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4904,"size_decoded":4563,"mime_type":"application/json","magic":"JSON text data","md5":"b115f1de3fc8f5e967e18a713118532a","sha1":"29c9c8ab013b28150cbd5a14226f4e2ea5c1f514","sha256":"c8f32627d0439d4df4b2cd1c56f23d9eba91cdd4e1f4beb41f75da63d8113957","sha512":"ef67021b5d6b71e38c53a52803e9ab47b9839f53c70adc78f98afb0f3956d1e0fadef09ddfa2a79eb57b026c808fadf3eeb6d31c681896199bce9d3389011e34","ssdeep":"96:c5jhP5+KyvBKw1Q0poE6j8PiFHahgihQmRjIgqZQlJ+:Ahh+K9mCERnSihQ+sgqZ++","tlshash":"aca18ec70d14750920ef504084eda51bff940ce46f0284e9d50b1d4a76afdad1637aee","first_seen":"2026-09-22T20:46:18.486587Z","last_seen":"2026-09-22T20:46:18.486587Z","times_seen":1,"resource_available":true,"data":null}},"time_used":486,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.testdomain23232.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com/Ee22Pv7cBH8BUouBujgDbWKxMkbCCZGKJUPot9ZNpLsi/","fqdn":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:27.592Z","timestamp":1790109927592,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /Ee22Pv7cBH8BUouBujgDbWKxMkbCCZGKJUPot9ZNpLsi/ HTTP/1.1\r\nHost: zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:27 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: Ee22Pv7cBH8BUouBujgDbWKxMkbCCZGKJUPot9ZNpLsi\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1318\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bvnc%2FUufB5x0HdAFy1aFOhacvQ5H1yJfaGjkrfiaPNFGrYuGU%2BIqUEW%2FYQecrO%2Byev2Zv8q5vKbnMrUbS6GbIMqoFFODi1tuRPpXKj0xWWfvfc6IZR%2FogGgo2Fsz758Q3iWAuhbgtALx63RkLT3svIBovQXLCuhzLt17Hjoo3kYlAddkMqQ7ethXrHO4Afme4CQZfqVi%2F5HCl1wH0m5f3tYAxzs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f4274778c856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1318\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1318,"size_decoded":2198,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c26e45cae3d02d9942ed0380e587f9ca","sha1":"da974aef55c1f343f5888d3952771b0b2fa7b389","sha256":"0d7589be044acdb28633fdf313cc6adaa15a19b27de85eb6b14ddc125e6e1a45","sha512":"6048fd686819e5253cfa0206543bf1033cb8d68c7630734c4aa74bf77c1b8754e6cc69cd96159d4627d7951b5e82b61874b08c999da6a4e0c8d08be21cda7b88","ssdeep":"","tlshash":"7a21f86840e5036cc993d8bac116c03494eb02bbe74eb668123071d172b60178a93df2","first_seen":"2024-06-21T17:22:35Z","last_seen":"2026-09-23T01:19:48.631034Z","times_seen":4496,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:22.901Z","timestamp":1790109922901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://testdomain23232.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 103806\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-23T05:49:19.265693Z","times_seen":295730,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":35,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/Fo5WiNNZWKWpLsBjTE9UVq9c5h2Y9DKF9BCyMd9f4p4H","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.041Z","timestamp":1790109924041,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /Fo5WiNNZWKWpLsBjTE9UVq9c5h2Y9DKF9BCyMd9f4p4H HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com/Fo5WiNNZWKWpLsBjTE9UVq9c5h2Y9DKF9BCyMd9f4p4H/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427316cfb4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":4,"send":0,"wait":159,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/BwZqZkoJjgvs5QoobRe8CysTNUs155FJAKg6xngJ4yXj","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.075Z","timestamp":1790109924075,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /BwZqZkoJjgvs5QoobRe8CysTNUs155FJAKg6xngJ4yXj HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com/BwZqZkoJjgvs5QoobRe8CysTNUs155FJAKg6xngJ4yXj/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427317d294e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/7p1SUU8Rx3sQFLVxhjXboi5nVLFjCRR1Qn2pbpyBnrXn","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.118Z","timestamp":1790109924118,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /7p1SUU8Rx3sQFLVxhjXboi5nVLFjCRR1Qn2pbpyBnrXn HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com/7p1SUU8Rx3sQFLVxhjXboi5nVLFjCRR1Qn2pbpyBnrXn/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731be434e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/3eh8oadBGXTp7k1PY4iYeiBbyhE1u2zmMMaMm9nBanHq","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.028Z","timestamp":1790109924028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /3eh8oadBGXTp7k1PY4iYeiBbyhE1u2zmMMaMm9nBanHq HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com/3eh8oadBGXTp7k1PY4iYeiBbyhE1u2zmMMaMm9nBanHq/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427315cc24e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":6,"connect":3,"send":0,"wait":170,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com/GmwajjdnKm9Mst1txGwAqi6bxVzqhg6ysJGdzGgPF6uB/","fqdn":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.485Z","timestamp":1790109924485,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /GmwajjdnKm9Mst1txGwAqi6bxVzqhg6ysJGdzGgPF6uB/ HTTP/1.1\r\nHost: 5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 142171\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: GmwajjdnKm9Mst1txGwAqi6bxVzqhg6ysJGdzGgPF6uB\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/png\r\nx-content-length: 142171\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eskCbA%2BlZ3pxNcREtJ80wkK3UHDDvWDaPAMTUsoFFa0ZfMxy85DnDyyo3%2BoxQllsDK0yVCmuwYiQE0N1VIug2X7jygJFNLZM6FUOo46nueOeuGptoew%2B0QGuiVj%2BmLV9AUO1NfKFOIYGStDwkMxnvJ2Zh7Ist%2BdDPfMiTqWBrUg4%2FC0Zca0%2FRsCpRWrcp3RVHeRrCYi1Z4KIYytKoKeABTLAF4g%3D\"}]}\r\ncf-ray: a3f427359aaa1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142171,"size_decoded":143033,"mime_type":"image/png","magic":"PNG image data, 800 x 776, 8-bit/color RGBA, non-interlaced","md5":"22b70ab1a57849b2d9229ea5f20e55c7","sha1":"06819da46a119a541dbda36e9a9eb47a68ee89a4","sha256":"b66c86f3a8fc126a563f582f85ec7e2bc36a4608d33b81e0777401114eed2818","sha512":"925f53ac647440f879a67709f1611dbc4e1b4173be31cee7014417417ed6225bba69c61862d6cd2a48ef04a2bf6abb6c723cfd387af6a975c681c512aab80c85","ssdeep":"3072:UOrY2fP7LgFIvLtU3JffWuVpnLQhvqTjv+6i++iJWUnhJIJ/d0RuYAS:UOrTHgoK38uVVLDn+nwnnIddrS","tlshash":"9dd3132ee8c062716d0d1b7e84c97c73050aedd7636aef3d4e3054eab9348923ba5547","first_seen":"2026-04-17T17:57:05.28014Z","last_seen":"2026-09-22T20:50:19.77776Z","times_seen":60,"resource_available":false,"data":null}},"time_used":781,"timings":{"blocked":236,"dns":0,"connect":0,"send":0,"wait":174,"receive":371,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote.88mph.app/LjjKLFLseByZ8Sz.js?v=3","fqdn":"vote.88mph.app","domain":"88mph.app","tld":"app"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vote.88mph.app/home.html","date":"2026-09-22T20:45:28.270Z","timestamp":1790109928270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote.88mph.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 18:02:53 GMT","end":"Fri, 20 Nov 2026 18:02:52 GMT"},"fingerprint":{"sha1":"2C:1C:42:E3:4F:F3:98:78:48:60:12:AD:10:E1:28:AF:10:63:B7:BB","sha256":"06:01:DB:FC:10:A8:60:F4:42:2E:79:3A:80:5A:EC:A4:53:B2:53:AD:9F:D3:EC:1A:BD:C3:C5:D1:BF:A2:5B:43"}}},"request":{"raw":"GET /LjjKLFLseByZ8Sz.js?v=3 HTTP/1.1\r\nHost: vote.88mph.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vote.88mph.app/home.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 20:45:28 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6620487\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6ab02801-1ec6\"\r\nlast-modified: Sun, 20 Sep 2026 18:37:53 GMT\r\ncdn-storageserver: DE-1142\r\ncdn-fileserver: 1467\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/22/2026 20:44:22\r\ncdn-edgestorageid: 830\r\ncdn-requestid: fa0ea7e36e172c12bd56b94d33bf3df4\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7878,"size_decoded":4339,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7878), with no line terminators","md5":"fe2718948e75a18f006312971787a278","sha1":"35edbae2538948c2936749e4339cf7d130bca214","sha256":"5e86eba892ccf44a9c898eb57ca739ae0e91027eb9d76ea729e359325786b751","sha512":"d63cf2cd07bf4feedebaa14a79186b8f8097006ad3f67ae481e3f0d979034c18d696f6daa02c7bd15d464202a7422d39a4efe1b178fca74d49c184711a0a4660","ssdeep":"192:uZERENIJLi4BYVuSNdJt8cyWAcLoxYYp0t:uGREKJ2GYVnfJt8cyWXeot","tlshash":"cdf184d9f3d1b0a513a70a34357f6646f13b6191560d10208399d8f23ef7dab8927f88","first_seen":"2026-09-22T20:45:22.605281Z","last_seen":"2026-09-22T20:46:18.488604Z","times_seen":2,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":25,"connect":2,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com/GVqzNswLTwAnCD7CtTZw67VCMbChaqBxjezVsqQAqUzS/","fqdn":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.347Z","timestamp":1790109924347,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /GVqzNswLTwAnCD7CtTZw67VCMbChaqBxjezVsqQAqUzS/ HTTP/1.1\r\nHost: 4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1088\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: GVqzNswLTwAnCD7CtTZw67VCMbChaqBxjezVsqQAqUzS\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1088\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7IP57KAciewTN3xGrubr2sziRH%2BcqLfmpZhbvlQemxlFRKaO5Uk3Qtu%2FEOhNGlMVQjCoemJsL4D6POV63IYc2NE21x8K%2B79cJQXdBTEcrKvCjAlzJcTrXX8r2KqYVMlUJ8uPoCS1I1n%2FcVz3pMuciZtZziQfFSPkdVQKZTqfiL%2FvnGfYWsbJbiOZZWTHnuRYa5ZmjKoZQ8tP1p9J6F1U%2FX0gELc%3D\"}]}\r\ncf-ray: a3f42734bff41a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1088,"size_decoded":1946,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"83b2e6eb3f40be6945e2112c98329b70","sha1":"b341a325a03dd650a117551cfa8b85d0dc92e017","sha256":"6aea9bb753ec96aa7dfca4129ed0fa434f44076efe1a6201470d87f2dc472114","sha512":"58906704666d6ff8441f9d30c52bd971e6dc7c36e22e3e996c91b2c8692597474077890d43f82269f2405512681c920873b67b57b670201d1aabb100e476d43f","ssdeep":"","tlshash":"c111e9be75434472944b64f6cccb83cce1e3060469eddf26816219cd9c1c8c2790354f","first_seen":"2026-01-04T09:33:32.414513Z","last_seen":"2026-09-22T20:50:19.797874Z","times_seen":54,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":207,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com/FxfTrcshALLke9qQSKxpTpvZHc6wdnzk3EmjMb9bbith/","fqdn":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.418Z","timestamp":1790109924418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /FxfTrcshALLke9qQSKxpTpvZHc6wdnzk3EmjMb9bbith/ HTTP/1.1\r\nHost: 3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: FxfTrcshALLke9qQSKxpTpvZHc6wdnzk3EmjMb9bbith\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1636\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WJaIGTlZCnJpurd9WimYUg8XsD325CCyeWFO4SRicP9b1Y%2F3WADRRKWkmkzODsTuD3ln7x%2FwcQ3I9xJq4Lz%2BMwh3EjCoxFeKtJIeEJyyEsX4nw5MCRh25dWfsW9fbJNoQZhnAG3%2FP1iaITxOlJbYBWAsrgpNgfeIML5ompfKozF9evYtG%2FTsBVh0Y4LT9nNnJm%2FfByN6SLxsOfe0Pizl%2Fg476dQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f427356eae56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1636\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1636,"size_decoded":2518,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c1d9f166e96ca6643813a52ce800dd61","sha1":"5cb193c0fe42838abb076f604e16ff3eb995778c","sha256":"1f1e6c2ea43ebcbe3c2a532a611017834889b00ca6f5f2063fea04759410d303","sha512":"1ae26ef23cb7529560df4937cc45ad657977b7e92866991bc3a3d1dc1ab71bd32db52b30ded6fa2eb2041b770363782986391f7ab0fbc1043ab35da773069ed0","ssdeep":"","tlshash":"bb310a81a13a98a7e1fbfb534f8c366f68cca0a63f040d2909c025a080c03c488a5b93","first_seen":"2025-06-28T22:12:19.740047Z","last_seen":"2026-09-23T03:05:35.476798Z","times_seen":318,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":257,"dns":20,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/Ee22Pv7cBH8BUouBujgDbWKxMkbCCZGKJUPot9ZNpLsi","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.032Z","timestamp":1790109924032,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /Ee22Pv7cBH8BUouBujgDbWKxMkbCCZGKJUPot9ZNpLsi HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:27 GMT\r\ncontent-length: 0\r\nlocation: https://zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com/Ee22Pv7cBH8BUouBujgDbWKxMkbCCZGKJUPot9ZNpLsi/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427464ba54e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":3557,"timings":{"blocked":-1,"dns":2,"connect":4,"send":0,"wait":178,"receive":0,"ssl":3372},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/GmwajjdnKm9Mst1txGwAqi6bxVzqhg6ysJGdzGgPF6uB","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.138Z","timestamp":1790109924138,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /GmwajjdnKm9Mst1txGwAqi6bxVzqhg6ysJGdzGgPF6uB HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com/GmwajjdnKm9Mst1txGwAqi6bxVzqhg6ysJGdzGgPF6uB/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731eee14e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com/3eh8oadBGXTp7k1PY4iYeiBbyhE1u2zmMMaMm9nBanHq/","fqdn":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.306Z","timestamp":1790109924306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /3eh8oadBGXTp7k1PY4iYeiBbyhE1u2zmMMaMm9nBanHq/ HTTP/1.1\r\nHost: e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 3eh8oadBGXTp7k1PY4iYeiBbyhE1u2zmMMaMm9nBanHq\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/png\r\nx-content-length: 2157\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bIOvzBP%2BSvkdd0bOwFAE%2BS9HM01XoEN2VIWQw2qlsW6k260F6FOlqf2X1IgNt2UR3megApNp19T7%2B8uvN4nAbzmCSVAY%2BwsAJVSOtjTBmGmcN8eS51DKNS%2BAgc4jvfYpfCEPl50inojVEuajuHqUAdPq%2B1UYys3MOprtWb3tIhnF7BwsScnkBObdrfudtUNAS%2Bx%2BUcDq0Dt4JFh%2BzAWuLN9twS0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f427334d7756c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2157\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2157,"size_decoded":3041,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"44d876b6ac55ee75b4efd8c5dce8dba8","sha1":"5ebd26b6260acacb6566675e9135c44aab60637b","sha256":"32bb49f3160ee341add14dcfbc9519de1e4c7b0d7faa825d683afa5d94b7f4af","sha512":"0879effae94d31ef94a067af5a6821d23ea6504e9c800a5f8d04ac97c2e6085516157b85269c269820b58f39d69a1ce32da6453580c0f82526de8db0416c533c","ssdeep":"","tlshash":"0a4109ae8c874e24c67740b15ebd11660592157f975973c6e4a7ac362c5335c0eac868","first_seen":"2026-06-11T07:30:29.691869Z","last_seen":"2026-09-22T20:50:19.796668Z","times_seen":32,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":7,"connect":47,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.366Z","timestamp":1790109924366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://testdomain23232.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 103808\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-23T05:49:19.265693Z","times_seen":295730,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com/A2nNXgUMwV5nKhUomHb1gTsdg7PQh8kY6o5Xd5fjAGN3/","fqdn":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.456Z","timestamp":1790109924456,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /A2nNXgUMwV5nKhUomHb1gTsdg7PQh8kY6o5Xd5fjAGN3/ HTTP/1.1\r\nHost: qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1306\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: A2nNXgUMwV5nKhUomHb1gTsdg7PQh8kY6o5Xd5fjAGN3\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1306\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qs%2FUJvbaVHFADltbM34azzAeIcvdcOn%2FzGO63j83B6ykN9dR%2BseXXT5bmMXwNl2%2BgmTr9tVX5XbyAOWDbxtArQgsfHm%2BmlKTosRAnP8cwC%2FqWTByZPzh1pcy6PEYQowNZ%2Fy1UxplF6rXZ7OZFF8RTYpD2QWP%2BE8VF4FMaTICl4zSQCgHZSD9uEJjz1rbXxBzXKEagioBRr3Rn0uzhj2OBCeqenQ%3D\"}]}\r\ncf-ray: a3f427356a2d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1306,"size_decoded":2168,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"73bc41599dcb8fba90c3f7216b60f320","sha1":"40494127caf63b4f9d056043418d1d82774676ca","sha256":"05c44a451efb7ac86bb3a921d8b6dea43e6f18f8a9f0d1297c3d956cfee964e8","sha512":"b6b4cda242f5835e75c17fe935eecc520dcd00d69babe0322f7426fc5385e4440f73c17a34fcd2ccbe1ad7ad14da33ecc63d63733216543ac8e1a23b38a6c054","ssdeep":"","tlshash":"1321f8ee61b744d1d3429cb5f9c3544510252cc207880c1cadf40aecae332e36e215f3","first_seen":"2025-09-09T19:24:39.818069Z","last_seen":"2026-09-22T20:50:19.77105Z","times_seen":35,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":249,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com/tNjir8swBoPJcDaSUy49m7YW8n9rjjUNZzKpeJzjGhC/","fqdn":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.320Z","timestamp":1790109924320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /tNjir8swBoPJcDaSUy49m7YW8n9rjjUNZzKpeJzjGhC/ HTTP/1.1\r\nHost: buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: tNjir8swBoPJcDaSUy49m7YW8n9rjjUNZzKpeJzjGhC\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1264\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oodbx3CyN4Wm7LJ%2BUPjKCpOSxe%2F%2FiXZK8crqKblsqqg4XVx0NtaYz4vKgsDw3y5tf5H1WXTvCVO9G9fOniDmDfeLrypd%2FawkVJL3EVEaJtuADUB20TvjeQRcrTnUGuuUNI0Tb40pk5I6A8KTV8n1gOPYqPMfi2scOixicLhmXZNtj7OPn7By3bjj35DkeNAkqdh0Cbp93sdEjYmxuB6oz7hNpLE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f4273388967127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1264\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1264,"size_decoded":2139,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a59ccce4090b66e6adfe363df40ac9f0","sha1":"d02fe751dafb8202db62931f44cf1e7673c7b430","sha256":"f374fd161e2abe943efdd445069ac1ff036e3317e9fb9d89ea0359a6d0584d52","sha512":"d93353fb79572007a6819315626193551a6f458d820647167b459ee324c32da3564473b25bc0ac9044860474f6eaf68e066809628376d0269e2cb446fd87ccfb","ssdeep":"","tlshash":"2921b7daf0b8e204840f1a2a4d66bc6b762f2d307f626a85395daff2424041e35d82b4","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-09-23T01:19:48.61304Z","times_seen":4427,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":9,"connect":61,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/HBj8Z3AkcCFxM5BdpG2ciRACVipaCQnwJ8QboBwkHgX5","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.106Z","timestamp":1790109924106,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /HBj8Z3AkcCFxM5BdpG2ciRACVipaCQnwJ8QboBwkHgX5 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com/HBj8Z3AkcCFxM5BdpG2ciRACVipaCQnwJ8QboBwkHgX5/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731adea4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/HvyemAESJHULoAKmn8NDZwnCL6NodeAUeqwxbtjumDgH","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.121Z","timestamp":1790109924121,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /HvyemAESJHULoAKmn8NDZwnCL6NodeAUeqwxbtjumDgH HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com/HvyemAESJHULoAKmn8NDZwnCL6NodeAUeqwxbtjumDgH/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731ce504e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com/HeB3Cq7j5UgGvECfes722J2hB6d3zFNAX8qrtvdaebbj/","fqdn":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.312Z","timestamp":1790109924312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /HeB3Cq7j5UgGvECfes722J2hB6d3zFNAX8qrtvdaebbj/ HTTP/1.1\r\nHost: 65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=856k%2BHX%2BDZWdqz1iELk2NgdwJkXGc4wQDSEMBf3qkQUFQWg81jVHfYMy2Vm0QI4Tg0toaF1iN4sla4VzcrcacY9Q3yRNTYY1HQXdn4p23Cb6o%2BlK4Dx5wMiNvRUv8eh%2Bso3qjFzVlm0qZIxP9dVh56THI9Dpb3ExWVs7Y6vIiGBy5WVEmYLoq10YFrcNHcGBS9tj%2BzcR3vMwaeDZ5WvGPuzJUNs%3D\"}]}\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: HeB3Cq7j5UgGvECfes722J2hB6d3zFNAX8qrtvdaebbj\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-content-type: image/svg+xml\r\nx-content-length: 972\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3f4273378f6712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":972,"size_decoded":1314,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5ee2e1d04f03d836343ea2639b31cf08","sha1":"34095d7db2b98e0422516f11bf00c95454269dde","sha256":"f6c14eed27159bc82e0f0296ef81c645198119d155e9046a7625ab0fe0efd872","sha512":"43eb52d58fd2c852c3b566680af27143169625e37b2593019b7c09f28b6cb89f3a3d0735d92012e58bb94581e6efebf2d3aa0138714e947b61538bbe41c5bc26","ssdeep":"","tlshash":"8911edf7226e5ec5811c333e925903f9b16226d860f34641aea62e23951829ecca06dc","first_seen":"2026-06-11T07:30:29.753159Z","last_seen":"2026-09-22T20:50:19.778988Z","times_seen":34,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":7,"connect":70,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com/AA7kJLwyTxzxHDmpsHigApQXVPexXwmEAK6K939kfcX8/","fqdn":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.474Z","timestamp":1790109924474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /AA7kJLwyTxzxHDmpsHigApQXVPexXwmEAK6K939kfcX8/ HTTP/1.1\r\nHost: rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: AA7kJLwyTxzxHDmpsHigApQXVPexXwmEAK6K939kfcX8\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1420\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WFZ%2BCa9Fcl1ohkO%2Fh9HsHKiWBAJ0syxwvEbdZ702mMEmqcAZJy674Nnebzl%2F2d1kgal2EPMW297dHY%2FIZSCCUixOpKf%2BKR5c28%2FfKlrfS1OXLFyvFjczavDgbBsyeNwiarkE2jqgKupy7mxzVhKOvgQYthHQp398gBuEDb7tdsoHxm98lz6DrIZ7wymJat31E6WDPfcgCXYZd7pad%2BOIJzbZU8s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f427347e9a56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1420\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1420,"size_decoded":2302,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4cc86f8a6321c0d1bc7c8e6b69518857","sha1":"45d314a09a486669bfc809dbcfae28f820566429","sha256":"e8a9d0ed202eae37d485eaa6703840fd0661261e2802731020c7c1268adafa47","sha512":"c53c08b8b033bfbfdf598970fa5a0417e25aefac1fea6812ad29e3a27f8fd478882eefb06a0f5f969d0066f66e9cc68b230cdce354c44337532a3959525b2bfa","ssdeep":"","tlshash":"93213bf99caf4219b702f4a9e811f4de6e58bc10ff09044280b0e6f314780e119ed4d3","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-09-23T03:05:35.644524Z","times_seen":4431,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":63,"dns":21,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com/12PdhtpXedXaMXrbokFcSkznJ5dABUVrBGffsHKjVWbN/","fqdn":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.483Z","timestamp":1790109924483,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /12PdhtpXedXaMXrbokFcSkznJ5dABUVrBGffsHKjVWbN/ HTTP/1.1\r\nHost: abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1286\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: 12PdhtpXedXaMXrbokFcSkznJ5dABUVrBGffsHKjVWbN\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1286\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ncZ28oET904jvKofbAIep3%2F8Z14m7%2FEjXigQPdUEb%2BGx5hXOHQxfPNuUg5LUxE9lRunzImIg8k4rfM%2BFmdgdpaDNLKp2bCupWa51Odoo8MR4MuCE%2BMShnNx%2F1lKt5ibmn3O9sd45A0UDgNvKc%2BssHf%2FzxXQSGL1wLi9kHM0zLAfHMLH35ObopW6Nh8iPiTVx5S0DDH7HXlRBl8CYmwQXuAR2dmA%3D\"}]}\r\ncf-ray: a3f427359ab91a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1286,"size_decoded":2148,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"394cc1979b87058aae23ec953a289527","sha1":"ba63ad16dc17c8100c09092ff69bd6d515795a92","sha256":"9dbe42b89ea8a6a69c457e26a5456cd86e44e3f3aa839d10422a214cee7cb1fe","sha512":"fdf49d3ea66e078ec9944aa697db3213ea3b6c2d55ec8b065f1ebc513977df1f9d01c1528bc0ebb8c89f307923243deb480e6ec1cfb4c3e596d22dcddce2da93","ssdeep":"","tlshash":"e121c8e2c8b8259de223cc07626798a1dca11b3317d62996db20ea35f45a240956d0e2","first_seen":"2026-06-11T07:30:29.744458Z","last_seen":"2026-09-22T20:50:19.803104Z","times_seen":33,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":238,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.testdomain23232.top/?req=fp","fqdn":"api.testdomain23232.top","domain":"testdomain23232.top","tld":"top"},"ip":{"addr":"172.67.161.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:26.865Z","timestamp":1790109926865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testdomain23232.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 17:00:54 GMT","end":"Thu, 17 Dec 2026 17:00:53 GMT"},"fingerprint":{"sha1":"A6:0B:EE:23:07:42:18:71:4A:7E:6B:7F:9A:CD:7E:C0:A2:DA:5D:8A","sha256":"B2:DC:27:C0:8E:EE:A7:AE:1B:3D:04:2F:AA:DC:EC:60:F9:4A:6E:04:56:70:6E:B9:64:88:31:EE:B3:9B:40:19"}}},"request":{"raw":"OPTIONS /?req=fp HTTP/1.1\r\nHost: api.testdomain23232.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://testdomain23232.top/\r\nOrigin: https://testdomain23232.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-headers: Content-Type, Cache-Control\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Tue, 22 Sep 2026 20:45:27 GMT\r\nserver: cloudflare\r\nx-powered-by: PHP/8.5.10\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MXAWmDlzKjmEMTrFIBxGNI64%2Bx68SioqeSx8NxFjtX0zdmUhNjHI9rQXmHP5ouq724303XtlTs4QEftmqN274MkXl0gSrnICuTyJdEtWgchjk8arV3eegEJ%2BoMqm%2BwLKOjw0pCq2a0mu6w%3D%3D\"}]}\r\ncf-ray: a3f42742e9fa56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"PHP:8.5.10","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":792,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.testdomain23232.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/BZsRGcBURQnewjAfV98ZUziy45VCmwCQHch8hcGU64wz","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.114Z","timestamp":1790109924114,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /BZsRGcBURQnewjAfV98ZUziy45VCmwCQHch8hcGU64wz HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com/BZsRGcBURQnewjAfV98ZUziy45VCmwCQHch8hcGU64wz/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731be2e4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com/5gBbYXnATXAj3B6zmP8CaV88YB5uB9m8PZrfKJ7WjwUv/","fqdn":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.334Z","timestamp":1790109924334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /5gBbYXnATXAj3B6zmP8CaV88YB5uB9m8PZrfKJ7WjwUv/ HTTP/1.1\r\nHost: iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 5gBbYXnATXAj3B6zmP8CaV88YB5uB9m8PZrfKJ7WjwUv\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 780\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a5pu6Wq7Ajiynbei5MW0n8U5%2BlSiH1et8YTfXK61ijiJpCFozyS7zj%2FpkDk5NdnXrwslAMgPtYoqxnH6XfdrLNwNMOYYRsQ6EhT%2BMIhtscaZiHobxSs3UCmLUNRigM3zLQkPfOWuCvAZgdwTpt69qvAcjShBokHOdVPj51Zos3DsxKEmMxJaTO2wSHdW%2BvLQhhcjn6KO6twBA7Ku2PEBHELOxdE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f427347e9c56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 780\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":780,"size_decoded":1654,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4218175ca4fe632ea2d78b3a7846cbe9","sha1":"ae04346af3e236a8afa61cb9ba0c83cb20529ebc","sha256":"f48029d1829129f662e23bfac26e75d741f74f826e9f845c125d46207fff8396","sha512":"be21ea3f13f795c0dce4e6e9d458606837717f343fe78e378a3f3509e88ba7c163a25f1d591cc84824f777fae6ccdd24356a16dab6178bdbbff62aeb06f9829b","ssdeep":"","tlshash":"3b0175e9c2dc42fee24626b664177634b852eb9d53f090145eb50388131825b2de64c3","first_seen":"2024-06-14T00:48:21Z","last_seen":"2026-09-22T20:50:19.802113Z","times_seen":433,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":173,"dns":21,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com/D7p9hb5EEeuut3VvifV1UNAiPEfnuNCrK6ubse1dWiwE/","fqdn":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.349Z","timestamp":1790109924349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /D7p9hb5EEeuut3VvifV1UNAiPEfnuNCrK6ubse1dWiwE/ HTTP/1.1\r\nHost: wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1406\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: D7p9hb5EEeuut3VvifV1UNAiPEfnuNCrK6ubse1dWiwE\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1406\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WhxrpLX%2BFeOrkBWSb7UOzUCy7hOmOtN8HaWisRnT5Lpft%2FADXv2d%2BRQpPErrK0HtlxHvNaQemfGx6N6QYtNcAHlGHGvP5tKb6CuiekkZUKZsX%2BXVUeDS%2FcuxQzyP3nZZ4jLIIdRN7YAD29kiBHkWj3ws41wIu9r1UGCQmRWiuCzQxLoLSFXSQ9KHnDa1eXT8rI0FAOVvCbX5eq4pVllIx6VG6JU%3D\"}]}\r\ncf-ray: a3f42734afcd1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1406,"size_decoded":2262,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a580f24cad130966ffcbd2e5d418af8b","sha1":"c342b3da358fec2cab72adb2ab4a0e89d480ba85","sha256":"368962fa0e2ffe5791b6e3abc5a8c01650c5fa77ad108cae356782bff6e6e02b","sha512":"eab7045c6d44b4a6d712cad0a7fe31bb7de1d742d6a138b360276f71336e505adcd9e163210ced17d596a738300a1f3afa82f3bbfd3117cd1661a30e9d214720","ssdeep":"","tlshash":"4021e939ec5437f1192982716652c7ccf3051a164620a710e74fe2dd08e5c1b668a7f0","first_seen":"2024-08-13T01:00:15Z","last_seen":"2026-09-22T20:50:19.795128Z","times_seen":255,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":197,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.356Z","timestamp":1790109924356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://testdomain23232.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 103808\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-23T05:49:19.265693Z","times_seen":295730,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":19,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com/7ND2SiYwsfvAPwL9K4ZdpbAi3iABc5jpoJqvVdppHRsY/","fqdn":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.489Z","timestamp":1790109924489,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /7ND2SiYwsfvAPwL9K4ZdpbAi3iABc5jpoJqvVdppHRsY/ HTTP/1.1\r\nHost: l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1884\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: 7ND2SiYwsfvAPwL9K4ZdpbAi3iABc5jpoJqvVdppHRsY\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1884\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yfMIWtL2hpMmLS%2BMppD8cdMHIUFZuApA1yFDTxzlTKTCzPYXmNYYymkaJTd8hxZ70oN1Lj9iKGNNXeDrlIzUCo0I5XQCDYo0ue%2F%2FwM0Fad9WynfscrCkmtJljYinyWJVDhkrIANoZUGPGdWWPax01EmscyX2UJIYxHmzSowXqcFi2uSzB6HziY%2FWZHFnK1iMCSAwEWowcerhWK4BaU%2Bc%2Bv71Od8%3D\"}]}\r\ncf-ray: a3f427359aac1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1884,"size_decoded":2742,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cafb298fb3c0ce00dd7cd5ecca87af68","sha1":"c73e7b60042b7fb99394c310037f67df6dbdd3e5","sha256":"8316053d504f8c45143eb6feba6161e5495c8c9d148e2f2654b86ffa765cb6dd","sha512":"a374cb45c93127f3d684c19a92d091ff2fb8ea7eff3747e7ff8f539bb8fdbf0da7fb661209aee6bd9b4cde900540d29de27f2de40705add77599e730f3c0126d","ssdeep":"","tlshash":"9b41fba0c83200f74f7b7a3594501b64ec5a2705cd28ee6c8be9f5203527cd7f26789a","first_seen":"2026-06-11T07:30:29.757651Z","last_seen":"2026-09-22T20:50:19.790041Z","times_seen":39,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":236,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arb1.arbitrum.io/rpc","fqdn":"arb1.arbitrum.io","domain":"arbitrum.io","tld":"io"},"ip":{"addr":"172.66.171.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:23.130Z","timestamp":1790109923130,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitrum.io","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 14:06:40 GMT","end":"Sun, 29 Nov 2026 14:06:39 GMT"},"fingerprint":{"sha1":"2E:54:50:59:0F:7E:56:CE:77:95:05:FA:A3:BB:06:E3:41:72:5F:2C","sha256":"8E:29:DE:F8:49:2E:C5:53:C1:DF:97:71:F7:FC:7B:49:B2:AF:01:67:17:63:F8:F8:82:10:8E:7A:A8:9D:B2:ED"}}},"request":{"raw":"POST /rpc HTTP/1.1\r\nHost: arb1.arbitrum.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://testdomain23232.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 20:45:23 GMT\r\ncontent-type: application/json\r\ncontent-length: 203\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 1\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3f4272cbe115691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":423,"size_decoded":550,"mime_type":"application/json","magic":"JSON text data","md5":"c99f81441adc30ccc2fdbec572e09062","sha1":"2ef7ab2db2f5123bad5b8721d402ae61af353990","sha256":"7b8586a8c70d32319f7c32372a0613f1fd091cb8f59f6e6784ab8ef88283163a","sha512":"35fc87e82d9e058daf7ee39725a99be69abbae903e81ca7f1926fd5fc8365bbe76a5cf283390c097a95630df5865bca1a1ca3d83e49fe986ca6d4b78492aec44","ssdeep":"","tlshash":"55e02bb0291fcb12f5690623a39c3106f112f22497c64e811a0ce69716c5a01bd8d4c9","first_seen":"2026-09-22T20:43:18.321791Z","last_seen":"2026-09-22T20:50:19.767504Z","times_seen":9,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/AhAYuinacUyu1gTLdVFFMVBnVCPnn5hadJ6sQ9oUW2wB","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.078Z","timestamp":1790109924078,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /AhAYuinacUyu1gTLdVFFMVBnVCPnn5hadJ6sQ9oUW2wB HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com/AhAYuinacUyu1gTLdVFFMVBnVCPnn5hadJ6sQ9oUW2wB/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427317d364e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/FxfTrcshALLke9qQSKxpTpvZHc6wdnzk3EmjMb9bbith","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.117Z","timestamp":1790109924117,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /FxfTrcshALLke9qQSKxpTpvZHc6wdnzk3EmjMb9bbith HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com/FxfTrcshALLke9qQSKxpTpvZHc6wdnzk3EmjMb9bbith/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731be374e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote.88mph.app/VmMCJGSn0d3iF4K.js?v=3","fqdn":"vote.88mph.app","domain":"88mph.app","tld":"app"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vote.88mph.app/home.html","date":"2026-09-22T20:45:28.318Z","timestamp":1790109928318,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote.88mph.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 18:02:53 GMT","end":"Fri, 20 Nov 2026 18:02:52 GMT"},"fingerprint":{"sha1":"2C:1C:42:E3:4F:F3:98:78:48:60:12:AD:10:E1:28:AF:10:63:B7:BB","sha256":"06:01:DB:FC:10:A8:60:F4:42:2E:79:3A:80:5A:EC:A4:53:B2:53:AD:9F:D3:EC:1A:BD:C3:C5:D1:BF:A2:5B:43"}}},"request":{"raw":"GET /VmMCJGSn0d3iF4K.js?v=3 HTTP/1.1\r\nHost: vote.88mph.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vote.88mph.app/LjjKLFLseByZ8Sz.js?v=3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 20:45:28 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6620487\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6aaf7b5f-8e1c7\"\r\nlast-modified: Sun, 20 Sep 2026 06:21:19 GMT\r\ncdn-storageserver: DE-634\r\ncdn-fileserver: 1336\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/22/2026 20:44:22\r\ncdn-edgestorageid: 830\r\ncdn-requestid: fa23200a3cd893552261bc6a7acf37bf\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":582087,"size_decoded":154677,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e7db85be86b63b0a80b101f162451357","sha1":"6a3d44c90d262d8c573e85302c496813dac5c75e","sha256":"a09d895f3902eeee47c2d1d34d1f3139154874c11d5be50211b2d20dbf76bcde","sha512":"5ca33c2e2f2f25e715eadf8513b70910c76efda39446227ba54f87602e7e65f1eccaa290433ef76aca518d9d485f1fb471482daa404a9bc5951e2186aceb38bd","ssdeep":"3072:VqiVnv40OFTikYdji2RmGO8gBwi2RmGO8SHY+NcByLNNYpNntaIIbVEzmxbvvy0e:rGliHdoIWEK1vPXi4s49GiUlLFGZo","tlshash":"dfc42a95b3b4b022839d65a5482b2045f33af96d580a002cf668fcfb7da5544ab7ff70","first_seen":"2026-09-22T20:45:22.597306Z","last_seen":"2026-09-22T20:46:18.49749Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/Eodj8znQBik51BJNXiRTw1t2HXyv9p3LNhiNvsoMuDbg","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.088Z","timestamp":1790109924088,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /Eodj8znQBik51BJNXiRTw1t2HXyv9p3LNhiNvsoMuDbg HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com/Eodj8znQBik51BJNXiRTw1t2HXyv9p3LNhiNvsoMuDbg/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427318d714e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5wUerABHQTtos15xuLUSaGKLdHRysPmt8cLkhr169WEp","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.101Z","timestamp":1790109924101,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /5wUerABHQTtos15xuLUSaGKLdHRysPmt8cLkhr169WEp HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com/5wUerABHQTtos15xuLUSaGKLdHRysPmt8cLkhr169WEp/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731adc84e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/3m3FKCoECFJAoQovnGLen1UBqXpwQHgYWfhkuFUywtxc","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.112Z","timestamp":1790109924112,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /3m3FKCoECFJAoQovnGLen1UBqXpwQHgYWfhkuFUywtxc HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com/3m3FKCoECFJAoQovnGLen1UBqXpwQHgYWfhkuFUywtxc/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731be164e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5GHDNrA7AEgG9NmMQKVL78E5F3oMjEvyd59Ls5SEk6JC","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.113Z","timestamp":1790109924113,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /5GHDNrA7AEgG9NmMQKVL78E5F3oMjEvyd59Ls5SEk6JC HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com/5GHDNrA7AEgG9NmMQKVL78E5F3oMjEvyd59Ls5SEk6JC/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731be204e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5aFEMn7GceUbCyMFsKjcw8DJY9c9PzWNeJv7ragvUWTT","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.053Z","timestamp":1790109924053,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /5aFEMn7GceUbCyMFsKjcw8DJY9c9PzWNeJv7ragvUWTT HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com/5aFEMn7GceUbCyMFsKjcw8DJY9c9PzWNeJv7ragvUWTT/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427315ccc4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/FGwxtfb99CU7ZWrkGJ1tKhV8vxUmhrTjs6zgp62ko6W7","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.081Z","timestamp":1790109924081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /FGwxtfb99CU7ZWrkGJ1tKhV8vxUmhrTjs6zgp62ko6W7 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com/FGwxtfb99CU7ZWrkGJ1tKhV8vxUmhrTjs6zgp62ko6W7/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427318d4b4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/ErFp6xHQkocPcwKe4eVa6afbKPpCdjzp1bvBARDXwsuc","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.107Z","timestamp":1790109924107,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /ErFp6xHQkocPcwKe4eVa6afbKPpCdjzp1bvBARDXwsuc HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com/ErFp6xHQkocPcwKe4eVa6afbKPpCdjzp1bvBARDXwsuc/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731adf74e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/9rVKcKYLPvNfTyUKrT2QXE8XwqyHgTdHF5TY6zV8pNSR","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.123Z","timestamp":1790109924123,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /9rVKcKYLPvNfTyUKrT2QXE8XwqyHgTdHF5TY6zV8pNSR HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com/9rVKcKYLPvNfTyUKrT2QXE8XwqyHgTdHF5TY6zV8pNSR/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731ce544e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com/ENERkaSEqTZ9HDtcuY5LHchHWY4CPN3Q31Qasqrq4f6k/","fqdn":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.452Z","timestamp":1790109924452,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /ENERkaSEqTZ9HDtcuY5LHchHWY4CPN3Q31Qasqrq4f6k/ HTTP/1.1\r\nHost: y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: ENERkaSEqTZ9HDtcuY5LHchHWY4CPN3Q31Qasqrq4f6k\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 3038\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1LnKocfYYvG2tHlP3LcQ2yBXbDGfNrtOj%2FQjBd7jz9srMOOr1qDLLT8Wg9uafg6pOPF0iL8EWQrsact38T6SiyvxUp3D00l%2F4PicXSySwsh7SNfLBDd3f%2FaFMSGY1AOccDfaSR3f1RbJZO6cMxAjIJUmtRs9Y7H8JwKzjE1Fp0dElDMLXpKOlVu%2B5J8dxLvFyBLsmd8Bv%2Fd%2BVgH5SVJ70mttHPU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f427344e9156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3038\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3038,"size_decoded":3918,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"54747395241f6641b0751d62e4b37d1d","sha1":"cc851372f7345453800e4153d3c41e920730f627","sha256":"b621b6d515cead780994d3a0f326c071af1e4af652483396bcaa884e73645b3c","sha512":"d252b2f4693ed0d4ed747462825d973f1c4c2085ef10d699c11e6e98a3149563fee3a3dbddefc9321abc136bb537e99eb6835b40fcf905ab6510218e2ab540cb","ssdeep":"","tlshash":"c0512d828a46b132e2091dec581199f815d6a548f7dddb8b171197172c1e9d3ccf4edc","first_seen":"2026-06-11T07:30:29.69305Z","last_seen":"2026-09-22T20:50:19.796163Z","times_seen":35,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":69,"dns":16,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"testdomain23232.top/assets/bridge-store.js","fqdn":"testdomain23232.top","domain":"testdomain23232.top","tld":"top"},"ip":{"addr":"104.21.34.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:22.769Z","timestamp":1790109922769,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testdomain23232.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 17:00:54 GMT","end":"Thu, 17 Dec 2026 17:00:53 GMT"},"fingerprint":{"sha1":"A6:0B:EE:23:07:42:18:71:4A:7E:6B:7F:9A:CD:7E:C0:A2:DA:5D:8A","sha256":"B2:DC:27:C0:8E:EE:A7:AE:1B:3D:04:2F:AA:DC:EC:60:F9:4A:6E:04:56:70:6E:B9:64:88:31:EE:B3:9B:40:19"}}},"request":{"raw":"GET /assets/bridge-store.js HTTP/1.1\r\nHost: testdomain23232.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript;charset=utf-8\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 22 Sep 2026 17:38:01 GMT\r\ndate: Tue, 22 Sep 2026 20:45:22 GMT\r\nserver: cloudflare\r\netag: W/\"33dc350a703e7379a390c747eafef43e\"\r\nage: 68\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j4mzDJ5DkYBIqxUg%2Bkweq9MhjQ4RWn%2F1cpvmqWo7bhIKDXOdOhc0pCr9R0o3c95Y3DI05LO7lMy0Ptwwi9uEGXudsm4Bo1%2FUtk9iWNZrMIklbl1%2Ba6wW08gG%2FXH0BslfPNdvI387\"}]}\r\ncf-ray: a3f4272959a7a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2880763,"size_decoded":425224,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33724), with no line terminators","md5":"2b9d794e34522e0028fe9d43942f3558","sha1":"3167b5f5349cc447a9be04deee6031319c804ec3","sha256":"34e167d2affbb5b9f41865c6a2eac1eb2d67080a192b00abbeb6421789f48d75","sha512":"3533765160c35062b8e167ce8fc771f51a4fe431ab4a0f08e87a1a8ee3a558ab78eef652d59b28d213f2f030b966e47817c67e24ce9ef5295f30b26f3a594a99","ssdeep":"1536:gzVTwI5LqjkzfGWbIs5z29sFvGHTibu11pnWwUB0wpBcIOZ30gtpTjOsqtLpreFc:gzVTwSLqjkzfGWbIs5z29CuG","tlshash":"aa35b2c50ee6d514baaed6435e6c9dfc90b7c06275c07207e188fecea8683b68d84f54","first_seen":"2026-09-22T20:46:18.49875Z","last_seen":"2026-09-22T20:46:18.49875Z","times_seen":1,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"testdomain23232.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.drpc.org/","fqdn":"arbitrum.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:23.129Z","timestamp":1790109923129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 01:49:22 GMT","end":"Wed, 11 Nov 2026 02:49:11 GMT"},"fingerprint":{"sha1":"1D:AA:98:9C:F7:ED:CA:BA:5E:92:74:4B:18:3B:83:D6:0C:A4:D7:3C","sha256":"71:EB:00:B8:D0:6F:B9:E3:E0:9D:2C:E5:6B:57:0E:BA:4D:41:8C:64:EB:3E:B0:D8:8E:54:49:8D:2D:50:A2:65"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://testdomain23232.top/\r\nOrigin: https://testdomain23232.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Tue, 22 Sep 2026 20:45:23 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://testdomain23232.top\r\naccess-control-max-age: 600\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a3f4272bbe56b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":448,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":1,"connect":22,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@cap.js/wasm@0.0.7/browser/cap_wasm_bg.wasm","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:23.604Z","timestamp":1790109923604,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/@cap.js/wasm@0.0.7/browser/cap_wasm_bg.wasm HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nOrigin: https://testdomain23232.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 20:45:23 GMT\r\ncontent-type: application/wasm\r\ncontent-length: 8259\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.0.7\r\nx-jsd-version-type: version\r\netag: W/\"5850-Zla5mhcuOico9+qcpv5wsYqeHHI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220093-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2854241\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7jHMVBsCSppaRZUwsfPZuwY2b%2B2kbqfZAh5IEktU7C5xuOWHOIb4Gz0lpdOT7eWbk8dANflEZ0VSFDy5I6%2Bs69clM99JWK0S8iHzdGpc9U20pa%2FbP%2BPKF1edEO3LCu7MZAY%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a3f4272eabb15a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22608,"size_decoded":9354,"mime_type":"application/wasm","magic":"WebAssembly (wasm) binary module version 0x1 (MVP)","md5":"7116ffe340a553a454fef87341c44bed","sha1":"6656b99a172e3a2728f7ea9ca6fe70b18a9e1c72","sha256":"e4f3c00246a775193661f9277ca1288cd310a6514de166ecc2176ccd26fb06a9","sha512":"d9f2e698bf8beefb99d476bd78b26002d7e617ba6e8234c7c93e81ddb74594cf713fc276dc55fe8f5a837c8992fb51a6a52cc183998415cef1b626f4040f2b6c","ssdeep":"384:q1lFv+dy0yrXzRJnzAQTI+q9HU692o3SeHom/EtUHTOih2YeRbpKgYRSE94+D7+:K7zAZ9ao3XHom/L4RbgjSqDq","tlshash":"aaa2859231a428e1f13af73ae00ef1b937139558fb89ba2ac71f25e72c7b50465d6d10","first_seen":"2026-05-10T23:32:59.054461Z","last_seen":"2026-09-22T22:59:39.943775Z","times_seen":376,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":9,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.testdomain23232.top/?req=ping","fqdn":"api.testdomain23232.top","domain":"testdomain23232.top","tld":"top"},"ip":{"addr":"172.67.161.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:23.981Z","timestamp":1790109923981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testdomain23232.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 17:00:54 GMT","end":"Thu, 17 Dec 2026 17:00:53 GMT"},"fingerprint":{"sha1":"A6:0B:EE:23:07:42:18:71:4A:7E:6B:7F:9A:CD:7E:C0:A2:DA:5D:8A","sha256":"B2:DC:27:C0:8E:EE:A7:AE:1B:3D:04:2F:AA:DC:EC:60:F9:4A:6E:04:56:70:6E:B9:64:88:31:EE:B3:9B:40:19"}}},"request":{"raw":"GET /?req=ping HTTP/1.1\r\nHost: api.testdomain23232.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nOrigin: https://testdomain23232.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-headers: Content-Type, Cache-Control\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\ncontent-type: application/json\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\nserver: cloudflare\r\nx-powered-by: PHP/8.5.10\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E0on3vkabtpeQ8aRfZ9Rx8sYrqqcvLCxyYEZ5137Gcbed3csMAeRWgSdZdoqqr9AWoSdYDtJcBXFnGvS2KowLvQghtNB5cJ9eBAHPtCBBI%2BHJXf%2FusqUjuzwF5CDstWjSFQ1a568f1LcWA%3D%3D\"}]}\r\ncf-ray: a3f42731082c56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.5.10","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":816,"mime_type":"application/json","magic":"JSON text data","md5":"594d96ea0628a6a87187b8e17a7fa4b0","sha1":"5fbf4e5362196240e62d4e192bd93777898755b2","sha256":"cb100e693b55b36a08dc2b04eb312835069a4f2fc406ff374b21313b1f56b5cd","sha512":"c92fac11849dbd07dd610982d2d2e49f7aa59ec6048782145992bed639b1a518c539d9603bea6b79e4f29aa745e301923edaa9d96e1dec3ce27a8a2f4c2f2f4c","ssdeep":"","tlshash":"d96000330c0c0330030c0cc0300fcf030cc0c0c00000fcc000000300c300c000c00300","first_seen":"2025-10-03T14:25:47.505502Z","last_seen":"2026-09-22T20:50:19.795622Z","times_seen":858,"resource_available":true,"data":null}},"time_used":519,"timings":{"blocked":1,"dns":4,"connect":15,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.testdomain23232.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/AEdaUbAHJH6uu1qeTC5sgQUzocwS61ZW7xEYJMCzuuq6","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.100Z","timestamp":1790109924100,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /AEdaUbAHJH6uu1qeTC5sgQUzocwS61ZW7xEYJMCzuuq6 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com/AEdaUbAHJH6uu1qeTC5sgQUzocwS61ZW7xEYJMCzuuq6/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731adc14e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com/ErFp6xHQkocPcwKe4eVa6afbKPpCdjzp1bvBARDXwsuc/","fqdn":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.358Z","timestamp":1790109924358,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /ErFp6xHQkocPcwKe4eVa6afbKPpCdjzp1bvBARDXwsuc/ HTTP/1.1\r\nHost: zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 832\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: ErFp6xHQkocPcwKe4eVa6afbKPpCdjzp1bvBARDXwsuc\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 832\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6TXvJKcSAN170IoTx8IWOeE6hQiYi4JfThCb%2BsabW2WGLI0UAkCIVJvMt%2BhkT%2FDQCPWSlaIJOfnK1SbMqNxhkigOZDiH0NDcqbUAyAoE%2BjY%2FQyywJPLUm0NGYAzcO1NNWle3A7lkLCAewq8%2BlD%2Bl9WMArgGUbGa%2Blm9hBS0HF2vco7aP9FLV281i5CCZc%2BMGERKbfYtsNZlrt%2BtUSFPn5W5CYiM%3D\"}]}\r\ncf-ray: a3f42734afc81a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":832,"size_decoded":1696,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"771a036a39eee67730f70216f4a0de6e","sha1":"10e65a6b6410dd038c4f397faaa0f7f32bf69995","sha256":"68a9030633e1b50dc003b84cfcdbf0447f663722e1cc8aebb8b59e33c2609455","sha512":"81c674b05b7835a2c771065722fc77f06fb56b40ab349ef08f58a273ab54d611fdfcf9bd9cf4ddbc6d9e42d4e8e1e2a4ecb42a9ed7113f6a8f08ed85739a5b25","ssdeep":"","tlshash":"e00186f6ac17ca14c2293457d9e4faa2499cb4246807102afd9d1eb419cc2829ec991a","first_seen":"2026-02-10T08:05:59.375119Z","last_seen":"2026-09-22T20:50:19.771592Z","times_seen":40,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":169,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com/2DGBFeacTMVeEKeuYdJgdXZMjMhUFdxygmQLNcvBR3iu/","fqdn":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.420Z","timestamp":1790109924420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /2DGBFeacTMVeEKeuYdJgdXZMjMhUFdxygmQLNcvBR3iu/ HTTP/1.1\r\nHost: ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 2DGBFeacTMVeEKeuYdJgdXZMjMhUFdxygmQLNcvBR3iu\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1140\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2BAIyCmGV0QI1GB%2FKVeAyBODqavsJFWev9C%2FkesTzHCUqp3DE68G1R84iN9UpqFDkDvJu73G%2FhkN%2FHExRChdBMnSmYNskpnwrU13XbN9imtQ1VDRscIWHCbyzW8DnPt11Z%2BLQ5HU8gznbHnrEskwFgzEVsskTr7Rbo%2B93DVwlfh8YZcibWp0A%2BGoJnHvB11Y4yVaLm4c2D3gStjhMpMPMNINdYg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f427356eb156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1140\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1140,"size_decoded":2024,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"38199112def1eae2fe5fc00974d1d026","sha1":"d70d4dd4ea783a3dced58500831af409a2e39f6d","sha256":"58e137e626c100f7c0833a85cbcec7d41d366f3467372c333bf2cbf093329915","sha512":"c37eabb11ba6027c77f3ddbdeaf7dd1a24cfafee67ffdb62c354c60ef51eeb9b6ccb7ebdc866601ce090c54bb24eb736955eb5b74b905addf734b54da3d049b3","ssdeep":"","tlshash":"1d21a386ec313f278f2a52a66eb351492a9cd038fba2b9b1662908c0493c69dc895024","first_seen":"2024-07-08T23:13:44Z","last_seen":"2026-09-22T20:50:19.763237Z","times_seen":117,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":257,"dns":20,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com/BZsRGcBURQnewjAfV98ZUziy45VCmwCQHch8hcGU64wz/","fqdn":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.444Z","timestamp":1790109924444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /BZsRGcBURQnewjAfV98ZUziy45VCmwCQHch8hcGU64wz/ HTTP/1.1\r\nHost: tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: BZsRGcBURQnewjAfV98ZUziy45VCmwCQHch8hcGU64wz\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1878\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rugkBsNpfZ9d7CPGr0RuEBEH9ZxWsErWwZ3L5tiUVcEh08fn0yt7MVDH7opvpnXfy%2F1N2yYp9SPo2%2Bnz57qZuPFLPxhJdIof0a5d9L1I%2F0H63gy4uu8vjDglb39K3QzStoZojN3zz8NrgiFCJG7ynEZgMTTZ8gTcmVlVeV2YakiGfya01oDjUGMLGhg4iexfjYxLzucnHlF2mT0lyNJG1qPVo5E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f427344e9056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1878\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1878,"size_decoded":2752,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5c08d5d7c5a8030437630a683f3592e8","sha1":"e13d5394ee2c8f68a8e428b79dcfd3eabd494797","sha256":"fbbb918fb6d655669ac630ad4bf78f24bf49b750235bd9721cf39b470c1c283a","sha512":"fa7f66ee600e3a2f961061efd0f81290b3946673942332f8587f54effbb14d5cf30036605eb77fcfa0f8d01269cf8c15d4b7c2f70b82d5b17158a8f2e8073c9d","ssdeep":"","tlshash":"9041f729c672167aee6f5c14d1a0308df62ef8850690bd4579e3de63e0283db74588b4","first_seen":"2025-09-09T19:24:39.883139Z","last_seen":"2026-09-22T20:50:19.773347Z","times_seen":38,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":71,"dns":19,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arb1.arbitrum.io/rpc","fqdn":"arb1.arbitrum.io","domain":"arbitrum.io","tld":"io"},"ip":{"addr":"172.66.171.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:23.134Z","timestamp":1790109923134,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitrum.io","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 14:06:40 GMT","end":"Sun, 29 Nov 2026 14:06:39 GMT"},"fingerprint":{"sha1":"2E:54:50:59:0F:7E:56:CE:77:95:05:FA:A3:BB:06:E3:41:72:5F:2C","sha256":"8E:29:DE:F8:49:2E:C5:53:C1:DF:97:71:F7:FC:7B:49:B2:AF:01:67:17:63:F8:F8:82:10:8E:7A:A8:9D:B2:ED"}}},"request":{"raw":"OPTIONS /rpc HTTP/1.1\r\nHost: arb1.arbitrum.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://testdomain23232.top/\r\nOrigin: https://testdomain23232.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Tue, 22 Sep 2026 20:45:23 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncontent-encoding: gzip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 1\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3f4272bbd005691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":449,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":154,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/7CXSgx8jsxLxjzMCMaadAm2zy2HXnfgpYFs2sF6C1kEV","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.080Z","timestamp":1790109924080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /7CXSgx8jsxLxjzMCMaadAm2zy2HXnfgpYFs2sF6C1kEV HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com/7CXSgx8jsxLxjzMCMaadAm2zy2HXnfgpYFs2sF6C1kEV/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427318d414e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/46y4UEUG6a2zPWBDoDstJ7Efqgc3hqxYUwUgUHuAByem","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.108Z","timestamp":1790109924108,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /46y4UEUG6a2zPWBDoDstJ7Efqgc3hqxYUwUgUHuAByem HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com/46y4UEUG6a2zPWBDoDstJ7Efqgc3hqxYUwUgUHuAByem/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731adff4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/2DGBFeacTMVeEKeuYdJgdXZMjMhUFdxygmQLNcvBR3iu","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.109Z","timestamp":1790109924109,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /2DGBFeacTMVeEKeuYdJgdXZMjMhUFdxygmQLNcvBR3iu HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com/2DGBFeacTMVeEKeuYdJgdXZMjMhUFdxygmQLNcvBR3iu/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731ae084e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/23q4kgVKA71hmzEKL9qhRwSTESeYhDZ84LUNc1HJ8XX2","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.119Z","timestamp":1790109924119,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /23q4kgVKA71hmzEKL9qhRwSTESeYhDZ84LUNc1HJ8XX2 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com/23q4kgVKA71hmzEKL9qhRwSTESeYhDZ84LUNc1HJ8XX2/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731be474e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.testdomain23232.top/?req=fp","fqdn":"api.testdomain23232.top","domain":"testdomain23232.top","tld":"top"},"ip":{"addr":"172.67.161.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:26.864Z","timestamp":1790109926864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testdomain23232.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 17:00:54 GMT","end":"Thu, 17 Dec 2026 17:00:53 GMT"},"fingerprint":{"sha1":"A6:0B:EE:23:07:42:18:71:4A:7E:6B:7F:9A:CD:7E:C0:A2:DA:5D:8A","sha256":"B2:DC:27:C0:8E:EE:A7:AE:1B:3D:04:2F:AA:DC:EC:60:F9:4A:6E:04:56:70:6E:B9:64:88:31:EE:B3:9B:40:19"}}},"request":{"raw":"POST /?req=fp HTTP/1.1\r\nHost: api.testdomain23232.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nContent-Type: application/json\r\nContent-Length: 2870\r\nOrigin: https://testdomain23232.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2870,"data":"{\"payload\":\"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\",\"reserve\":false}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-headers: Content-Type, Cache-Control\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\ncontent-type: application/json\r\ndate: Tue, 22 Sep 2026 20:45:28 GMT\r\nserver: cloudflare\r\nx-powered-by: PHP/8.5.10\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JUMneuuGQMsw43AmrtpiBd7cuD9dlecDEvXLjc9MbUbARCD2osLe2XwHMCCmJ89j%2F0%2F1OHjIZkvK8D%2BRiaL4TIh5EcboOpQjDdwFt35j6ZK3fCfw%2FpdvRdn5X%2FZHxoYEOlOSLIVYxEjr7A%3D%3D\"}]}\r\ncf-ray: a3f42743ea1256c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.5.10","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1291,"size_decoded":1838,"mime_type":"application/json","magic":"JSON text data","md5":"c1dc952e0017b9440453623a5565e75b","sha1":"8f3bfe9ad783cec67e1c3e724f722b887a66ad68","sha256":"d637845886d2ee8a434af2c8060e9402511993112f743276f78c023edca11a53","sha512":"db39636373447b67b5c69447899bf172fe1fe80e68b77136168c49969d1fa8fd600853b14ea4adaad7483eb6872f86f1f59a8c3e2d93d5b9f8680bc2464e4493","ssdeep":"","tlshash":"e321e7e9f7d4c218cc9efd8890f9c31cd1dd90147c43168ab2e600997ab86a9b94c16f","first_seen":"2026-09-22T20:46:18.503649Z","last_seen":"2026-09-22T20:46:18.503649Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1070,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1070,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.testdomain23232.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com/4D9JvTbpqf8it29ZeG4AkLd9PUPhpwWH7MzH8bjqcE8a/","fqdn":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.344Z","timestamp":1790109924344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /4D9JvTbpqf8it29ZeG4AkLd9PUPhpwWH7MzH8bjqcE8a/ HTTP/1.1\r\nHost: f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1000\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: 4D9JvTbpqf8it29ZeG4AkLd9PUPhpwWH7MzH8bjqcE8a\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1000\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KeIGLp5GpBd0F0PveTFHPVk60o3bW5p7bK1ixhk8twV9IGHwFln5ImXwMNt5c0eslbt8k9X%2BRRPoEgVUiDMDFsccaMsPP0%2FGY4X%2BzmfdH8Gjojwd3Czroq8%2FXEVT%2BD%2BBNpRtWgrBFPnPCcGOaxWS8Zj%2BtiL1sHBTlelbf3fd1LnxWbswEHBhUqT3n1R86laCWSRW5Z%2B7mBU7eW3iLO7iaqu4Bxo%3D\"}]}\r\ncf-ray: a3f42734c8401a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1000,"size_decoded":1862,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7aae514c4eada8141a37a9035f55e164","sha1":"d25d7fbc63b22b825098116ebbd65896f6ed6bc5","sha256":"e5710984e7f46092329faf76466920cec1f9fef2975e3f0bae48ed87d06aa9a0","sha512":"e888f76d362655ca1064e7359d96ebb8009c92c3a52534110f9d46c06e59dd44ae71c0c28c69c22d0c6ff23d5625135792f40c7904b690a07c99b392904ebb04","ssdeep":"","tlshash":"4e11c89d4bf55e17d356d474901f5f8304b2f6ad0c51c261cac6649d44740dc3e4691f","first_seen":"2024-06-14T11:01:45Z","last_seen":"2026-09-23T01:19:48.619361Z","times_seen":4094,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":227,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.020Z","timestamp":1790109924020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 22 Sep 2026 20:45:24 GMT\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1427,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-09-23T05:18:12.283508Z","times_seen":47003,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5ZfwxdeiMwp91zkMTo5ABo4XYBcStqopPe52LZRVUSwr","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.092Z","timestamp":1790109924092,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /5ZfwxdeiMwp91zkMTo5ABo4XYBcStqopPe52LZRVUSwr HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com/5ZfwxdeiMwp91zkMTo5ABo4XYBcStqopPe52LZRVUSwr/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427319d934e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/3MT5FBCpHxMz8SpzNZQUrhWmpXbjFb5jKMxSKUbk2HJe","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.116Z","timestamp":1790109924116,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /3MT5FBCpHxMz8SpzNZQUrhWmpXbjFb5jKMxSKUbk2HJe HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com/3MT5FBCpHxMz8SpzNZQUrhWmpXbjFb5jKMxSKUbk2HJe/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731be334e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/7ND2SiYwsfvAPwL9K4ZdpbAi3iABc5jpoJqvVdppHRsY","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.128Z","timestamp":1790109924128,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /7ND2SiYwsfvAPwL9K4ZdpbAi3iABc5jpoJqvVdppHRsY HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com/7ND2SiYwsfvAPwL9K4ZdpbAi3iABc5jpoJqvVdppHRsY/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731ce7a4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com/7p1SUU8Rx3sQFLVxhjXboi5nVLFjCRR1Qn2pbpyBnrXn/","fqdn":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.455Z","timestamp":1790109924455,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /7p1SUU8Rx3sQFLVxhjXboi5nVLFjCRR1Qn2pbpyBnrXn/ HTTP/1.1\r\nHost: muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1482\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: 7p1SUU8Rx3sQFLVxhjXboi5nVLFjCRR1Qn2pbpyBnrXn\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1482\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wYFCXIs79s6HvV2o7BapGeMrdDn9PoXE%2BfT%2BTo1tUOFm%2BMYAWliM3rYd8qDO89%2Fbjr3fl%2FG33%2BGhC%2BWjTIN07ajpq7JtUnSZIOkBRafS4DdvSN%2B4sRjkN3b%2B2zW7yuYyKSr%2BLY3rZCAjhiMHmCGT0rJ86pJY%2FiD9%2Fc6Bt2ROJrbfaRIyS%2BcCm%2BIQL3c5xHwK9rpRhfXMBkFSvJMeCX3TKbdX9Kw%3D\"}]}\r\ncf-ray: a3f427357a471a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1482,"size_decoded":2356,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3752db8f6ed5f7153e767cfa8f3ba14c","sha1":"665ca86662e8f0a28840c7ccaece339887215f00","sha256":"f543811888187e1eeeda76a831f73c8f33661070354c2b10eb874899c41786c5","sha512":"2381b754052fae6facb7a3395184a0b82fb4f909aef66ba35a9927e4d1970a56e23402df3872b4cc255f6e4e59678f85d98eec12de20eb61ca01179189f2b0d1","ssdeep":"","tlshash":"8731c72e2c13bcfde8556a04a55ade176c0cabc8a9acc4896c4cd5be19645114534dc5","first_seen":"2025-01-22T14:57:40.414388Z","last_seen":"2026-09-22T20:50:19.789529Z","times_seen":134,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":255,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/3P9VdFHyd9sSnhWw6vt5skH79MDNbmAPLeKZ3WU6GZjD","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.048Z","timestamp":1790109924048,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /3P9VdFHyd9sSnhWw6vt5skH79MDNbmAPLeKZ3WU6GZjD HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com/3P9VdFHyd9sSnhWw6vt5skH79MDNbmAPLeKZ3WU6GZjD/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427317d164e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":163,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/GUcEiBVePo1UyG8J3tBaNDDHn3k2isozZHErCoS64QLf","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.124Z","timestamp":1790109924124,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /GUcEiBVePo1UyG8J3tBaNDDHn3k2isozZHErCoS64QLf HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com/GUcEiBVePo1UyG8J3tBaNDDHn3k2isozZHErCoS64QLf/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731ce5b4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com/3GFibxLTiHvi7DucnoGZGgHbWb3eA9cXG3E85dEnjRsi/","fqdn":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.313Z","timestamp":1790109924313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /3GFibxLTiHvi7DucnoGZGgHbWb3eA9cXG3E85dEnjRsi/ HTTP/1.1\r\nHost: egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 3GFibxLTiHvi7DucnoGZGgHbWb3eA9cXG3E85dEnjRsi\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1992\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SMzm5elHnhdiurrGQBDFcS1VSHkbt7xcm2TzgRh%2Ff43EaOS%2BOWtXiOZ%2BAebx%2BLccS3XZH9LmWZNgAXgQs5CLx%2B5YFn1L9Iwo4f8aIsapdxDgP9M48C5AbvzMA2DqnVc07F5O8elUP7YNzJm4zHZY%2FiimqG4EQUcaJcUJUqvPjNiAviAWZL%2Bsi38GLa9KJuT6qWgKi3%2B5JIivu58bZeZ0YCE71cQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f4273369650b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1992\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1992,"size_decoded":2876,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4b013764d1cd40ca1e78cac87007ed2c","sha1":"55fd79cc74b5e19798e4ef08327914446bec62ab","sha256":"14abbbc1a69d2de80f758bc1dd392c9bb98e884193033ecadd6177e07b552f8e","sha512":"a06b598a53e2ccca0e93c46c2865d2e0f4e948fbdbb655a2ec12c5700fb70971368098f8ad172003f10ccdc7a94930fb7cd8e7ad61b9f849181a8de2ac42011e","ssdeep":"","tlshash":"06410a3883863b94ae5eb9ec6f81001b82791e76621d8483d93664cf8f21f864f8f851","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-09-22T20:50:19.790582Z","times_seen":4447,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":6,"connect":56,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com/HvyemAESJHULoAKmn8NDZwnCL6NodeAUeqwxbtjumDgH/","fqdn":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.417Z","timestamp":1790109924417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /HvyemAESJHULoAKmn8NDZwnCL6NodeAUeqwxbtjumDgH/ HTTP/1.1\r\nHost: 7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: HvyemAESJHULoAKmn8NDZwnCL6NodeAUeqwxbtjumDgH\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 2174\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pTt%2Bt7k2w5TLVUOE1WvUYk7gdJPhKxQzwuPOuMDhTSidBPjh8eZi1Oi8CQRlTnRDpxxR0w8664ueFl4ugMA7b1Of%2FiYBiWTzD0pGIsCZm%2F%2FCuXPobP7f4%2BVzOw9PSreHlny%2Bj9aYmi5%2BKH7TNDKb3pCOoEV7HlID7VtSd5NOUKXW6hIgm93kETgFHgYsCKIoDVF85wBFVxeOEc9EN0Yw5x5eUwk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f427350ea956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2174\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2174,"size_decoded":3056,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"71fa9982918cdc0d965432847e883312","sha1":"c70649ee620af5cc4620d021c667ae39e1892a04","sha256":"44a6c66fbd56b55dfe9d1206fe2dbb343419ce26c43ebf4e16755592d9c854c8","sha512":"15fd6068bb2d607fb2850d35ba40e8cb9d78d65a35270e76f72a1bf4b3627a7ff02e393c96ba458d9f005f4f840add8d55b570d525ee24a334449a4abb14d38c","ssdeep":"","tlshash":"dd413c9ebaf60492fa9335cb7445dfd63c592cb6b2363e50ad18c0334ae59ee1210589","first_seen":"2025-09-09T19:24:39.772114Z","last_seen":"2026-09-22T20:50:19.803593Z","times_seen":34,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":205,"dns":22,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum-one.publicnode.com/","fqdn":"arbitrum-one.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:23.128Z","timestamp":1790109923128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 02:01:04 GMT","end":"Thu, 05 Nov 2026 03:00:51 GMT"},"fingerprint":{"sha1":"94:5F:9F:32:64:19:A5:50:59:22:7E:16:22:E5:6B:9B:1C:65:F3:ED","sha256":"7D:67:31:E8:80:74:FB:3E:3C:A4:1B:9F:F0:BE:71:56:CE:95:31:97:BD:28:75:B6:47:AA:02:45:08:74:76:65"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum-one.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://testdomain23232.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ndate: Tue, 22 Sep 2026 20:45:23 GMT\r\npriority: u=4,i=?0\r\nx-envoy-upstream-service-time: 4\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a3f4272c099e0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":423,"size_decoded":713,"mime_type":"application/json","magic":"JSON text data","md5":"c99f81441adc30ccc2fdbec572e09062","sha1":"2ef7ab2db2f5123bad5b8721d402ae61af353990","sha256":"7b8586a8c70d32319f7c32372a0613f1fd091cb8f59f6e6784ab8ef88283163a","sha512":"35fc87e82d9e058daf7ee39725a99be69abbae903e81ca7f1926fd5fc8365bbe76a5cf283390c097a95630df5865bca1a1ca3d83e49fe986ca6d4b78492aec44","ssdeep":"","tlshash":"55e02bb0291fcb12f5690623a39c3106f112f22497c64e811a0ce69716c5a01bd8d4c9","first_seen":"2026-09-22T20:43:18.321791Z","last_seen":"2026-09-22T20:50:19.767504Z","times_seen":9,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com/1uax15bZQNN9id5YyXCs7XPHXgsx2XaS5z93YrdvjDH/","fqdn":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.309Z","timestamp":1790109924309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /1uax15bZQNN9id5YyXCs7XPHXgsx2XaS5z93YrdvjDH/ HTTP/1.1\r\nHost: aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 1uax15bZQNN9id5YyXCs7XPHXgsx2XaS5z93YrdvjDH\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/png\r\nx-content-length: 2583\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R0nMgu5UkeCkQx0%2B%2FiBmmRoyvLgiCOUvWURCYJpcq10%2BuPDkh%2FSmHLTqBLZy8tjBE13fzd5M%2FnDYQt%2BqdZFaIN7PdDOazmUZOcCOQ7bgdSH%2FkW8tDwrbWf0E6kicGKvYbJKb%2FQBhBAeS%2FzFJIG44KSdPo6iaRMjBJbKbRN7eETHy%2BxPah0CV2Wp9TqUrkRX3fz1ajW6rA3rCKCu7KjNFxwHNcFE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f427336c8c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2583\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2583,"size_decoded":3468,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c4ce54825b90a5e29f1d01212a5cfbb4","sha1":"080e35b85dd4b25898a2aec6943af4404905854c","sha256":"7385e03ff8f0f4bfc47db8935a39e57e1d2b19d02e7a1510dc6458a79e4e48ac","sha512":"33864c6e123dd07391eed83ef825411c140523c94c56b347215c35253276f9174c4fccb07412b6fe34ecf888a7e088051e8fea9ef8e2c7f0cf2035bf4eef4694","ssdeep":"","tlshash":"41511a5f6e8e7ce3d2c4801e860d914b317912c5bb1eb55bd988c760af22e6d9e248f1","first_seen":"2026-06-11T07:30:29.705894Z","last_seen":"2026-09-22T20:50:19.781564Z","times_seen":35,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":2,"connect":59,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com/BwZqZkoJjgvs5QoobRe8CysTNUs155FJAKg6xngJ4yXj/","fqdn":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.348Z","timestamp":1790109924348,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /BwZqZkoJjgvs5QoobRe8CysTNUs155FJAKg6xngJ4yXj/ HTTP/1.1\r\nHost: ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 975\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: BwZqZkoJjgvs5QoobRe8CysTNUs155FJAKg6xngJ4yXj\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/png\r\nx-content-length: 975\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mpCTCcvR8c0eRrCAVSR4aibPoIfdMlF1U7MnhUIF%2FKHvnCtRLNYx8dNwl8w3yhtT%2FpramV9IGc8NO3bbuleO7JD79xpWtn2g9inAl41uQ4UZlWkQy5LLFW2BRQT28qxP60ZdAaFy7R4f3XVgjhR8YMV28T7w%2BGNcfhD4YZpm%2FLlPY3rjJUBaneVPF3gG9jSGCd98qBswv%2FscGzQq4k50OPcPTwY%3D\"}]}\r\ncf-ray: a3f42734afca1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":975,"size_decoded":1827,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"be1fd7e59dbdcff26653cc5d6a17bc48","sha1":"365bcd0db2ade8ab922df68fc7b129a170158b22","sha256":"b2e99bec178a2843c207212a163252fb1c1c685ae9bd521a6b5b4f2e5c4757a0","sha512":"51f5e3bc9a9f65638154e7f8b41c36ece5962ce2dc6ddad0a09f5fdb519848133b21f4031a876162d7cff472b505b7d3e4721f92162d48b6fc1b07aaee75c4a4","ssdeep":"","tlshash":"411194df9b2d20320a915439da148794e36b9780ad2a5370895612d42f47b0c5baaafc","first_seen":"2026-06-11T07:30:29.74825Z","last_seen":"2026-09-22T20:50:19.784248Z","times_seen":35,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":198,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.gateway.tenderly.co/","fqdn":"arbitrum.gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:23.123Z","timestamp":1790109923123,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:05:13 GMT","end":"Thu, 12 Nov 2026 17:05:12 GMT"},"fingerprint":{"sha1":"3C:49:6B:54:E6:90:83:A7:6D:1D:85:6C:CE:96:95:BA:4F:5E:55:23","sha256":"0B:F3:1B:F3:1C:34:BF:C5:3C:C4:C5:D7:82:EE:73:AB:76:EB:51:11:1B:89:CD:E6:C6:FA:42:22:5A:3F:7C:AE"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum.gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://testdomain23232.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nx-tdly-limit: 20\r\nx-tdly-remaining: 16\r\nx-tdly-reset-timestamp: 1790109924255\r\ndate: Tue, 22 Sep 2026 20:45:23 GMT\r\ncontent-length: 422\r\nx-envoy-upstream-service-time: 5\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":422,"size_decoded":785,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"39d252b3c7ccf1087c0dbcb91a5c9b8c","sha1":"c50504eaf1f871b2aa30b5405573baf78d6c0b3c","sha256":"8ae2968f4bf95b0846ecfda92f1c85ffc6809e8c9a26f681e7cc649873645cb6","sha512":"1dcd0cb9268e47e0254c0271bbab3a0870b8a22954b7728303e20716cc01bce14c6066015242749130b5ad048e83f3a03f468ad363ef6227c0107ff64d45800d","ssdeep":"","tlshash":"79e02bf0291fcb12f9690623a79c3206f112f22497c64e411a0ce69715c5a01bd8d4cd","first_seen":"2026-09-22T20:43:18.283861Z","last_seen":"2026-09-22T20:50:19.776579Z","times_seen":9,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"arbitrum.gateway.tenderly.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/6Txn2Htb2ZZS6c5kQnF6q6P8YraMrEyZwCs1fuJs85ku","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.050Z","timestamp":1790109924050,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /6Txn2Htb2ZZS6c5kQnF6q6P8YraMrEyZwCs1fuJs85ku HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com/6Txn2Htb2ZZS6c5kQnF6q6P8YraMrEyZwCs1fuJs85ku/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427315cc84e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5M61R7ETnvpQLgBp7a6DRVWm759u5Ls8PB1FWJv52rx1","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.094Z","timestamp":1790109924094,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /5M61R7ETnvpQLgBp7a6DRVWm759u5Ls8PB1FWJv52rx1 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com/5M61R7ETnvpQLgBp7a6DRVWm759u5Ls8PB1FWJv52rx1/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427319da14e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com/HBj8Z3AkcCFxM5BdpG2ciRACVipaCQnwJ8QboBwkHgX5/","fqdn":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.352Z","timestamp":1790109924352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /HBj8Z3AkcCFxM5BdpG2ciRACVipaCQnwJ8QboBwkHgX5/ HTTP/1.1\r\nHost: 6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: HBj8Z3AkcCFxM5BdpG2ciRACVipaCQnwJ8QboBwkHgX5\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 742\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i7qQo8%2F5kUocreyosDRvOyGAdb0xbMi2N8zEPSGUf9KwBIDQz%2Bd9h5oVEfGbfXN2%2B1qLV2TaJRKzpKFOEHakxKWOqTEgJ24buIzGBThO0JU8vfhjrHutwkWmpcQnKHUV%2ByHxCuud%2B85dm8Y0RXov3L0LtQBt8V9kAdmP0R9Kauv7kKn2CcbqHwuiITaUhgY7VbkM8%2BM23vWS%2BsD3Dqgn0cYfs3o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f427337e7656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 742\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":742,"size_decoded":1622,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e7d8fcb07ee9d18516b53caa0d64de17","sha1":"0e8e550c8987324229df62620b2583cb377ffdd6","sha256":"6dab8e56b28c5da96f44c1dbed1d2e22a904d9744624886c3eeff2bf201f124f","sha512":"135e619b84976c313b9ec58b69eecd9705813ae75cffff9d52ceaef7b943895a7db9e8df170b4d54b43d2444398e020244a7c39e922886265858a82afe94995b","ssdeep":"","tlshash":"f50165d81ff5c5b439ba0b89744366725a831d74fd38608b0431ca644efc86db5502ac","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-09-22T20:50:19.782086Z","times_seen":77,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":12,"dns":9,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com/HpG4ABhwNauwmtHUfh2BiLRYzJS5uQfZVSsU9P5dCc8n/","fqdn":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.487Z","timestamp":1790109924487,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /HpG4ABhwNauwmtHUfh2BiLRYzJS5uQfZVSsU9P5dCc8n/ HTTP/1.1\r\nHost: 7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 20:45:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2034\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: HpG4ABhwNauwmtHUfh2BiLRYzJS5uQfZVSsU9P5dCc8n\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 2034\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AQ5pLQ0iXxZZ3IUQZk7pqyt%2FQ4iOkIDF2pY%2Fc1190netBZnD5ileb1%2BlZB2jiZCBvdA8h9DqA6s49LL%2BtJ41VcnnUW5KAVMWqGWr%2BIMYGy9V589YDAKobcKNs3%2BKdI298iO0DRUNy5%2F52LsQacczaSdC6sgHaAo7lhbMZOiCwjrLrujWT8XIot%2FL55AcZ3Kxfyk6fiREhxQ7Naaybq8BG2RhjKI%3D\"}]}\r\ncf-ray: a3f427359abc1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2034,"size_decoded":2896,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b83294a28b7ab0245ecf46cb205cfcc3","sha1":"2268400a548f428e98812f71c49921937ded5610","sha256":"9be573dd626af24162d8bac830e1e4427319fe2b45ae19ed877417505fac3085","sha512":"fbefee7041bbd4f1f6b3096106c8eada732f11444818b9aec2947e23e323aa8148a3f352ae408ac3755e7c1bd26b4423f17c01747a9c96230f5908b0c8ad2688","ssdeep":"","tlshash":"b3414cc39546827c704c1d7aeb02f1c321e7f1a181e1283216c86af5729e400a70f795","first_seen":"2026-06-11T07:30:29.751577Z","last_seen":"2026-09-22T20:50:19.765285Z","times_seen":32,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":238,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/EtCAcusz6dRAmAEjLhg5caTZC47eQwZ31wgKWofrPc4g","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.071Z","timestamp":1790109924071,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /EtCAcusz6dRAmAEjLhg5caTZC47eQwZ31wgKWofrPc4g HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com/EtCAcusz6dRAmAEjLhg5caTZC47eQwZ31wgKWofrPc4g/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427317d214e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5gBbYXnATXAj3B6zmP8CaV88YB5uB9m8PZrfKJ7WjwUv","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.090Z","timestamp":1790109924090,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /5gBbYXnATXAj3B6zmP8CaV88YB5uB9m8PZrfKJ7WjwUv HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com/5gBbYXnATXAj3B6zmP8CaV88YB5uB9m8PZrfKJ7WjwUv/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427319d854e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/BmRja2B3uNcEnmSf4spQwbDhyXoU8SpESENkTyQBN6Wr","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.098Z","timestamp":1790109924098,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /BmRja2B3uNcEnmSf4spQwbDhyXoU8SpESENkTyQBN6Wr HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com/BmRja2B3uNcEnmSf4spQwbDhyXoU8SpESENkTyQBN6Wr/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427319db44e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5ALLUP4yuGwDcVHWQu9rkA4iavNi6RPYuFSFagBKuJAX","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.131Z","timestamp":1790109924131,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /5ALLUP4yuGwDcVHWQu9rkA4iavNi6RPYuFSFagBKuJAX HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com/5ALLUP4yuGwDcVHWQu9rkA4iavNi6RPYuFSFagBKuJAX/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731deda4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.testdomain23232.top/?req=cap/redeem","fqdn":"api.testdomain23232.top","domain":"testdomain23232.top","tld":"top"},"ip":{"addr":"172.67.161.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:26.030Z","timestamp":1790109926030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testdomain23232.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 17:00:54 GMT","end":"Thu, 17 Dec 2026 17:00:53 GMT"},"fingerprint":{"sha1":"A6:0B:EE:23:07:42:18:71:4A:7E:6B:7F:9A:CD:7E:C0:A2:DA:5D:8A","sha256":"B2:DC:27:C0:8E:EE:A7:AE:1B:3D:04:2F:AA:DC:EC:60:F9:4A:6E:04:56:70:6E:B9:64:88:31:EE:B3:9B:40:19"}}},"request":{"raw":"POST /?req=cap/redeem HTTP/1.1\r\nHost: api.testdomain23232.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nContent-Type: application/json\r\nContent-Length: 1474\r\nOrigin: https://testdomain23232.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1474,"data":"{\"token\":\"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.z0T5i1Dq4k337UDFd1lcPcFOhq0LhUMqv6HvKUEuVco\",\"solutions\":[12712,8443,3462,166122,55427,2742,247009,60315,5716,65710,26763,165046,2359,224766,160038,74199,2565,33115,62460,38831,82197,116558,13903,96045,41528,99372,52499,28906,130247,15672,696,2920,71309,74068,14378,39319,158299,64607,25850,267815,62024,81189,66926,28742,53210,8615,84401,94964,34278,24420,6608,39214,116989,47443,41313,9575,2967,164400,163146,118005,131764,118972,105228,117741,190230,12124,138457,44609,55446,123039,17030,16170,66588,91702,99163,69913,325747,113633,25565,16415,14627,65529,105467,29278,16819,6227,2212,3835,277,86119,125269,29739,274851,94705,12343,206899,210410,184651,111569,4658],\"instr\":{\"i\":\"e661d976aeec13f2a99ef7f1e782d80d\",\"state\":{\"vjtjl7tlayw7\":777952,\"kdvao0swnfgo\":341070,\"irw9hdkh8bc2\":807119,\"ssbelstac3z9\":198952},\"ts\":1790109926024}}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-headers: Content-Type, Cache-Control\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\ncontent-type: application/json\r\ndate: Tue, 22 Sep 2026 20:45:26 GMT\r\nserver: cloudflare\r\nx-powered-by: PHP/8.5.10\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bP3n0RF%2FG2wV4JBPsy54UgilwAJuEek8%2FYHDUykUg6U6Rphqr9ghy2VU8YgScgyiifvG91Wu8uSv6WTnlvwLMc5wPGSB7q9gTLDegle2HuE3FKYndIhi%2Fzck76Tl48sQoR2F%2BO%2FwQvbULw%3D%3D\"}]}\r\ncf-ray: a3f4273f198656c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.5.10","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226,"size_decoded":978,"mime_type":"application/json","magic":"JSON text data","md5":"e4b6667d29a519885ab243974651d445","sha1":"0d0765f9a5caaa28c41e7aeea6bd4bc952790baa","sha256":"3d37d5379160a2ef5ec4740c174c63bddae2694003841f8a0b1ed3916692f6d7","sha512":"287b540d1075388646e2692f5822d99e1d37f09e07e1aa3a76136a82aa5a66f3a068c35d5dcf8a9a19af1b219021101204e549569235eeff57fce1a2d8df3c40","ssdeep":"","tlshash":"d6d0a7878e6c0a204896cb5815a5ed5911ea28c344bac478d6499fa5499081863ef143","first_seen":"2026-09-22T20:46:18.510174Z","last_seen":"2026-09-22T20:46:18.510174Z","times_seen":1,"resource_available":true,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":569,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.testdomain23232.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/74njk3B4UNqUutfcYrw4BdPfvw2YHdMC7oXCH4ywgNiK","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.110Z","timestamp":1790109924110,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /74njk3B4UNqUutfcYrw4BdPfvw2YHdMC7oXCH4ywgNiK HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com/74njk3B4UNqUutfcYrw4BdPfvw2YHdMC7oXCH4ywgNiK/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731be0a4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com/7MQuBTrRdm5iYhmrHxm5x4SbttL9dZTrssQBRhuxrYEg/","fqdn":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.335Z","timestamp":1790109924335,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /7MQuBTrRdm5iYhmrHxm5x4SbttL9dZTrssQBRhuxrYEg/ HTTP/1.1\r\nHost: lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1652\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: 7MQuBTrRdm5iYhmrHxm5x4SbttL9dZTrssQBRhuxrYEg\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1652\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2uvceHAR75JuXTescQtjfRAYUnZMQo9U1MtJ7Ko7FwN6y47VYihpLZZpdP9ijtUOrRLaxTXTsrKfy9BLQheNSAJCon3%2Fs%2BFhjxM5aoe7Q%2F0IAcNdmkQHb6ng4bmBagAUzOcrASE80wCho72ItmZ3CulYiXopJIz82Bo1ezXMNhsmrhXtgHITer%2Fh%2FGu2avJCRx46%2BDiSCxbU2ZzsGwB32TgI7Dk%3D\"}]}\r\ncf-ray: a3f427349fbd1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1652,"size_decoded":2510,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a549fff44eb302764c78ee0ccd01e062","sha1":"73e06130b3e2cd9145c4de30d7e44dd0c23a8e06","sha256":"d1bca0a7b38f3021f68467357b841e6d867e22f27951c0faae2535585a4634db","sha512":"e3ca1f88f0646f47959b5cea1768b5226b45f62e63c3591c0b35cf0c29a809dc0cd292a591bced3432debdd6783c6391913f94a1a62b2107e22df83bbf4e55ef","ssdeep":"","tlshash":"9b310c310b1550b24428731ee835e67df00dc8cdb30a5692d45cca4c12be36b6fe7361","first_seen":"2025-08-09T16:24:38.721025Z","last_seen":"2026-09-22T20:50:19.792725Z","times_seen":58,"resource_available":false,"data":null}},"time_used":566,"timings":{"blocked":199,"dns":4,"connect":7,"send":0,"wait":190,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com/46y4UEUG6a2zPWBDoDstJ7Efqgc3hqxYUwUgUHuAByem/","fqdn":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.445Z","timestamp":1790109924445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /46y4UEUG6a2zPWBDoDstJ7Efqgc3hqxYUwUgUHuAByem/ HTTP/1.1\r\nHost: fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 46y4UEUG6a2zPWBDoDstJ7Efqgc3hqxYUwUgUHuAByem\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1412\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sMQfpLy7s1hXTfp1R2QXM2NKWIasrhfQOcOJ20nAQCHHZljSboxXb13ElB8d7DaUajSEXYfS5WN7ORUhqxSzN1tMGRgPYawSqGzugxmCH7Jp45fk8L3B%2BibDJWnx8Jl6nnjtm8J0ufSsV%2BSlAIHMc1Oz%2FVt77UQDcT6jUxoRHttPPGsbt9Mwrxg6kEKvFxHBfchm6SIT9MMfg1tV7Xmy71dV85I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f427356eb056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1412\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1412,"size_decoded":2286,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"247b0e4d7c011a68e72b467bff4fe134","sha1":"c17df0ed13075661ebda9c66012b7cae88148e13","sha256":"0331d87e5eb10f506878366f6ca1cf253bca579df404e5e064096f610fc9ff3a","sha512":"b23e11b3c12778fe8f559140a7ce257a557c673ceaa662fa188d08699f3b601edf4e873426359f09d09c36b80f58c2c3e76b936cd5e12fcddb3b21c0bfa872cc","ssdeep":"","tlshash":"c621e91fe353580b23b49dcb6d1a3e53bf00686d3973a2861c476862e93140c1868348","first_seen":"2025-03-05T19:21:16.067466Z","last_seen":"2026-09-22T20:50:19.777214Z","times_seen":140,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":242,"dns":20,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote.88mph.app/home.html","fqdn":"vote.88mph.app","domain":"88mph.app","tld":"app"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:28.123Z","timestamp":1790109928123,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote.88mph.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 18:02:53 GMT","end":"Fri, 20 Nov 2026 18:02:52 GMT"},"fingerprint":{"sha1":"2C:1C:42:E3:4F:F3:98:78:48:60:12:AD:10:E1:28:AF:10:63:B7:BB","sha256":"06:01:DB:FC:10:A8:60:F4:42:2E:79:3A:80:5A:EC:A4:53:B2:53:AD:9F:D3:EC:1A:BD:C3:C5:D1:BF:A2:5B:43"}}},"request":{"raw":"GET /home.html HTTP/1.1\r\nHost: vote.88mph.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 20:45:28 GMT\r\ncontent-type: text/html\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6620487\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6aaf7b5e-168\"\r\nlast-modified: Sun, 20 Sep 2026 06:21:18 GMT\r\ncdn-storageserver: DE-1142\r\ncdn-fileserver: 1151\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/22/2026 20:44:21\r\ncdn-edgestorageid: 830\r\ncdn-requestid: db6b9905459ff1e0b2bae6b743af164f\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":360,"size_decoded":904,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"19cd5208a408263513ec78df42504f5b","sha1":"f2cfc32fda68fa0151db58b2461a33ac29567cc4","sha256":"32a5b00ecb6cd9770fdfcd9254830d0b387590b69e010f4d7746fd9ee9ca312d","sha512":"af782aa213e8c76b850f2e57c37a5c8877009ffcbb2f9d1296dc5b9fc836eb06ff93238dec37411ab3a3f090494c6343441379507dbb6384e4a65b1ab621dbc8","ssdeep":"","tlshash":"9fe0c0c3699254095036c7a01df1f14c511786a8a3d64d507fff70658b8e79688e35dc","first_seen":"2026-09-22T20:45:22.59998Z","last_seen":"2026-09-22T20:46:18.512248Z","times_seen":2,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":58,"connect":1,"send":0,"wait":3,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/GVqzNswLTwAnCD7CtTZw67VCMbChaqBxjezVsqQAqUzS","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.095Z","timestamp":1790109924095,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /GVqzNswLTwAnCD7CtTZw67VCMbChaqBxjezVsqQAqUzS HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com/GVqzNswLTwAnCD7CtTZw67VCMbChaqBxjezVsqQAqUzS/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427319da94e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/HpG4ABhwNauwmtHUfh2BiLRYzJS5uQfZVSsU9P5dCc8n","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.130Z","timestamp":1790109924130,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /HpG4ABhwNauwmtHUfh2BiLRYzJS5uQfZVSsU9P5dCc8n HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com/HpG4ABhwNauwmtHUfh2BiLRYzJS5uQfZVSsU9P5dCc8n/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731ded74e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com/5GHDNrA7AEgG9NmMQKVL78E5F3oMjEvyd59Ls5SEk6JC/","fqdn":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.453Z","timestamp":1790109924453,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /5GHDNrA7AEgG9NmMQKVL78E5F3oMjEvyd59Ls5SEk6JC/ HTTP/1.1\r\nHost: h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 5GHDNrA7AEgG9NmMQKVL78E5F3oMjEvyd59Ls5SEk6JC\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 402\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dpnxLQDBzm7CbG9uybiQsGUnY00PY8gySWTB3QjmbpAw4W0XfQJxE9bxU3txTQendm8o%2BTtW6yZUMGrooxapjLzmPKU3r%2BGyHZBAIOM13YKjW7uxUw%2BOdu3yuY%2Bi3ipDP0LYIydZtGPzizdCi9PlA%2B2WD2YwORuHCKsfKHtfuKKQHuwa0CXUJd51nlwW5FBixfVswztQbsOAXvLWHv%2BNYFyHf%2FM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f427356eaf56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 402\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":402,"size_decoded":1282,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9c92052674d8ce6f4b8cf7211ec7df17","sha1":"0623973405fbb6a1691b10861c1a344891c1346a","sha256":"289e6b92e606744e74f6fdc9ee5db6f4c936b7686aa9a691f30c16f4968daa4d","sha512":"a48b860972c1070bd39831b8ff9b94e49fef38387aa9d448c0727a7500430cc06b648b00a528e7e14f17fd8b38e4b32fe10c502e05ff4808dce64464f2915a30","ssdeep":"","tlshash":"8ce0f177e5221a69c44177d6b8c1c50a77804aa3f504d702809bce94c3839e2ad054c1","first_seen":"2025-09-09T19:24:39.814892Z","last_seen":"2026-09-22T20:50:19.7885Z","times_seen":42,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":239,"dns":19,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com/GUcEiBVePo1UyG8J3tBaNDDHn3k2isozZHErCoS64QLf/","fqdn":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.477Z","timestamp":1790109924477,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /GUcEiBVePo1UyG8J3tBaNDDHn3k2isozZHErCoS64QLf/ HTTP/1.1\r\nHost: 4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: GUcEiBVePo1UyG8J3tBaNDDHn3k2isozZHErCoS64QLf\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 2526\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s07fTugRVi6qkDrgJK2zA%2Fyv1AtEmMNuU%2BvIXv7bnaUh8%2F0lMgIfdUubN88Whdc%2FqJfXOcYS%2FDhiu%2FcScj5hEYJ4I5eni61kU%2BSjVTyhPqU05AvsCQKgnJ%2FMmE6DMQwz8YwHTd%2B2N5uUBCqEAQEXZnjic6l4uyc14VKLHNrSR7NEJUIow9ZS641pUTeKh0yp4WaF%2BrJDqd3KuXukjGEf77pAFp8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f427347e9b56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2526\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2526,"size_decoded":3414,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"34a4929f26a305bd1a8ea7fc9d0dc5b8","sha1":"b7bcdaee70176b8002e5f8573f97b543ca3afada","sha256":"10685e6d4638ee21f86f918ceb78a3e03eb6d392b6d64a99210e1eaf9341abf3","sha512":"3009b184219cf11e09493a9e0c00c1bf053dd8d6b63e0298126ba7f8f8dab504829f8622644a9771a915fa6d022a1103f70951f7c8797ed71af572c309bdc629","ssdeep":"","tlshash":"3a51396a23df013dd8a07ca3e64184a1ea5687fc3a8d56810f89e81296f60607006bfc","first_seen":"2026-06-11T07:30:29.743241Z","last_seen":"2026-09-23T03:05:35.679735Z","times_seen":242,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":57,"dns":21,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:22.766Z","timestamp":1790109922766,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 22 Sep 2026 20:45:22 GMT\r\ndate: Tue, 22 Sep 2026 20:45:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":1486,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4b1d52c19ccef2398d1de007b3c9a55c","sha1":"c57fa2bcac927a7d60c526cb7ec2b6249019dfe7","sha256":"05f842619ec9f615de0b749034eadaea60e3554d798683fb01ee1eb27abd1e68","sha512":"9dfc4ab3832325eb1438bd85674e15ceb62771b94f06ea8e48a2e286453d571218df3f6727b8df4c1bdfa47218eb5fed0298601da289391a736a76a230d68c3b","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHx:vXuM0p2+g7r","tlshash":"1e427892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T22:54:08.549336Z","last_seen":"2026-09-23T05:49:19.263982Z","times_seen":19304,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":4,"connect":15,"send":0,"wait":37,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.gateway.tenderly.co/","fqdn":"arbitrum.gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:23.127Z","timestamp":1790109923127,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:05:13 GMT","end":"Thu, 12 Nov 2026 17:05:12 GMT"},"fingerprint":{"sha1":"3C:49:6B:54:E6:90:83:A7:6D:1D:85:6C:CE:96:95:BA:4F:5E:55:23","sha256":"0B:F3:1B:F3:1C:34:BF:C5:3C:C4:C5:D7:82:EE:73:AB:76:EB:51:11:1B:89:CD:E6:C6:FA:42:22:5A:3F:7C:AE"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://testdomain23232.top/\r\nOrigin: https://testdomain23232.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Tue, 22 Sep 2026 20:45:23 GMT\r\nx-envoy-upstream-service-time: 0\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":359,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":30,"connect":12,"send":0,"wait":43,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"arbitrum.gateway.tenderly.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/2NjDWqEJ9EGvxgj9wS1oDfh2jWS7mq5KLYvofQx24YXM","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.127Z","timestamp":1790109924127,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /2NjDWqEJ9EGvxgj9wS1oDfh2jWS7mq5KLYvofQx24YXM HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com/2NjDWqEJ9EGvxgj9wS1oDfh2jWS7mq5KLYvofQx24YXM/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731ce714e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com/4wjb3TudcCwb4QiUeXRMGVHnVoozBbvLCZzu92xYgcUx/","fqdn":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.343Z","timestamp":1790109924343,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /4wjb3TudcCwb4QiUeXRMGVHnVoozBbvLCZzu92xYgcUx/ HTTP/1.1\r\nHost: hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 752\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: 4wjb3TudcCwb4QiUeXRMGVHnVoozBbvLCZzu92xYgcUx\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 752\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KnD1wm%2B3IxADrOvyXBZq1fT3%2BDrAe3S8r1r605HZtS4cyG2eUZxsjvcUYGuo09GnTnPG%2F5MTNEvCjlWPF%2B7Vn%2BzvaUYSZ2AQT6Nh%2FEooXQGC7XXO2rWgTIrQ9HW7FcR8J1J3anHmDgq%2BIzyLeOL05w4v6xfOvy75lNQ4MmrIc17kMAktREfDQIs%2BblW5Vu4TxxNUOpO0ZQ%2F0vyxXgqIHZak4I%2Bo%3D\"}]}\r\ncf-ray: a3f42734bff71a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":752,"size_decoded":1616,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"25784e0593a6a7a9ac79b00bc2dd3839","sha1":"e02ec172de34547688e43bbf48d48d1a7db5fcd3","sha256":"8c60306501fc0292d202caa788f781b4c97dd676e858c104e6d0798850570cf5","sha512":"f3b7071ce04331f2791e711de6e7424f14cc20d9e36797c7a361001cd14978c7f959db5cb0d453e865526ba833bf7e4531a9c6c1d4249255dfa320734dc8acd9","ssdeep":"","tlshash":"d6017093302d8182c623a6e91c481853d1b3b40096fcee3846a5baa055e43b12dc34b7","first_seen":"2026-06-11T07:30:29.699613Z","last_seen":"2026-09-22T20:50:19.794595Z","times_seen":34,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":208,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com/9rVKcKYLPvNfTyUKrT2QXE8XwqyHgTdHF5TY6zV8pNSR/","fqdn":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.478Z","timestamp":1790109924478,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /9rVKcKYLPvNfTyUKrT2QXE8XwqyHgTdHF5TY6zV8pNSR/ HTTP/1.1\r\nHost: qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 9rVKcKYLPvNfTyUKrT2QXE8XwqyHgTdHF5TY6zV8pNSR\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1234\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fAp8SzRS8RPyvyM8zqEzYBImA5cSUQwroCirBCk81WdCVBSLH2Lhl6ELbiODiiqsJrWEyzbnENKcAxe6WCoi75sPV%2BmBmgVSEW2S%2FDppZg3aqdwwA2VdxXYE4OH3qC3x0fwwlOPnOWKxqV41QileWJAbsdNAdsTMfCfhx54d8ZpE1mK9dv%2FKfewsYmNrf1njZZF7aBIVy7JlcgV0QTsDTfJsHII%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f427347e9d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1234\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1234,"size_decoded":2108,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b07941a2a35c7c99f9a709f1b10e206e","sha1":"7eeb8bf328d900e1b22b1b8eb07bd5d57de1a871","sha256":"a6a233ae5fe5bbe28f46b8c335d6fb6119818c61c948a8d35b304788002659ed","sha512":"08f3c93e6dc72977cb8c41d78811df5eb3cc3e1fc8e7cbdfa98ab91b03ce8339dd336450134b7090c1ba76015de00292f9e35f978a133f2f52d7ac1bf962c6f9","ssdeep":"","tlshash":"8921b7b1131788519aafaf32d879c59b2f3458393b700464f42c371dd60ce1a6e8a007","first_seen":"2026-06-11T07:30:29.71469Z","last_seen":"2026-09-22T20:50:19.785847Z","times_seen":35,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":57,"dns":21,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com/HTRnUQQDU47XpwWJMzeSSqzX7y5GMLuXnowdYk183S2i/","fqdn":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.353Z","timestamp":1790109924353,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /HTRnUQQDU47XpwWJMzeSSqzX7y5GMLuXnowdYk183S2i/ HTTP/1.1\r\nHost: 6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1446\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: HTRnUQQDU47XpwWJMzeSSqzX7y5GMLuXnowdYk183S2i\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1446\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ui0WK0vKWZV%2BWRY7z16ZBbupk23cywvuy4Zz8L97YMVoysf%2FpE%2FulTjeCIp9PZ%2BZpMyfzy4aY5Ej1wiGPjjyovTxXtV%2B4wDUiPlpPnE%2Fo5WsTqVuB%2BLkFV1IM4r9r1qbrro1VhRSMvqbMMr25li87MJnjbZRswdE%2BOLZJyhT3S9UC%2BtzpaiQ%2BDO8NnpMgID1zAzZ7AD0UbpgAiiLFVXi4JBLEr8%3D\"}]}\r\ncf-ray: a3f42734afc51a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1446,"size_decoded":2312,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2611650f3bf1d59e660eb3dbcdb14f1b","sha1":"d20eafa0b7a6cf800ef1fc2f181534a83db5cf9a","sha256":"2aca745d61a88a9a898b8fcd91bee3c3dc36d338a8bc41f9f90de924fe1f62a3","sha512":"a0e218a3731b072d1fa74c67dc477ef003bc0c281823933a45bbc0fb87b91ebd587241df9fb0dfa541a72d96bfa4b8bc348f2d4765c2a67fba2564e27d630b6a","ssdeep":"","tlshash":"c731e91f12de9361a2bcca837b50e48c73d3541f740a7a64a56053807702159a669e02","first_seen":"2025-03-05T19:21:16.060703Z","last_seen":"2026-09-22T20:50:19.769252Z","times_seen":168,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":196,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/HeB3Cq7j5UgGvECfes722J2hB6d3zFNAX8qrtvdaebbj","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.055Z","timestamp":1790109924055,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /HeB3Cq7j5UgGvECfes722J2hB6d3zFNAX8qrtvdaebbj HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com/HeB3Cq7j5UgGvECfes722J2hB6d3zFNAX8qrtvdaebbj/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427316ce64e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/tNjir8swBoPJcDaSUy49m7YW8n9rjjUNZzKpeJzjGhC","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.086Z","timestamp":1790109924086,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /tNjir8swBoPJcDaSUy49m7YW8n9rjjUNZzKpeJzjGhC HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com/tNjir8swBoPJcDaSUy49m7YW8n9rjjUNZzKpeJzjGhC/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427318d694e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/4D9JvTbpqf8it29ZeG4AkLd9PUPhpwWH7MzH8bjqcE8a","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.091Z","timestamp":1790109924091,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /4D9JvTbpqf8it29ZeG4AkLd9PUPhpwWH7MzH8bjqcE8a HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com/4D9JvTbpqf8it29ZeG4AkLd9PUPhpwWH7MzH8bjqcE8a/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427319d8f4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/12PdhtpXedXaMXrbokFcSkznJ5dABUVrBGffsHKjVWbN","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.129Z","timestamp":1790109924129,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /12PdhtpXedXaMXrbokFcSkznJ5dABUVrBGffsHKjVWbN HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com/12PdhtpXedXaMXrbokFcSkznJ5dABUVrBGffsHKjVWbN/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731decf4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.279Z","timestamp":1790109924279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /disable-devtool@0.3.9/es2022/disable-devtool.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://testdomain23232.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/disable-devtool\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 21 Nov 2025 02:57:18 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 355331\r\ncf-ray: a3f42732cd6756ba-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18401,"size_decoded":8526,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14919)","md5":"6f134aa0a4c14df6fe081e2a6643f4bf","sha1":"61989a9857651a3e6e67a4f56bd65a0ac61e1faf","sha256":"f24cb4d56e23c43c0f5927a4ab308c23741e40fbb13e3996e3c42679982559a9","sha512":"b2b21f9c85678b62e77b009768a4ce7fcd1332410817c76f1fc8bff5595edf99fa48b353886413d0952504c7d1629fd4983751c8361bff9edf79d5bec6db839f","ssdeep":"384:XTkAes3CkB0YatnIE3EmI/N62D7LI2fU6HFvQxCN:P3Ck5ibEPt7bU6lvECN","tlshash":"b982c5dcf55770706bb2b9b4403f450ab2367856908c8440e669c8e06eb856fe27bf3e","first_seen":"2026-05-26T18:42:46.16671Z","last_seen":"2026-09-22T20:50:19.801112Z","times_seen":122,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:22.889Z","timestamp":1790109922889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://testdomain23232.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 103806\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-23T05:49:19.265693Z","times_seen":295730,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":3,"connect":31,"send":0,"wait":18,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:22.899Z","timestamp":1790109922899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://testdomain23232.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 103806\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-23T05:49:19.265693Z","times_seen":295730,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":20,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinky-goat.digital/g2t0siNXwZrp3P1qccRfr.js","fqdn":"pinky-goat.digital","domain":"pinky-goat.digital","tld":"digital"},"ip":{"addr":"104.21.17.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:23.294Z","timestamp":1790109923294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinky-goat.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 04:58:28 GMT","end":"Mon, 26 Oct 2026 05:57:16 GMT"},"fingerprint":{"sha1":"4C:97:93:44:24:0D:2B:4D:5F:33:84:08:44:C5:BA:8B:98:D5:8B:8F","sha256":"01:0B:52:1B:F5:E6:D5:44:CD:5E:0B:D9:F6:54:1E:36:3D:60:96:7C:68:8E:60:00:B9:46:46:FF:4A:94:82:85"}}},"request":{"raw":"GET /g2t0siNXwZrp3P1qccRfr.js HTTP/1.1\r\nHost: pinky-goat.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://testdomain23232.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript;charset=utf-8\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 22 Sep 2026 00:01:13 GMT\r\ndate: Tue, 22 Sep 2026 20:45:23 GMT\r\nserver: cloudflare\r\netag: W/\"614c2d320f53e5620f0782922034369c\"\r\nage: 68\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DQwU48CAY1kBdZK4%2BSwT282usVqHBkGk%2FpiYQ3J58G%2B3z%2FkhtBggmC9yGtTVKRiAoz0y47U16nqfVDh%2FiMtHF%2Bp5uAFUBh0bQhXHklBEIPiz%2F2ES5By5xq9hBVaEKZLs0J9NECE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-methods: GET\r\ncf-ray: a3f4272cbe63783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5204547,"size_decoded":917299,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19575)","md5":"b26ce7005eaab16e76b1395a0644d1af","sha1":"8e9a96ae055b80aa5f1753197593be354f8cd8e7","sha256":"336bc3c18d5a14c6e6b15a2d34fe5063ce86303a93a12ea8c52f27e60ff18f80","sha512":"c6206a6b7560d6cd777193ed4cec03577de89b355ac87d802bf8bbc580754a527de0c66c1c8e60c4eac9414f7b87060077e9f8cb91f4d0bf6c89cf28a687d44e","ssdeep":"12288:1vBqhYuPRgTUZYGhc5QjwRWLjbIsSCu8RYs9:xwhYEEUZYG+owABRYg","tlshash":"ad357d67b360b46253af52914827240af279ec9c5809403df7baecfa7c658c4b276f35","first_seen":"2026-09-22T20:45:57.546613Z","last_seen":"2026-09-22T20:46:18.516979Z","times_seen":2,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":6,"connect":14,"send":0,"wait":27,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"pinky-goat.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/4wjb3TudcCwb4QiUeXRMGVHnVoozBbvLCZzu92xYgcUx","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.085Z","timestamp":1790109924085,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /4wjb3TudcCwb4QiUeXRMGVHnVoozBbvLCZzu92xYgcUx HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com/4wjb3TudcCwb4QiUeXRMGVHnVoozBbvLCZzu92xYgcUx/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427318d634e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/7MQuBTrRdm5iYhmrHxm5x4SbttL9dZTrssQBRhuxrYEg","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.096Z","timestamp":1790109924096,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /7MQuBTrRdm5iYhmrHxm5x4SbttL9dZTrssQBRhuxrYEg HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com/7MQuBTrRdm5iYhmrHxm5x4SbttL9dZTrssQBRhuxrYEg/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f427319dae4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/8JR7J4bybYjEWs8Ep7tqRFEpqwftdhxQghx2a5EQUaCr","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.104Z","timestamp":1790109924104,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /8JR7J4bybYjEWs8Ep7tqRFEpqwftdhxQghx2a5EQUaCr HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://testdomain23232.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-length: 0\r\nlocation: https://nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com/8JR7J4bybYjEWs8Ep7tqRFEpqwftdhxQghx2a5EQUaCr/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a3f42731addb4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com/6Txn2Htb2ZZS6c5kQnF6q6P8YraMrEyZwCs1fuJs85ku/","fqdn":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testdomain23232.top/","date":"2026-09-22T20:45:24.304Z","timestamp":1790109924304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /6Txn2Htb2ZZS6c5kQnF6q6P8YraMrEyZwCs1fuJs85ku/ HTTP/1.1\r\nHost: kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://testdomain23232.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:45:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 6Txn2Htb2ZZS6c5kQnF6q6P8YraMrEyZwCs1fuJs85ku\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1036\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MkH8CzCSUDJO%2BjtxI5Bk32WbPEJPx6yLXzHcg%2BeGXlSEH3om13lagq7WhHlzt7rVCkgfqvax79ea89V5dtveSZRSa2FNjEAK0x%2FCApGdmUJiN9VGJyIIwJwdtuHLW5CP8Pxx8QVAtGes3D0%2BPnNY4YPGbINMlJ8zRfarPjd24Cwc99UiZkEOWYK6VOgVQUxkKrZERGpAxA%2FpCi%2FEH2x%2F9rNLDPc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f427334e6c56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1036\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1036,"size_decoded":1918,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"92030d96c1392aa396821eed37e18820","sha1":"e6f1203de3f4bb6673a687e11bcfc904c575f54e","sha256":"99d1969405be9e05042fbcdff942b23117f1cb439fef2e1f0d55e0b55667fb79","sha512":"c91e71d3148ebe6dbc6fd9da525cc781da7137f103b0964e53374a7be46720093e220b9db3f05063966c8a171de33c2a31575f2657918ed8c96395fc77d7b832","ssdeep":"","tlshash":"bb11a8e611570b07e38dfb82516c871194fcb31a645a48fb6e5131ac567e705464135d","first_seen":"2025-10-03T06:22:13.525754Z","last_seen":"2026-09-23T01:19:48.631605Z","times_seen":3937,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":4,"connect":48,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}