{"report_id":"376ed0a2-2afb-4a4c-a079-9173c20ea84f","version":0,"status":"done","tags":[],"date":"2026-09-04T15:41:01Z","url":{"schema":"http","addr":"bitutility-onsend.xyz/","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"title":"bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","dom":{"size":1072,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"819c674244dd857366c40e96cfb4bec5","sha1":"614607ddab9167528bbc8af4b65eb32424845655","sha256":"67f5b7ee7a058c47e937ce5490c479ead2d6e1d0c46ec1cc8114f446df437cb0","sha512":"48bfcaa0b03aa892a2656a2253d82c2426fb6c2497b433ecfa06f59233e0cd59a177b7630ed8302fd4ad6b5003bcb38c9e79bb14ed77e9a95600c8a387d52e96","ssdeep":"","tlshash":"fc11dd451e57007159b39ac63f5f7e05a7a692464080c5003ffae2a7af63e5bc805ac4","dom_hash":"domhash4d400da6ec91aed48a4164dd3ff7ce9e","first_seen":"2026-08-28T13:11:59.733956Z","last_seen":"2026-09-04T15:41:26.045136Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bitutility-onsend.xyz/","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-09T15:41:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"zen.claims","ip":{"addr":"172.67.218.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-05T10:30:02.141035Z","last_seen":"2026-08-31T11:00:40.25586Z","alert_count":12,"request_count":6,"received_data":1053473,"sent_data":3292,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bitutility-onsend.xyz","ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-27","domain_rank":0,"first_seen":"2026-09-04T15:41:09.418667Z","last_seen":"2026-09-04T15:41:09.418667Z","alert_count":40,"request_count":40,"received_data":3433855,"sent_data":22189,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"explorer-api.walletconnect.com","ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":466611,"first_seen":"2022-10-10T18:16:28Z","last_seen":"2026-09-01T07:14:26.436393Z","alert_count":0,"request_count":7,"received_data":1219392,"sent_data":3990,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"esm.sh","ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-06","domain_rank":47501,"first_seen":"2020-09-23T23:39:41Z","last_seen":"2026-09-01T02:34:25.557265Z","alert_count":0,"request_count":7,"received_data":1101681,"sent_data":3676,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bitutility.onsend.xyz","ip":{"addr":"18.215.77.212","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2026-05-26","domain_rank":0,"first_seen":"2026-08-21T18:48:37.758659Z","last_seen":"2026-08-21T18:48:37.758659Z","alert_count":0,"request_count":1,"received_data":5342,"sent_data":551,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bsc-rpc.publicnode.com","ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":2142410,"first_seen":"2024-05-08T23:22:55Z","last_seen":"2026-09-01T19:48:59.144648Z","alert_count":0,"request_count":2,"received_data":1355,"sent_data":1095,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"relay.walletconnect.org","ip":{"addr":"63.188.8.254","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2018-03-26","domain_rank":444044,"first_seen":"2021-02-22T09:38:04Z","last_seen":"2026-08-31T11:06:58.001458Z","alert_count":0,"request_count":1,"received_data":166,"sent_data":1141,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"ones-pursue-foo-eau.trycloudflare.com","ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-07-07","domain_rank":0,"first_seen":"2026-09-04T15:41:09.428914Z","last_seen":"2026-09-04T15:41:09.428914Z","alert_count":0,"request_count":2,"received_data":51578,"sent_data":1416,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/7690-54bee64dd859a26f.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4634133512e46c891ff3dab6f7dabf0","sha1":"bdbd2b7f3849c5472b7c8ceb3ffd8e97ff871e24","sha256":"06883ad2ed5c7b41c7257570bcb4734e1d9a5c5df658dee35656301cd35c733a","sha512":"cbf18156cb144cc020f28224f81a146a1ff5b43f6742b424a2883909a430519d18104e42eca6cd392d80c5bf3b87cd7ac1bde12f9033620e2699240147e42413","ssdeep":"384:T6dl2B82WoNZKe97HzRMiaZzZE6idCtmccyL4EOiZLj/torarmBVMAk+VLBzZ9:Til2xWoNZKepzRMVZzZEQbUEFZLj/toF","tlshash":"2a720ed9b183f3592d7fd065006a2fbd53b605d78ce988fb84394da5341cdac8632ea8","size":16937,"data":"","first_seen":"2026-09-04T15:41:26.176002Z","last_seen":"2026-09-04T15:41:26.176002Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/6740-0a68ab0750dd3c26.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a62d01ce2b975d8cd8684908ed93ce1","sha1":"ef8e9e2954981e1e84ea8c238affe25fbd724642","sha256":"02d0a70c8bc1d493303f7d8331ff47df1d499baf2ce5a05fb14a2bc1b9e971f0","sha512":"2c46ccedabb9c0af71854415d9121f6ac039feba8d2d1647710d703cec9478f3f60e10f204d0d9f8394a1e691310ce4b1191cdf528a2633a3deb63f4e32f3048","ssdeep":"384:rDgKkF6tmMXYaB720gGp8c6EEOR3SrX7PQr5vfoeJ7Uf8:vgKPo0HsOlqXkrBS8","tlshash":"c482d7de77c1b0b6579a8259942f1309e3ba0265310b4840f16dd8e7fd706ab84e3f79","size":18237,"data":"","first_seen":"2026-09-04T15:41:26.062638Z","last_seen":"2026-09-04T15:41:26.062638Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/app/(public)/layout-755da2d726e5b9ff.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"acfd122653dd9bca4624402e41dd7371","sha1":"7142b3922ac1d9622c6f2ee844f7fb6b53422568","sha256":"441de52469d492833d688b2c82c937cae58a41299a6a7f5abbbabf4b955aab67","sha512":"ea005835fd5ce0e5842d749638aabb51ed3a5436cce197a69075d05a317019b45269995bd8a85f1cc6a6984df7132063c3f31e6a60d406cbfd1e54fa2f653bc9","ssdeep":"384:ik/jL1ELYvo4bSTgElDCe5qNQEV5oD3Ate3TUto/6p5gC4AKpjhW0a+XPJh/E:ik/Lo4bSTxl/56QEoEc34+6AJpjhWCRe","tlshash":"98d2c716b289fded665b0decb2af940c711f1b24c90f0d65f2b8b8911467188b623fc9","size":29976,"data":"","first_seen":"2026-09-04T15:41:26.141875Z","last_seen":"2026-09-04T15:41:26.141875Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/app/(public)/page-a262204d982b4431.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"27668d1eabc371a08c3fc89100916c99","sha1":"a31a0b5a950023a38f0a9c483935ddcb04f7868e","sha256":"c28e52ee9851e2eb25c00219a87f5520a727636a69792e411aff4873adf18fe5","sha512":"73f3ccac137e417311071021cee54f86967888b2959b6d0baa4530d48abf66a1d0b6155d053780ac95c43c8bf3f11ba514ca76dc156c15cc63445101335baca3","ssdeep":"1536:btEwOR/GN8ne8LSPHGXM5SQ3kii4/48Y4bEFoSoDjZF4Agp4zZtPKcpSuJs59Ded:hEwOR/GNYe8ePH+M5THru4bEFoSoHZo0","tlshash":"0e939485e356bfacb42b4ce9e65fa40cb12f0f58df6a48a4b4b8a41015194e47727bcc","size":91553,"data":"","first_seen":"2026-09-04T15:41:26.188706Z","last_seen":"2026-09-04T15:41:26.188706Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ones-pursue-foo-eau.trycloudflare.com/assets/index-f2H8W9Sl.js","fqdn":"ones-pursue-foo-eau.trycloudflare.com","domain":"ones-pursue-foo-eau.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0878a59877e35ea9a46f94d9fabb03dc","sha1":"ee4065b3586fb2375b435be5e09ed03acee35abb","sha256":"59c7d2596b774438e6ad0f36d20c2ee4ad54953654a14a5616c5ad8b66ba0615","sha512":"11b8567cb4d138528f5e19482b11bf1332242b43a717ae4e5f069e54f905a337577922dc148dc786704785ca525fa1ab0e2bd33a6b622a570d388750904a724a","ssdeep":"768:hEmJ9uKRXOIhP0ioZxtL+2OeN8e+pMNKbmWQZTiqsuA2hJf8NCu2Ct:hEmiI6vNpOPQB9FLEJ2Ct","tlshash":"cd23e1e5643102390674ab70395a0acdf9748ba659ecdb4ed152c0a4ebe539f08efe70","size":49971,"data":"","first_seen":"2026-08-31T08:03:52.525654Z","last_seen":"2026-09-04T15:41:26.1552Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-09-04T18:12:39.372665Z","times_seen":104579,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1128e009949b83a1408507d097c91da6","sha1":"591116630b19cc9d43d6796b5fe55fdfb5e2c50d","sha256":"2278593f9c1c9605fcc8b241282a296d61f9ed9ae99c8c14dc0e2710fa86b5bf","sha512":"8aba19e4c9bda1cd97f52286e66945c65a47d45e813c8a097bc6ef2f0dc20c2ee3b61b9dc0c9b30d950ecef1dcea2aa18303263ff0899fd0f590ef2db6e0d433","ssdeep":"","tlshash":"c1c012ace801e8aa8020082a042a0e00d0ecce4d8388cc8862a8ca9a9240c788386e88","size":164,"data":"","first_seen":"2026-09-04T15:41:26.210577Z","last_seen":"2026-09-04T15:41:26.210577Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"408f9f5ebaef88758bca73b0879da64f","sha1":"8adc47e2f2e0c618fda5428b18a5a45c3e2ce8e2","sha256":"15eaaf220bfba8bd68734f14bdfe7315a7d6dcef83cd3d666801977b40e74e5d","sha512":"290e06c48ad2aab3d157df13823f7e7b5711a5d75f190015d9bea927711d90cd3c74a4af4356175b9ac05cc4562f8051055759877e00e265031cfcfaaa992c1f","ssdeep":"","tlshash":"3441e32e4901de87a86e2d69427e5c7b68cd8d7f0720daf8818ecf481b1547917dedc1","size":2093,"data":"","first_seen":"2026-09-04T15:41:26.213576Z","last_seen":"2026-09-04T15:41:26.213576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0d92505907c0ba01c72864b88a6303ff","sha1":"d9c1438d890e19fd8eba01f34523cf2549d57aba","sha256":"418f4e12f7a418f53ddeb6bb62c720a8074611532e91931c43d149a40cf9d3f6","sha512":"4a81fa94a533d8b2c237139da308b13c2a28eeb427e5aea40b49fb9e0a7238d44e39c1d43949de601062253abd9b3554a203985c05bcedb4bef383cb0cb06b88","ssdeep":"","tlshash":"6341781f2115f1102ef6ce6b467b5f6bc098c9331639c168e9ade87b404953f836c966","size":2247,"data":"","first_seen":"2026-09-04T15:41:26.217081Z","last_seen":"2026-09-04T15:41:26.217081Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"501bf36246d2a53deab0959f3355c9f0","sha1":"b01e5a98d52672e80fa94328a91eb91db9024c2d","sha256":"17bc58a2260e610f27e1544b5b1e9c5472ba7e2575d4c4e967ceda96ce5e4a74","sha512":"8d5f33d82e4d3d75ed81ce34c5e59d7699f24e0d746923b016a8aaaa3c5c4f8553314222b24e97a39657eb4590e3e06f439e9c5ea20d673c2003834a352484f3","ssdeep":"","tlshash":"3441cd1f2105f1217eb6ce6b467b1eabc088dd32173cd1a8a59ce8bb405493f936c927","size":2242,"data":"","first_seen":"2026-09-04T15:41:26.222006Z","last_seen":"2026-09-04T15:41:26.222006Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"da032989479bacb0991d924d6b62d3f1","sha1":"080c7de21b1d6c0dc2b4f9460ba01ab13c45607e","sha256":"a3d2feb99213f3334cc068517f68577b5062566b7e768a368826a162ac777bdf","sha512":"688c44d0380d40cfe4333d2226b681fe446c093a288b54be6ed84fd076b4f1b8bc6dc1a43ad7bcf634d09d374d142946bd32825e85ece0a113aee18f4a4f7c04","ssdeep":"","tlshash":"2c41cc2f2115f0113ef6ce6b467b1f2bc198cd33063d9168e96de8bb404553b832c866","size":2037,"data":"","first_seen":"2026-09-04T15:41:26.229483Z","last_seen":"2026-09-04T15:41:26.229483Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"312a6afa69457cef571fe0ab1d3f6da6","sha1":"0ba15a9f0be86965ccba63a776682bcb920ef699","sha256":"8e646201c94c892a638071924051c65619e032570c83a81e386b29b431986c9a","sha512":"9a607643a471a02bb4f69f2d25903ff2c078701cafbe91e3fcf76356842b63c35bdaf91fb5d33774066f66390990285678956de8cd90647a889d36178e29ba05","ssdeep":"","tlshash":"7651df6e6405da5aed7f3c7d057d6c34104dd86742a28fa9c2eedb3012c283aa7a2dc0","size":2789,"data":"","first_seen":"2026-09-04T15:41:26.23505Z","last_seen":"2026-09-04T15:41:26.23505Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"37762e7ab55578031173a824b0d7ff39","sha1":"ac8fabac65604626793bcd69ff249e24ea863134","sha256":"8bec89155ad0b4b0beb6a85253f63fc5ad86663331b462e0611e17ffca4c0eb7","sha512":"aeb0eb53bf9efa695cbc5e482be8f58fd5e7787163ebefbc688b1296071334419f969419b239a833d849c03d4dd5031ce64db8e9f4d2dd5ed7f6073a75399963","ssdeep":"","tlshash":"ea41f1b56805ee8eec8e3d2e187fac3510ccc61a4256debec199ce2506434395b97ec0","size":2342,"data":"","first_seen":"2026-09-04T15:41:26.238033Z","last_seen":"2026-09-04T15:41:26.238033Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad638f0fcf66136032cc5da6620b8334","sha1":"7b6c61c6c2d20d8b0aa702bf3f5c5423cf21d2cd","sha256":"788cd7f8a5c02f45067c6a8160c752ec76024935ab98314101b300a5998ab7ec","sha512":"a684ad8e433afb4ed37640d8ca8d600c78d77506552c7de4d466690b4279e97f5e7281872b9494ea20aef44e282e415976c0788211d9ac7c07da89cb76c306d7","ssdeep":"","tlshash":"50317af2fe10cd01dbc95d0a58373da430dc83e3c2daa55ba1a9c6285193eb659f8961","size":1523,"data":"","first_seen":"2026-09-04T15:41:26.241115Z","last_seen":"2026-09-04T15:41:26.241115Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ecf9f5176155bc1d569ebc4517456978","sha1":"a5a435c3eeaf73dfe4abb4fd4e2b1dcc726e09d7","sha256":"0c23b0ca6df880ae283dafb9a7255132b2ea070b2ee00cebe0c78836176c70cf","sha512":"611d07ccefd7005bf74a4b91fb3f6bd892ba21ff01a7390bba32c2e7bc908c6c3238466dccf0060508cbfa1c10b9cd4bde05d8cb15781700a055b2b7985345a6","ssdeep":"","tlshash":"b321972e3004f6087ca79e2b257f6e7b808cc97b463aca74d19ced7a420543ed328d81","size":1246,"data":"","first_seen":"2026-09-04T15:41:26.24529Z","last_seen":"2026-09-04T15:41:26.24529Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/3154-f182769f997cc32c.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8506fe399cb5c6f24388489995e6eaa0","sha1":"b297ea92d52e11c0d58f1048c4c1e6b9f75ac516","sha256":"32a6d350a22e81720bafbddd5adf7be596ee86bbbcd9febe56bf487e32e2490e","sha512":"b260a5d706b161c0005eeae413b817ec6b0cecbb9e0113a07bdf63ed6f2e95a11f742944c25ff03dd9a4b57c8abb846378a24e63c01c84cc96d7f8ebe228d59b","ssdeep":"96:obDv9GC5HHfJTmnd2Mz5RqqHdCBqxe7tDqotqZQQJs19GCvinGbZJm5f25WeD9Gj:GDEYxTmnd2cNdCDRDjfQ7DkJyO5Wjj","tlshash":"a7c1c56731c1f893c2ab5295c0738019327a1d3f241f7528a3f68cf962f455ea592f4b","size":5757,"data":"","first_seen":"2026-08-21T18:48:43.623354Z","last_seen":"2026-09-04T15:41:26.151763Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/events.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"acd05dc333042e32473eb39c7700cc9b","sha1":"a9ff738706c3e6ab2be579d296faecd67e438f47","sha256":"4c6150b88c1444aa1fe9331013e3f37eda9836206f629f7f3ae8f3743dd90fa8","sha512":"658a1eebb2727249df13bfd7f76d1bd38921ebc2dff63b8c1bf779973bd10483b7138649e7168a1ea7305c88542876be92a52b1da915331806436b0455f9a6a5","ssdeep":"96:yIJAOQoXa9RQ9bKVXQ6Z9cBBEMPg19H+MyLfLYCGZjiSl1YYS/07jfofxSXR261G:yyiZInEGaGLYCKt70WRRD7EE00WZ","tlshash":"404286ccb386b87113def3af707b4146f23459e0685c0408ba75fcf6292a98995a6f71","size":12122,"data":"","first_seen":"2025-10-29T19:17:04.387887Z","last_seen":"2026-09-04T15:41:26.126433Z","times_seen":793,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/main-app-5d9c4ca763e929d4.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac54ea71d4091a7824d1d151420857d3","sha1":"57a0edfb56a5d2ffcab43b6344379000677ce1dd","sha256":"585994e2b49b0bd0075a01a7eb928132ded44a19487d8bbb7602d2043946bdb5","sha512":"22aa055c4cbcac4d9cf8f97fa53872b2ad2e3b3d2495e1d99eaad652d9cd45454d19488e40e2d8089f73101c9ea90a9ff2d0921e1d44dec9292de10bb16a5d10","ssdeep":"","tlshash":"2421dfc81378a50e611927b8f8675c2734694177245f4a60a13cceae3c33b6883a5a7b","size":1297,"data":"","first_seen":"2026-09-04T15:41:26.160454Z","last_seen":"2026-09-04T15:41:26.160454Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/journey/8e016ed943.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c9bc05aa4724fc556143a6d72a6fd46","sha1":"dcf2230d1e5ce31e8ed96d37c2bcaccb95e20a86","sha256":"40a8ce826e6975df80579fb93d01d7db7f95f913f9b0550f567a5db8ea817501","sha512":"9151eb5f3df5ceb4629b2991a4839e71625df584f56689e38a4c178784153316d63a9eeb4158a18316bb7646dd9650fa9fe38403f20dbc47685822a1e8f2a774","ssdeep":"96:HVs3lNKmAkfEuCJbvz7Ef4N1CNdRR/H0WCHzIy2wiIlyKvUL5/3ABTw:HVQlNAkfEuCJbQNdRhUWCHUdwiIlyYsh","tlshash":"f7b12f802d80b6440bba6b6b660a74dcf55e544e6d91480be60079d07e6d6bacbc3e70","size":5335,"data":"","first_seen":"2026-09-04T15:41:26.119609Z","last_seen":"2026-09-04T15:41:26.119609Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/1509-7811d573abbe925d.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33707ceb6378b81f8aac886beb19a421","sha1":"e8028a11487857a935956e0698dc902a5836568d","sha256":"b59e3cfe846a033775f4b5d79db13177bb949956bacad5621c20bdbf5b293a17","sha512":"c579e91097c088529e70890ba832cf04bfecf554afeec2e9ec8011af3d9adc7b959a88ecf1dc0f997ed08623d277e60edbc4eee28b094274027fc2c3306fcc27","ssdeep":"192:SlSDf49rQ0GVUOTEdEV+tzPxihAgLkXpXsry7kiSfT:SYz41QPH+w+pxihQ9sry7BwT","tlshash":"1c32a6863560f21d337b81bcd0ab370453d61aae65a60ec7837f20f534a082d8a73f99","size":11011,"data":"","first_seen":"2026-09-04T15:41:26.185011Z","last_seen":"2026-09-04T15:41:26.185011Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/90232170-209e8fb31562f0f2.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"38ace24bfdb14a50a988a4a661f588c8","sha1":"acc32fb807094018501bc62826d78c54c9cc6aab","sha256":"0a36e28c4a90cf1e9263348d728715e9a5c6bc0d294ff4c1efe64d440184d1e4","sha512":"c0178c66a2d6d86cc409577f9099a683c8de3261ea8c993e7e54a95706e8b22399254912dd34f6ec4492f4c20ab6ffdc3c252f5349dceaa35de63fe33cc3e144","ssdeep":"1536:lbjE9HzUgtJh6U1s1NeAh9BgDDOmYZlEbXR5PQAYxbU1RSs02ObI/HFVwLBCcuG0:6zUgl9uxhMDKTjYmood2OMbWluGOx","tlshash":"5d04f8e83955f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfda","size":173180,"data":"","first_seen":"2026-08-21T18:48:43.606259Z","last_seen":"2026-09-04T15:41:26.114615Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/1126-85ebce850ff31353.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"435381d675c6d2d4699a74a6a6b22d51","sha1":"536903c636fbe703804131a22708d947e034269a","sha256":"bf0797ff95eab72744e046cd40ba5e1e714b89e84a5d655b362c7ad145e6ef21","sha512":"0ace2c40077b8c73db0de7bed08f7b495b02d9c38254e3bf1b1b08eca3d2cb471dc0095ea4224c28e96cffb83f63d7d5687ad5d25735fb3af49c1e2d015174ef","ssdeep":"3072:W2mmVi0D7BqttUNtFXfK/QpSiu8PtKTtIOwzFHv1kyVL0Qth:Ji0D7BqTUNtFXoUSiul+9FP1kELtH","tlshash":"1764e8ff72d1b4b3879742a1803b0006f3798caa341e5054b369ceda7d6159fa1b2f69","size":328581,"data":"","first_seen":"2026-08-21T18:48:43.608053Z","last_seen":"2026-09-04T15:41:26.060469Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/process.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f8382a3858672b98c93fd61c13d21c2c","sha1":"07e4611887908eb9326935084618e4964fb84550","sha256":"79e7646e87709989f575ea4ce02e0877bc9303081567b1c0d412527917ae9e91","sha512":"a1609e8e33a2b7369169fe7dc1f9fd187c4b431e9c7428e4c3929587bff4701d937b8df219b3dfa2bdc3f6b38f63afecc0d9025a6ec8901d91a5e123179ca5cf","ssdeep":"192:kFmwaFSK/rVyQhxkSULErvtAAQic6NR03ao8Yk33q:5wzEr8irU8Yk3a","tlshash":"a2f1d7dce29a743302c1eadaf0bb0123eaf407c855245650ea0bdcc736219e5a5b1f75","size":7861,"data":"","first_seen":"2025-10-29T19:17:04.329787Z","last_seen":"2026-09-04T15:41:26.204518Z","times_seen":790,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/tty.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dc159c105e1b73c18cfd63a84cc154ec","sha1":"347664300100736360aeda59495f5017a852a81f","sha256":"c66ff4b406bad449bfb2ced355f15badf16f4d9e035d2d300e33b5aeee64e3be","sha512":"96f99c368bef6857a0e9006efdc8ac0585af1bca468adb103b0c626ff5cada09eefeb07b317d6be3e71915f8c1a1412d4927fb743e4ed59e54c6e82af1b9d50a","ssdeep":"","tlshash":"cf01fef930f7b57246bb047444728a07f388e8f0b49ec4a0ba6599b43c655ced131676","size":685,"data":"","first_seen":"2025-10-29T19:17:04.320253Z","last_seen":"2026-09-04T15:41:26.194787Z","times_seen":783,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"362ca438ae65cfc912b7a743a781ce7b","sha1":"8bd96bb53323eab2db38be0eb2b408ddf2b95b17","sha256":"06449c96378758359a50cc186e8017a20143e74a7dc5b57efaef3ea2c88f5017","sha512":"0ae63ee9d428f583c852ea0456d74d0a9cc5ce6341734c041ee00d5236c364738ca7fe0397c3e3818a86875cd48a7eba3419174a679258ba4bc4ab3f3ac97f04","ssdeep":"24576:fpISZZVokQyZ74ejf2kwwwCbUef690riXt2s0Fj6+6:RISZyyZ74ejf2kwwwCbpf690riXt70FY","tlshash":"9c256c907361b47a539b82a898ab0500f3395859500d802cfbecd9ebef949d9c5bff71","size":1046087,"data":"","first_seen":"2026-08-03T07:57:51.324381Z","last_seen":"2026-09-04T15:41:26.147803Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/9966-1d8e4ee8de7ab19f.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfa081086a7c15b4558e92c084846812","sha1":"247ed73e18ecce02a4a312ef3b196c15f6e3ac5f","sha256":"201e8ea1bc57b98e676cedb78a77bf2febfc10e9966bac29346e3753ff8279a7","sha512":"63502787800624ba56bb60f77e38ef783407fe8e83c4fdc528fb357c9a25a3ba5cf2b23fdd5bfffbd83d43923e8607f0cbc114efd10d6dc27e0d3c4d79d10a7b","ssdeep":"768:pvuKKgRtfPfsf6YZ0Bum3EZ6r3wZFHsMyF8XHZ0cMI8LZ:pttHEztg8jsMy0HbkZ","tlshash":"1013d78db1c27eacb92b89acb66fa00db11f1b94dd1f0da4f4bd945528450d4b623fc8","size":44807,"data":"","first_seen":"2026-09-04T15:41:26.164749Z","last_seen":"2026-09-04T15:41:26.164749Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/9620-1a59e9d2cde559f2.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b53eed4d6997176663e2911cc82f06c","sha1":"e627530668b4955bc8bb5387e81c69160c5f1541","sha256":"1b5d5db1c8531cca67784abc3ab699b621c9120f07498992aa3eb270fec48701","sha512":"a540b0edd36b93277d2ab317483e6b483e71a468b8e6d1b2d2b97c2d647c42b9c094f0c0ca56cc9ac3f7eb9d658fc07a0e866e65f0d424d3b201aa8683d137e2","ssdeep":"6144:gLKZA89VL+nuaf4WqVRN+S/1BJAieayT36:+K39VL0uaUNbJ9eaym","tlshash":"cf844cd67291b034c3df81a6c06f0619b33e6a99240d4428f63d9ccb7960699a2f7f7d","size":381221,"data":"","first_seen":"2026-08-21T18:48:43.636708Z","last_seen":"2026-09-04T15:41:26.10189Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dbf4619ad7b512b69fc1d0c4a11588f8","sha1":"6d07eb129ea86e34822445973f0173305275281d","sha256":"0f16ccd2e833d68a7d564ab6ed7327f2485ac8c79f8baff848d24b43ba2da23f","sha512":"d73c5aa2dfef461536a72a94ee4599ea71607dbedcd1be8e97883dde56a4a7bb190e1dedbcbd823939fca1218594e87ffcbf689f639588ec2259b546b67b366e","ssdeep":"192:5sYrNvxO6LzTMjvBS33x7LbgrQj8kIjpuai/:5lrBxO6LiA3xHbgrzi/","tlshash":"bbf124237192b14f01c6077e3a1a67e6d4a6c94ad94ac40af748dee874ecda37b1c1f0","size":7836,"data":"","first_seen":"2026-09-04T15:41:26.247003Z","last_seen":"2026-09-04T15:41:26.247003Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7ca4c1770e526303c8b96ec681271e67","sha1":"040ceca3f1799eb067ee3e0c5c3f97e8d48e8492","sha256":"9b69c924617de012e3a6252d715e48202d0bd07eccae08190bc9d0565405d1dd","sha512":"0180a2c052ce5feedb836fc6a1e5d82f2edaa25574f0951b679029a28ca6c0e4098c0fde61858a88c4dc4fb2ee2ac196f3f681864fab71b3d205a0baf010c4f3","ssdeep":"","tlshash":"13e0867181174b8423b80da5ad81af3bebab1758a945215c334ec633f517654c9441f7","size":335,"data":"","first_seen":"2026-08-03T07:57:51.315431Z","last_seen":"2026-09-04T15:41:26.109275Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/app/layout-703888b979a00b73.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d558e5e9eb6af148647a7aadad3bd87","sha1":"38d196a11f01d47a7318cf8e8d40b07ad157512e","sha256":"d5d426cfa3ab7ea6c700b37b4ff49f7e15a49a6e9e708c70c4d1721ce5dbd839","sha512":"7c630c20d77d7cf7fec5ddf91677399eb42e99837011ef390235016d7194341ba7828d8bd669f0374308e94145aa2864e034b30e34257305e2d379eb6e6232ab","ssdeep":"96:oMGP5WO1Hm0LE0t8C5RWaEW69h/s7CPPsM22b8egHID8xabWqzfOfpjtAZewFuvw:DGP5WO1Hm0LE0t86RWaEW69h/s7CPPsc","tlshash":"0691ab4d379cb84f09136e76fad79e13341f497554170e60a160dda22c6379ce2b2d4d","size":4385,"data":"","first_seen":"2026-08-21T18:48:43.576383Z","last_seen":"2026-09-04T15:41:26.092407Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/931-7598446bd0f90993.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffe8726ed2ad5f5537cbb9abfe8f7d7d","sha1":"6be39582b9bb0f484ee0ec19f96b81b80eb25f17","sha256":"16a600e90609f593ead601c2a4acb412ec430baae825a3e46eec93bb8dccf821","sha512":"0e00f57a71e1d98fd75cb9a6b98f7de04e75a210bdd3f86e535b407e605d780f06ae4d84aa85c5da34b4ad56bf3ea15912e5ffa8db63b36fb53338506d837907","ssdeep":"192:7mL0K2gyEgGpCOwjECWL1vKzokktuGkjQtv5r38:KwK20gGpRwE4oTh5p8","tlshash":"6ff185c9b2d1f0d50bcb4451883f030ae2b95661350a4894f2bde8e7f9619eed0a7f79","size":8079,"data":"","first_seen":"2026-09-04T15:41:26.055903Z","last_seen":"2026-09-04T15:41:26.055903Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/8272-c6f0126d8aa1863f.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"004b01d98c5835bdc53fc24799ab44fc","sha1":"d7fea7a89322e4424bf586a488a81d257c4cb42e","sha256":"89d2d80c57d43972b9ea811bb345b01d3f428704616237ea74999e8e05c1c2d0","sha512":"97c704385172b987fc3b2313d14b3744b382809246561c37d3ab06df0558deaabfa76404068c7d040b339143d618e21705f5570b95ce9ae78a4f4f4684e91d9b","ssdeep":"192:AJsScVU5JVFn6RNyu+k6MV7q258BxMi0+mCNxwdq5lKxP:ksPsXn6Dak3VBmBj0+mCwqqp","tlshash":"5452980572d2ba9ce4bf41d8f12fca1db15e6f59cd0ad979f1b8682129084e1b943fc8","size":13415,"data":"","first_seen":"2026-09-04T15:41:26.143371Z","last_seen":"2026-09-04T15:41:26.143371Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/1947-4ad5827b45601758.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eeddcc58c388d472fd4bef5d8cc8a973","sha1":"927235a1429b25276baffcce774e712b5d5319c4","sha256":"1f715bbd421c014fb108affbbc8ea1c9219946e9c084a0ae4332287053287efa","sha512":"dbfb6457448bc3d8e44b313e488f524492beb488563972e2e50b39ead0b4767bd147e9d24a4bfadc08d9ec184f914184bdee6991741ed3cef6a0b68846496c5b","ssdeep":"1536:e2NofGMe2fk7DVq7ET/3R8NiOyK4Hhej5nGt7LNyWEUCfOe:ewope28DVnKi8Ke","tlshash":"65c32b95b3e1b4b643db61a6142b0005f27858d5650d0068b3b498ebbebb6ccc2f7f78","size":128486,"data":"","first_seen":"2026-08-21T18:48:43.589323Z","last_seen":"2026-09-04T15:41:26.173925Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/2067-73aba2af28c066fe.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cca20715f90e7254a62ab23c8ad72dc","sha1":"22f98ef3c16c47c6a9a9afc27d47c42b8752211b","sha256":"8255df9eb5d05d1b719b3459720a7a6d3bc4865e63df0854ac78def1f162ec43","sha512":"ac2ba69593cec80dffe0f94f66eb30a660174354add7152146ab85fcea31846fad5f6d0ac56ac4f028635c9da446cef5bf9ed27f58aafa3e07e1b36988a95359","ssdeep":"24576:o3MUVTfclcgK9v6j+Xxc7Yl2nenDgz2slv9yHX/rI:o3TVTfclcgK9v6j+XxsYl2nenDgz2slV","tlshash":"22657d9073b1b039479b8198a46b1110f238989a500d846df7ecd5f7afe4ac895fbfb1","size":1513686,"data":"","first_seen":"2026-08-21T18:48:43.741725Z","last_seen":"2026-09-04T15:41:26.249128Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ones-pursue-foo-eau.trycloudflare.com/?host=https%3A%2F%2Fbitutility-onsend.xyz\u0026href=https%3A%2F%2Fbitutility-onsend.xyz%2Fbitutility.onsend.xyz%2Fjourney%2Fgenesis-free-mint.html\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"ones-pursue-foo-eau.trycloudflare.com","domain":"ones-pursue-foo-eau.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"030125497fcc7b8de5dbaeada99c12ae","sha1":"1eeb65c627fb6f825d50b78ea53184a393e61b52","sha256":"2b7537ddbe256bd2b435101e4f8076f4cc225548342ae58a1b4861a6c494a7f2","sha512":"c9d8b59527527c6f24b931e622a756936e5b87021ba851b28c9833a51c6d8ba036f10b9c810cec75f1995dfc26aee4e47d0e5248ae340c4dc1e5daf722b30804","ssdeep":"","tlshash":"310128a54a9700b108f7dae63f5f3f12776201460084c5103ebde7aaaf23d5b84199c4","size":733,"data":"","first_seen":"2026-06-11T06:03:26.798628Z","last_seen":"2026-09-04T15:41:26.251466Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ones-pursue-foo-eau.trycloudflare.com/?host=https%3A%2F%2Fbitutility-onsend.xyz\u0026href=https%3A%2F%2Fbitutility-onsend.xyz%2Fbitutility.onsend.xyz%2Fjourney%2Fgenesis-free-mint.html\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"ones-pursue-foo-eau.trycloudflare.com","domain":"ones-pursue-foo-eau.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5073df97cff5b36c67d20516f8a99db7","sha1":"6cdb67bf43aea0e1af371bd5ab82f4afc6ae43f2","sha256":"e82dab043e27db9f7b5a8466734d406115be4027cee9cc27fbf1bf824ea3281e","sha512":"e73764a273682f90031ba22c83e995b276ef9f8dee564369f7e74474291b13a4975b4aabcaab41501974be9a89bb9bc1590a746e0f35eb12d541f8cf80ca0665","ssdeep":"1536:zS1FEsfyN/H4I8c33SmyGpk/VlM+XJpmHKp95P5j2a19d8oJE:zS1GsfyNCcnSSpW1E","tlshash":"a553a8852bc0a964134f4faf733bb6d1d91e859e79884c9fe614bd50eba5312eec0930","size":60811,"data":"","first_seen":"2026-08-31T08:03:52.555438Z","last_seen":"2026-09-04T15:41:26.255969Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/app/error-496cb0314ab10889.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecf94078b9a00b81939d7db8e2352b74","sha1":"3db3b482ba179a69f951e9059fd51d97c371ccaa","sha256":"9a0782cb2fd2c237c8dd45c2d2ab75ae9598a9d59fde3ee1ace052dfe7fb5fe7","sha512":"71f101fa4d9a5217468e5e8fce90d1aa585049f028cad93602b53bf928c5095b3c2e580eb1efee98c05b4056d3fe20e613de97d51f2b1070f9ae36ae4e03dc12","ssdeep":"","tlshash":"2e21744535d0bfdd750a05bcd46fe10d31ab49bb860d8e36927408355d6248da733bca","size":1395,"data":"","first_seen":"2026-08-21T18:48:43.580837Z","last_seen":"2026-09-04T15:41:26.167705Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/9098-32163bc24be87dc9.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03d35305e1445fd1a5462782802f5beb","sha1":"87975c8412028dac3227c59df5ddd8163cac9f1e","sha256":"e9a35eec8c8beb1eeef2d39369be36033b5f824168a6db07bb1d3369259b75ad","sha512":"5e109ced481c08bc5ce188f0043062fe12e8002a82f4dba2d2ff6a16e7bc5c6c186205bc0fd16506a25e922af020812de3274c5ca551c5e31aa7807b59759fe8","ssdeep":"192:PYL8jcPlwloAxUfoziZuolpmmA/aYbmSrcIyMMlCp:PYQYPmLUSg9gqYbTrcRMMlC","tlshash":"1762a8c5b1e2b5ec472790a9802f610eb6af4f814d1f0528f2b5f85779653a4e623fc8","size":15125,"data":"","first_seen":"2026-09-04T15:41:26.138019Z","last_seen":"2026-09-04T15:41:26.138019Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/6881-50e0b192fff44af1.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"16ee1bfaa4ccaca2f628c0fe54fa0674","sha1":"b7e7e7c3dc67138a85ad7331eab2d3051dea15ee","sha256":"e42224c9ee7306bf1391e93074665b42ec0ff64eb667bc39ada7fb42830dcdf7","sha512":"0db1d0ed695437288d688f738b77e0c803b6c449c617ab5af020342b8318e935bc13ec1aecc6758c0da2978a0dca8fdecc3dca49ae27455ab2338083522fbcab","ssdeep":"384:f5XjfRqm9ySmGInGefxcCkSNS98krDejWEq63hWk:RXNtESqnG/1Wok","tlshash":"8d72b4967192f22b6ed68082e83e4112e2645d49b807501db6b42de3f916dcfb5bff30","size":16614,"data":"","first_seen":"2026-08-21T18:48:43.609767Z","last_seen":"2026-09-04T15:41:26.190698Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/app/(public)/journey/%5bslug%5d/page-e770a76bed774332.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e16ca9c481a2d28e9aa5592c5e3ccb08","sha1":"8d25560f59d5698eb6c8151894b30409dc027e7b","sha256":"2887da1a05c96b51d13fdcff55c40810ff69ebff50179a4178784f632eacf092","sha512":"09273bdf994f1d4d94b8f53d754ef33f962ce05135f858cf40246dbd1074ba8b2b46b5206f66e2b8549a8c15b5cccd349afdc1aeff18c0f55bae45701b1a53d0","ssdeep":"384:fsCOJmgTv3m9wTTVi04QeMfgzty6w8KBDdt7ObKcRhiPx0xUn8:fsCOJmgTvm94T804QRdJtOfis","tlshash":"45b21915e796beed7a37889c95df901cb25f2b28da0e4820f8bdb42121141e9f523fc4","size":24510,"data":"","first_seen":"2026-09-04T15:41:26.192707Z","last_seen":"2026-09-04T15:41:26.192707Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"13f3a260bb5d175c4425edabc8873bbe","sha1":"12cbe6dc723d9d2e011ea9519290064fe37d20e8","sha256":"b4b15165b70f9b724ecd0859e545727ff2902a05939a6435fe6b18e4981eda13","sha512":"ca2cf22e51df84c3a7e3f178c3fbc3b6d546fd66f54363f55b6ababc21831e95c2154db15c60392270398371d8c95bcdf2b3454c7d005556bc7dd07a06096055","ssdeep":"24576:xVTiIfGuotwwb/gR68UWPbf1vuKo0Epy4nbfOWKax:Di/j/W1uppXTx","tlshash":"7925f2994c338265669c03f47c5f1b883ea86becd098a77b9432d0f676c16af10d7876","size":1041263,"data":"","first_seen":"2026-08-31T08:03:52.559326Z","last_seen":"2026-09-04T15:41:26.258089Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/async_hooks.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f78e3393d375d2bd75ee22e5bf0f3635","sha1":"2b6d82e3a17d6f4596fb2f6df083fcf498edaa99","sha256":"b7862dbfba8bbbca956f19e4e08280b529e4b27468779775a9093aef8c92dc1d","sha512":"280686efdbef542165cff092b795274efb660689426f8f15523b3478d967cc6bea03a0d7a66400552278a777655231d7e9ad2cba1bb4eb0a45f249e76102258d","ssdeep":"","tlshash":"3b515489a78bf9685b9eb176413a0103e10a0ec89d1c722cf049e9ee695e10c8774fb5","size":2938,"data":"","first_seen":"2025-10-29T19:17:04.32262Z","last_seen":"2026-09-04T15:41:26.097747Z","times_seen":790,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/webpack-bdd6b5e78b04c7df.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec05e8841b00ca98af5d86100e176280","sha1":"01580df1b995a53eba5602743ed8a0f9f022a92e","sha256":"62f151aeba739c7dbcd4416b1e12f981df4e6087a4b6d141ccf7623e06eb9a51","sha512":"4e919704dcf3cb8305db9b6be22c5bc8043ebda5fb3bff3cac642346aee4b2f376a44c9d8427c311681979ab650c928c5609d505ccd1c29380f438b963b82b11","ssdeep":"192:febQs3R9JxvG+oVuihmjazyZ/GnNAcjbghzvpq1woq:febQ+xudV4ZZ/GNA3hz8Nq","tlshash":"7cd11bdeb3e8f4a1261205a1483b9479b11b7433342e94d0d62ac5f62c70aad4636fa6","size":6735,"data":"","first_seen":"2026-08-21T18:48:43.604437Z","last_seen":"2026-09-04T15:41:26.051522Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/app/global-error-e7ba94e054b38910.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"151f34d50e87c61689b074416c31be5f","sha1":"18f1fb3bf3e8833fbe3e957740df4de2782a62d9","sha256":"670a40da363f9c7ff776d460db6e299b34cd856d70d5eea229af79a172c7e381","sha512":"a5cb1357345a63ddfce953aa27bde54595a8e40f31473247f82b3b1ae939e159a08e8794e1e79f62fbc173e3afc15270643ba7e6d94d99e7ca9fa2389da53953","ssdeep":"96:oSdltLNrfAm5Wb1a6Bak9GCw1e9X20ub2IGT+9GCX2MTS156:/6BO91e40GGT3L6","tlshash":"d9d1c66771e0f8e2a79a00e18437841ef2921d3e655e20b0b7b68cf556c04ee7263fd6","size":6593,"data":"","first_seen":"2026-08-21T18:48:43.557912Z","last_seen":"2026-09-04T15:41:26.18297Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/5558-7acedb8220a66ad3.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"de2a7a9059a8c86e83a8c7862a6e9a69","sha1":"7aad2eca644aff888610082685791084a4a06bf7","sha256":"33841456d6c8367ca87abd93fe94a6a4de914f43b585905ed9e13ac6d766c404","sha512":"449b54e762c76acb442b671577b3477a13c7b2d825f662cb7a9769282aadb1c66f69b790fc872dd5a96775ca7c55c1b542b1e353cddac99bc2a627187cf21dd3","ssdeep":"384:4+tXnSyAm57GkfxwHrkyNWVA7NVJepc6ck3DH55IvJSksMH8Bi8eb:XXSa57GB+UsJHfI8kVcBi8+","tlshash":"968295ae7151b2077dd6c0809c2e002ad3257955241a801cbaacaed3f667dcef5bbf35","size":18078,"data":"","first_seen":"2026-08-21T18:48:43.614475Z","last_seen":"2026-09-04T15:41:26.104048Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/9232-e2caedfc81ecf39e.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7073e941efd8918545e43d02ded1f8ae","sha1":"b5fe62c0f87f0f7ccd160cca32fbd28bed74aafc","sha256":"100242772c5bb53ba55dda266e715b46cc943896664b17bb825ca6ece0f1d7da","sha512":"ff54bf7f51830505ccc695cf83e8279872841de4ede44fb6e73ce57508fc2a4fc44d2dbb19445b761f070a2fe20e89c6ec963709201eff987809bef94f77a119","ssdeep":"1536:hhBdA4GOUC90p583oeoGf3479VHfNJpwuMiF5k9Cm:hhRoeoGf34795kiFa9d","tlshash":"3a43b78a3796b0164bad519624b94443e3adbeac461d04acf0fd91de7b9cc45f2b3b30","size":58210,"data":"","first_seen":"2026-08-21T18:48:43.66612Z","last_seen":"2026-09-04T15:41:26.13235Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7dca33f24054c0c18884b7fbf2f6670d","sha1":"22e339dc24459d9c6de533ebfb9700d932e43fd8","sha256":"db758b08c6687355502ca6e2ed6a83e665feb7caac662056964b1ac66e934c0b","sha512":"5cdce3364104006c99c6ed87e4d0fccb3ed509a1db9cec85d9d77c9d44282fb944ba965173429dcfc45f3e7b86c8de8b8184f6297bd51652c5c12ac1a6523787","ssdeep":"24576:tAyIKTsl77LuxjyWuXVnQNDlkCKQEGv2Gyoi68r5MdsJYHimjaUOsOhACS4WSoCV:DIKTsl77LuxjyWuXVQNDlkCKQEGv2GyR","tlshash":"2465d84163c06c58234b9fbb731bb4e5e41f096f78980c8fe114bd646ae9617fae8931","size":1514955,"data":"","first_seen":"2026-08-31T08:03:52.56325Z","last_seen":"2026-09-04T15:41:26.25993Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/buffer.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"39e6418dc1a8a38a7baf7cbf64e6bc9b","sha1":"036b9f42abe9026454886016987cdd479ce3f33c","sha256":"64fb61aa5f48644d685f9ceabedba60ea6b5d6ce03dac1943e863d00d9e574f3","sha512":"de01074341e2a0ad5d0b74108a593811ef91c72bd775fc2ab20f98c941fc4635f541fd7983f08cd93700d7f6f582c55b95fdfaed785258eef4f0b55322df151c","ssdeep":"384:f2ROO9YwKOX7MW/I55zmhYuC2rUV5w+c7LW+M444MMazyXDNcyO9+C9YDNqWRMzI:fKewKOX7MWwGzCrfTc7LW+bcp9a60","tlshash":"d3d2b694f795b032439e65a50057980ef2b8f928640d198cf6a0f5f728b59ce88eff74","size":28845,"data":"","first_seen":"2025-10-30T08:47:32.392454Z","last_seen":"2026-09-04T15:41:26.111627Z","times_seen":655,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/16-0c29ea64382b34e9.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8c711cf88f7efbe961e940494adc3cd","sha1":"593de550835516aa101e2dbea6172b8a6de1c004","sha256":"0a134a925791f3b889995fd87e97c91d044bb922bd0167ca1b10b151f236ed9e","sha512":"403634c0418c1a6d30222e805a83de61ba4072c690acc7166500b1d7d750672bc93cbf7d7695a6ac14d4765e6b30aa22d609e1e24a5545a65a8e04c3a5648a63","ssdeep":"192:WjF14sgUVHW6c2yV5Asb55OSgihAqRWifsox32OvjQE:I14I26c2I5Asb/OshAqQOsoxTR","tlshash":"071254c573d3b06257e78236947f510bf33919a1184a0458f270bceabcb399ea172f69","size":9222,"data":"","first_seen":"2026-08-21T18:48:43.621126Z","last_seen":"2026-09-04T15:41:26.088295Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/221-d574051264dbea55.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e48a571f4ac3c14e6916e99c59dd3d2b","sha1":"3253d717d2399aad2612ef1bde34644b2202a874","sha256":"81a1ffa4ca34c015b8e1a8e47e4a74c8c38843d690d9a20c504a625118c141a4","sha512":"e9b298911dae5c8dd50f4e38ee2184d841571cff5babff5c7072e4886204113f9fec77c1192e064bd4c55f42a2841e5d5242b4621890351dcc4afca231e7bc3d","ssdeep":"768:YraEbZIqV+jklb4D+jeEUigJ2c8/jI+FgYZ:YdNjV+QliEahQ8+FX","tlshash":"62c2fa5573a1f4b293ba10d641264002f1bdddaa948f8818f2b8c9eb36f44d9c5f6f39","size":26524,"data":"","first_seen":"2026-08-21T18:48:43.650679Z","last_seen":"2026-09-04T15:41:26.077181Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/5877-0eb44af9c4070d7b.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d4b4afeb095a81641c42ec38a466ba2","sha1":"6b47defeead6453055c9b08cf0d8da9e424ba69e","sha256":"6f729f8f276b401adbbc5a7b0279d8d73281ab450aff7e321725e32a66a9c726","sha512":"3c0045c0aaa85bd0889e55245d9b06c5c1fa180d39ca590d08d9b153a90167e06aa058459eacc7eed25e7cf34e6eb773a7236fc3d6afcd901a8bb3942aafff6d","ssdeep":"192:Y2GiJETHIEietI7w3uBHCusLmMEb5pnv4vTvVLEL23m44D:Y2FETH1i8I7w3Oi17S","tlshash":"2502d86973dbb51bb24bc28d9d3b1000e37d27253a4d402cf25d88e74562dcaa663fb5","size":8563,"data":"","first_seen":"2026-09-04T15:41:26.053948Z","last_seen":"2026-09-04T15:41:26.053948Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"Loading chunk 2067 failed.\n(error: https://bitutility-onsend.xyz/_next/static/chunks/2067-73aba2af28c066fe.js)","filename":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/1126-85ebce850ff31353.js","line_number":1,"column_number":4899}]},"http":[{"url":{"schema":"https","addr":"zen.claims/api/fp","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"172.67.218.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:18.957Z","timestamp":1788536418957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 14:56:24 GMT","end":"Tue, 24 Nov 2026 15:54:49 GMT"},"fingerprint":{"sha1":"F1:E8:88:03:E3:44:52:F4:4F:2C:5D:24:13:E0:6E:31:8B:4C:9A:93","sha256":"CF:FB:D3:B4:0C:5C:1D:8B:FD:60:82:C0:91:48:34:F6:F7:7C:22:85:A5:D4:5D:CD:03:90:49:79:08:01:D9:4C"}}},"request":{"raw":"OPTIONS /api/fp HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-worker-hint\r\nReferer: https://bitutility-onsend.xyz/\r\nOrigin: https://bitutility-onsend.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:19 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kGZM6bvI%2B4%2B6A9CPwJj1TfGEaq5aJUp9dT%2FaVmfggIxsjGe33aerPmhjzF%2FaOD1QFwFn%2B0XZp4eZa1aNeiHzotXq%2FWuUUfbwDVF7ZesIittNIkIUvLMO09bK2Bjf\"}]}\r\ncf-ray: a35e178a7e3c5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":668,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/webpack-bdd6b5e78b04c7df.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.760Z","timestamp":1788536416760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/webpack-bdd6b5e78b04c7df.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:16 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-1a4f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=91r1KP705%2FS5kHroHMIhEUVrzcvf5bbuAjM9D4dA7mx5eW6ddLKoLl6%2FjRgiBLdfHPCQgIlM2ejJ6KvhbD%2FLoWeb9zjELpPvuflejeZ5X1N9WEDrp5Lo7JgOef9C66r%2BakTqHXqjVjA%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177ccc4cb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6735,"size_decoded":4532,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6735), with no line terminators","md5":"ec05e8841b00ca98af5d86100e176280","sha1":"01580df1b995a53eba5602743ed8a0f9f022a92e","sha256":"62f151aeba739c7dbcd4416b1e12f981df4e6087a4b6d141ccf7623e06eb9a51","sha512":"4e919704dcf3cb8305db9b6be22c5bc8043ebda5fb3bff3cac642346aee4b2f376a44c9d8427c311681979ab650c928c5609d505ccd1c29380f438b963b82b11","ssdeep":"192:febQs3R9JxvG+oVuihmjazyZ/GnNAcjbghzvpq1woq:febQ+xudV4ZZ/GNA3hz8Nq","tlshash":"7cd11bdeb3e8f4a1261205a1483b9479b11b7433342e94d0d62ac5f62c70aad4636fa6","first_seen":"2026-08-21T18:48:43.604437Z","last_seen":"2026-09-04T15:41:26.051522Z","times_seen":2,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/5877-0eb44af9c4070d7b.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.786Z","timestamp":1788536416786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/5877-0eb44af9c4070d7b.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:16 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-2173\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XJ%2B%2FrsXmkfF8%2FnIWtbWOvXY632ZjWaSYwjUtfuha7gdkBvzPqRRotLGOxoF%2B1sCAVgN5lwgrWbo1I4YAN%2BjtL4QMTjgV71QxMd4fQtUtX9BNUE34JCoDR6DGe7G6%2BZHImsQiM5QRWAA%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177cec67b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8563,"size_decoded":4486,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8563), with no line terminators","md5":"2d4b4afeb095a81641c42ec38a466ba2","sha1":"6b47defeead6453055c9b08cf0d8da9e424ba69e","sha256":"6f729f8f276b401adbbc5a7b0279d8d73281ab450aff7e321725e32a66a9c726","sha512":"3c0045c0aaa85bd0889e55245d9b06c5c1fa180d39ca590d08d9b153a90167e06aa058459eacc7eed25e7cf34e6eb773a7236fc3d6afcd901a8bb3942aafff6d","ssdeep":"192:Y2GiJETHIEietI7w3uBHCusLmMEb5pnv4vTvVLEL23m44D:Y2FETH1i8I7w3Oi17S","tlshash":"2502d86973dbb51bb24bc28d9d3b1000e37d27253a4d402cf25d88e74562dcaa663fb5","first_seen":"2026-09-04T15:41:26.053948Z","last_seen":"2026-09-04T15:41:26.053948Z","times_seen":1,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/931-7598446bd0f90993.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.793Z","timestamp":1788536416793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/931-7598446bd0f90993.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-1f8f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m2ZwbIbqTqoApAEd9kJUsKBx%2BnKsvqCJgL3fzIVm2h61arvQe3XvccQO%2Fcbx24cgr3lWcC7fpObig405j0uiy5qE4Tq7Ghs7L0AiqwGrjDQOdluOXHe2sy8H16XnyH5nqzBuOu%2BRFAc%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177cfc6eb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8079,"size_decoded":4155,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8079), with no line terminators","md5":"ffe8726ed2ad5f5537cbb9abfe8f7d7d","sha1":"6be39582b9bb0f484ee0ec19f96b81b80eb25f17","sha256":"16a600e90609f593ead601c2a4acb412ec430baae825a3e46eec93bb8dccf821","sha512":"0e00f57a71e1d98fd75cb9a6b98f7de04e75a210bdd3f86e535b407e605d780f06ae4d84aa85c5da34b4ad56bf3ea15912e5ffa8db63b36fb53338506d837907","ssdeep":"192:7mL0K2gyEgGpCOwjECWL1vKzokktuGkjQtv5r38:KwK20gGpRwE4oTh5p8","tlshash":"6ff185c9b2d1f0d50bcb4451883f030ae2b95661350a4894f2bde8e7f9619eed0a7f79","first_seen":"2026-09-04T15:41:26.055903Z","last_seen":"2026-09-04T15:41:26.055903Z","times_seen":1,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/_next/static/css/97aa83345bc46f65.css","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:17.270Z","timestamp":1788536417270,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /_next/static/css/97aa83345bc46f65.css HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Thu, 27 Aug 2026 21:42:34 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=0,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2BKYS6px6B%2BW9rqteXUZRil6OEPmMY9g%2BdKmiYBVtXbUnLD7Unk30JRWzIqbUnYurgVLcHNsAdC89llBJjmC6wc0eyAKz5F3wkwIKs5cCnZJmGrtTA%2FXWaJ7xZkhihgDejQbz9bQoE4%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35e177ffcb2b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/_next/static/chunks/2067-73aba2af28c066fe.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:17.275Z","timestamp":1788536417275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /_next/static/chunks/2067-73aba2af28c066fe.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Thu, 27 Aug 2026 21:42:34 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dbMerdi8Vk2m%2B5hBTP6Cj6VCf7itjqBe6mwmPBdDkd2W3O%2Bjixbq5FDO%2B5fEBfB%2B2D%2Bagf%2FQDOFUzI7MNLuKI7QfdIJQ8AxBB%2BQcJwKOhYzUpFWivdS%2FBZmwEw0lyNbOnrhLj1Duxd0%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35e177ffcb6b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=1\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:18.839Z","timestamp":1788536418839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=1\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bitutility-onsend.xyz/\r\nOrigin: https://bitutility-onsend.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 04 Sep 2026 15:40:18 GMT\r\npriority: u=4,i=?0\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\ncf-ray: a35e1789ddf5c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226103,"size_decoded":31954,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"da5c294223583d817be04852e8dea0d8","sha1":"13da547314cb135f32e5681804bbdf2fe3513c1b","sha256":"402bf8ceb9dc8949c84c87c2e55bd338ad7331295699bf32068e8f81a4d8ffa6","sha512":"fef32abdff84629a28263834c9879e8ca740a0fbd520aba9eb28174b85aa023bf5aed17c2a18fb16c79c207bdcd892fd611f7251a64a8e94357b62263d9d9463","ssdeep":"1536:TKFTcsEIpeYEW9FaLYSG+DZHixh1BsNJxZv1M6Rg:2FTcsTpeYZ9Fatixh1B+JxZv1c","tlshash":"4c24446e4b409e566fb18388d25cf9eda16fe007c9cd5ca6e2f18e3444bc9f3215129e","first_seen":"2026-09-04T14:40:16.083112Z","last_seen":"2026-09-04T15:41:26.058389Z","times_seen":3,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":4,"connect":10,"send":0,"wait":81,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/1126-85ebce850ff31353.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.763Z","timestamp":1788536416763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/1126-85ebce850ff31353.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-50385\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EmF9dK8OtvUYA5Ls7HPkGYnUrBQV5YRFXJfjY4oIg%2F0B1Lu%2B8uae1uRj5H9%2Bj3n2iWfy1SEesSZHZKtnMMe%2FladQmWmm5VDPw6uy6m%2FbO%2BymzzxeA%2BonqoOqIxAKJjCQoTezdtCVzIk%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177ccc4fb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":328581,"size_decoded":108802,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"435381d675c6d2d4699a74a6a6b22d51","sha1":"536903c636fbe703804131a22708d947e034269a","sha256":"bf0797ff95eab72744e046cd40ba5e1e714b89e84a5d655b362c7ad145e6ef21","sha512":"0ace2c40077b8c73db0de7bed08f7b495b02d9c38254e3bf1b1b08eca3d2cb471dc0095ea4224c28e96cffb83f63d7d5687ad5d25735fb3af49c1e2d015174ef","ssdeep":"3072:W2mmVi0D7BqttUNtFXfK/QpSiu8PtKTtIOwzFHv1kyVL0Qth:Ji0D7BqTUNtFXoUSiul+9FP1kELtH","tlshash":"1764e8ff72d1b4b3879742a1803b0006f3798caa341e5054b369ceda7d6159fa1b2f69","first_seen":"2026-08-21T18:48:43.608053Z","last_seen":"2026-09-04T15:41:26.060469Z","times_seen":2,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/6740-0a68ab0750dd3c26.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.780Z","timestamp":1788536416780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/6740-0a68ab0750dd3c26.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-473d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2FXiJ%2B9CWEh9Wsgn8RWXul7m%2F9rebIfcoVYQowkpyCAC8t2p2Vwv5ImN7OmDFUN%2By5zS7KjnXWxXWmNgtxSolQgQxyjvjDsvQ9rv7LkZ5jh6SPP%2FrHGxpgnF9dHq5zibjmV1JMiSIGc%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177cec62b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18237,"size_decoded":8270,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18237), with no line terminators","md5":"2a62d01ce2b975d8cd8684908ed93ce1","sha1":"ef8e9e2954981e1e84ea8c238affe25fbd724642","sha256":"02d0a70c8bc1d493303f7d8331ff47df1d499baf2ce5a05fb14a2bc1b9e971f0","sha512":"2c46ccedabb9c0af71854415d9121f6ac039feba8d2d1647710d703cec9478f3f60e10f204d0d9f8394a1e691310ce4b1191cdf528a2633a3deb63f4e32f3048","ssdeep":"384:rDgKkF6tmMXYaB720gGp8c6EEOR3SrX7PQr5vfoeJ7Uf8:vgKPo0HsOlqXkrBS8","tlshash":"c482d7de77c1b0b6579a8259942f1309e3ba0265310b4840f16dd8e7fd706ab84e3f79","first_seen":"2026-09-04T15:41:26.062638Z","last_seen":"2026-09-04T15:41:26.062638Z","times_seen":1,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gc","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"172.67.218.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:17.207Z","timestamp":1788536417207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 14:56:24 GMT","end":"Tue, 24 Nov 2026 15:54:49 GMT"},"fingerprint":{"sha1":"F1:E8:88:03:E3:44:52:F4:4F:2C:5D:24:13:E0:6E:31:8B:4C:9A:93","sha256":"CF:FB:D3:B4:0C:5C:1D:8B:FD:60:82:C0:91:48:34:F6:F7:7C:22:85:A5:D4:5D:CD:03:90:49:79:08:01:D9:4C"}}},"request":{"raw":"POST /x7k/gc HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bitutility-onsend.xyz/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://bitutility-onsend.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"Mr65CsHTchlF101l_3Hc\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tppo3xkLraxI5BjNXJlJ9X5BhpeBpyf4kjIL65zjg14LkCK8%2FwiN1s6ecXnmaXXKHm582oOoGX1l3KF1OY2qVawuPoOIH1FEOqGftCL8%2FzZWAkF47GOR6a95PWIr\"}]}\r\ncf-ray: a35e17822e035687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7844,"size_decoded":3642,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8e464763137232905c0a28d0e1f0d92a","sha1":"b187cf4c5e003718a5603faa91eced1f81fa1caf","sha256":"24bc9be1335fdfd6c9ed9a6be1ba5f3629f2d82ce11132c103fed74a7522d64c","sha512":"2984cc81b6f85623bbb54fe1dcac1efe14819c178c2da3a4b0894538b11ba5ffaa172de1326be028d184956251b01db13de8ca447c0183c030d52cdf7704de53","ssdeep":"192:vsYrNvxO6LzTMjvBS33x7LbgrQj8kIjpuaig:vlrBxO6LiA3xHbgrzig","tlshash":"4cf135237192b14f01c5077e3a1a67e6d4a6d94ad94ac40af748dee874ecda37b1c1f0","first_seen":"2026-09-04T15:41:26.064595Z","last_seen":"2026-09-04T15:41:26.064595Z","times_seen":1,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=6\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:19.200Z","timestamp":1788536419200,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=6\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bitutility-onsend.xyz/\r\nOrigin: https://bitutility-onsend.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 04 Sep 2026 15:40:19 GMT\r\npriority: u=4,i=?0\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\ncf-ray: a35e178c0e3ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":190541,"size_decoded":31549,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2606aa6754a6961ce920da8ad1667277","sha1":"cf83189cfda4fbcaa1cb29e3ce08a8ed95e8dc61","sha256":"b01cfb7782ae40d68b5d4ac41b1da623d65d90e8422686c20fd918804bfb247c","sha512":"154cc1a7e7cfa699acca680f501c8a8e56e7a3690260b7cd31d94c41542f616cee6143bad3a523680bd6f9dd6b023c8f1ece8d0d8cdb8eaf7a9c770dd22e69c2","ssdeep":"1536:a3HtpRWzoq53T7wYGzvx4ZMfLO/kU15yGtprkMTuomc8yn:OvRWzd3T7waCU15Br9LmWn","tlshash":"1514536e8b04de662fb15388d15cf9eda15ee117c9cd5ca2e2f1cf3440bc9b3215229a","first_seen":"2026-09-04T14:40:16.080443Z","last_seen":"2026-09-04T15:41:26.067677Z","times_seen":3,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-04T15:40:15.647Z","timestamp":1788536415647,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:15 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Thu, 27 Aug 2026 21:42:34 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xrOGPFqIhntq0eLMbSJSPepbSExLMgf18faczYNaLvvZilicfALytteUR5crCVUD2Q0PXa1srP3v5jyzn9AxNDHL%2B4glTwupps1I4j98PItKrwIqR9yGbFwYHBREjF3bWpIqgRJT28M%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35e17769ba7b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5252,"size_decoded":3040,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (603), with CRLF line terminators","md5":"5e1a159374e44057894c9bddf708b653","sha1":"e98c64c63fd5be9fb0c5cbb21b4f83b7ed806742","sha256":"409b69a5cd9b23200b66f29e26de772bd91a42d4d9972e77d174634f34550188","sha512":"cdc13d8552bf6473c82a7e76ef176ff9b1d4b566532c56875ab964a94745e57bb085b5321dd08036c069af2de01efbd1ac85bb75d5eb5e0119ff230c61e276b3","ssdeep":"96:FLRopoU/UvyGmAewiq+JdGn+6H+dvJcWX++kVjyzobCyIUy3sEs/9bSVQLaiwNeQ:hy5/uGq2sDXeECsyXobSVQ+FhyLE","tlshash":"28b17457124b2205a2174172f3b3dad88b7e1495a52643f8702a3177f6c8300b6bb7bc","first_seen":"2026-09-04T15:41:26.0732Z","last_seen":"2026-09-04T15:41:26.0732Z","times_seen":1,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":107,"connect":16,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/221-d574051264dbea55.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.778Z","timestamp":1788536416778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/221-d574051264dbea55.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:16 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-679c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EPyshftA4wmCkqn%2BuNjVq5R%2BW7PIYaRnNyqp2DsE1sYldkNF6pL6TYk5lqi1KUdUbI5PaI09iZLUQrYcSBFKoItvaKXQMVuB40%2FP28q0CCxw%2BQ%2FVB9byZHQQ4hImuPzqJUIy2dZSyhs%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177cdc60b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26524,"size_decoded":12037,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26524), with no line terminators","md5":"e48a571f4ac3c14e6916e99c59dd3d2b","sha1":"3253d717d2399aad2612ef1bde34644b2202a874","sha256":"81a1ffa4ca34c015b8e1a8e47e4a74c8c38843d690d9a20c504a625118c141a4","sha512":"e9b298911dae5c8dd50f4e38ee2184d841571cff5babff5c7072e4886204113f9fec77c1192e064bd4c55f42a2841e5d5242b4621890351dcc4afca231e7bc3d","ssdeep":"768:YraEbZIqV+jklb4D+jeEUigJ2c8/jI+FgYZ:YdNjV+QliEahQ8+FX","tlshash":"62c2fa5573a1f4b293ba10d641264002f1bdddaa948f8818f2b8c9eb36f44d9c5f6f39","first_seen":"2026-08-21T18:48:43.650679Z","last_seen":"2026-09-04T15:41:26.077181Z","times_seen":2,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gf","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"172.67.218.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:18.077Z","timestamp":1788536418077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 14:56:24 GMT","end":"Tue, 24 Nov 2026 15:54:49 GMT"},"fingerprint":{"sha1":"F1:E8:88:03:E3:44:52:F4:4F:2C:5D:24:13:E0:6E:31:8B:4C:9A:93","sha256":"CF:FB:D3:B4:0C:5C:1D:8B:FD:60:82:C0:91:48:34:F6:F7:7C:22:85:A5:D4:5D:CD:03:90:49:79:08:01:D9:4C"}}},"request":{"raw":"POST /x7k/gf HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bitutility-onsend.xyz/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://bitutility-onsend.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"Mr65CsHTchlF101l_3Hc\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:18 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=deBG6FP6uXYwuwezlPgqHCp7Gt88uO2cmDW0c5J67znofdUSfpnVSjPXlSWPqFYkrWKuPX7RKPwve358n0ktShqRPGjtIF4AfCvy%2F1eBoD%2FhhPLmXYxQc5mY1gNl\"}]}\r\ncf-ray: a35e1785be1c5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1041237,"size_decoded":804048,"mime_type":"application/javascript","magic":"data","md5":"064ab486b7335f20fc5221c49ddbd09f","sha1":"f379fab5bcb0d039da0ba2c4827474c3902c866c","sha256":"938ebc9b82bfa4b56e42b4fc1aa465e8bf13bebfa9044aa03181a685fd987515","sha512":"b44438915d6fce405c758bb25620398532cef8bec42b9747ccaf33b5eeb8acd06cf5640a46690ad99344e102b63fac7ee98a7a49a922fc9c7e0e99ab8cfa0b99","ssdeep":"24576:6VTiIfGuotwwb/gR68UWPbf1vuKo0Epy4nbfOWKa6:ki/j/W1uppXT6","tlshash":"3e25f2994c338265669c03f47c5f1b883ea86becd098a77b9432d0f676c16af10d7876","first_seen":"2026-08-31T08:03:52.550373Z","last_seen":"2026-09-04T15:41:26.079025Z","times_seen":24,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/css/d1cc95c2d12f712a.css","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.758Z","timestamp":1788536416758,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/css/d1cc95c2d12f712a.css HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-17f51\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o4JraL52SpgDpT3%2Byj1UgfYpBX30Pgm1PLResOl9jC08yVBltwWYe4CZovMXjN5E50gyHw51BD4OX9gEdEoLL0t9bSnqm1HqDh1CL1TiVRV8YzA%2F4h1TsSB2SmOG8kEGCtStGfFJK1g%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177ccc4bb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98129,"size_decoded":22011,"mime_type":"text/css","magic":"ASCII text, with very long lines (63243)","md5":"37c20676b6c881b120e5891e63f0b056","sha1":"4d8cc9fbe81207bcf89a4d55698ee15f8dba0888","sha256":"596f9145a83ca7e3aff92ba75e0646cd9c1a6ae68d1603e049a24e89feb2113a","sha512":"14bcc8b3aec563078a95e6c1412834635433106ef2aacb2bef1b0c6f4ddfde62fd15b9202aa0cac38f895b48817499cfb40fa7064de630ba77fa489f07a4665d","ssdeep":"1536:GHkPLidQcD4tNPfnYuQcwkSK3kkIhCHkR6oHIlYXvd5vBu9V23ZrSMUxDhUStlvr:GHkPLidQcD4tNPfnY2wkSK3kkIhCHkLO","tlshash":"57a3502daa55103f7c2794f9d29ced9c901ba1c0ee3a57fbb98213116be16f72d63600","first_seen":"2026-09-04T15:41:26.08037Z","last_seen":"2026-09-04T15:41:26.08037Z","times_seen":1,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/16-0c29ea64382b34e9.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.771Z","timestamp":1788536416771,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/16-0c29ea64382b34e9.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:16 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-2406\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5kIKwo44aypWFQ7Dcf07YBxodrTuqk97H9aJrmCMe7KZWNWe9H9UWMZJGZgOEks1jCEAzoR5wRvYzflbv4cqs9fIXfFtSyxkzVSc%2ByyNX08hqePkl6VbFxwH1%2BEsxjBHzRgJpMkUBQM%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177cdc58b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9222,"size_decoded":4591,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9222), with no line terminators","md5":"b8c711cf88f7efbe961e940494adc3cd","sha1":"593de550835516aa101e2dbea6172b8a6de1c004","sha256":"0a134a925791f3b889995fd87e97c91d044bb922bd0167ca1b10b151f236ed9e","sha512":"403634c0418c1a6d30222e805a83de61ba4072c690acc7166500b1d7d750672bc93cbf7d7695a6ac14d4765e6b30aa22d609e1e24a5545a65a8e04c3a5648a63","ssdeep":"192:WjF14sgUVHW6c2yV5Asb55OSgihAqRWifsox32OvjQE:I14I26c2I5Asb/OshAqQOsoxTR","tlshash":"071254c573d3b06257e78236947f510bf33919a1184a0458f270bceabcb399ea172f69","first_seen":"2026-08-21T18:48:43.621126Z","last_seen":"2026-09-04T15:41:26.088295Z","times_seen":2,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/app/layout-703888b979a00b73.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.791Z","timestamp":1788536416791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/app/layout-703888b979a00b73.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:16 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-1121\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2Fh2yMWOu%2BVlpC7V0VVxpJDfqfWchPyvDoqJrkCfSDHHkTWiJLWWDIsU21ZYgiGBgnvia4iZ21asuTSI7xPVeYijl%2FIgTqKTuVg1JYc%2F8DhXUT7vccLR4EoW7%2Ft97WEkDtpv%2FO1Bd%2Fg%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177cfc6cb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4385,"size_decoded":2613,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4385), with no line terminators","md5":"8d558e5e9eb6af148647a7aadad3bd87","sha1":"38d196a11f01d47a7318cf8e8d40b07ad157512e","sha256":"d5d426cfa3ab7ea6c700b37b4ff49f7e15a49a6e9e708c70c4d1721ce5dbd839","sha512":"7c630c20d77d7cf7fec5ddf91677399eb42e99837011ef390235016d7194341ba7828d8bd669f0374308e94145aa2864e034b30e34257305e2d379eb6e6232ab","ssdeep":"96:oMGP5WO1Hm0LE0t8C5RWaEW69h/s7CPPsM22b8egHID8xabWqzfOfpjtAZewFuvw:DGP5WO1Hm0LE0t86RWaEW69h/s7CPPsc","tlshash":"0691ab4d379cb84f09136e76fad79e13341f497554170e60a160dda22c6379ce2b2d4d","first_seen":"2026-08-21T18:48:43.576383Z","last_seen":"2026-09-04T15:41:26.092407Z","times_seen":2,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/onsend-assets.s3.us-east-1.amazonaws.com/tenant-logos/cmql0s8pf0000bcrzcivlxzcy/790c7c143064edd5.png","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.796Z","timestamp":1788536416796,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /onsend-assets.s3.us-east-1.amazonaws.com/tenant-logos/cmql0s8pf0000bcrzcivlxzcy/790c7c143064edd5.png HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 29 Jun 2026 12:44:34 GMT\r\netag: \"6a4268b2-77bd\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0h0YnKupOZz%2Fy9COMojPX72eQVrMKPKA5yhLX%2B91T3gb9qNEHzecC7aM%2BOQwBZHgmWCeln2HwHSNKbkmu%2BPy6zBE4AVDbCTH86otev9f9jTdfjQX7r%2F9Oo2SG4iwopaHUyZC4lwcXfw%3D\"}]}\r\ncf-ray: a35e177cfc71b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30653\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30653,"size_decoded":31590,"mime_type":"image/png","magic":"PNG image data, 278 x 167, 8-bit/color RGBA, non-interlaced","md5":"99310c8818c97e7f10beff8af6ea43c1","sha1":"715fd0a5daba2f32cfe239f01edf79fcd4f9c549","sha256":"790c7c143064edd5758265e624484e8e19f75b28a32c71be409585b4cd2f954c","sha512":"d14d7e3712f2dfb3785a45da9085e5e3256b8736c1497a473feaea60aed8abde85bfc876c76596d96a8a204ea7bf5966262e435bcbeb3cbe726a3b0cd1212053","ssdeep":"768:D91OPvUxwwwx1SDBYOMdj5XdcEgaFZkqWDJ2SQgAMSb4H3:ZsSDBY5JrHhf1ngAJb4H3","tlshash":"51d2f1ba4e050af1db70e7229893033ee55b1f0e5b3a75922ac3726c9bc803316d5269","first_seen":"2026-08-21T18:48:43.625242Z","last_seen":"2026-09-04T15:41:26.095666Z","times_seen":2,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/async_hooks.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ones-pursue-foo-eau.trycloudflare.com/?host=https%3A%2F%2Fbitutility-onsend.xyz\u0026href=https%3A%2F%2Fbitutility-onsend.xyz%2Fbitutility.onsend.xyz%2Fjourney%2Fgenesis-free-mint.html\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-04T15:40:19.761Z","timestamp":1788536419761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/async_hooks.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ones-pursue-foo-eau.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/node/events.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v138\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Fri, 04 Sep 2026 15:40:19 GMT\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a35e178f8f8576ef-OSL\r\ncontent-length: 1531\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2938,"size_decoded":1928,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2937)","md5":"f78e3393d375d2bd75ee22e5bf0f3635","sha1":"2b6d82e3a17d6f4596fb2f6df083fcf498edaa99","sha256":"b7862dbfba8bbbca956f19e4e08280b529e4b27468779775a9093aef8c92dc1d","sha512":"280686efdbef542165cff092b795274efb660689426f8f15523b3478d967cc6bea03a0d7a66400552278a777655231d7e9ad2cba1bb4eb0a45f249e76102258d","ssdeep":"","tlshash":"3b515489a78bf9685b9eb176413a0103e10a0ec89d1c722cf049e9ee695e10c8774fb5","first_seen":"2025-10-29T19:17:04.32262Z","last_seen":"2026-09-04T15:41:26.097747Z","times_seen":790,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/9620-1a59e9d2cde559f2.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.770Z","timestamp":1788536416770,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/9620-1a59e9d2cde559f2.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-5d125\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tejzwH%2FoXwJbMedFB%2FHWdajj540umg3KkkPZz2ZDiA8HjgNiEwhXTeLNdRhbGSTFQsJx91JZ32431RBKTZ5KOs09tHONEMsSyVodIP9OmJjg6D6GNB7yoW5Ja74384wT7rX05GSOaYU%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177cdc57b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":381221,"size_decoded":134319,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4b53eed4d6997176663e2911cc82f06c","sha1":"e627530668b4955bc8bb5387e81c69160c5f1541","sha256":"1b5d5db1c8531cca67784abc3ab699b621c9120f07498992aa3eb270fec48701","sha512":"a540b0edd36b93277d2ab317483e6b483e71a468b8e6d1b2d2b97c2d647c42b9c094f0c0ca56cc9ac3f7eb9d658fc07a0e866e65f0d424d3b201aa8683d137e2","ssdeep":"6144:gLKZA89VL+nuaf4WqVRN+S/1BJAieayT36:+K39VL0uaUNbJ9eaym","tlshash":"cf844cd67291b034c3df81a6c06f0619b33e6a99240d4428f63d9ccb7960699a2f7f7d","first_seen":"2026-08-21T18:48:43.636708Z","last_seen":"2026-09-04T15:41:26.10189Z","times_seen":2,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/5558-7acedb8220a66ad3.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.772Z","timestamp":1788536416772,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/5558-7acedb8220a66ad3.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-469e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ooKTj3ywSG8GSfIVTOiaI4O5mQgVRXklDnZIKXfG9MfeLoM5LEdH%2FHgGM1G%2FUgJAXRGD%2FvVjv5Uwh7o5iCwzrCc6l63qQxOaRZ2UgS7Fn4e5%2BnOFIrxCiaU2p%2F97aKWDUJhZgIkD8%2Bw%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177cdc5ab4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18078,"size_decoded":7713,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18078), with no line terminators","md5":"de2a7a9059a8c86e83a8c7862a6e9a69","sha1":"7aad2eca644aff888610082685791084a4a06bf7","sha256":"33841456d6c8367ca87abd93fe94a6a4de914f43b585905ed9e13ac6d766c404","sha512":"449b54e762c76acb442b671577b3477a13c7b2d825f662cb7a9769282aadb1c66f69b790fc872dd5a96775ca7c55c1b542b1e353cddac99bc2a627187cf21dd3","ssdeep":"384:4+tXnSyAm57GkfxwHrkyNWVA7NVJepc6ck3DH55IvJSksMH8Bi8eb:XXSa57GB+UsJHfI8kVcBi8+","tlshash":"968295ae7151b2077dd6c0809c2e002ad3257955241a801cbaacaed3f667dcef5bbf35","first_seen":"2026-08-21T18:48:43.614475Z","last_seen":"2026-09-04T15:41:26.104048Z","times_seen":2,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/onsend-assets.s3.us-east-1.amazonaws.com/tenant-icons/cmql0s8pf0000bcrzcivlxzcy/4d47e3871a6d4e27.png","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:17.719Z","timestamp":1788536417719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /onsend-assets.s3.us-east-1.amazonaws.com/tenant-icons/cmql0s8pf0000bcrzcivlxzcy/4d47e3871a6d4e27.png HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 07 Jul 2026 15:00:10 GMT\r\netag: \"6a4d147a-1dc91\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2g918feWp37bU04wO3n2ZrAkUqzAXjna6k4EO90fKYXGVSUJxu6s9WrboxKbeZ8iPsG4faHl83lQg3IwLEvNb50Ahur2mEnhWsVNKxXNEOLfFBZkaAgCccIvjy1fFe0HpS1VTct2%2FCk%3D\"}]}\r\ncf-ray: a35e1782cce5b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 122001\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":122001,"size_decoded":122942,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced","md5":"2780a2661291b3fb2afe5f6029a61db8","sha1":"f4a051d6df5112dacbce739900f75412461c0a30","sha256":"4d47e3871a6d4e27519fb840102169e9e2ef63730ae3a1e52de1c57c0dad51da","sha512":"572a7a036e91ed07ac1a93d10f1ede33b00bc5312efd4c5532b4343b1f433396e3773ca67fda8ca2f4aabf474716afd785ff0ed0abe3a07afc04fd6fa829a5c5","ssdeep":"3072:+26fLCDYIVwcKKIFODmezLn2brG3/0aTJ6qv+4wch:jMN1DF0TzLn2bC3suJF+4Lh","tlshash":"7ac301425575c0cae9963735dcc6af9e280e7eca904d4648a4c77e08cd222d73ebb357","first_seen":"2026-08-21T18:48:43.58302Z","last_seen":"2026-09-04T15:41:26.105844Z","times_seen":2,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility.onsend.xyz/_next/static/media/e4af272ccee01ff0-s.woff2","fqdn":"bitutility.onsend.xyz","domain":"onsend.xyz","tld":"xyz"},"ip":{"addr":"18.215.77.212","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:17.061Z","timestamp":1788536417061,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility.onsend.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 12:58:51 GMT","end":"Mon, 16 Nov 2026 12:58:50 GMT"},"fingerprint":{"sha1":"A4:9E:2E:5D:BA:37:4B:F2:9A:91:14:A4:97:59:69:F7:67:41:6B:3F","sha256":"4E:20:38:B5:86:67:62:5A:EE:B1:91:8E:9C:20:5C:00:C5:09:CA:A2:9D:46:70:5A:AD:7C:65:9F:12:79:24:CC"}}},"request":{"raw":"GET /_next/static/media/e4af272ccee01ff0-s.woff2 HTTP/1.1\r\nHost: bitutility.onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bitutility-onsend.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' wss://*.walletconnect.com wss://*.walletconnect.org https://*.walletconnect.com https://*.walletconnect.org https://*.alchemy.com https://*.alchemyapi.io https://api.scrapingdog.com https://api.twitterapi.io https://discord.com https://*.sentry.io https://*.ingest.sentry.io https://api.telegram.org; frame-src 'self' https://verify.walletconnect.com https://verify.walletconnect.org; frame-ancestors 'self'; form-action 'self'; base-uri 'self'; object-src 'none'\r\ncontent-type: font/woff2\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\netag: W/\"bd30-1a0576f27ac\"\r\nlast-modified: Mon, 31 Aug 2026 10:48:17 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 48432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4096,"size_decoded":5342,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"0090de94c534391c23303a41320b1bef","sha1":"141442afceb30986f937c62870b7d534524c4940","sha256":"0b0ff99d5d4c09b1774e8e5fdb027e9553097a561acb954ec5ec338e9b4a1ce6","sha512":"c3277b2d365a56127bda2c0ea5c5bf0c00386ebd8f9a9f87d4df53515a5cf784ce09007f036e0f1d2237e0c3e3c8feec3dd8898b7e7dc77c5313c3689c5fc149","ssdeep":"","tlshash":"e6815b67fba501a4e1872b71f0b386f832406fbc00298dd061a9271c067ac8677362fe","first_seen":"2026-09-04T15:41:26.107548Z","last_seen":"2026-09-04T15:41:26.107548Z","times_seen":1,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":121,"connect":102,"send":0,"wait":105,"receive":15,"ssl":209},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ones-pursue-foo-eau.trycloudflare.com/?host=https%3A%2F%2Fbitutility-onsend.xyz\u0026href=https%3A%2F%2Fbitutility-onsend.xyz%2Fbitutility.onsend.xyz%2Fjourney%2Fgenesis-free-mint.html\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-04T15:40:19.459Z","timestamp":1788536419459,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022 HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ones-pursue-foo-eau.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ones-pursue-foo-eau.trycloudflare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-ESM-Path, X-TypeScript-Types\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: HIT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nx-esm-path: /@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs\r\nx-typescript-types: https://esm.sh/@walletconnect/ethereum-provider@2.21.8/dist/types/index.d.ts\r\ndate: Fri, 04 Sep 2026 15:40:19 GMT\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 04 Sep 2026 15:40:19 GMT\r\ncf-ray: a35e178dbf3f76ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":756,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"7ca4c1770e526303c8b96ec681271e67","sha1":"040ceca3f1799eb067ee3e0c5c3f97e8d48e8492","sha256":"9b69c924617de012e3a6252d715e48202d0bd07eccae08190bc9d0565405d1dd","sha512":"0180a2c052ce5feedb836fc6a1e5d82f2edaa25574f0951b679029a28ca6c0e4098c0fde61858a88c4dc4fb2ee2ac196f3f681864fab71b3d205a0baf010c4f3","ssdeep":"","tlshash":"13e0867181174b8423b80da5ad81af3bebab1758a945215c334ec633f517654c9441f7","first_seen":"2026-08-03T07:57:51.315431Z","last_seen":"2026-09-04T15:41:26.109275Z","times_seen":141,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":3,"connect":10,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/buffer.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ones-pursue-foo-eau.trycloudflare.com/?host=https%3A%2F%2Fbitutility-onsend.xyz\u0026href=https%3A%2F%2Fbitutility-onsend.xyz%2Fbitutility.onsend.xyz%2Fjourney%2Fgenesis-free-mint.html\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-04T15:40:19.615Z","timestamp":1788536419615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/buffer.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ones-pursue-foo-eau.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v138\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Fri, 04 Sep 2026 15:40:19 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: a35e178e9f6876ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28845,"size_decoded":10660,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (28468)","md5":"39e6418dc1a8a38a7baf7cbf64e6bc9b","sha1":"036b9f42abe9026454886016987cdd479ce3f33c","sha256":"64fb61aa5f48644d685f9ceabedba60ea6b5d6ce03dac1943e863d00d9e574f3","sha512":"de01074341e2a0ad5d0b74108a593811ef91c72bd775fc2ab20f98c941fc4635f541fd7983f08cd93700d7f6f582c55b95fdfaed785258eef4f0b55322df151c","ssdeep":"384:f2ROO9YwKOX7MW/I55zmhYuC2rUV5w+c7LW+M444MMazyXDNcyO9+C9YDNqWRMzI:fKewKOX7MWwGzCrfTc7LW+bcp9a60","tlshash":"d3d2b694f795b032439e65a50057980ef2b8f928640d198cf6a0f5f728b59ce88eff74","first_seen":"2025-10-30T08:47:32.392454Z","last_seen":"2026-09-04T15:41:26.111627Z","times_seen":655,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/fade.gif","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitutility-onsend.xyz/","date":"2026-09-04T15:40:16.177Z","timestamp":1788536416177,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /fade.gif HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://relay.walletconnect.org/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWt1WWJXeUN3cUhmTDRVUUtXMU1TVG5WenliU25hQ1dyWGRKQXhyOFhqRDlEdSIsInN1YiI6IjJmMjYxYTVhMzFmOTdiYTExZjlmYjdjOTc2MmU0YWNhYTgzNDQxNGUyMGU4ZWE2MDU0NzI4NTM1OGY5YWNlZDQiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0Lm9yZyIsImlhdCI6MTc4ODUzNjQyMCwiZXhwIjoxNzg4NjIyODIwfQ.6PV_eyTA6blb41t13C3xGqqckaAWIyq3ZGca6uWi7q-ZBZK4jLZW9Um-9JCvBNLRfqyc5TLMTc12dQn9OgxFDg\u0026projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026ua=wc-2%2Fjs-2.21.8%2Fwindows10-firefox-134.0.0%2Fnode\u0026useOnCloseEvent=true","fqdn":"relay.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"63.188.8.254","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://ones-pursue-foo-eau.trycloudflare.com/?host=https%3A%2F%2Fbitutility-onsend.xyz\u0026href=https%3A%2F%2Fbitutility-onsend.xyz%2Fbitutility.onsend.xyz%2Fjourney%2Fgenesis-free-mint.html\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-04T15:40:20.118Z","timestamp":1788536420118,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relay.reown.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 25 Jan 2026 00:00:00 GMT","end":"Tue, 23 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:24:50:19:3B:DA:52:35:62:2B:85:B8:D3:E7:0A:03:24:F8:84:7E","sha256":"A4:45:7F:C8:5C:09:EA:D9:34:3C:56:81:67:1A:5F:6A:3A:C0:13:7B:5E:4F:C5:F9:06:CE:FD:53:A3:9B:88:77"}}},"request":{"raw":"GET /?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWt1WWJXeUN3cUhmTDRVUUtXMU1TVG5WenliU25hQ1dyWGRKQXhyOFhqRDlEdSIsInN1YiI6IjJmMjYxYTVhMzFmOTdiYTExZjlmYjdjOTc2MmU0YWNhYTgzNDQxNGUyMGU4ZWE2MDU0NzI4NTM1OGY5YWNlZDQiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0Lm9yZyIsImlhdCI6MTc4ODUzNjQyMCwiZXhwIjoxNzg4NjIyODIwfQ.6PV_eyTA6blb41t13C3xGqqckaAWIyq3ZGca6uWi7q-ZBZK4jLZW9Um-9JCvBNLRfqyc5TLMTc12dQn9OgxFDg\u0026projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026ua=wc-2%2Fjs-2.21.8%2Fwindows10-firefox-134.0.0%2Fnode\u0026useOnCloseEvent=true HTTP/1.1\r\nHost: relay.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://ones-pursue-foo-eau.trycloudflare.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: aNz3t8I/kt3ia5ClmV8tBA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 04 Sep 2026 15:40:20 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: ZY45ZRTH8svRbK+lI8nF1T9xccs=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":166,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":92,"connect":112,"send":0,"wait":27,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/backblue.gif","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitutility-onsend.xyz/","date":"2026-09-04T15:40:16.176Z","timestamp":1788536416176,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /backblue.gif HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:16 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 27 Aug 2026 21:42:34 GMT\r\netag: \"6a90af4a-1093\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IBV9sALaS58%2FWDlFOJrpIrBdbP7YdgKBgPYgjLp6VEbU18QjWCdYwQTLlbEn%2FBq9wbc%2FHB5BvI5Dizm8WY9YKVWdo1vhog6BeugTuyeUZotnCn2mv7f4gEJGb%2BTnXliXAvfBo6G1ni0%3D\"}]}\r\ncf-ray: a35e17791bcfb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4243\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/90232170-209e8fb31562f0f2.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.761Z","timestamp":1788536416761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/90232170-209e8fb31562f0f2.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-2a47c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mm1KiUUhD84mZRMsa6aCUjMCfrv06ZXKB3xwEcxIt7%2BO2r13xzZtBWEYkRiQcrpKW2Jfzj8ojJ7X22lFwP%2FecGFlrcyk5yetUbvWKX8O611dhWriLux2%2BpdtAHCbs7%2F5up6qMTl5N4I%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177ccc4db4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173180,"size_decoded":62672,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"38ace24bfdb14a50a988a4a661f588c8","sha1":"acc32fb807094018501bc62826d78c54c9cc6aab","sha256":"0a36e28c4a90cf1e9263348d728715e9a5c6bc0d294ff4c1efe64d440184d1e4","sha512":"c0178c66a2d6d86cc409577f9099a683c8de3261ea8c993e7e54a95706e8b22399254912dd34f6ec4492f4c20ab6ffdc3c252f5349dceaa35de63fe33cc3e144","ssdeep":"1536:lbjE9HzUgtJh6U1s1NeAh9BgDDOmYZlEbXR5PQAYxbU1RSs02ObI/HFVwLBCcuG0:6zUgl9uxhMDKTjYmood2OMbWluGOx","tlshash":"5d04f8e83955f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfda","first_seen":"2026-08-21T18:48:43.606259Z","last_seen":"2026-09-04T15:41:26.114615Z","times_seen":2,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/journey/8e016ed943.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.795Z","timestamp":1788536416795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/journey/8e016ed943.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Thu, 27 Aug 2026 21:41:50 GMT\r\netag: W/\"6a90af1e-14d7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f8v%2F0ezO79mdavpEXkCK0o%2FRUvOBSoXywfnsicr%2BCCJ300CX%2B%2BTxjaoR1LbolHxmP%2Be6iKCAVWC7da3SiK%2FyYODPI%2BVSMQa3BVRAPDhV84k5Te8Ebg39bytIGfYr5M%2FsoczpwZa9zSc%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177cfc70b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5335,"size_decoded":3355,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5335), with no line terminators","md5":"2c9bc05aa4724fc556143a6d72a6fd46","sha1":"dcf2230d1e5ce31e8ed96d37c2bcaccb95e20a86","sha256":"40a8ce826e6975df80579fb93d01d7db7f95f913f9b0550f567a5db8ea817501","sha512":"9151eb5f3df5ceb4629b2991a4839e71625df584f56689e38a4c178784153316d63a9eeb4158a18316bb7646dd9650fa9fe38403f20dbc47685822a1e8f2a774","ssdeep":"96:HVs3lNKmAkfEuCJbvz7Ef4N1CNdRR/H0WCHzIy2wiIlyKvUL5/3ABTw:HVQlNAkfEuCJbQNdRhUWCHUdwiIlyYsh","tlshash":"f7b12f802d80b6440bba6b6b660a74dcf55e544e6d91480be60079d07e6d6bacbc3e70","first_seen":"2026-09-04T15:41:26.119609Z","last_seen":"2026-09-04T15:41:26.119609Z","times_seen":1,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/api/fp","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"172.67.218.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:18.955Z","timestamp":1788536418955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 14:56:24 GMT","end":"Tue, 24 Nov 2026 15:54:49 GMT"},"fingerprint":{"sha1":"F1:E8:88:03:E3:44:52:F4:4F:2C:5D:24:13:E0:6E:31:8B:4C:9A:93","sha256":"CF:FB:D3:B4:0C:5C:1D:8B:FD:60:82:C0:91:48:34:F6:F7:7C:22:85:A5:D4:5D:CD:03:90:49:79:08:01:D9:4C"}}},"request":{"raw":"POST /api/fp HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bitutility-onsend.xyz/\r\nContent-Type: text/plain\r\nX-Worker-Hint: 2898e056ee2d383d34d268b6fec4f915\r\nContent-Length: 1316\r\nOrigin: https://bitutility-onsend.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1316,"data":"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"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bo%2BAZxkGqQZGD1DRKJar8%2BLuOzPwF72UqdYCObpeXRJt5i763GwpyWIcKF4EL1ugtD8sNAgQaaV%2B6v%2BZVNdGpZATnBcd0CTf5ZOOndgbwWP06x1hgIfIuSp9QjuT\"}]}\r\ncf-ray: a35e178aee465687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":964,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"57259f9a3b48f3f1406b3d8bf79ccced","sha1":"1def19ec1e669b4c0e4e330b90bb8fa514567a5b","sha256":"d402629c17c8301fbb63753a6f7c24167664e4cd12acee272105b02327a627fc","sha512":"35ee8b0c91e72b34b75f2ff9f0e4dd469e9d218ec87d958f985a59c343625c5162614e8fbca1876a689279821752307915d083fc8c00df76f0835b6812be80af","ssdeep":"","tlshash":"73d0eb846807c8a2023c47d80804d1002bb4135c86f81c8fccc2b4302b43c3c46a54fe","first_seen":"2026-09-04T15:41:26.1221Z","last_seen":"2026-09-04T15:41:26.1221Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=4\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:19.069Z","timestamp":1788536419069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=4\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bitutility-onsend.xyz/\r\nOrigin: https://bitutility-onsend.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 04 Sep 2026 15:40:19 GMT\r\npriority: u=4,i=?0\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\ncf-ray: a35e178b3e14c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170294,"size_decoded":28069,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cbb3e9738efdc29fae1a59370c6b129a","sha1":"d559ae13eef8fc3ae911e6819ca204431393bde2","sha256":"0bea0e4ebda09ba8e5a95a4e572852c1b76377a63c56c9e0be188db6b3ad96e1","sha512":"4c80d5440c46e66cfe5ef0eb1dc9a5a47fe66a9d7b6238168680cb0fa65a4f8d3230c198cfd825f194c230b5daaa346346205b86159aadd4419d6587b76f707a","ssdeep":"1536:OzoscDIu+4PCuiBkV7bI4I0d/i5GnaK4ko+p9jP:Gu+4PCuielkAnaK/p9jP","tlshash":"50f3856f8b14de661fb24388915cf9eca15fa117cdcd9cb6e2e1cf2440b89f7215218a","first_seen":"2026-09-04T14:40:16.065256Z","last_seen":"2026-09-04T15:41:26.124268Z","times_seen":3,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/events.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ones-pursue-foo-eau.trycloudflare.com/?host=https%3A%2F%2Fbitutility-onsend.xyz\u0026href=https%3A%2F%2Fbitutility-onsend.xyz%2Fbitutility.onsend.xyz%2Fjourney%2Fgenesis-free-mint.html\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-04T15:40:19.617Z","timestamp":1788536419617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/events.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ones-pursue-foo-eau.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v138\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Fri, 04 Sep 2026 15:40:19 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: a35e178e9f6976ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12122,"size_decoded":5161,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9385)","md5":"acd05dc333042e32473eb39c7700cc9b","sha1":"a9ff738706c3e6ab2be579d296faecd67e438f47","sha256":"4c6150b88c1444aa1fe9331013e3f37eda9836206f629f7f3ae8f3743dd90fa8","sha512":"658a1eebb2727249df13bfd7f76d1bd38921ebc2dff63b8c1bf779973bd10483b7138649e7168a1ea7305c88542876be92a52b1da915331806436b0455f9a6a5","ssdeep":"96:yIJAOQoXa9RQ9bKVXQ6Z9cBBEMPg19H+MyLfLYCGZjiSl1YYS/07jfofxSXR261G:yyiZInEGaGLYCKt70WRRD7EE00WZ","tlshash":"404286ccb386b87113def3af707b4146f23459e0685c0408ba75fcf6292a98995a6f71","first_seen":"2025-10-29T19:17:04.387887Z","last_seen":"2026-09-04T15:41:26.126433Z","times_seen":793,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=5\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:19.119Z","timestamp":1788536419119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=5\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bitutility-onsend.xyz/\r\nOrigin: https://bitutility-onsend.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 04 Sep 2026 15:40:19 GMT\r\npriority: u=4,i=?0\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\ncf-ray: a35e178b8e23c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221963,"size_decoded":31297,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4a78bc9512578c318933d47acc0ced58","sha1":"4130eb6e3076e703f047425dcd74247d908197c6","sha256":"9738e51b739f61e762d6ef9724312c29fc307fe6381e80601a6730da833fb63c","sha512":"9949a0fff9a6bd5b9c10b56aec4de29b25f9e7e1599fb8f08fa6ac9d8ff0f5fd67206903f9f5676be3bf09176ab08968a31371bd4f3eca309529e2ae6fcf3128","ssdeep":"1536:pbinZhimNX3XFQ5Luj5ygGWudQT6bjzeFedG:pWnZhimNnOCVB3udQCjzeFedG","tlshash":"bd24656e87409e565fb19388d25cf8eda1afe103c9ce5ca6e2f18e3444bc5f3215129e","first_seen":"2026-09-04T14:40:16.088644Z","last_seen":"2026-09-04T15:41:26.128365Z","times_seen":3,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/9232-e2caedfc81ecf39e.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.775Z","timestamp":1788536416775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/9232-e2caedfc81ecf39e.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-e362\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2TuG%2BnlIgAIM4YAt2WjIU0%2FFkLMBKadWMOuHNKgYXUvETDtmPtl3ds%2Bph6YbT9aZ0xMz9uwuRXoAxOCQwVRPoPUwXtOCrGl6YdHDPXgq16ud4mJFmuXQ5wthgEdZFdLqVqME0nHmNBc%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177cdc5db4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58210,"size_decoded":16227,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (58210), with no line terminators","md5":"7073e941efd8918545e43d02ded1f8ae","sha1":"b5fe62c0f87f0f7ccd160cca32fbd28bed74aafc","sha256":"100242772c5bb53ba55dda266e715b46cc943896664b17bb825ca6ece0f1d7da","sha512":"ff54bf7f51830505ccc695cf83e8279872841de4ede44fb6e73ce57508fc2a4fc44d2dbb19445b761f070a2fe20e89c6ec963709201eff987809bef94f77a119","ssdeep":"1536:hhBdA4GOUC90p583oeoGf3479VHfNJpwuMiF5k9Cm:hhRoeoGf34795kiFa9d","tlshash":"3a43b78a3796b0164bad519624b94443e3adbeac461d04acf0fd91de7b9cc45f2b3b30","first_seen":"2026-08-21T18:48:43.66612Z","last_seen":"2026-09-04T15:41:26.13235Z","times_seen":2,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/2067-73aba2af28c066fe.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.779Z","timestamp":1788536416779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/2067-73aba2af28c066fe.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-1718d6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lerxPtWei%2BRjR9mijl4k8DkOUEHC4Apof6SZzPP7xpxphhxVP7s4SpjebjNugnV6ZV%2BNHAI3jXyttKVWPMCoaddNcf3lmAWt2vvDs9MWUWjHXvenulvYmOzpX3wNQ3c8igZ62zdhVjE%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177cec61b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1513686,"size_decoded":465965,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5890ba8853cea05a6dc78b8d8b18e426","sha1":"d2af18669855d12bfed712ef9fe3ed219959ed23","sha256":"127e7aa7ec4e6c66f12831e0677fb489185f376b4f72908c75527443291ecdd0","sha512":"dff24dc7f709f33c8b61f551460c3a3e03751d12d2feb28effbc833545bd38fdf0bef064b14327c953a3a2e821d13740dc3a0b4892bd5d0a4822bac6b34688ec","ssdeep":"12288:wVHD3MUVPTfclcfoK9VQi6Fd5PTY9XVXxc73IlyynzPDabDenDgz2HcCHx:o3MUVTfclcgK9v6j+Xxc7Yl2nenDgz2f","tlshash":"0b256c9073b1b03817978198a55b0120e234589a410d84bdf7ecd1f6efe9ac895fbfb6","first_seen":"2026-08-21T18:48:43.639439Z","last_seen":"2026-09-04T15:41:26.135641Z","times_seen":2,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":286,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/9098-32163bc24be87dc9.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.783Z","timestamp":1788536416783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/9098-32163bc24be87dc9.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-3b15\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vS2J1Lx%2BGSeoCX7TtgQQNhs4LnBiZfVFo9Qpulwt4rIo786Lx0hrXqw9Udn3y3JDSUv%2BOu7MqfWZZeoAtdkRMHdYFYR3gRFLcQGZPga8IknV4j%2FMRGvv1LIqF5%2F%2BSmZgd15ugZUleZA%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177cec65b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15125,"size_decoded":6665,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15125), with no line terminators","md5":"03d35305e1445fd1a5462782802f5beb","sha1":"87975c8412028dac3227c59df5ddd8163cac9f1e","sha256":"e9a35eec8c8beb1eeef2d39369be36033b5f824168a6db07bb1d3369259b75ad","sha512":"5e109ced481c08bc5ce188f0043062fe12e8002a82f4dba2d2ff6a16e7bc5c6c186205bc0fd16506a25e922af020812de3274c5ca551c5e31aa7807b59759fe8","ssdeep":"192:PYL8jcPlwloAxUfoziZuolpmmA/aYbmSrcIyMMlCp:PYQYPmLUSg9gqYbTrcRMMlC","tlshash":"1762a8c5b1e2b5ec472790a9802f610eb6af4f814d1f0528f2b5f85779653a4e623fc8","first_seen":"2026-09-04T15:41:26.138019Z","last_seen":"2026-09-04T15:41:26.138019Z","times_seen":1,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/app/(public)/layout-755da2d726e5b9ff.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.784Z","timestamp":1788536416784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/app/(public)/layout-755da2d726e5b9ff.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-7518\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=exIQ7g2kZGJUbReDVfaMtO%2BhIvmp0jw8H1YkbBHQZR2Yappg5%2FChnhIuw1Sw%2BI86roT9Fg%2F7dejZWSBbv9zMZy2JKmUUw9G6ogmtK593RvHd1ApLZj4WX7tRa5lkp32HIFaRNYO6G6g%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177cec66b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29976,"size_decoded":10589,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29964), with no line terminators","md5":"acfd122653dd9bca4624402e41dd7371","sha1":"7142b3922ac1d9622c6f2ee844f7fb6b53422568","sha256":"441de52469d492833d688b2c82c937cae58a41299a6a7f5abbbabf4b955aab67","sha512":"ea005835fd5ce0e5842d749638aabb51ed3a5436cce197a69075d05a317019b45269995bd8a85f1cc6a6984df7132063c3f31e6a60d406cbfd1e54fa2f653bc9","ssdeep":"384:ik/jL1ELYvo4bSTgElDCe5qNQEV5oD3Ate3TUto/6p5gC4AKpjhW0a+XPJh/E:ik/Lo4bSTxl/56QEoEc34+6AJpjhWCRe","tlshash":"98d2c716b289fded665b0decb2af940c711f1b24c90f0d65f2b8b8911467188b623fc9","first_seen":"2026-09-04T15:41:26.141875Z","last_seen":"2026-09-04T15:41:26.141875Z","times_seen":1,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-rpc.publicnode.com/","fqdn":"bsc-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:17.085Z","timestamp":1788536417085,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 02:01:04 GMT","end":"Thu, 05 Nov 2026 03:00:51 GMT"},"fingerprint":{"sha1":"94:5F:9F:32:64:19:A5:50:59:22:7E:16:22:E5:6B:9B:1C:65:F3:ED","sha256":"7D:67:31:E8:80:74:FB:3E:3C:A4:1B:9F:F0:BE:71:56:CE:95:31:97:BD:28:75:B6:47:AA:02:45:08:74:76:65"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://bitutility-onsend.xyz/\r\nOrigin: https://bitutility-onsend.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a35e177ed9b62efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":616,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":46,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/onsend-assets.s3.us-east-1.amazonaws.com/tenant-icons/cmql0s8pf0000bcrzcivlxzcy/4d47e3871a6d4e27.png","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:17.721Z","timestamp":1788536417721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /onsend-assets.s3.us-east-1.amazonaws.com/tenant-icons/cmql0s8pf0000bcrzcivlxzcy/4d47e3871a6d4e27.png HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 07 Jul 2026 15:00:10 GMT\r\netag: \"6a4d147a-1dc91\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=em8olvEKCybbLn8S2rvfaNifZ4hd2gK22HRYfTcKL%2FLQs%2FmzfbjoChmHUNIsCcjPVwE81H1DFgGsPvqNEzMdNyD2ni1mAlRGqhSpg%2FNZi1qzxd4HC%2FtC6kX4e%2F3d5cN2e07JhNXdgMg%3D\"}]}\r\ncf-ray: a35e1782cce6b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 122001\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":122001,"size_decoded":122943,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced","md5":"2780a2661291b3fb2afe5f6029a61db8","sha1":"f4a051d6df5112dacbce739900f75412461c0a30","sha256":"4d47e3871a6d4e27519fb840102169e9e2ef63730ae3a1e52de1c57c0dad51da","sha512":"572a7a036e91ed07ac1a93d10f1ede33b00bc5312efd4c5532b4343b1f433396e3773ca67fda8ca2f4aabf474716afd785ff0ed0abe3a07afc04fd6fa829a5c5","ssdeep":"3072:+26fLCDYIVwcKKIFODmezLn2brG3/0aTJ6qv+4wch:jMN1DF0TzLn2bC3suJF+4Lh","tlshash":"7ac301425575c0cae9963735dcc6af9e280e7eca904d4648a4c77e08cd222d73ebb357","first_seen":"2026-08-21T18:48:43.58302Z","last_seen":"2026-09-04T15:41:26.105844Z","times_seen":2,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gf","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"172.67.218.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:18.133Z","timestamp":1788536418133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 14:56:24 GMT","end":"Tue, 24 Nov 2026 15:54:49 GMT"},"fingerprint":{"sha1":"F1:E8:88:03:E3:44:52:F4:4F:2C:5D:24:13:E0:6E:31:8B:4C:9A:93","sha256":"CF:FB:D3:B4:0C:5C:1D:8B:FD:60:82:C0:91:48:34:F6:F7:7C:22:85:A5:D4:5D:CD:03:90:49:79:08:01:D9:4C"}}},"request":{"raw":"OPTIONS /x7k/gf HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://bitutility-onsend.xyz/\r\nOrigin: https://bitutility-onsend.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:18 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tgnFEPQvpC%2Bkqcm9uLIARl64V%2FcammSi9mntLk4I63gI9%2BWYCiD%2B3kLh5CRVkkkBfuznCJfcNXmCLo%2F9CnLMo9GZBuv8mZPEhLTPG22F2pe6Yvy3hzMgkl4ILlaF\"}]}\r\ncf-ray: a35e17855e175687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":666,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/8272-c6f0126d8aa1863f.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.788Z","timestamp":1788536416788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/8272-c6f0126d8aa1863f.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-3467\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7r%2FNdIf3LFAlkTvh317bdvRf85nePxLva%2BRLop2nM0bnDn7pqa9S2XCQKZ7%2BhUcCR7hvNFkhQLv5b2s7j6qnrlW0RX3zV%2FS1DQuEY9FbH5ZnDz6ko56UUwPx%2BmbJ%2FPl0ilusjPxSrXY%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177cfc69b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13415,"size_decoded":5732,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13403), with no line terminators","md5":"004b01d98c5835bdc53fc24799ab44fc","sha1":"d7fea7a89322e4424bf586a488a81d257c4cb42e","sha256":"89d2d80c57d43972b9ea811bb345b01d3f428704616237ea74999e8e05c1c2d0","sha512":"97c704385172b987fc3b2313d14b3744b382809246561c37d3ab06df0558deaabfa76404068c7d040b339143d618e21705f5570b95ce9ae78a4f4f4684e91d9b","ssdeep":"192:AJsScVU5JVFn6RNyu+k6MV7q258BxMi0+mCNxwdq5lKxP:ksPsXn6Dak3VBmBj0+mCwqqp","tlshash":"5452980572d2ba9ce4bf41d8f12fca1db15e6f59cd0ad979f1b8682129084e1b943fc8","first_seen":"2026-09-04T15:41:26.143371Z","last_seen":"2026-09-04T15:41:26.143371Z","times_seen":1,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-rpc.publicnode.com/","fqdn":"bsc-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:17.084Z","timestamp":1788536417084,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 02:01:04 GMT","end":"Thu, 05 Nov 2026 03:00:51 GMT"},"fingerprint":{"sha1":"94:5F:9F:32:64:19:A5:50:59:22:7E:16:22:E5:6B:9B:1C:65:F3:ED","sha256":"7D:67:31:E8:80:74:FB:3E:3C:A4:1B:9F:F0:BE:71:56:CE:95:31:97:BD:28:75:B6:47:AA:02:45:08:74:76:65"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bitutility-onsend.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://bitutility-onsend.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x1AC7d768E37B147c993dE943D704c4e92d7861A1\",\"data\":\"0xb68d1809\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 2\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a35e177f2a952efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":231,"size_decoded":592,"mime_type":"application/json","magic":"JSON text data","md5":"7275fdfff05cbccfba1abef632564d09","sha1":"43d0e7fbbe545cdc162430cf8a52a9b96ac8bf4c","sha256":"13ebb32817c5ecf09a64719660044ec05e5ad395adfd95a8364003ac143df7be","sha512":"0ce4178ed1dc968eaeed8a4910d9291fbcf1e402d29c69b13975eeb44835dc5e6a2171b033d0dd45b577e526c1f971bc874be47b1c15d6da653f42bc9b42ac4a","ssdeep":"","tlshash":"5ad012f4130b4b71d0ac4c44904472012121be8909c00e82080c0c8011842421725121","first_seen":"2026-08-31T08:18:25.340841Z","last_seen":"2026-09-04T15:41:26.14573Z","times_seen":14,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gc","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"172.67.218.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:17.208Z","timestamp":1788536417208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 14:56:24 GMT","end":"Tue, 24 Nov 2026 15:54:49 GMT"},"fingerprint":{"sha1":"F1:E8:88:03:E3:44:52:F4:4F:2C:5D:24:13:E0:6E:31:8B:4C:9A:93","sha256":"CF:FB:D3:B4:0C:5C:1D:8B:FD:60:82:C0:91:48:34:F6:F7:7C:22:85:A5:D4:5D:CD:03:90:49:79:08:01:D9:4C"}}},"request":{"raw":"OPTIONS /x7k/gc HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://bitutility-onsend.xyz/\r\nOrigin: https://bitutility-onsend.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S56X%2BQqk9T9HsynV0JQrq30dZ98wxU8TWYJ5UD1cjl%2Ba2zQJACCkPL2EpPKSSYsbClIYg5tjb0gF6PzYP5wa%2BkB65mLBR%2B19t%2FB14Y48UpdxioiqWsjvG0PMz2Y9\"}]}\r\ncf-ray: a35e17816dfe5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":666,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":414,"timings":{"blocked":0,"dns":275,"connect":14,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ones-pursue-foo-eau.trycloudflare.com/?host=https%3A%2F%2Fbitutility-onsend.xyz\u0026href=https%3A%2F%2Fbitutility-onsend.xyz%2Fbitutility.onsend.xyz%2Fjourney%2Fgenesis-free-mint.html\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-04T15:40:19.620Z","timestamp":1788536419620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ones-pursue-foo-eau.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 11 Aug 2025 12:57:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Fri, 04 Sep 2026 15:40:19 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: a35e178eaf6b76ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1046087,"size_decoded":381242,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32044)","md5":"362ca438ae65cfc912b7a743a781ce7b","sha1":"8bd96bb53323eab2db38be0eb2b408ddf2b95b17","sha256":"06449c96378758359a50cc186e8017a20143e74a7dc5b57efaef3ea2c88f5017","sha512":"0ae63ee9d428f583c852ea0456d74d0a9cc5ce6341734c041ee00d5236c364738ca7fe0397c3e3818a86875cd48a7eba3419174a679258ba4bc4ab3f3ac97f04","ssdeep":"24576:fpISZZVokQyZ74ejf2kwwwCbUef690riXt2s0Fj6+6:RISZyyZ74ejf2kwwwCbpf690riXt70FY","tlshash":"9c256c907361b47a539b82a898ab0500f3395859500d802cfbecd9ebef949d9c5bff71","first_seen":"2026-08-03T07:57:51.324381Z","last_seen":"2026-09-04T15:41:26.147803Z","times_seen":140,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/3154-f182769f997cc32c.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.773Z","timestamp":1788536416773,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/3154-f182769f997cc32c.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:16 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-167d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0y0lHKFd5adXJF3%2FEuPgBd7bd6j5pkZGC71gPxd3L%2F8estKwIj9GPId1DV1FuKHOhKhpyr%2Fgm%2FMqTFxjre%2BW7fWNS6pbPDY6CQ9ocE4mKJZUr7VPvILvnyHzXfI%2BBF%2F03IE5umlyt9g%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177cdc5bb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5757,"size_decoded":3348,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5757), with no line terminators","md5":"8506fe399cb5c6f24388489995e6eaa0","sha1":"b297ea92d52e11c0d58f1048c4c1e6b9f75ac516","sha256":"32a6d350a22e81720bafbddd5adf7be596ee86bbbcd9febe56bf487e32e2490e","sha512":"b260a5d706b161c0005eeae413b817ec6b0cecbb9e0113a07bdf63ed6f2e95a11f742944c25ff03dd9a4b57c8abb846378a24e63c01c84cc96d7f8ebe228d59b","ssdeep":"96:obDv9GC5HHfJTmnd2Mz5RqqHdCBqxe7tDqotqZQQJs19GCvinGbZJm5f25WeD9Gj:GDEYxTmnd2cNdCDRDjfQ7DkJyO5Wjj","tlshash":"a7c1c56731c1f893c2ab5295c0738019327a1d3f241f7528a3f68cf962f455ea592f4b","first_seen":"2026-08-21T18:48:43.623354Z","last_seen":"2026-09-04T15:41:26.151763Z","times_seen":2,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ones-pursue-foo-eau.trycloudflare.com/assets/index-f2H8W9Sl.js","fqdn":"ones-pursue-foo-eau.trycloudflare.com","domain":"ones-pursue-foo-eau.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ones-pursue-foo-eau.trycloudflare.com/?host=https%3A%2F%2Fbitutility-onsend.xyz\u0026href=https%3A%2F%2Fbitutility-onsend.xyz%2Fbitutility.onsend.xyz%2Fjourney%2Fgenesis-free-mint.html\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-04T15:40:19.304Z","timestamp":1788536419304,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 20:25:50 GMT","end":"Thu, 05 Nov 2026 21:25:21 GMT"},"fingerprint":{"sha1":"0C:9F:E5:04:61:B4:27:20:4B:CF:FD:B1:2A:2A:F6:AB:9F:8D:32:F6","sha256":"B0:65:76:06:0B:B0:3C:A9:FE:77:EF:DB:5C:E6:C3:4E:DF:8E:E9:7F:1B:4F:F0:AC:48:95:6A:F6:2E:2E:08:D9"}}},"request":{"raw":"GET /assets/index-f2H8W9Sl.js HTTP/1.1\r\nHost: ones-pursue-foo-eau.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ones-pursue-foo-eau.trycloudflare.com/?host=https%3A%2F%2Fbitutility-onsend.xyz\u0026href=https%3A%2F%2Fbitutility-onsend.xyz%2Fbitutility.onsend.xyz%2Fjourney%2Fgenesis-free-mint.html\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 04 Sep 2026 15:40:19 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a35e178cad66569c-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49971,"size_decoded":37382,"mime_type":"application/javascript","magic":"data","md5":"0878a59877e35ea9a46f94d9fabb03dc","sha1":"ee4065b3586fb2375b435be5e09ed03acee35abb","sha256":"59c7d2596b774438e6ad0f36d20c2ee4ad54953654a14a5616c5ad8b66ba0615","sha512":"11b8567cb4d138528f5e19482b11bf1332242b43a717ae4e5f069e54f905a337577922dc148dc786704785ca525fa1ab0e2bd33a6b622a570d388750904a724a","ssdeep":"768:hEmJ9uKRXOIhP0ioZxtL+2OeN8e+pMNKbmWQZTiqsuA2hJf8NCu2Ct:hEmiI6vNpOPQB9FLEJ2Ct","tlshash":"cd23e1e5643102390674ab70395a0acdf9748ba659ecdb4ed152c0a4ebe539f08efe70","first_seen":"2026-08-31T08:03:52.525654Z","last_seen":"2026-09-04T15:41:26.1552Z","times_seen":25,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/css/97aa83345bc46f65.css","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.757Z","timestamp":1788536416757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/css/97aa83345bc46f65.css HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:16 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-50b2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5fEQX17geHtAQvRlB5UKOjL3LubQOT9NUa00W9S4zmP2A4G36HlTRtnOkbeMK49YDh9S1iPYDPrUOgt0Cnn6a6CNv6SWq1JGkwNW%2BXk3W%2BHza9wG2pAW2nydgPmPC35MTeyZ0Kyd3s4%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177cbc4ab4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20658,"size_decoded":2961,"mime_type":"text/css","magic":"ASCII text, with very long lines (20658), with no line terminators","md5":"0181d2791b8541a5cb946fb71d9b57f8","sha1":"1908bf7c4ad567de43777c6c1ed97435669d3f1f","sha256":"79292e610d861cfabb19d473b0392aa552ef4826fb8df8ae00e081b03fd8119e","sha512":"c806fa088d924a91bde49ad7f84149e7ed4a8441896ef1c6bcc476dc5e29827bf733ebcfb7a7928ccac2564ceff71e74a8fecf4de25f1a49c2a4e5f25a0b19f6","ssdeep":"384:b04XLgnRoVclBoo+x5Jgi+fUjKkbwf2U1GbjjCCYKKbaaLLhKRbhhggaKIbYYJJa:XE8To+H9fSYJ6qV7Acg3KeE","tlshash":"e692ee34802ec09ed576bcd331c97f1339bd142549d06926ee2c496d8edb83b73a9b68","first_seen":"2026-09-04T15:41:26.15888Z","last_seen":"2026-09-04T15:41:26.15888Z","times_seen":1,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/main-app-5d9c4ca763e929d4.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.764Z","timestamp":1788536416764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/main-app-5d9c4ca763e929d4.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-511\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J5LrFXEKAruh4psC2q9oWHr0Tbxs0T5G9sAjB50ONxKCw3EnY3zkBZiUQRg4GrkQXsEy3tEi1yxIpWplSHM8rMwPpcJ%2BHIfnnr67QIzaMFeMDtexKjbhuEXFqYMy2pDYSj2hi048TLc%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177ccc50b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1297,"size_decoded":1611,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1297), with no line terminators","md5":"ac54ea71d4091a7824d1d151420857d3","sha1":"57a0edfb56a5d2ffcab43b6344379000677ce1dd","sha256":"585994e2b49b0bd0075a01a7eb928132ded44a19487d8bbb7602d2043946bdb5","sha512":"22aa055c4cbcac4d9cf8f97fa53872b2ad2e3b3d2495e1d99eaad652d9cd45454d19488e40e2d8089f73101c9ea90a9ff2d0921e1d44dec9292de10bb16a5d10","ssdeep":"","tlshash":"2421dfc81378a50e611927b8f8675c2734694177245f4a60a13cceae3c33b6883a5a7b","first_seen":"2026-09-04T15:41:26.160454Z","last_seen":"2026-09-04T15:41:26.160454Z","times_seen":1,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=7\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:19.246Z","timestamp":1788536419246,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=7\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bitutility-onsend.xyz/\r\nOrigin: https://bitutility-onsend.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 04 Sep 2026 15:40:19 GMT\r\npriority: u=4,i=?0\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\ncf-ray: a35e178c4e47c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59588,"size_decoded":10615,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1bb304c8cd695a7324d65bdb8c5f253d","sha1":"9b0dba616abafb477342cd08da8980ebd9096f80","sha256":"24ea61be437c2056d6eb6feb1bdc1a85e8ffc7c94fc0ab3756bc0e0b786906cd","sha512":"75928944af226eba43a08e85b213291e56d1c7e0951b2048b24ecf8f645e6eb75e585049a3ee30b3fe1555b5326690cb4e90680d90902f4dffe9b297759c27a5","ssdeep":"384:oNWHp+osRs7K0e3UvQtzU1HMupr+BV6w85LCr6PzW96Q4yMup8:7JcEv+U1lryV6w+5WCI8","tlshash":"0e43746b8f14ee762bb213cd115c79eca24f2117cdca9cf6e2d1cf1440b4af6216619a","first_seen":"2026-09-04T14:40:16.076796Z","last_seen":"2026-09-04T15:41:26.163016Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/9966-1d8e4ee8de7ab19f.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.781Z","timestamp":1788536416781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/9966-1d8e4ee8de7ab19f.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-af07\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mOq4cGE8KHnK6LqwNCHTldQj9BOSQSg1t3W2PFDZGjhytMo6F2KoHGPPV89Yvu8filQJgFJBCn1lrCqP1bSdvo0M4cFvaE5ZOYG4qMRtZoRhNjAANlbKPUXWd9YzuJqOhn6FaGcLi44%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177cec63b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44807,"size_decoded":14680,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44787), with no line terminators","md5":"cfa081086a7c15b4558e92c084846812","sha1":"247ed73e18ecce02a4a312ef3b196c15f6e3ac5f","sha256":"201e8ea1bc57b98e676cedb78a77bf2febfc10e9966bac29346e3753ff8279a7","sha512":"63502787800624ba56bb60f77e38ef783407fe8e83c4fdc528fb357c9a25a3ba5cf2b23fdd5bfffbd83d43923e8607f0cbc114efd10d6dc27e0d3c4d79d10a7b","ssdeep":"768:pvuKKgRtfPfsf6YZ0Bum3EZ6r3wZFHsMyF8XHZ0cMI8LZ:pttHEztg8jsMy0HbkZ","tlshash":"1013d78db1c27eacb92b89acb66fa00db11f1b94dd1f0da4f4bd945528450d4b623fc8","first_seen":"2026-09-04T15:41:26.164749Z","last_seen":"2026-09-04T15:41:26.164749Z","times_seen":1,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/app/error-496cb0314ab10889.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.792Z","timestamp":1788536416792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/app/error-496cb0314ab10889.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-573\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KL7uXmNJ%2BIuws0x3L0osCJW5QG40k%2F4aQ98vuesTLGi6m7GLok%2BY4aVMMoI9dadLRnlXI5j44w%2B549KX1f7QoJ49kGSGhDK8doPjP1hhg0cxmecJA88%2BCX84hK1g72dxddop5g3sBUs%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177cfc6db4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1395,"size_decoded":1716,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1395), with no line terminators","md5":"ecf94078b9a00b81939d7db8e2352b74","sha1":"3db3b482ba179a69f951e9059fd51d97c371ccaa","sha256":"9a0782cb2fd2c237c8dd45c2d2ab75ae9598a9d59fde3ee1ace052dfe7fb5fe7","sha512":"71f101fa4d9a5217468e5e8fce90d1aa585049f028cad93602b53bf928c5095b3c2e580eb1efee98c05b4056d3fe20e613de97d51f2b1070f9ae36ae4e03dc12","ssdeep":"","tlshash":"2e21744535d0bfdd750a05bcd46fe10d31ab49bb860d8e36927408355d6248da733bca","first_seen":"2026-08-21T18:48:43.580837Z","last_seen":"2026-09-04T15:41:26.167705Z","times_seen":2,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/_next/static/css/d1cc95c2d12f712a.css","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:17.272Z","timestamp":1788536417272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /_next/static/css/d1cc95c2d12f712a.css HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Thu, 27 Aug 2026 21:42:34 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=0,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BOFR84GoKiPgToyCNe%2FAldJ%2F7HdKs6HU7qZaLFivi1RX6X9%2B1pQd0MpsXMdw9D4LiGMZMX7I6KzDrKUwV8KVKCcS4ZwFLro8f4FUcIsOX6BoV7Dz81rf02YvRNkketzF%2FeTkOWwOieE%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35e177ffcb3b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ones-pursue-foo-eau.trycloudflare.com/?host=https%3A%2F%2Fbitutility-onsend.xyz\u0026href=https%3A%2F%2Fbitutility-onsend.xyz%2Fbitutility.onsend.xyz%2Fjourney%2Fgenesis-free-mint.html\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"ones-pursue-foo-eau.trycloudflare.com","domain":"ones-pursue-foo-eau.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:18.901Z","timestamp":1788536418901,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 20:25:50 GMT","end":"Thu, 05 Nov 2026 21:25:21 GMT"},"fingerprint":{"sha1":"0C:9F:E5:04:61:B4:27:20:4B:CF:FD:B1:2A:2A:F6:AB:9F:8D:32:F6","sha256":"B0:65:76:06:0B:B0:3C:A9:FE:77:EF:DB:5C:E6:C3:4E:DF:8E:E9:7F:1B:4F:F0:AC:48:95:6A:F6:2E:2E:08:D9"}}},"request":{"raw":"GET /?host=https%3A%2F%2Fbitutility-onsend.xyz\u0026href=https%3A%2F%2Fbitutility-onsend.xyz%2Fbitutility.onsend.xyz%2Fjourney%2Fgenesis-free-mint.html\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea HTTP/1.1\r\nHost: ones-pursue-foo-eau.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 04 Sep 2026 15:40:19 GMT\r\ncontent-type: text/html\r\ncf-ray: a35e178a4a46569c-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1086,"size_decoded":762,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7dead4ba970a8984e84186ac8b407d34","sha1":"672c588381a1262ce004e65fb2faa79dd2f62d1f","sha256":"7fcd7da4b898827bbd559e300765656899be3edbf15393193c6e05d09f4ceff2","sha512":"22e54cc32dba587465931f228ab02dc2fc4c0fec59e6de843e526a1e93e4541949b1ce74ca8880de53883ae8df85af848199f14ecb08893539d9ab35733358d7","ssdeep":"","tlshash":"f511d0450d57007105f38ad63b5f7f05a362924640c0c5003ffae2b7af53e5bc805ad8","first_seen":"2026-08-20T12:56:45.684951Z","last_seen":"2026-09-04T15:41:26.171737Z","times_seen":31,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":0,"dns":5,"connect":1,"send":0,"wait":300,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/1947-4ad5827b45601758.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.776Z","timestamp":1788536416776,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/1947-4ad5827b45601758.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-1f5e6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XjjKNb7o8aYREufkzGwob9pLeW1ZgAhdfCGizwLoyAWAlkEw%2B%2Fr%2BCgZmxG1QnhLlZbXf78ojoTPKDCYtPfbmfPDnlvllQ0fVsPjbLWxkg9r%2FsqF53rlBzFCOoN9pkf9ALBm3AoEGgaY%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177cdc5fb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":128486,"size_decoded":44010,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53152)","md5":"eeddcc58c388d472fd4bef5d8cc8a973","sha1":"927235a1429b25276baffcce774e712b5d5319c4","sha256":"1f715bbd421c014fb108affbbc8ea1c9219946e9c084a0ae4332287053287efa","sha512":"dbfb6457448bc3d8e44b313e488f524492beb488563972e2e50b39ead0b4767bd147e9d24a4bfadc08d9ec184f914184bdee6991741ed3cef6a0b68846496c5b","ssdeep":"1536:e2NofGMe2fk7DVq7ET/3R8NiOyK4Hhej5nGt7LNyWEUCfOe:ewope28DVnKi8Ke","tlshash":"65c32b95b3e1b4b643db61a6142b0005f27858d5650d0068b3b498ebbebb6ccc2f7f78","first_seen":"2026-08-21T18:48:43.589323Z","last_seen":"2026-09-04T15:41:26.173925Z","times_seen":2,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/7690-54bee64dd859a26f.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.782Z","timestamp":1788536416782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/7690-54bee64dd859a26f.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-4229\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G8bOm9%2FTmWubRg529iG5c%2BzJJmeA0PT6qOcnqAXOXxbqHLLEBWZ%2B0mnQjql%2FDhd1AnHnaQxTe7w2NMfh6DdYaafUYWGHPIuFee2O4yRUmmXSJXH4t3qLwvxuCeomw9eAh9tPTWsW4eA%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177cec64b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16937,"size_decoded":6253,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16937), with no line terminators","md5":"b4634133512e46c891ff3dab6f7dabf0","sha1":"bdbd2b7f3849c5472b7c8ceb3ffd8e97ff871e24","sha256":"06883ad2ed5c7b41c7257570bcb4734e1d9a5c5df658dee35656301cd35c733a","sha512":"cbf18156cb144cc020f28224f81a146a1ff5b43f6742b424a2883909a430519d18104e42eca6cd392d80c5bf3b87cd7ac1bde12f9033620e2699240147e42413","ssdeep":"384:T6dl2B82WoNZKe97HzRMiaZzZE6idCtmccyL4EOiZLj/torarmBVMAk+VLBzZ9:Til2xWoNZKepzRMVZzZEQbUEFZLj/toF","tlshash":"2a720ed9b183f3592d7fd065006a2fbd53b605d78ce988fb84394da5341cdac8632ea8","first_seen":"2026-09-04T15:41:26.176002Z","last_seen":"2026-09-04T15:41:26.176002Z","times_seen":1,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/app/global-error-e7ba94e054b38910.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.765Z","timestamp":1788536416765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/app/global-error-e7ba94e054b38910.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:16 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-19c1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tpcBvdeuzYImvbbTzSdgqYr%2BkVqD6eEvsfTXYKAE5HOmQFUJaivdU0dRiDeezcKPfLJ66yl0542Dln%2BBx2L4yhndy4O2koMKqu6oOULyRKBq%2BwvQYhfT8vwr3FPLCnDN8HAdUF7EdQg%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177ccc53b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6593,"size_decoded":3727,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6593), with no line terminators","md5":"151f34d50e87c61689b074416c31be5f","sha1":"18f1fb3bf3e8833fbe3e957740df4de2782a62d9","sha256":"670a40da363f9c7ff776d460db6e299b34cd856d70d5eea229af79a172c7e381","sha512":"a5cb1357345a63ddfce953aa27bde54595a8e40f31473247f82b3b1ae939e159a08e8794e1e79f62fbc173e3afc15270643ba7e6d94d99e7ca9fa2389da53953","ssdeep":"96:oSdltLNrfAm5Wb1a6Bak9GCw1e9X20ub2IGT+9GCX2MTS156:/6BO91e40GGT3L6","tlshash":"d9d1c66771e0f8e2a79a00e18437841ef2921d3e655e20b0b7b68cf556c04ee7263fd6","first_seen":"2026-08-21T18:48:43.557912Z","last_seen":"2026-09-04T15:41:26.18297Z","times_seen":2,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/1509-7811d573abbe925d.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.787Z","timestamp":1788536416787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/1509-7811d573abbe925d.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-2b03\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BptGrQyAWvqRMu6DG15vDdjV0rWSZd2PZ0EcDUu6YZexE87GsNAE%2BrY80GDkCMiJ5jY3vb%2FDuynXU5Y6I9kOujPm8Ilt6bBDpP%2BqKFCx9K99svMR3NDTXOlGrBxR3nueJhYNQEPoNic%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177cec68b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11011,"size_decoded":4966,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11001), with no line terminators","md5":"33707ceb6378b81f8aac886beb19a421","sha1":"e8028a11487857a935956e0698dc902a5836568d","sha256":"b59e3cfe846a033775f4b5d79db13177bb949956bacad5621c20bdbf5b293a17","sha512":"c579e91097c088529e70890ba832cf04bfecf554afeec2e9ec8011af3d9adc7b959a88ecf1dc0f997ed08623d277e60edbc4eee28b094274027fc2c3306fcc27","ssdeep":"192:SlSDf49rQ0GVUOTEdEV+tzPxihAgLkXpXsry7kiSfT:SYz41QPH+w+pxihQ9sry7BwT","tlshash":"1c32a6863560f21d337b81bcd0ab370453d61aae65a60ec7837f20f534a082d8a73f99","first_seen":"2026-09-04T15:41:26.185011Z","last_seen":"2026-09-04T15:41:26.185011Z","times_seen":1,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/app/(public)/page-a262204d982b4431.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.789Z","timestamp":1788536416789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/app/(public)/page-a262204d982b4431.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-165a1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p8dq0Io5n03GEYG7bMIs0OwT9RFdfkksViEgwO%2FKMrD8gZDvBSb6QhCgFbxLx5Qu%2Br43qjl6iTMkoHFI1xyg%2FAfgj7kNG4ETSzH8YMKEt3K629dELuqjlFPHZuguAw9vnccNUOxbhEQ%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177cfc6ab4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91553,"size_decoded":29422,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"27668d1eabc371a08c3fc89100916c99","sha1":"a31a0b5a950023a38f0a9c483935ddcb04f7868e","sha256":"c28e52ee9851e2eb25c00219a87f5520a727636a69792e411aff4873adf18fe5","sha512":"73f3ccac137e417311071021cee54f86967888b2959b6d0baa4530d48abf66a1d0b6155d053780ac95c43c8bf3f11ba514ca76dc156c15cc63445101335baca3","ssdeep":"1536:btEwOR/GN8ne8LSPHGXM5SQ3kii4/48Y4bEFoSoDjZF4Agp4zZtPKcpSuJs59Ded:hEwOR/GNYe8ePH+M5THru4bEFoSoHZo0","tlshash":"0e939485e356bfacb42b4ce9e65fa40cb12f0f58df6a48a4b4b8a41015194e47727bcc","first_seen":"2026-09-04T15:41:26.188706Z","last_seen":"2026-09-04T15:41:26.188706Z","times_seen":1,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/6881-50e0b192fff44af1.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.790Z","timestamp":1788536416790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/6881-50e0b192fff44af1.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-40e6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uD1m4Y%2F0r7xE8Y4g4tCjhVBM%2Bd%2FCrbIXticNhn3382%2BEDjiTKlFWqSw4hWgzrn50%2FqC3I4kYuZ%2FewHROajyDwAwBus%2Ba3oHZlDhhT73VD%2FjLHPNueUhIzLTae5YWDPxiWdwiNY37HRs%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177cfc6bb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16614,"size_decoded":6607,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16614), with no line terminators","md5":"16ee1bfaa4ccaca2f628c0fe54fa0674","sha1":"b7e7e7c3dc67138a85ad7331eab2d3051dea15ee","sha256":"e42224c9ee7306bf1391e93074665b42ec0ff64eb667bc39ada7fb42830dcdf7","sha512":"0db1d0ed695437288d688f738b77e0c803b6c449c617ab5af020342b8318e935bc13ec1aecc6758c0da2978a0dca8fdecc3dca49ae27455ab2338083522fbcab","ssdeep":"384:f5XjfRqm9ySmGInGefxcCkSNS98krDejWEq63hWk:RXNtESqnG/1Wok","tlshash":"8d72b4967192f22b6ed68082e83e4112e2645d49b807501db6b42de3f916dcfb5bff30","first_seen":"2026-08-21T18:48:43.609767Z","last_seen":"2026-09-04T15:41:26.190698Z","times_seen":2,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/_next/static/chunks/app/(public)/journey/%5bslug%5d/page-e770a76bed774332.js","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:16.794Z","timestamp":1788536416794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/_next/static/chunks/app/(public)/journey/%5bslug%5d/page-e770a76bed774332.js HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:17 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 23:52:20 GMT\r\netag: W/\"6a8f7c34-5fbe\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zX8E82j%2BaUK0CT6%2Fu4Ea9G%2BNsxzq11EVRULZn%2B4aQ9%2F%2F5Wn0sB%2Bb83l0KG0%2BqQHzPfqp1qVTIm%2FdBB7%2FtRp14IdFwofohJO9P%2F9JDezCf5Xjtbn6QtcQjfx7SYRWikNAolHwpWwLxAo%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e177cfc6fb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24510,"size_decoded":10039,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24500), with no line terminators","md5":"e16ca9c481a2d28e9aa5592c5e3ccb08","sha1":"8d25560f59d5698eb6c8151894b30409dc027e7b","sha256":"2887da1a05c96b51d13fdcff55c40810ff69ebff50179a4178784f632eacf092","sha512":"09273bdf994f1d4d94b8f53d754ef33f962ce05135f858cf40246dbd1074ba8b2b46b5206f66e2b8549a8c15b5cccd349afdc1aeff18c0f55bae45701b1a53d0","ssdeep":"384:fsCOJmgTv3m9wTTVi04QeMfgzty6w8KBDdt7ObKcRhiPx0xUn8:fsCOJmgTvm94T804QRdJtOfis","tlshash":"45b21915e796beed7a37889c95df901cb25f2b28da0e4820f8bdb42121141e9f523fc4","first_seen":"2026-09-04T15:41:26.192707Z","last_seen":"2026-09-04T15:41:26.192707Z","times_seen":1,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/tty.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ones-pursue-foo-eau.trycloudflare.com/?host=https%3A%2F%2Fbitutility-onsend.xyz\u0026href=https%3A%2F%2Fbitutility-onsend.xyz%2Fbitutility.onsend.xyz%2Fjourney%2Fgenesis-free-mint.html\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-04T15:40:19.751Z","timestamp":1788536419751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/tty.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ones-pursue-foo-eau.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/node/process.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncf-cache-status: HIT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v138\"\r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:19 GMT\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncf-ray: a35e178f7f8376ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":685,"size_decoded":698,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (684)","md5":"dc159c105e1b73c18cfd63a84cc154ec","sha1":"347664300100736360aeda59495f5017a852a81f","sha256":"c66ff4b406bad449bfb2ced355f15badf16f4d9e035d2d300e33b5aeee64e3be","sha512":"96f99c368bef6857a0e9006efdc8ac0585af1bca468adb103b0c626ff5cada09eefeb07b317d6be3e71915f8c1a1412d4927fb743e4ed59e54c6e82af1b9d50a","ssdeep":"","tlshash":"cf01fef930f7b57246bb047444728a07f388e8f0b49ec4a0ba6599b43c655ced131676","first_seen":"2025-10-29T19:17:04.320253Z","last_seen":"2026-09-04T15:41:26.194787Z","times_seen":783,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","fqdn":"bitutility-onsend.xyz","domain":"bitutility-onsend.xyz","tld":"xyz"},"ip":{"addr":"172.67.164.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-04T15:40:16.432Z","timestamp":1788536416432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitutility-onsend.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:21:07 GMT","end":"Wed, 25 Nov 2026 19:18:37 GMT"},"fingerprint":{"sha1":"DD:37:29:D2:EB:16:DE:74:FE:BC:A5:AF:A7:DF:C9:DC:38:D3:97:6C","sha256":"F6:F6:26:B5:36:E0:9F:E3:89:66:54:9E:90:8E:9F:6F:4F:91:66:C7:09:FD:06:BF:6A:B7:3D:D1:36:BA:5B:9A"}}},"request":{"raw":"GET /bitutility.onsend.xyz/journey/genesis-free-mint.html HTTP/1.1\r\nHost: bitutility-onsend.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitutility-onsend.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:40:16 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Thu, 27 Aug 2026 21:53:32 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xghf1FKAk8pnS0jdM8F9nlYoVbIhPo1lcH%2BbtZGPEHmBGg29msLJ4jF4JwCOQVlTRD6OKIFwtD3Ufu0wyLvPTRwhgLmvlwx2giDHrVBT3tFgIniH1Zua7%2BEI3p3kGsJ8CU4TR03yf8M%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35e177abbf0b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30702,"size_decoded":7051,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (30100)","md5":"149ba5acaf12ab8fe446eca191fe24cf","sha1":"3f1f877bd35727ebf6427c2d4e77d4d14f5d9ccc","sha256":"92147453a2f38e0aa86bbae5d48b885b3d22abe36822940c8bea43b29abd731a","sha512":"b6a3a7cf9e38700d4a05a56beb3f9086e9db9a9aa114f083e0e6dc8fa8e6c8bfcc558bbb07ea59b524bc2fd92df2299304b45bbc48b6cdf896b039690a9fda7d","ssdeep":"384:sI2KaDfxEU1YsEdFdJydad7dYdjYBPnzYBYPbmt3S7C4YRiQKpXO4Ts1IqXIUdRw:4/DFYFDWw96ZYRnzY+PCt3STeFIqYUdm","tlshash":"f0d2942f6804ea196d67ce6f517e7e3a408cc9778639ca6cd0ddca75014293fcb6ac90","first_seen":"2026-09-04T15:41:26.196938Z","last_seen":"2026-09-04T15:41:26.196938Z","times_seen":1,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bitutility-onsend.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=2\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:18.958Z","timestamp":1788536418958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=2\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bitutility-onsend.xyz/\r\nOrigin: https://bitutility-onsend.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 04 Sep 2026 15:40:18 GMT\r\npriority: u=4,i=?0\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\ncf-ray: a35e178a8e07c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165117,"size_decoded":27919,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"084f8e33d6f96d2fc02d27cf2d4337a4","sha1":"ff7b69f9fb7afdb586070742f0cb2869ab1d5495","sha256":"bc650c279e0f543c44dacf7218fe745f2d6622c012ae865942eed796f631b48a","sha512":"9800e8cfde36a422d745bd27039b8c43aca4804e6e0ddad8e22bab8dcf31ada4508eea053e262e73a1fda1836a49f7ebdeb38c730a00d70bc85913b8a2e8b9cb","ssdeep":"1536:ZtDCyTxVAtE0607Zg8xBx8VqRF11z50/na5u49QmqgpeV:ZFVz06UZgEx8e1z50/nEqg4V","tlshash":"01f3646e8b04de672fb15388814cf9eca15fa117cdcd9cb6e2e5cf2440b89f7215219a","first_seen":"2026-09-04T14:40:16.08615Z","last_seen":"2026-09-04T15:41:26.20106Z","times_seen":3,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=3\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitutility-onsend.xyz/bitutility.onsend.xyz/journey/genesis-free-mint.html","date":"2026-09-04T15:40:18.997Z","timestamp":1788536418997,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=3\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bitutility-onsend.xyz/\r\nOrigin: https://bitutility-onsend.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 04 Sep 2026 15:40:19 GMT\r\npriority: u=4,i=?0\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\ncf-ray: a35e178abe0dc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183287,"size_decoded":29547,"mime_type":"application/json; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65483), with no line terminators","md5":"08198d8027fdb51cee113a04eeb4cda2","sha1":"b757ce29faf10f04166d8f35e2e3b9c8d55f9919","sha256":"2cc9e97ef9205c6181d1818282bdac6f17a619d9f6f6c6f4db7d90baea502bcc","sha512":"e7f3da5f3ac759a5e4b3a69fd6ed5fbec884b91b53dbdb9c87712d299c5cd3ae3a68827b6850102f67a6b7dfdd70401ba804ecb6543b214ed4959ecd25c3a144","ssdeep":"1536:wD6iwBGG/XRyNxQpuCpnEZB2sfPEzW6+0ASgSzrH:wD6DgXQpuC8PEM9SLH","tlshash":"7b04526e8b04de662fb25388d15cf9eca15ee117c9ce5ca2e2f1cf3440bc5b7215219a","first_seen":"2026-09-04T14:40:16.064057Z","last_seen":"2026-09-04T15:41:26.203255Z","times_seen":3,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/process.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ones-pursue-foo-eau.trycloudflare.com/?host=https%3A%2F%2Fbitutility-onsend.xyz\u0026href=https%3A%2F%2Fbitutility-onsend.xyz%2Fbitutility.onsend.xyz%2Fjourney%2Fgenesis-free-mint.html\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-04T15:40:19.619Z","timestamp":1788536419619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/process.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ones-pursue-foo-eau.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v138\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Fri, 04 Sep 2026 15:40:19 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: a35e178eaf6a76ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7861,"size_decoded":3878,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7860)","md5":"f8382a3858672b98c93fd61c13d21c2c","sha1":"07e4611887908eb9326935084618e4964fb84550","sha256":"79e7646e87709989f575ea4ce02e0877bc9303081567b1c0d412527917ae9e91","sha512":"a1609e8e33a2b7369169fe7dc1f9fd187c4b431e9c7428e4c3929587bff4701d937b8df219b3dfa2bdc3f6b38f63afecc0d9025a6ec8901d91a5e123179ca5cf","ssdeep":"192:kFmwaFSK/rVyQhxkSULErvtAAQic6NR03ao8Yk33q:5wzEr8irU8Yk3a","tlshash":"a2f1d7dce29a743302c1eadaf0bb0123eaf407c855245650ea0bdcc736219e5a5b1f75","first_seen":"2025-10-29T19:17:04.329787Z","last_seen":"2026-09-04T15:41:26.204518Z","times_seen":790,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}