{"report_id":"3b6e4280-981e-4b3a-a058-a539ea097a1f","version":6,"status":"done","tags":[],"date":"2026-04-22T12:41:28Z","url":{"schema":"http","addr":"relaylink.xyz","fqdn":"relaylink.xyz","domain":"relaylink.xyz","tld":"xyz"},"ip":{"addr":"104.21.87.66","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"relaylink.xyz/","fqdn":"relaylink.xyz","domain":"relaylink.xyz","tld":"xyz"},"title":"Relay","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"relaylink.xyz","fqdn":"relaylink.xyz","domain":"relaylink.xyz","tld":"xyz"},"ip":{"addr":"104.21.87.66","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-27T12:41:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-22T12:40:57Z","timestamp":1776861657,"ip_dst":{"addr":"172.67.205.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":56972,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2026-04-22T12:40:57.809855+0000\",\"flow_id\":605383187576723,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":56972,\"dest_ip\":\"172.67.205.166\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"bright-hub-e97.cf-lbb6ffsu.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":2647,\"start\":\"2026-04-22T12:40:57.800659+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-22T12:40:57Z","timestamp":1776861657,"ip_dst":{"addr":"172.67.205.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":56984,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2026-04-22T12:40:57.815209+0000\",\"flow_id\":1296344641255513,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":56984,\"dest_ip\":\"172.67.205.166\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"bright-hub-e97.cf-lbb6ffsu.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":940,\"bytes_toclient\":2721,\"start\":\"2026-04-22T12:40:57.800857+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"relaylink.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"arbitrum.drpc.org","ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":1951970,"first_seen":"2024-10-14T17:26:29.664661Z","last_seen":"2026-04-20T17:08:59.714267Z","alert_count":0,"request_count":2,"received_data":1830,"sent_data":1003,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"relaylink.xyz","ip":{"addr":"172.67.142.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-20","domain_rank":0,"first_seen":"2026-04-22T12:41:32.402941Z","last_seen":"2026-04-22T12:41:32.402941Z","alert_count":8,"request_count":8,"received_data":7809508,"sent_data":3664,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"arbitrum-one.publicnode.com","ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":3618652,"first_seen":"2023-07-09T07:25:43Z","last_seen":"2026-04-17T00:14:44.466491Z","alert_count":0,"request_count":2,"received_data":2007,"sent_data":1023,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bright-hub-e97.cf-lbb6ffsu.workers.dev","ip":{"addr":"172.67.205.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":3323707,"sent_data":1098,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arb1.arbitrum.io","ip":{"addr":"172.66.171.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-03","domain_rank":513999,"first_seen":"2021-05-28T20:40:01Z","last_seen":"2026-04-19T23:51:25.288023Z","alert_count":0,"request_count":2,"received_data":1629,"sent_data":1007,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"assets.relay.link","ip":{"addr":"52.84.50.118","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-12-30","domain_rank":0,"first_seen":"2024-02-01T16:09:05Z","last_seen":"2026-02-02T05:40:31.898876Z","alert_count":0,"request_count":1,"received_data":899,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"arbitrum.llamarpc.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-02-07","domain_rank":3027975,"first_seen":"2023-12-02T14:30:00Z","last_seen":"2026-04-20T17:09:00.100471Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":522,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"relaylink.xyz/","fqdn":"relaylink.xyz","domain":"relaylink.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-04-22T22:33:43.28578Z","times_seen":2679,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaylink.xyz/","fqdn":"relaylink.xyz","domain":"relaylink.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"261fa5f948bd99fdf005f80595805744","sha1":"51d57156b1974322b3ba8542f48893082199d5e1","sha256":"1dcf3b0e1f92d593867169c5ee26771d2f3b77f552eee6c73beba961b91d61b7","sha512":"532ff30dfdd593068e7afc5f98cb1bc72408e594f297911c0a7c590c97a2ed6be6b91981322dfe3b3e90f21241404ae8692139732372f119279dbdf29f3ae429","ssdeep":"","tlshash":"a6015927222233707ce9d5dca8b6dd8e39bb501ae40a0090a09f944d1834bc644f7bec","size":847,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-04-23T03:46:00.802063Z","times_seen":3391,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaylink.xyz/moment-2.3.7.js","fqdn":"relaylink.xyz","domain":"relaylink.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d595868c27ce3c113e48356291508c25","sha1":"6395d07924c320cd4a2af14a0b3684c54fbb6631","sha256":"ce52e8220b73cd469d007a56a43be71a1347735745a7c54d8f684129ed190cfe","sha512":"546c7b504cd94aadb516e09502bbe547ffff43abaf8431a995211f249265481cb09a9a4f39f41ac783c797cd764f43ce0e9fed1e4023595fdb09a776f24a6569","ssdeep":"768:Dk5TkcIq9i1ElEqlcBGiBXRWE2eLUBe6/LLtJLWycmbcTKsP9i7jocwSZc0HkW9v:mi2lEquvF6nMc565RSJzzqk0c","tlshash":"8a93b3d96a5ae4e84e5620dde433e905f4680d13cd6df267a23ceec0741ef26845b23b","size":97258,"data":"","first_seen":"2026-04-22T12:41:38.013814Z","last_seen":"2026-04-22T12:49:03.879561Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaylink.xyz/","fqdn":"relaylink.xyz","domain":"relaylink.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"114ef2c842ccf43a0796a64b02aa3cf8","sha1":"70fba1de4525ab6f02766aab4235ac2e7a6037cf","sha256":"2f0351c9af467f2805a1a47b628bf25083aea1c7382d031250609eaed602b7e3","sha512":"f92e2b635ec6b3bfa0d7068ccd0ac7460742ad6c55561d5fd89fcf0f88a9f7b68645927419c21d4096b4aa6cd41aabd97268210a728f44b60ce83f52cf12c2d1","ssdeep":"","tlshash":"a7f0f65d27f232bd627f2262d5838489be5000a260d6d449741c92890fd6f64609ee9f","size":593,"data":"","first_seen":"2026-01-07T07:56:34.81946Z","last_seen":"2026-04-22T12:49:03.906339Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaylink.xyz/","fqdn":"relaylink.xyz","domain":"relaylink.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"01655b577d944925dba15c589ea0ab9f","sha1":"b2785ed3270e38ba6c43e552f0bcfc62bc2397bf","sha256":"6102c4de94804f870acee3124f9ff04a9d07ff6aa41f7c6831b762147f1f5f9a","sha512":"d2895dee12f369c3e1622a968a38ef6c9677125ce7a9e04c518ce71e2b6169737137cad603aa93c8a10933390e2c498a5b2947703772aa37adbcf14b6e0c7e4e","ssdeep":"","tlshash":"571121356a19082ed6a702bab68a5a5405bee225c6dbcca7f7489fc464dcd91100b378","size":1000,"data":"","first_seen":"2026-04-22T12:41:38.019401Z","last_seen":"2026-04-22T12:41:38.019401Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaylink.xyz/","fqdn":"relaylink.xyz","domain":"relaylink.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-04-22T22:33:43.289618Z","times_seen":2806,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaylink.xyz/","fqdn":"relaylink.xyz","domain":"relaylink.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-04-22T22:33:43.285268Z","times_seen":2733,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaylink.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"relaylink.xyz","domain":"relaylink.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a8c5b2dea9324990777ffaa02b12994","sha1":"b07a23527daea958d92beeb90430e5df4cfd8ca4","sha256":"9f7b51b6cf3684a20fa2cb475d414897ce2ccef8e597a69f6d9adc46e984ae20","sha512":"f8b561a9d13ed28c07fc538c66f81549612ab1c309544ac56493e06b17b524e02679fa01065cb8fd4760a2a1b24a4dc490d6408080c276776315233125c1d317","ssdeep":"384:O6nReFxBS8HDbMWbuwWss9zsDbVPyOXRxC+9Y0Et1Dnh74K6kYr4TIQHBCH5p75:tnRkyqLbuwWsspQblyOh+0Exte35","tlshash":"7bd2d8dd75cab02682a634b86d5b30c6b2b9fcbc30081d49d261f9f8b930749d5bad5c","size":29308,"data":"","first_seen":"2026-04-22T12:41:38.016028Z","last_seen":"2026-04-22T13:06:58.683585Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"857c182dd61515a2b172933397cab490","sha1":"e7018113affe1b3e58b43e9bb17ce05778776515","sha256":"34e39a5983e47d36af1f0484ff8e5901704e58e3ece8e71866ea4ce3448fa586","sha512":"781ecdb4eaf17570ce689f20abda27e3b352446fd3291c6df13487a5cda53782b07718af713966d1a30671c021c8bcf95accc57e364ad42f1d0dd99862204b0d","ssdeep":"","tlshash":"72d0235c1d3284302288024711f5e3d8312030503720b30080decc3bbe21dc304b0d0c","size":217,"data":"","first_seen":"2026-04-22T12:41:38.021541Z","last_seen":"2026-04-22T12:41:38.021541Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaylink.xyz/","fqdn":"relaylink.xyz","domain":"relaylink.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-04-22T22:33:43.28422Z","times_seen":2649,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaylink.xyz/","fqdn":"relaylink.xyz","domain":"relaylink.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-04-22T22:33:43.288619Z","times_seen":2779,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaylink.xyz/","fqdn":"relaylink.xyz","domain":"relaylink.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-04-22T22:33:43.288159Z","times_seen":2843,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaylink.xyz/","fqdn":"relaylink.xyz","domain":"relaylink.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a97d6ef5abced657bf5d46b969b239da","sha1":"212f1fc55f39b82d41e88c7628aec3b33d263afc","sha256":"fd3d3ea23ebc1d6ff9299cbe2cc651dfcd714b9be828c8ca2a81540e2f85eaf9","sha512":"6f35480a04c1360f72ae3d1dec34f1357b49fb10a7c7e6de8124e33a87b075127206686daa9145d40be27c4dd761f078d085a1f2538567c714ede67f66122c7c","ssdeep":"192:7mmQewTVPeY8DpuTM3kpVg9LuKXgnudSWXLPKPIlH4SjmnUYsCc0V02Y2pE2XuCh:7mmQewTYY8Fb3kjgTtLPKPIJgcx0V02l","tlshash":"8732c5b06a242ad911d604e20ace4f5d74f591611179dc249b3ef28a2fec3cab7d37a1","size":11308,"data":"","first_seen":"2025-08-01T04:17:54.885074Z","last_seen":"2026-04-22T12:41:38.02438Z","times_seen":1228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaylink.xyz/","fqdn":"relaylink.xyz","domain":"relaylink.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"beabf798f4e3bef2251ceccf60b8d4d3","sha1":"bf83a77def93b0ad45401206c837a5066701e3a6","sha256":"8b1b8a968bffe81ecce5a9d7e795b5a534674fc81f7519dcd182777d6e760029","sha512":"a4d33050e2dfa31be4f2fc7aa5edcc3bdd3ddca0f18fca48508a7aac70e69ee7e884589f9cd61c8bcf4ec79b92136d70bbe58413f0be8614b854822af937bc6b","ssdeep":"","tlshash":"8a1100793f2a1534cac5418b31bee7a83d3260217b02a144c26ccc289d18e8314efcbe","size":902,"data":"","first_seen":"2026-04-22T12:41:38.025215Z","last_seen":"2026-04-22T12:41:38.025215Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaylink.xyz/1fd68744-17f8-4048-b02d-65ea3e8da90b","fqdn":"relaylink.xyz","domain":"relaylink.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"12bc5b044297809f229bcb5904335cf3","sha1":"144159bb6e00fdd40a304bd30ef647345797b030","sha256":"ce682689c5c383916df4c9a93e6546677fbe520f4c3221fc13d071eb827bc32e","sha512":"a9e0d7d4a53355876d529ee2c64e912782b2c179c63d45640430a7b5f1b683ab7956442d7ade0e37639fd080bc729821146ec56ac99bad210b66699e216cb308","ssdeep":"49152:zlGkwdNZngkauCwW2QUSvhjG+EyY4bfO3xrQanJfCpszVtbUr:z3","tlshash":"d2f523d36d4ba4b5cf48461471e75d0b58980c1268acb1faf799f9c3306efa080eb96d","size":3322336,"data":"","first_seen":"2026-04-22T12:41:38.026944Z","last_seen":"2026-04-22T12:49:03.890597Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"arbitrum.drpc.org/","fqdn":"arbitrum.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://relaylink.xyz/","date":"2026-04-22T12:40:57.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 18:57:31 GMT","end":"Wed, 15 Jul 2026 19:57:24 GMT"},"fingerprint":{"sha1":"29:DF:72:3C:C4:08:05:61:23:A7:6E:9E:35:44:4A:4D:E1:E7:67:7E","sha256":"D3:D5:73:E5:27:98:A5:7C:64:E1:82:6C:59:11:09:64:8E:9A:E2:34:EE:B7:72:8E:63:C5:83:3F:7B:77:04:1A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://relaylink.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://relaylink.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0xbbaed403bab843d976fc4d6d7f29ee097bf28e5a\",\"data\":\"0xa0e8bcb4\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 12:40:58 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-public-multiregion\r\nx-drpc-trace-id: 037df5a0cc860e33e6d726f96ff598ed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f04b32fa8d1b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":870,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2bff2ca2d2daea96d837f93c3ad22d9f","sha1":"e0b0d724a66b245604175f7cfbd121517198951d","sha256":"d875012ad84238c178940b72d1719dbe9f56e5af614f904b041220b6299cc55d","sha512":"b40a2ae29e0479a1e4d40269a2c5706e7faaf578371fb6baae77fde5c5662912c72eb9645d2e38b562135e72292a4a2ee1e2e329a7b2c5a3523eb0e28604c8a1","ssdeep":"","tlshash":"a4119cb0aa85dbc0f92e4f97e2e8b90931307617eadc0a8b565421b927725416f6a40c","first_seen":"2026-04-22T12:41:38.008684Z","last_seen":"2026-04-22T12:41:38.008684Z","times_seen":1,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaylink.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"relaylink.xyz","domain":"relaylink.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://relaylink.xyz/","date":"2026-04-22T12:40:57.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaylink.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 08:45:03 GMT","end":"Tue, 21 Jul 2026 08:45:02 GMT"},"fingerprint":{"sha1":"E0:9B:8C:DF:AC:EC:45:86:5A:00:62:5B:ED:6A:35:FB:0D:2F:8E:A9","sha256":"52:F2:71:D4:2C:85:DE:9E:C3:0E:8E:03:D4:24:5F:21:6A:C6:FE:AA:64:79:8E:24:AB:4D:D9:E0:03:C0:FE:38"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: relaylink.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/0b8fb825cb67/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Wed, 22 Apr 2026 12:40:57 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9f04b32dcf3a712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29308,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T11:09:30.515594Z","times_seen":14100050,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"relaylink.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum-one.publicnode.com/","fqdn":"arbitrum-one.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://relaylink.xyz/","date":"2026-04-22T12:40:57.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 23:57:50 GMT","end":"Fri, 10 Jul 2026 00:57:42 GMT"},"fingerprint":{"sha1":"FA:41:42:B5:59:CD:F2:75:9C:78:CB:D0:5E:1F:F6:83:58:D2:EE:5F","sha256":"07:86:2C:E3:AD:0C:A4:31:FD:57:1E:C8:01:EA:80:5B:24:9B:5E:3F:7B:09:9D:D4:1B:FE:A9:2B:34:AC:3E:B4"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum-one.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://relaylink.xyz/\r\nOrigin: https://relaylink.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 22 Apr 2026 12:40:57 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: 9f04b32efee71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T11:09:30.515594Z","times_seen":14100050,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":82,"dns":16,"connect":12,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bright-hub-e97.cf-lbb6ffsu.workers.dev/secureproxy?e=jscdn/getFile","fqdn":"bright-hub-e97.cf-lbb6ffsu.workers.dev","domain":"cf-lbb6ffsu.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.205.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://relaylink.xyz/","date":"2026-04-22T12:40:57.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cf-lbb6ffsu.workers.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 16:09:06 GMT","end":"Mon, 20 Jul 2026 16:09:05 GMT"},"fingerprint":{"sha1":"66:79:B0:1A:D2:18:61:7A:7A:FA:0F:29:63:4B:07:14:B4:D3:82:63","sha256":"21:4B:13:2B:3E:15:D6:73:9B:98:A7:3A:D4:A5:9A:2C:4C:B8:2F:6B:7F:69:A1:A8:DA:82:0C:A0:92:09:A9:5B"}}},"request":{"raw":"OPTIONS /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: bright-hub-e97.cf-lbb6ffsu.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://relaylink.xyz/\r\nOrigin: https://relaylink.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 22 Apr 2026 12:40:57 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QnS9Rn3wj8Z1N1cT7P9Nd0LjkidnaK9w3h8Xca%2FoXABMSofKc4O81rLX%2FaNq8p87hszxXDecYs%2BlxruoR2eWdLMq2vKoqEwKwgMqCJ4gq%2BMVY1dgraJ494SD6B3k5%2Fahwq6lGVeJoru%2F4Vlte6ikJ2bRdXIhaGOG3g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9f04b3316ca10afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T11:09:30.515594Z","times_seen":14100050,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":47,"dns":32,"connect":1,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bright-hub-e97.cf-lbb6ffsu.workers.dev/secureproxy?e=jscdn/getFile","fqdn":"bright-hub-e97.cf-lbb6ffsu.workers.dev","domain":"cf-lbb6ffsu.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.205.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://relaylink.xyz/","date":"2026-04-22T12:40:57.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cf-lbb6ffsu.workers.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 16:09:06 GMT","end":"Mon, 20 Jul 2026 16:09:05 GMT"},"fingerprint":{"sha1":"66:79:B0:1A:D2:18:61:7A:7A:FA:0F:29:63:4B:07:14:B4:D3:82:63","sha256":"21:4B:13:2B:3E:15:D6:73:9B:98:A7:3A:D4:A5:9A:2C:4C:B8:2F:6B:7F:69:A1:A8:DA:82:0C:A0:92:09:A9:5B"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: bright-hub-e97.cf-lbb6ffsu.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://relaylink.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://relaylink.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"yvzjfga86nkf0qgrnzu6\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 12:40:58 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mS8scSCJEQUX17x8Ev5zPeYjAxLlN1qf6D0MsYcwDAaYxX0uNRTUDm%2Bqf4J5CzSOFTxj41alUmyUm%2FAjE04UfUG5wUJ9oxUZRDW4VxZVvneo%2BuQVnnS4fbHKebOTTv7MxLENRT%2FF65odgjZOG37cSsBZlzZ4t7F0jg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f04b3317cb90afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3322336,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"872eeb630800903eda14f9c43e09745f","sha1":"f944946ca1ecd8cc9eb613bed198643979464d0c","sha256":"1514e871d982f3f5ee15e189e1ad6a8082d70ae435f492bd6d99a15a4476336d","sha512":"a45289a6d984f987709aee36a4946a5a79024050665ae04e7dbd9c0c841f451f88020c3c0c0789cf02f4c5d9a8c7bb4855883aeceefe6778ab037866aff871d2","ssdeep":"24576:HTpb/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjelTfNWt:zlGkwdNZngkam","tlshash":"7d2523e37f6b9068cf2c5e59a1fb1d0d2c884941504426f6fe6ae88632e477041dbebd","first_seen":"2026-04-22T12:41:38.010537Z","last_seen":"2026-04-22T12:49:03.885575Z","times_seen":2,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaylink.xyz/","fqdn":"relaylink.xyz","domain":"relaylink.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://relaylink.xyz/","date":"2026-04-22T12:40:56.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaylink.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 08:45:03 GMT","end":"Tue, 21 Jul 2026 08:45:02 GMT"},"fingerprint":{"sha1":"E0:9B:8C:DF:AC:EC:45:86:5A:00:62:5B:ED:6A:35:FB:0D:2F:8E:A9","sha256":"52:F2:71:D4:2C:85:DE:9E:C3:0E:8E:03:D4:24:5F:21:6A:C6:FE:AA:64:79:8E:24:AB:4D:D9:E0:03:C0:FE:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: relaylink.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://relaylink.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:40:56 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 22 Apr 2026 09:15:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 0\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vMmpn9rbEaPdUHF0Dazbxr7iNg2C6xR4kypilzW7grZwnEfw6ocBaGLQgGF%2FEZYcVnzjn6INrEEBjUJ6s6LV%2BXtErWsdrubtLxv%2F9BrGwKC5ueL26nSzMF5YiEzmfHPH\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9f04b328eeeb712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T11:09:30.515594Z","times_seen":14100050,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"relaylink.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arb1.arbitrum.io/rpc","fqdn":"arb1.arbitrum.io","domain":"arbitrum.io","tld":"io"},"ip":{"addr":"172.66.171.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://relaylink.xyz/","date":"2026-04-22T12:40:57.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitrum.io","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 16:00:04 GMT","end":"Fri, 05 Jun 2026 16:00:03 GMT"},"fingerprint":{"sha1":"E1:C3:14:0F:13:5E:3E:4F:4C:6E:A7:05:5C:95:DE:04:01:D2:AA:76","sha256":"CB:E7:E4:C1:49:C3:41:59:07:D6:FB:7E:D5:AD:98:BB:6B:75:8F:0B:7E:A8:ED:06:ED:8F:65:79:42:48:A7:CB"}}},"request":{"raw":"OPTIONS /rpc HTTP/1.1\r\nHost: arb1.arbitrum.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://relaylink.xyz/\r\nOrigin: https://relaylink.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 22 Apr 2026 12:40:57 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncontent-encoding: gzip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9f04b32eef4c3181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T11:09:30.515594Z","times_seen":14100050,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":72,"dns":17,"connect":3,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum-one.publicnode.com/","fqdn":"arbitrum-one.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://relaylink.xyz/","date":"2026-04-22T12:40:57.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 23:57:50 GMT","end":"Fri, 10 Jul 2026 00:57:42 GMT"},"fingerprint":{"sha1":"FA:41:42:B5:59:CD:F2:75:9C:78:CB:D0:5E:1F:F6:83:58:D2:EE:5F","sha256":"07:86:2C:E3:AD:0C:A4:31:FD:57:1E:C8:01:EA:80:5B:24:9B:5E:3F:7B:09:9D:D4:1B:FE:A9:2B:34:AC:3E:B4"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum-one.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://relaylink.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://relaylink.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0xbbaed403bab843d976fc4d6d7f29ee097bf28e5a\",\"data\":\"0xa0e8bcb4\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 12:40:57 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 2\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: 9f04b32f581b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":871,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5fce6c9ba24ef8aedb410ff7490581ab","sha1":"a94f9a0fc805f5c871d91ce48921f72c64995f5a","sha256":"9cfd58d7622b6e508a4567ec6f6ae5ff00e821384546471775fdc10cd4afe887","sha512":"09b5d14210e043d22abfd9b4c166b98bad644f7cc7baaf30364449aa538e8cb4321e9a84b7542070ae25284a7b23268239cc5be8884e6b0e0acb4fac82dd59a2","ssdeep":"","tlshash":"7d119cb0aa85dbc0f92e4f97e2e8b80931307617eedc0acb565421b927725416f6a40c","first_seen":"2026-04-22T12:41:38.011692Z","last_seen":"2026-04-22T12:49:03.887007Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arb1.arbitrum.io/rpc","fqdn":"arb1.arbitrum.io","domain":"arbitrum.io","tld":"io"},"ip":{"addr":"172.66.171.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://relaylink.xyz/","date":"2026-04-22T12:40:57.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitrum.io","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 16:00:04 GMT","end":"Fri, 05 Jun 2026 16:00:03 GMT"},"fingerprint":{"sha1":"E1:C3:14:0F:13:5E:3E:4F:4C:6E:A7:05:5C:95:DE:04:01:D2:AA:76","sha256":"CB:E7:E4:C1:49:C3:41:59:07:D6:FB:7E:D5:AD:98:BB:6B:75:8F:0B:7E:A8:ED:06:ED:8F:65:79:42:48:A7:CB"}}},"request":{"raw":"POST /rpc HTTP/1.1\r\nHost: arb1.arbitrum.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://relaylink.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://relaylink.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0xbbaed403bab843d976fc4d6d7f29ee097bf28e5a\",\"data\":\"0xa0e8bcb4\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 12:40:57 GMT\r\ncontent-type: application/json\r\ncontent-length: 428\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 3\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9f04b3305bfc3181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":871,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5fce6c9ba24ef8aedb410ff7490581ab","sha1":"a94f9a0fc805f5c871d91ce48921f72c64995f5a","sha256":"9cfd58d7622b6e508a4567ec6f6ae5ff00e821384546471775fdc10cd4afe887","sha512":"09b5d14210e043d22abfd9b4c166b98bad644f7cc7baaf30364449aa538e8cb4321e9a84b7542070ae25284a7b23268239cc5be8884e6b0e0acb4fac82dd59a2","ssdeep":"","tlshash":"7d119cb0aa85dbc0f92e4f97e2e8b80931307617eedc0acb565421b927725416f6a40c","first_seen":"2026-04-22T12:41:38.011692Z","last_seen":"2026-04-22T12:49:03.887007Z","times_seen":2,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.drpc.org/","fqdn":"arbitrum.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://relaylink.xyz/","date":"2026-04-22T12:40:57.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 18:57:31 GMT","end":"Wed, 15 Jul 2026 19:57:24 GMT"},"fingerprint":{"sha1":"29:DF:72:3C:C4:08:05:61:23:A7:6E:9E:35:44:4A:4D:E1:E7:67:7E","sha256":"D3:D5:73:E5:27:98:A5:7C:64:E1:82:6C:59:11:09:64:8E:9A:E2:34:EE:B7:72:8E:63:C5:83:3F:7B:77:04:1A"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://relaylink.xyz/\r\nOrigin: https://relaylink.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 22 Apr 2026 12:40:57 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://relaylink.xyz\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9f04b32f0feeb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T11:09:30.515594Z","times_seen":14100050,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":83,"dns":37,"connect":1,"send":0,"wait":77,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaylink.xyz/cdn-cgi/challenge-platform/h/b/jsd/oneshot/0b8fb825cb67/0.8580917695475292:1776860125:BOnynnPhegu1DbJGbPrZSG0kDEiRN5e5A6aLRlWgh-8/9f04b3252ef923eb","fqdn":"relaylink.xyz","domain":"relaylink.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://relaylink.xyz/","date":"2026-04-22T12:40:57.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaylink.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 08:45:03 GMT","end":"Tue, 21 Jul 2026 08:45:02 GMT"},"fingerprint":{"sha1":"E0:9B:8C:DF:AC:EC:45:86:5A:00:62:5B:ED:6A:35:FB:0D:2F:8E:A9","sha256":"52:F2:71:D4:2C:85:DE:9E:C3:0E:8E:03:D4:24:5F:21:6A:C6:FE:AA:64:79:8E:24:AB:4D:D9:E0:03:C0:FE:38"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/0b8fb825cb67/0.8580917695475292:1776860125:BOnynnPhegu1DbJGbPrZSG0kDEiRN5e5A6aLRlWgh-8/9f04b3252ef923eb HTTP/1.1\r\nHost: relaylink.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12142\r\nOrigin: https://relaylink.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://relaylink.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12142,"data":"Q$kWelPGK1jxxj8nGjLk6TLj2Wj8nxnS6fn24K1PcnDTfSQukjxPJfCHWP4fxLnTHJWjAnHd4PvhLQfIAwn3gI6wnKF02nPlWPOoK68PT1oS8+953l1kPuRl9ASTy4Wnb0Un7WW$+$4wDdGnnu5A210kkPIovI0RdPhhXKn5DjiGA5LN3M$d3M-nPb0oyz7h68nMHwAHTT-f3Yz7DiGnMO6nKYni2xJnaHBwWr2s9cq4WCKGwrfm4jGnMyinn-+doByIFBBnjwtyrJZGp4nPHwT1Kf2nMXGrPX2M0fnQNIdf0o9FFMGnKDi1jGilBM2c8cGpnZnKl9PfJpX8nn4v2BoM2DKKyKMyKnCkDnjgA1lnPfLiKsx5kLln6J8mC$bg0owsKwsik$7CfJw-0CxSM2dfD6CfB$$nP1juPnff6+DhyXnfeHLtfbybSKWzbX9bfdS1uSx+B7npKJL$WjlLwnnaF35x+HfKH5iDrnKdNdCfBDi7M-nHavSA-toKyHNB$UD1yyxvbn1HlP26btxFxOOdngjOfFFzpddOvHAQA10HQDem5KKTq3TFR3gsWswAmzwHegTkOEeQh5yu1M1sJDZ2CxlKdun$uLquf8FH8jEQIq6yprOnf$cHd6fY6m3AK3zDJ47iWuRLMwkewQtaddDblsiYhX-Pc9q24qdcChyeTtACUG3i72i3KLFpcpY2j2AXUNSoDLXQPsWeQ8DY2DD3XNOhYeXS2-kUuhx9WtfI10ufjj5gA-figt19b0QX+dhpFYMk2WDnnsz8b0bi8G0Zfk689obfYQjMsXpdL1nJjGj4mPo1Hbjop2d6xtdcP1s1G2qG2yMftL4aZH4EfLRlJ+4PWqQ1rw-M122JClG06K8o+9fkDw2SYDwACl5+Kn9H36Kf1nM+fk2+CioG3K$1nq3f6MSW08z2KBtMiMfa6$O1Gk4jgC$0Cf2McoiS3bpGNW0PHoL4fH160WP8InwHR+iM1sw8ZZ3J6Ml+HP3468+a$jL0MrcZWJgb0AOZAFnSaw3GfaNFwJaSn1938wiaLpnbHL8Jde6lJ8iBEFAL6G4WmN43AwAHe$Og7ZZb$Y5HD1r+APHnfA1N78BPHqeC1EbMZCGNLGyE8rAWLor+Ln0NLk64KgM08H020GCkH+dj8G693EAafr0yaXs168LF+ZHBa$h8YZ8tQKMkqM5CfF+Uy4fBz8PkM6qwNB+x$i+Kjn6Mq3IXdzMXdZAMXY+nRnKLzFf1igri4+wh+AthPzCwd1kFIPCyb2BoDZ4Os4H4lq++8USY1Pbm0bnzyqJw-SKPD9jnh8r+Y1PKKAi6w+H0fyfxhiGBA6zDa+teHiA7T-KxnB$prge4cniocwvvD9KfA24aAD6Cw4PD6nKptBM18ypO1CM7mkDA2C6cTjM18ajK+F8UFnhS7akCP-Gk3+PCR4tGKyn4jKBndpmcT9NYQlqaE8GkFI48aEKxh0UWpBmIM0MFuEUpsuEwqDugyplMnDrW8BJ-tbaogB9wnrbeBmbEc7DOnR$HH4C-0Q7S-1spXohSheE8nna7d4ea32n32aUu1PnI28nfK9bnF70Ehxrrc+H1WmAC+urk64in3NP+WM$en22SP9G2nSCY1xAEu+s8xKt6Ue6Y0igt4naJGPfKdH4h0IKOKLfRCnsjinxa8r86+BuXIDDvA822hDtRNHR9SjNOjgMeXGfkCfwPuk$C5vkXB$bXlfMfCnWf0v0jZu1fMqB9ICZtMYM46Z54c3onoyX6dpMQ4ljGiKC6plUMMtIw8K+Z-7CzbKhFPfwWpnDntnHM4eOGn4v+MfSn1i$SfB5xbEfMKgLQpp9bWLh2IP1azrbbn+iYBbj602mLRjT0-P8xcRAxkGSdf60Hf2z44jCuuvHEkt0GjCiyQ2qZyPnB4WwvSqk22$b3en348a0Q7e0Ql2H8b5bGZgHkokhwwW6vHz8fknzTyrggdGvWf$D+tvwugmFq6ID6w-C4ob3AzvDbFA$1YoFriuBd+IZXCIkPf0OB0Q2Df70sLlMEaO6ZDinjik+IjdH62ZF6XDtSy6KPs84TGm3P59GpiIDW5bhpq3fGWL+QRDX6i$8XB66MXokArnLsX9yYX5Z8FBI1NR5Q1klCNKkaJKj9Z28gbYgbQ3zfKJLdkM2HLnMFRo6vT6ZxzlytaMiQiqk6Nd29qrY+92HWSrDEpflgC1WHC4uHd8$MZrRdHwn03lDeEpU1OZloLQPKjmPdM$S+-59tm0NSpn4nrabqU1n8FACTuSKxLfUPyY03pnuzbKwtX6I$SHCZ1LfhZSv+LlGfZt+TvytMvAKU6m6buGJnPcG08JH0eA+lxSnILr8ljbKL1EsRYL$PDs5Gk$rTWpPvtr-FA2dpKKPHzyyHLZNd0gnFey9R6jtPIl4iFErZZgmErlKgbTd3x1fKNBM$12K7nZ3g1n4WjS1nTvTFQ-iFXlaF2HQ+Qb9Bn1DDxYQIwFR4+HHKz-lkJytf$w86OhrrcHaMWvCFCyWipAZADGqSeENPO395f2Kd6P53J5Wps-b4KdyuOcf2dcGKSO+r8r4wP8Jo1G82Rs7eN3WjAeuKB$RqCYkKfKms3CHFDHyFXcwCCSFxzvHKZwnPMraAzdXWPbRKp+HsntL+NpEgB-Hf0nLaKYy2xe3$vL+82oyaCT2MB6p+LgSWE8fFa3XfjtDWwxNtLbRWCbNRc6OSXj4msPfuUZ2t26+P4vRZPqZ$b+y7JyoRhKeOCaZJ7LKkFP05PdQGF4nlwMZCkwKf8qpqvCWn2jNPtNKg$2TuD0G1LSBsYMlzZgaGpBxrZ8s98FMSMEPWFKjtxB48ojOB+p1zn3uD2tKMCqsyXZjHmHYpqe0u-e6T$p4yhHlLd5BPgFzvdFNYWT+jofokj+n0X9vG6pwTjeQOJIXex4f9kIBX4UjHxk2en-AtXPAkh$+WrOJeG6L65jSlSIaAe4ufeTqLLJt5EOQjSFH6b0jdk2oQRjafL-j0cKdHuWaPZLik5PGPUz9GItIR1YmHnqGMuD7B$hNFiRHEw9oxszsHC7qak+yZZKa2CKTP8kBG8d8TEkyacjcRzT9dlm0GjM6aptZ4eCKomp6F6WxKw8ih0y2c85aUNDnwat1OyUiigRdwBYk2WiqZLE87gSQ8TcHp1LiiWMj10PFtw8J1BHRdM9ibGj3DHCiSL8ZtxTwcyajli9-E3lbNT1AGZhLrWegUNlhkg8Mei+g8HXzczWtbYZS-1QXKqRoZ0P6InjyE2ZSd6OCSqY86$lZ1aC1oWZwZrqFoj17SXRNcMo6hsYlNmu+m6t48KknhFzrR+ZjsOA-0Tip-$+13NjQzApye-wIZW5fun$KsRp6QlSiqbJsdsK$ixhG$j5UqOazA0K6G0b4et2+WrhHu888U8nd2lSCFfeT-Tb0nWOym1-Y8xNysIwMyYrY$2yxUXI1Jnc$Ab4FLD6nt3L-w8Ru+GNy5nt3pXtPSFJDEHNdZOMQI-AQqH2-6yQdwQFOiPf8IPznk231WLyXbQzxE+Zxi$pWUWG1Y16jzyax92kQWjc30Oqx0L6HZD8L3W0wz$mf9WQFiO3$219+U+C-gLpwjM4fLK+Y$2pPBPAs4XXYNDH2FHIDtf6PXDdfpsSkUGy+KPJFk+hnk0kYq86-sDfDInEnA8WwAjdXI1Y1xKPKF8kKN-rj$KMQyM0O3-sjtWQbw+GwgO-jowTu1YXx6Fb0A-FMdk8G$ynweFLYK46X93T0LY82+yAnHLCQJ-ZFRYxsdXqus3ibfGIHouvfNFf0wsI$2YZbwYSsoKex4-bKWHeKzjyIKnMK$0MQKbf4LlfY4-rloOIvTHB3X+ZFAPYn0vQyfvQQK1NdojmKAX7K2nNMF2yMLQ3DZ2Zl0sJjm3Q4UWgQ8LqMmDU+DOdl7$sGS8p89PpY9YLuo--yNDyLpMkHw+wYeQF-iLL2BP8OZ8xO2Y$bM0gHRvdXEWynasxjxOrPXxA-BkDXCsDvt+KxkixQWX6IEfJnCYOkfIDsWxL0c80xC1y+vn$bWHbjdYxLWYNi7yAMk0AxCQFXKWd0hvUYjnniFOgwiPojnwWL0x2-FYN85+aPInY8ox2-sDA3gL6FvvsDCy80vvKyiYu$P5yxlyQI3P2j934KFFqGZwPi05KPzPTIUvEGL0lvdnw2WHAfEOPnAf9M9Ftx3iawYvDnn008WOeQ+0XIAPaPUWNyafWHPHsdsklj9diX3QLQQ-APO-B30O3Dk59i$bw0n+nj82WYqMs4GwYnksvP+L+nNMT+MxWTinEvl-6PUQn0q$686-KbAfS+6n-1pv0wS565wxkzdlnDHzM5L1q+APrnYTJxqD0KPiQuZIi1n2LwjxUW5xW0kYNFW8nz4PY$Dnc$NTuXCj3bF-i5dk3TS3LYDDAnHYtHE+XM80uOkzQb8WZscYw3ATfXHifiK+o+GLLwczLDE1sKuQ$lOygOYG9-HTNYr1+fpbh+0xXD0nNTd5n61j820l4Kf0NxjP156fn0YPm-8X6+bjgjY1n6XvxY2jneZ0tnQ4t3BlneC-S-Z6LwqloFTb6z4sZTQIrTLGMTT2i8jPTu3HvwenB3T0OQAM5jZlJ8cwwLuTker-L6svsbQ1c$SHtG-lEWI6rnqPjnjiuba5I$2G3LB84idjs8pwd-AwdkElDeI+ZIdjEw3KjFZIwzlH2nw2ZPqFp6WKsDBPSYI6WszbFvrnIz15zyv-ps1Fwbe-gIMIcebKEvHzOM$21$+Qvv6xPwXzwy6KubfzC12Qf2R39PC3xYZwfGqWS+y+5nZYpQKHUHSYn+wKqT8Gokv6SLWD$OAuNsM$JutZUQJMm37Y76jyYWgQGn$-8Mu6$2P-LiDM5njlhKL2eIGw8XeKxbCQh61uR54XKdl07PAPa1DPHjXXFF0OPZ9Xw0y+XIGQ8wPl$bKW6PH62sMTWu-F4+3$SDc88z0sXOni5GGPxJiwOul5cIhWK+LybwYPAlxu0xxWgWBnAebwBZKD2LtO$Wq645tWRYuiLZuyw6ylneKbNTWQXZA5q6r8H3kWb5ceZ$0-S81Jgr$lDwExNrQF-yiuiHEvyLPPEOWZUz5Zk2Q80l04j-jn8R3D3+o1$JGbBxFi2w9vzbM0l+DHBekf4IzylR0eB5mkBJKQH8pbPu2L4rnLG+m3dP$wSOtuSsKn5-18meosDJklSRoKGT-r6M7WdbEYdTP5eJZI3HGHQ8Nele3HkZQlesL-jOInjPyT6r+vd-njw1rP0P3+IWUZK+63QJmJT251SuT0ziZI3Ij546C1K+Xla6rvH8tPwluyvTsbCQ0W214QKP+jzz-Y4zdlJP3lSGSDBIUWwZqMakhFTzMZeQSDGHB5rKEv0OEy9$nOGlKW1uW1JXejbrFsxR35G5$exxBOkW8JrPtQv+sskTwFG65iUX3f0I45SRpRUWHZ4X9$IH7--nIDCRNyiZBkl8Wl6Mywyi6YZ-uIPG1TW-$JZWSLQsj33x7R$+o0m0A5$i4DH0$jZnLurIpLjnc$8lu1P-bvjjp5nKqFvrm+KlU56ub5leP5NO$2SiuO8XCcJsw1BOgYKDsZ4zWDrgX8y+qI7Z5Zra9kM2fcieL-kiDnZfWwm6w21$Oy7WYLa$JuhWMbxLU-3I5lJuglN$qYqvxi6FURwj5PxD3CjFZnyjBZBOFTrn8rPDiL+DOFH5xw$Gn6X-Li253$9W9+h+y1Q86YacYFxfLFDnnSMGcsn6L265L2CQsHoJIPkDpLNyvl2Ql08y8dQavg2n2cak9-FCdPX$NF7yRj$W5+81vOojCaS+H0+DJRWimM3$NzUvEW+z4aGrQr6MKyYgrR2zgRKRaRBRyyigl+jPvPM1e69G4z0a$MZjzJ0Zmxp-AuCX1YAX9XYT6T4G+6LsX$3I0OfsbsvfzOsHWRCuvvYTJTiLdBvn5nj6-i9GGwan$iaeKyZ0-ZnezLDI6newd+Uj3cH8Q8ej8fnHeKYcFCKzKWP1jsDXATxlN86YAgJuDKAkjKcnzIBTgK6nBjn0xXKfyn3FPInJ1w71pakToilgJQsd93SSR1mPWGnePKN2TgnL9nvKPrnDBg$b7Yrel6fJRj1FnwbLLwDCP0Mv062xq8QvHOYawaJBDnRB3BdT1r+nkgJn76$6ARKR+RDwuL$eU6JX9gqg68Hp0OqlKHaefs8dnpgO5P$CzPycf$vic55iBeZJAtgcL1qta6SD6C5R7eDubILIBSDX3fa-qwjP0xSHicrQ0YOpTbsp0RlQDe6gnsc6JH9+0OuDIyMb0n0SbZBk1LDurzgSxYqFqx5Dkj-itrK-rjywp+U+tK0a6WqkS5Qsv5Hg$yiSt+WJeGUeqgkTillcwCzctR55RTt+iQiwD59QSXtv+BtubXOSPekGgTZ2MsjbBzkTw6WCYrgU9Ka-Rlpcz-lxd$68UgvDJL0n5aJPoRfKzr0P4WOGC1y5ZntY76uGL0NXZsqwBnQGq3ZCA3S+AZG1n25rOcf0uCGUUWmb4ggiiggpyRzSBPSnqzrNCyP+k+mkf02REX7nyr4NKHUKLBSec--PRBxaGao8Yac$0QND9OfTwsePMWJP7Z6YNaKHYcaCsNvDEBDQARfUuLdr$Azc6I0zSR3D+r+PfzZss3nHbXyM73sldOEgPrhernpyiNyKw2Ms7kG5vDcbJcMtcSneiz0K76TYBXYUMUMQNuTn6YXDKn3Mt$MWvCEjaD5iC57vlQNH0aQb-AkIhTfzNdG1A+LxJif0vlBtcatfjUJUxAOIlJzbwBmvpFJrmaBS1Zje0DdHXBuaMbzK8o5aeQfcR5wrGGOyMQqR$NSc6eUxZfW00-IPsg9S$WBHmHX8GWJzROiw-6yQ2tFB0Jo01BZ+ent9ri6MsiSwjzpYb6dx047t$eKsls0tsgBoHeI5JTqDOZFbIbguGN0SZ28TyPs-5A4JbwLYwBWDEtzDLLse8XiFvWqFkp6eXghWbblgnc+HkZsQM6n6nZyonphx+uEuYSHjhWKI$+7bv30ewCdeTXNT5PECJFbs73QLTt2ls4gZIHzjntaeeR4+PC2LhC5Q0nWYRUHNYlG+RNcc$DSFsH7t+xSbHezBRjR9OMpWTUYhgb2TQjZblcUQdPZaXRwD6tx0tAqA9IihTA6qcN2pH0JpU+BMrcDP0ef2S3Q33h6Yxg3m$+cJDP-Km1oi2eJa-Y04igy9ls5znObDkBKuOj80MQKY9kfQOL3tP0QLWbf2Pc$-N6N4d0SAZZYtTJX+0xETF8yiMPDiNsIGc$M07PDPgF73scBolUQomOOoWLZJMfjAvbsuph6Poj+XqwICMCGwyaW2vUfJU+qx+zeN+fQueTBTtTDuSt6YNT-Qiw8HzwNBLSOXkB2NdytS3IPy+yDXxeWqZLrj3iEvlrA7q7cq2nXRPWDtmAoYho9yzedX89TKM0oj374X7iXjylK+qyEhapMcARlRHzPQMhLHI9ZyRouSDPav0KiZ$yMrokrjF54WHEh+KX6ljCPTehzfdlkj6l564onT0vCfWWh2jqL0NK+yFelPlKnmMn2f0xjno235ycCdI9Q$icwqfm5lxiad5nPR1eMuzf5BnJZUKKayfUKgdF9BrzqWG0tB28QeWTDQyxi+sJDYwEkqp86YCkP4bZL94PDo0BZi-ddYwUp8PyCuIh05n942Bk9zFFGQaYAnp861C70WnJlDW6wok3NKlPoLtODaQPWHCtG88eDtklLolviKGWkzpija2HPRyvxqWXq1Llxni3sksbpnK2UMwZKsWyxK$QKt26Ss22aHhwfkfglHHjnbQGbaf6520jInH2zavljgKdj0qk9PktWBKWdK34G2bp3uj+vb+R8HqPT6Ka6acxH+02xf93a8ffDPXdM1LsHkavxL6Yv2xva-MrnQK4252-nDal4fq4GPXaHfa5fo6OKsWZWrLanjaCyj0xR2ugnh4SjyjOXbdAfBDvBfUbwWkWArvo0jjyKHa4fQPWdptflnsAbr3XyLDNMQj5+UbG$qpyiaIjX+RiPk5b3jnt276F2gb9iP8lv$SfA4R$GcPEjmKsWvfk2QjzwTbW9bAHkZP-PKfcnl8Azrf28iKaijz2YkIJ9-n1kQDZqTbDfh3S0asKjKb9pf2WH0ah2EWXU0-6Da3fkl10SX5CeY1ilgd0npM68AiMaj1kJ9w2xfnJK6f0026lGq66KfFCLwwbWLS8MXBsWDwnWgQQbFXfhz14w0x92RPAnyCxFTWwBFC+KkbCYsBqJzHf5TjnacKN19qqzM5fNWdx34rkJ6attN5HvZYqnSB1tHKz+KGWuLYT9iPPffY5+$WGQ9ifHf44m0DWlfHBvQaOne0k8R6fYQjC+lp0oieRmGviMCy6nz4QSCk1tCN0wK8nD1raABfFlRk9AC1DfT6MIvq83s2x8muPj$ws4mXKGM4aJa4lwWjWO2mWn+nZnEkD2-LplBOdCj9+c2ykRpu4jMGkdyvjMlanzW2YY184bfFXDRCRLd0IW6yfqtuZxvrdSnqx5A1+PEvAXxFjlKN1Uf5WwWTHpGrNo3nR+RK2zhZfHo-vy$ldA4sAKEp+PvK-B85pneBoGvx0r+EgozMnz6CfFaX8Lw232P8Po0FavbhuZKfnSn5AnbQp69YPY25+X$WS680NyWB7jDnijkQx$KUMCvwbBfg96KCZlIHx$Bd5yABaPnm+0n9noW68PRML-yA0bA59fQ1PFIXx61iqjbyWd102WDWDCnMv8BS0b8eZCiP9ifjYiGn9bnka33nKCfGZ0lGwj36ug-dAqwmaNf1W0KxfzBjMsyAZT38zvFnRoQU68MqnEyGn072YS5neguPyNQFpFmMP8BzI+xko14a7BEnZnIHs1GNSluYna8v1W1DToFK-f$fZPZPffo+2L2x5$i-W-6niXfnDPr3wWnnM3-PN2Cn+4Medm0aLEnQLNO3kSOZ4fMaLWh+KO41wXdcb+Gq25bnGiNk7P9$1SoI6A0gKRbYkDnpL3v3mxMdvHNWylX8ezIAfuWm8o94RF$OsWF2twLKabPgjQktEF2Cl5YC4WFEMJf45xKT4xPEwsfZN+Anlb-l0+irpjlaK9L0G79p2ZWKq2-CNDz2e1Gka6e+PD4Xdk8QZqE4nSBPDwIkHya6kY4q2d054ft9OKocbWa8EnCBa6eJa53UwEZMSx4SqStHatp24foKaAZulMXtmHfoIMuaD5pwda1HqKf+jOl34vb8df+4Ua4van7bhwf566MclDnG$ugHIa5gHTz231wfo5o5KdWQku3HcS1aK+8GonIWeL6vbvdHl7P9PGWaNQWg5d22hnQr1kaDf++0WlLz8AHn-MNPrBDLrWnYPqjy34HUX$gaLC5PQD0ku8g9oFKqPj5NWY38NpMdIW6HmxjMKNHQ6Ob$G68MnhBiDC1WijDBAnqz6FfSvN2jk0bQNrOatP5i2BkneNG9oGP1P8ZRxEB3CADe0TBnjWE218CYPmx5A-b8$MBBvyCFJ8gGT$Fc1Y22w9bCfgAsHjmvwTL8aGmcQCooJIzDnjn8A5S1EljLUFR8X6jtQjyQzNIhQt98Ali+ofqIg2qAjc1cban-AWFj9tNeXluzqkgti9HI1l590GtwUi3a7BpbA2nHhoQNq8KvSITTn+xA4ac1BTzPZPhyqzfhodiZKAI0YwgaceuZUz59wH5qhSeuZy0n1LFiNohQHPvT$W-bsLQE0oy9z7ILWPffR68PnexL-a6Ze73uICvnMAmMtPUonDjz$MUIaEhS38WLDnx-bA2MCjsyzPmzqK9AhS15Bp$AIpbPQQRvsyKKIIHKwWKpd7yX628OK-83QCTbxeQGrYxSSOWZvG4vxYWD$asSQyIY0nljQNGnm46wHAIyfU-a4m0kX6dMyxknw4OpTA4dMDAqxtce+blnSLB+t+GPzLT4+IMgKxDCE5fD$jmIFlBXtTK1HsTsk4YG-QWmDfr48Iv1oPH$ZxnnelMclTN6UfGHpPJbYGQdh$w5b1e984iIPD$9KHWe+I8iXTCUQLp3XMbUlBdASBhyE2by4iy3i6UTBvP3FXL48j89WHsnYyXxT8G$ncWPT$dpfQUMWOc+De-nrYIWjsbbz6f+M5iwGbGbOvvTbN-g6Pl$m7cITZA0z6PWXxXDMHN8SxHE0wygHH4eMgKmn9TpZpOTck4x7n+gBrpN2n0eTrjKxLtpJ6AyGzv9rx9s+jezK6YOqD8nZpITin3264MIPYvIzZ$3z5OCpn8DoeDH$6AEhS3PC$PKy0AAqM8UKP76GZgOt+iKOKlp6zx-biWjfn0bsTckG6cPrMPRaeYbDDX4a52ekpDn-AM4EzM1fj4HdwGSA5+8IQLpWLlDxkQxikn3tNz8i0AfcBceCW3FfE-bijQOfFpo-2$gGAzeXMzlKT-w+bC+RYedpNH+YJXadrKjjSo6ow$bR$Qdn9aiJq$Oz$do+4Yl2vIDm4cledn0KhYX2$4u+rYkG+iTXrfZS8ecAQtjPkD$xxuFCAYHJ55Dhl932WzOpbW1dd5CZhOyQt1zCBPZDX023jjEnY126ixs$90cPZsW3i-a9aJyyizMFEWGQhFnLnqTjDUxuuqmo-b5+fuunkAsSe5pm6wWNYB98rwvB3zXu3rIHxS3LKqnzup08DDdMTtFJguhbAO5zOyH94bYFrX9ttLJBuJ9uqZ$NhpkRtaJtIc-8s8AyatQZ0uXiOQiAmlHTJPXfixsqbfAt6J3IJGDs5okwWAJenlYT+eKoApYJMDw63E8rxep-Ji85EA0o9O8PkwoM+ZYEF2xRppTuuQZJI8rwhB+dP9cg+EiLjhbSJMDqOMs5rmnDUJMD$Kgs8NmnDTJkQ1K435P97kk64QYKLGH+O2HmZDyBKOQ5WLDHNJYMwZ2urtxRHbe3MlZY+ioa$rQJZMmrzvpkUoH-0FKvr-+tBm8H5JjDpKwJJ49UkK6-z24BuqkxoDYRYWflXs8Z9bHcDaQGlgvtdxHtHJBQ6lY-pubHROTMDtlS0rA1Dpge8xNgOlP3+kNKrR02a4Ty8m5yirDQKrKiStOlpA6rytacdrPO4Uq6XMPacdRnZkUqefQjBY3i+xYNB8kQTB$3sPxQt36JQDWe3i9A7pE22OoZobqMZ2UM6eDFicsRbLiUynpDvr-wRo3xUwryyugve05KNDc5MDqtOBkF9Bpj6Outt4urGwap6rRDutlB31J5puriOpiY-GGmNpwFtQlZ-JGDxNtO6qd9zYWaxOgNs6BkRtmFGumADwZXOJ4uly8f7MgZInhf68Rq6tNg890E6n0D5vY41PiMLki4QX+NNY$0QA4jGfYCwCbWNu3+KnABnZnoniyGrmzmqQNd5nx694FgC4KogUOO076br2pC43UsW+qWEzj9uqbwR$uoNNf5axKKoRb0xB+KpNuIpxJX4pWPFfkfWnnPgjC8ynHKY$tnA4a+PXnqPtTUNDL5W3BPhjkkukNlP$MLSHvwWyXIWhRnYfFXakPkg8riOBLnnfz4Mnolf22oPsWhbG2CAiOK+GpKvHqlA1epCkWSW12Oi3D3x0cWwss8Ep5WC2ncnQnpAWnP0PnS4nnibMUicAnR0QZ9BMxP1PXk09+4tnM30lcAWf9vC0JZuUrgesunL2MTJdPGc54B9WnQdGgeslKhUGxKjuGcQ81nrX6gfuUgg9s7gQa32ndulWQnw$FoGSZIXzkwWPbF8Pv9WK0cQs09cYL2KC+03X4GqyWA0QXjmR7n+BCr9BCXnnPrrb6b6yN1PjnW6mGCpZ8KQgEWtnizKULPtp2J2irNWo2MRuxnnkA42W+AnAb1KOPYL6XalymzqYTffE9zAEkKvEwX4zLt1opJLl821IO0jtkre6a5X$WMXzAhAHY5u0g$g8QO0vZYKOnv8ZESTZlnW3tWGslWFg25mbPfg3-Duh8A8KOPpPS-2fT+MrnXK9+f-8L0oH3n2jqgd2bnDXPLfWjLna4fEdBR+SZlA2Z0g8GMfTmabplZ0fExflqi3Mbi8WsL3$eun1P1P1jCqSn1FA$jv$c2vPvu0Djk1$nc2f4OD5Oj0SxjX4nn8+SU8f3-FNb-J5P0UcsXstAv7pv97Xsn1ssLMa6kPY5pnnnmBLrnn"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: nY/3JpLLa9k0Amm6+BtXZg==$T/+TUu5wE2iB17sHCAEY2w==\r\nset-cookie: cf_clearance=md5WXmIWSNTHiln8fgL49fpecA6BKyhp3sl_5B9uyTM-1776861657-1.2.1.1-7H.9bnSbVk_KcL8alwXcnXiDQ_63M4p7RHX1eaijJ78Mekca025yQ4ZUhWzf6ojhi28dUiSfuaTpEkRVIwb1URXIT_6LMTo1SBt6JUFJpNRST5Ph.1jD04rx8ZnsETpKN2w6BX.cMEr8HNiN8ZEkYL6EMkuoB1DNWC9TfwsmVYWMu_z5rcOvmBOC0ASNijshJoemj_9P6NWlMe7mHphUQSmLiz2Z8PU7ue6UwtZhLBSB2S1ddR.U3N7E4PoWSLetDPvxI87jcg4FuDGyucdGq9WPgNVIUsIkJJLaIjTa9G9y8UDLPQWi8S_3ghyrR.lxGz_a1CJkcP0iEOLzyMHCJA; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=relaylink.xyz; Expires=Thu, 22 Apr 2027 12:40:57 GMT\r\ntiming-allow-origin: https://relaylink.xyz\r\ndate: Wed, 22 Apr 2026 12:40:57 GMT\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f04b32f3f49712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T11:09:30.515594Z","times_seen":14100050,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"relaylink.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relaylink.xyz/","fqdn":"relaylink.xyz","domain":"relaylink.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://relaylink.xyz/","date":"2026-04-22T12:40:56.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaylink.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 08:45:03 GMT","end":"Tue, 21 Jul 2026 08:45:02 GMT"},"fingerprint":{"sha1":"E0:9B:8C:DF:AC:EC:45:86:5A:00:62:5B:ED:6A:35:FB:0D:2F:8E:A9","sha256":"52:F2:71:D4:2C:85:DE:9E:C3:0E:8E:03:D4:24:5F:21:6A:C6:FE:AA:64:79:8E:24:AB:4D:D9:E0:03:C0:FE:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: relaylink.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://relaylink.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:40:56 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 22 Apr 2026 09:15:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 0\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uZKHDZP8iTLHJ8m7oSQd0dOkdh3OoEiZzQeb1YGKe1y7awYsExSjTEllNZfYHkdGoEwo%2BH5tE9gGb4tfUvXdS6NjFWU1gYGCS%2FfGA4Z2qVFSbEoGaHYHhivqN%2FufDt4M\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b3277ed2712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1375808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (21981)","md5":"97a90bf79059475b8ff41732f5ba3800","sha1":"711a4243a4da6117c1b580073c5082774d357ee8","sha256":"659c4cb108b998de7d190b1f0cca5d85802debdf02858b1ad3413fde240c4606","sha512":"a8c708878691cad8e3599dd6b238ce6d2d9a2b24d51e91941bbce9b19dcfc1b6afe552d5ebc3fd814578cf21a7b426b7c805cd8ba78831a911acd4231c5fa692","ssdeep":"12288:3U2nol1olcxSUPaxxUPyxeUPixNUPDmkpYlcT:EkUwUfU8ULmAYeT","tlshash":"d425f77ace2485bf0c57691e53ecea79ab6cac569c2567ffbf5080c03486af124c2d14","first_seen":"2026-04-22T12:41:38.012858Z","last_seen":"2026-04-22T12:49:03.874338Z","times_seen":2,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"relaylink.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relaylink.xyz/moment-2.3.7.js","fqdn":"relaylink.xyz","domain":"relaylink.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://relaylink.xyz/","date":"2026-04-22T12:40:56.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaylink.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 08:45:03 GMT","end":"Tue, 21 Jul 2026 08:45:02 GMT"},"fingerprint":{"sha1":"E0:9B:8C:DF:AC:EC:45:86:5A:00:62:5B:ED:6A:35:FB:0D:2F:8E:A9","sha256":"52:F2:71:D4:2C:85:DE:9E:C3:0E:8E:03:D4:24:5F:21:6A:C6:FE:AA:64:79:8E:24:AB:4D:D9:E0:03:C0:FE:38"}}},"request":{"raw":"GET /moment-2.3.7.js HTTP/1.1\r\nHost: relaylink.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://relaylink.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:40:56 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 22 Apr 2026 09:15:51 GMT\r\netag: W/\"69e891c7-17bea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Tjf2Eic7lXd5U2QTgRwr60uqxZsHaKhreVhhtFw2LGXpVe2Mqctzsy5ZcYDi%2B18yxCFoZBgA%2BeOSc3lP3DuQ9Wzrwg92a9PmgUvl1loTAnJ44avZoHQftQ16kOowM3f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f04b328bee4712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97258,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d595868c27ce3c113e48356291508c25","sha1":"6395d07924c320cd4a2af14a0b3684c54fbb6631","sha256":"ce52e8220b73cd469d007a56a43be71a1347735745a7c54d8f684129ed190cfe","sha512":"546c7b504cd94aadb516e09502bbe547ffff43abaf8431a995211f249265481cb09a9a4f39f41ac783c797cd764f43ce0e9fed1e4023595fdb09a776f24a6569","ssdeep":"768:Dk5TkcIq9i1ElEqlcBGiBXRWE2eLUBe6/LLtJLWycmbcTKsP9i7jocwSZc0HkW9v:mi2lEquvF6nMc565RSJzzqk0c","tlshash":"8a93b3d96a5ae4e84e5620dde433e905f4680d13cd6df267a23ceec0741ef26845b23b","first_seen":"2026-04-22T12:41:38.013814Z","last_seen":"2026-04-22T12:49:03.879561Z","times_seen":2,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"relaylink.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relaylink.xyz/","fqdn":"relaylink.xyz","domain":"relaylink.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://relaylink.xyz/","date":"2026-04-22T12:40:56.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaylink.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 08:45:03 GMT","end":"Tue, 21 Jul 2026 08:45:02 GMT"},"fingerprint":{"sha1":"E0:9B:8C:DF:AC:EC:45:86:5A:00:62:5B:ED:6A:35:FB:0D:2F:8E:A9","sha256":"52:F2:71:D4:2C:85:DE:9E:C3:0E:8E:03:D4:24:5F:21:6A:C6:FE:AA:64:79:8E:24:AB:4D:D9:E0:03:C0:FE:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: relaylink.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://relaylink.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:40:56 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 22 Apr 2026 09:15:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 0\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gYHbYt5DvxHotICsRardLu1Y%2FQ603Q62een5x9GhmmkWyTXx3mOXgEJLgKT1iL59fpbojzZ1G6GS%2BJjas4zO7aufaYlBacoXcJUmS4J%2BgxezF3RbZg7Lfkcbp1gt%2FeAC\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9f04b328eeec712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3135847,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (21981)","md5":"97a90bf79059475b8ff41732f5ba3800","sha1":"711a4243a4da6117c1b580073c5082774d357ee8","sha256":"659c4cb108b998de7d190b1f0cca5d85802debdf02858b1ad3413fde240c4606","sha512":"a8c708878691cad8e3599dd6b238ce6d2d9a2b24d51e91941bbce9b19dcfc1b6afe552d5ebc3fd814578cf21a7b426b7c805cd8ba78831a911acd4231c5fa692","ssdeep":"12288:3U2nol1olcxSUPaxxUPyxeUPixNUPDmkpYlcT:EkUwUfU8ULmAYeT","tlshash":"d425f77ace2485bf0c57691e53ecea79ab6cac569c2567ffbf5080c03486af124c2d14","first_seen":"2026-04-22T12:41:38.012858Z","last_seen":"2026-04-22T12:49:03.874338Z","times_seen":2,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"relaylink.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.relay.link/app/favicon-16x16.png","fqdn":"assets.relay.link","domain":"relay.link","tld":"link"},"ip":{"addr":"52.84.50.118","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"moz-nullprincipal:{a1798df6-c95b-46a8-8d0d-7f48a72a4828}?https://relaylink.xyz","date":"2026-04-22T12:40:57.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.relay.link","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 26 Jun 2025 00:00:00 GMT","end":"Sat, 25 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:7F:BB:2E:00:C0:62:E2:6A:2F:F0:4F:BB:C1:8D:8A:1A:82:FF:DA","sha256":"C0:8B:32:3A:99:53:DA:F1:96:5D:AF:3F:7F:ED:61:9B:B7:93:1B:1C:88:F9:59:28:AB:E7:39:2B:C0:00:10:82"}}},"request":{"raw":"GET /app/favicon-16x16.png HTTP/1.1\r\nHost: assets.relay.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://relaylink.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 335\r\nlast-modified: Mon, 23 Feb 2026 15:49:13 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ti6kYGMGrh3C7bQdZ6YjpIO7VfDf50_X\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 22 Apr 2026 12:40:59 GMT\r\netag: \"623c6117b2cc7fa93da4800f074308c8\"\r\nvary: Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 d229ccc15dd984a81023d1b57fa0adbc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: wIJdFOByM-FsntYNBc8yFUG2eMOdHAhgHcMsj1Y79hUqdH0P7CoBjQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 17, 8-bit/color RGBA, non-interlaced","md5":"623c6117b2cc7fa93da4800f074308c8","sha1":"d3a17e1b86cdf0f8b1b630e11bcce9628c0fca24","sha256":"8f41af0fa1ba92fa182813183763780e574ce5012085d602a94df9488382be1d","sha512":"3322f78b9bc5b2dcface9f0e1432bb3b5e3140c43bd7d771602a599a78561c2d22b6dde94f38966907d94020986e01ed894a5456ce913a77b2c5c27fbdf20bad","ssdeep":"","tlshash":"dae026c2e314a9a9eb6e1190aaa2171aec2914174af45339127fa0209ad613a8869689","first_seen":"2025-08-29T11:23:34.322485Z","last_seen":"2026-04-22T12:49:03.881991Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1702,"timings":{"blocked":645,"dns":90,"connect":1,"send":0,"wait":410,"receive":1,"ssl":552},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaylink.xyz/cdn-cgi/challenge-platform/h/b/scripts/jsd/0b8fb825cb67/main.js?","fqdn":"relaylink.xyz","domain":"relaylink.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://relaylink.xyz/","date":"2026-04-22T12:40:57.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaylink.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 08:45:03 GMT","end":"Tue, 21 Jul 2026 08:45:02 GMT"},"fingerprint":{"sha1":"E0:9B:8C:DF:AC:EC:45:86:5A:00:62:5B:ED:6A:35:FB:0D:2F:8E:A9","sha256":"52:F2:71:D4:2C:85:DE:9E:C3:0E:8E:03:D4:24:5F:21:6A:C6:FE:AA:64:79:8E:24:AB:4D:D9:E0:03:C0:FE:38"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/0b8fb825cb67/main.js? HTTP/1.1\r\nHost: relaylink.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Wed, 22 Apr 2026 12:40:57 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9f04b32e2f40712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29308,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (29308), with no line terminators","md5":"8a8c5b2dea9324990777ffaa02b12994","sha1":"b07a23527daea958d92beeb90430e5df4cfd8ca4","sha256":"9f7b51b6cf3684a20fa2cb475d414897ce2ccef8e597a69f6d9adc46e984ae20","sha512":"f8b561a9d13ed28c07fc538c66f81549612ab1c309544ac56493e06b17b524e02679fa01065cb8fd4760a2a1b24a4dc490d6408080c276776315233125c1d317","ssdeep":"384:O6nReFxBS8HDbMWbuwWss9zsDbVPyOXRxC+9Y0Et1Dnh74K6kYr4TIQHBCH5p75:tnRkyqLbuwWsspQblyOh+0Exte35","tlshash":"7bd2d8dd75cab02682a634b86d5b30c6b2b9fcbc30081d49d261f9f8b930749d5bad5c","first_seen":"2026-04-22T12:41:38.016028Z","last_seen":"2026-04-22T13:06:58.683585Z","times_seen":4,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"relaylink.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relaylink.xyz/","fqdn":"relaylink.xyz","domain":"relaylink.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-22T12:40:55.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaylink.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 08:45:03 GMT","end":"Tue, 21 Jul 2026 08:45:02 GMT"},"fingerprint":{"sha1":"E0:9B:8C:DF:AC:EC:45:86:5A:00:62:5B:ED:6A:35:FB:0D:2F:8E:A9","sha256":"52:F2:71:D4:2C:85:DE:9E:C3:0E:8E:03:D4:24:5F:21:6A:C6:FE:AA:64:79:8E:24:AB:4D:D9:E0:03:C0:FE:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: relaylink.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 12:40:56 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 22 Apr 2026 09:15:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lVm09Uk1yPePrgqBwnUmegMM1pgaHlbJmM3q7cCm7M5DTYh86ZSTMMf5XaVcpDYPlaVg%2BKtpX2WjavS4eCkFHCBk7f5PlGpHQc8ntBTp%2FvKByLogDFclO%2BY8qBdrpPfT\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9f04b3252ef923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3135847,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (21981)","md5":"97a90bf79059475b8ff41732f5ba3800","sha1":"711a4243a4da6117c1b580073c5082774d357ee8","sha256":"659c4cb108b998de7d190b1f0cca5d85802debdf02858b1ad3413fde240c4606","sha512":"a8c708878691cad8e3599dd6b238ce6d2d9a2b24d51e91941bbce9b19dcfc1b6afe552d5ebc3fd814578cf21a7b426b7c805cd8ba78831a911acd4231c5fa692","ssdeep":"12288:3U2nol1olcxSUPaxxUPyxeUPixNUPDmkpYlcT:EkUwUfU8ULmAYeT","tlshash":"d425f77ace2485bf0c57691e53ecea79ab6cac569c2567ffbf5080c03486af124c2d14","first_seen":"2026-04-22T12:41:38.012858Z","last_seen":"2026-04-22T12:49:03.874338Z","times_seen":2,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":73,"dns":58,"connect":1,"send":0,"wait":225,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"relaylink.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.llamarpc.com/","fqdn":"arbitrum.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://relaylink.xyz/","date":"2026-04-22T12:40:57.351Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://relaylink.xyz/\r\nOrigin: https://relaylink.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T11:09:30.515594Z","times_seen":14100050,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}