{"report_id":"3e2ae998-aac0-476c-a1c8-d58945594512","version":0,"status":"done","tags":[],"date":"2026-08-14T12:23:38Z","url":{"schema":"http","addr":"rhpscoinrbh.lol/","fqdn":"rhpscoinrbh.lol","domain":"rhpscoinrbh.lol","tld":"lol"},"ip":{"addr":"104.21.41.150","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rhpscoinrbh.lol/","fqdn":"rhpscoinrbh.lol","domain":"rhpscoinrbh.lol","tld":"lol"},"title":"Claim Your Airdrop","dom":{"size":25141,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4239)","md5":"67ee0aba9f5d5f965b5fff9d79ccef6e","sha1":"49aae46320d3286f8a9b22c2136e16c703c4ac31","sha256":"b6e78c6510dce83c6d28d6b838ee776855ecd02ce7dccddde809965ede727978","sha512":"406a286eef5e64aaef47d742da61ab82c1e34f19295e589aad7afeeddb063db0181e4eded0b13733957f0403383806850efa6208f6e1da59b16c8792a2b72fad","ssdeep":"384:WKIUrbBYR98+fXHoFoSJkZcd9Ips+cvn++lLJE/GEPxS7PKsHoP:iObBe98+fXoFoSJZ9IW+cvD6GSKhoP","tlshash":"26b2f62623672024692795a92bdb57093225e507e016cc783edc5384cfc9a99cdf7bec","dom_hash":"domhash5fd0df851fc827007b59555ebb9720c5","first_seen":"2026-08-14T12:22:03.378876Z","last_seen":"2026-08-14T12:23:43.005302Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rhpscoinrbh.lol/","fqdn":"rhpscoinrbh.lol","domain":"rhpscoinrbh.lol","tld":"lol"},"ip":{"addr":"104.21.41.150","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-18T12:23:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"rhpscoinrbh.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"explorer-api.walletconnect.com","ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":466611,"first_seen":"2022-10-10T18:16:28Z","last_seen":"2026-08-11T03:12:26.821657Z","alert_count":0,"request_count":7,"received_data":1203524,"sent_data":3906,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"relay.walletconnect.org","ip":{"addr":"18.184.214.243","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2018-03-26","domain_rank":444044,"first_seen":"2021-02-22T09:38:04Z","last_seen":"2026-08-13T18:14:12.796464Z","alert_count":0,"request_count":1,"received_data":166,"sent_data":1116,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"rhpscoinrbh.lol","ip":{"addr":"104.21.41.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-06","domain_rank":0,"first_seen":"2026-08-14T12:21:59.99953Z","last_seen":"2026-08-14T12:21:59.99953Z","alert_count":3,"request_count":3,"received_data":22376,"sent_data":1418,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hexalink.org","ip":{"addr":"104.21.91.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-24","domain_rank":0,"first_seen":"2026-08-13T18:14:10.758941Z","last_seen":"2026-08-13T18:14:10.758941Z","alert_count":0,"request_count":2,"received_data":49146,"sent_data":1199,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"esm.sh","ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-06","domain_rank":47501,"first_seen":"2020-09-23T23:39:41Z","last_seen":"2026-08-10T12:43:40.584065Z","alert_count":0,"request_count":7,"received_data":1101772,"sent_data":3476,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bsc-dataseed2.bnbchain.org","ip":{"addr":"34.254.32.87","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":4924478,"first_seen":"2023-11-12T11:28:58Z","last_seen":"2026-08-13T18:14:11.71184Z","alert_count":0,"request_count":2,"received_data":1287,"sent_data":1079,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"zen.claims","ip":{"addr":"172.67.218.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-05T10:30:02.141035Z","last_seen":"2026-08-14T05:04:45.945842Z","alert_count":12,"request_count":6,"received_data":1060211,"sent_data":3220,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rhpscoinrbh.lol/acd714403a.js","fqdn":"rhpscoinrbh.lol","domain":"rhpscoinrbh.lol","tld":"lol"},"ip":{"addr":"104.21.41.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"59c939c1aeabd848f0c107a327b28221","sha1":"26bc709a6e7253e6f7917cd5164e74f700f34490","sha256":"7a7424a155777024bb994f19f7f7d5ee747c415d98e6f586381e3b1015a82360","sha512":"7281a1708a69dacf61f22b7ba7bfb14dd7f1728195403bffeb1544a1d74f2e09c825d33b3cdd0b037fc675ba4be823c4610744bab23c586a83355d206f99dde4","ssdeep":"","tlshash":"0e21c0dbba52f4401785b7b6986f740d9767bd0adcda4838d40055c23dbeb2fd012568","size":1416,"data":"","first_seen":"2026-08-14T12:15:12.569889Z","last_seen":"2026-08-14T12:23:43.032289Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hexalink.org/?host=https%3A%2F%2Frhpscoinrbh.lol\u0026href=https%3A%2F%2Frhpscoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"hexalink.org","domain":"hexalink.org","tld":"org"},"ip":{"addr":"104.21.91.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"030125497fcc7b8de5dbaeada99c12ae","sha1":"1eeb65c627fb6f825d50b78ea53184a393e61b52","sha256":"2b7537ddbe256bd2b435101e4f8076f4cc225548342ae58a1b4861a6c494a7f2","sha512":"c9d8b59527527c6f24b931e622a756936e5b87021ba851b28c9833a51c6d8ba036f10b9c810cec75f1995dfc26aee4e47d0e5248ae340c4dc1e5daf722b30804","ssdeep":"","tlshash":"310128a54a9700b108f7dae63f5f3f12776201460084c5103ebde7aaaf23d5b84199c4","size":733,"data":"","first_seen":"2026-06-11T06:03:26.798628Z","last_seen":"2026-08-14T17:21:58.802705Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hexalink.org/assets/index-ydvr3Ite.js","fqdn":"hexalink.org","domain":"hexalink.org","tld":"org"},"ip":{"addr":"104.21.91.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"69a121c7a09ba943b5a1986d895e39d5","sha1":"c6f1554cebb57962660acad7e682975254b7e3ac","sha256":"188a8559f685c8b370632b34a2f4277803e983889f617e1aae37b4fae6056047","sha512":"438ddb8c5a832402c8f65bce08d7c420e49658383813d0e949c0e451f0038f2d730a64a8d61b28a71fc6dabc776ad2c9c30b9396ff8d8cd2e6a1a18694d4a3bf","ssdeep":"768:FEmJF1MGcHXrir2SJTGcclC8HkKmCJMoDjDXtN/YhX2pr5VicJZZiDmNz:FEmxMGgkUc2CpOJNrtpMXeraeGq","tlshash":"1723d1ac5823920c05da477c1d5f1ec4acbd4fe8998d179bd42b90f4b7e284a44dfda8","size":46666,"data":"","first_seen":"2026-08-07T08:41:26.855141Z","last_seen":"2026-08-14T17:21:58.786713Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7ca4c1770e526303c8b96ec681271e67","sha1":"040ceca3f1799eb067ee3e0c5c3f97e8d48e8492","sha256":"9b69c924617de012e3a6252d715e48202d0bd07eccae08190bc9d0565405d1dd","sha512":"0180a2c052ce5feedb836fc6a1e5d82f2edaa25574f0951b679029a28ca6c0e4098c0fde61858a88c4dc4fb2ee2ac196f3f681864fab71b3d205a0baf010c4f3","ssdeep":"","tlshash":"13e0867181174b8423b80da5ad81af3bebab1758a945215c334ec633f517654c9441f7","size":335,"data":"","first_seen":"2026-08-03T07:57:51.315431Z","last_seen":"2026-08-14T17:21:58.773428Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rhpscoinrbh.lol/","fqdn":"rhpscoinrbh.lol","domain":"rhpscoinrbh.lol","tld":"lol"},"ip":{"addr":"104.21.41.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"09c96f4e25616399974def53bdf14c95","sha1":"539ea88c33d6b2c9794d88b2725679ea55be9839","sha256":"a42070e168f5fd54758479e48a4035af68421e15adf638832f5aaf6c374a0dce","sha512":"21da0de8e126f2215e4adc37cd54653e240803f8819eb12a99e2a4ec896b92b37ac546e3299e011d4a933ff237d61933913e0d68d51f157c015cd030c602961b","ssdeep":"24576:jqYQVk57SN5/O6Fc/+aoml8CbFzgm+8K4fe6LK7U:jqYamYc/LL9R","tlshash":"a525f19d0c334269669846f87c5e0b883e585bdca498e73b9436e0b77bc12ff50d7862","size":1047799,"data":"","first_seen":"2026-08-07T08:41:26.920774Z","last_seen":"2026-08-14T12:41:17.024145Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"362ca438ae65cfc912b7a743a781ce7b","sha1":"8bd96bb53323eab2db38be0eb2b408ddf2b95b17","sha256":"06449c96378758359a50cc186e8017a20143e74a7dc5b57efaef3ea2c88f5017","sha512":"0ae63ee9d428f583c852ea0456d74d0a9cc5ce6341734c041ee00d5236c364738ca7fe0397c3e3818a86875cd48a7eba3419174a679258ba4bc4ab3f3ac97f04","ssdeep":"24576:fpISZZVokQyZ74ejf2kwwwCbUef690riXt2s0Fj6+6:RISZyyZ74ejf2kwwwCbpf690riXt70FY","tlshash":"9c256c907361b47a539b82a898ab0500f3395859500d802cfbecd9ebef949d9c5bff71","size":1046087,"data":"","first_seen":"2026-08-03T07:57:51.324381Z","last_seen":"2026-08-14T17:21:58.757191Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/buffer.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"39e6418dc1a8a38a7baf7cbf64e6bc9b","sha1":"036b9f42abe9026454886016987cdd479ce3f33c","sha256":"64fb61aa5f48644d685f9ceabedba60ea6b5d6ce03dac1943e863d00d9e574f3","sha512":"de01074341e2a0ad5d0b74108a593811ef91c72bd775fc2ab20f98c941fc4635f541fd7983f08cd93700d7f6f582c55b95fdfaed785258eef4f0b55322df151c","ssdeep":"384:f2ROO9YwKOX7MW/I55zmhYuC2rUV5w+c7LW+M444MMazyXDNcyO9+C9YDNqWRMzI:fKewKOX7MWwGzCrfTc7LW+bcp9a60","tlshash":"d3d2b694f795b032439e65a50057980ef2b8f928640d198cf6a0f5f728b59ce88eff74","size":28845,"data":"","first_seen":"2025-10-30T08:47:32.392454Z","last_seen":"2026-08-14T17:21:58.756093Z","times_seen":556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/process.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f8382a3858672b98c93fd61c13d21c2c","sha1":"07e4611887908eb9326935084618e4964fb84550","sha256":"79e7646e87709989f575ea4ce02e0877bc9303081567b1c0d412527917ae9e91","sha512":"a1609e8e33a2b7369169fe7dc1f9fd187c4b431e9c7428e4c3929587bff4701d937b8df219b3dfa2bdc3f6b38f63afecc0d9025a6ec8901d91a5e123179ca5cf","ssdeep":"192:kFmwaFSK/rVyQhxkSULErvtAAQic6NR03ao8Yk33q:5wzEr8irU8Yk3a","tlshash":"a2f1d7dce29a743302c1eadaf0bb0123eaf407c855245650ea0bdcc736219e5a5b1f75","size":7861,"data":"","first_seen":"2025-10-29T19:17:04.329787Z","last_seen":"2026-08-14T17:21:58.750906Z","times_seen":715,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rhpscoinrbh.lol/","fqdn":"rhpscoinrbh.lol","domain":"rhpscoinrbh.lol","tld":"lol"},"ip":{"addr":"104.21.41.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"438eeb422aa41d34db59c07670321217","sha1":"ea6685790ec9d60a660f315672fa541102801d1b","sha256":"d15779196010678eb3789bb45f4c38a2a54ad4c777c56e3207caf1769787c5cd","sha512":"cd1b3ece8a0e97ecd3149b86b40d5acaea3e932a4b56a788e99b26382874cb120e3f5dd1c6291d4225ebc6f43be828842403a27f01d968176f41b2c5e67ff69a","ssdeep":"192:gFBNUuRgwvzd+/mI0zkIzGQR4mhJ/rCI/s69GkoXtKGaLhQCzcqRg14gr/:gFBNUuRvvzd+/mI0z1zGQR4mh9rCi1kv","tlshash":"78f17e2274c2b18e13c94b7e354857e5d0a6d94add8ac50af308dee8b4ddd937a8c4f0","size":8048,"data":"","first_seen":"2026-08-14T12:23:43.036418Z","last_seen":"2026-08-14T12:23:43.036418Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rhpscoinrbh.lol/","fqdn":"rhpscoinrbh.lol","domain":"rhpscoinrbh.lol","tld":"lol"},"ip":{"addr":"104.21.41.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"98588bcc0a0cab5f42edf8240982adb1","sha1":"f3d3b68aaf236e42aa5a1a4894b8898fc4d6b7e1","sha256":"49180f34668c899b71c196ca46984099a60ae8ea9538484eb3b13ab90c577568","sha512":"8a546adb55090ca92f07b411b57d017e3cb7a621c31631ddc690442d66cc5ecf96c61d8cefff4e7bd68563a93cf7da02a734cd48d1b81ffff4c82f59570eddbf","ssdeep":"24576:/P2hH1DL9DifRQKuU2iv2qwiFx9pyOynMJRjtu61MgYHC66NqdHhQGVNaH6EDXCW:/v/pbyMJRxu61MgYi66sdHhQGVNaH6Ed","tlshash":"a765d84023d06c58234b9fb7772bb4e5e41f0a6f78980d8fd514bc616aaa617fbe4930","size":1528205,"data":"","first_seen":"2026-08-07T08:41:26.923461Z","last_seen":"2026-08-14T12:41:17.026319Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hexalink.org/?host=https%3A%2F%2Frhpscoinrbh.lol\u0026href=https%3A%2F%2Frhpscoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"hexalink.org","domain":"hexalink.org","tld":"org"},"ip":{"addr":"104.21.91.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0b255518ba5a353033a9530c016e6806","sha1":"bcd20754a7a5d6aafabd86a945aaefca9261d362","sha256":"9892ca840b0515a934cfa941dbd9958d902b8b4c50bf5e63a6073b25df587812","sha512":"7b6089282406f4370ddb9e4a727eb27a6fa7ce8afc36a163706c0a805f4670997de0e088629d482642d53eac50c966197cd4f386c2177b9b47324fcc45b5d95f","ssdeep":"768:01d2sLfTiPurQC47583BL6kHOPqnlHRhVRa1yKDQgkEWKfvG9TClDdHdRYCmLk+A:ad2WfTh4ZHf3keW8ofSHw2","tlshash":"dc4392d263d06914234faebb732fb9e5e92f199f3450488fc214fd50a6a5716eaf0630","size":56403,"data":"","first_seen":"2026-08-07T08:41:26.927185Z","last_seen":"2026-08-14T17:21:58.803548Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/events.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"acd05dc333042e32473eb39c7700cc9b","sha1":"a9ff738706c3e6ab2be579d296faecd67e438f47","sha256":"4c6150b88c1444aa1fe9331013e3f37eda9836206f629f7f3ae8f3743dd90fa8","sha512":"658a1eebb2727249df13bfd7f76d1bd38921ebc2dff63b8c1bf779973bd10483b7138649e7168a1ea7305c88542876be92a52b1da915331806436b0455f9a6a5","ssdeep":"96:yIJAOQoXa9RQ9bKVXQ6Z9cBBEMPg19H+MyLfLYCGZjiSl1YYS/07jfofxSXR261G:yyiZInEGaGLYCKt70WRRD7EE00WZ","tlshash":"404286ccb386b87113def3af707b4146f23459e0685c0408ba75fcf6292a98995a6f71","size":12122,"data":"","first_seen":"2025-10-29T19:17:04.387887Z","last_seen":"2026-08-14T17:21:58.758145Z","times_seen":715,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/async_hooks.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f78e3393d375d2bd75ee22e5bf0f3635","sha1":"2b6d82e3a17d6f4596fb2f6df083fcf498edaa99","sha256":"b7862dbfba8bbbca956f19e4e08280b529e4b27468779775a9093aef8c92dc1d","sha512":"280686efdbef542165cff092b795274efb660689426f8f15523b3478d967cc6bea03a0d7a66400552278a777655231d7e9ad2cba1bb4eb0a45f249e76102258d","ssdeep":"","tlshash":"3b515489a78bf9685b9eb176413a0103e10a0ec89d1c722cf049e9ee695e10c8774fb5","size":2938,"data":"","first_seen":"2025-10-29T19:17:04.32262Z","last_seen":"2026-08-14T17:21:58.787732Z","times_seen":713,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/tty.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dc159c105e1b73c18cfd63a84cc154ec","sha1":"347664300100736360aeda59495f5017a852a81f","sha256":"c66ff4b406bad449bfb2ced355f15badf16f4d9e035d2d300e33b5aeee64e3be","sha512":"96f99c368bef6857a0e9006efdc8ac0585af1bca468adb103b0c626ff5cada09eefeb07b317d6be3e71915f8c1a1412d4927fb743e4ed59e54c6e82af1b9d50a","ssdeep":"","tlshash":"cf01fef930f7b57246bb047444728a07f388e8f0b49ec4a0ba6599b43c655ced131676","size":685,"data":"","first_seen":"2025-10-29T19:17:04.320253Z","last_seen":"2026-08-14T17:21:58.79305Z","times_seen":708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rhpscoinrbh.lol/","fqdn":"rhpscoinrbh.lol","domain":"rhpscoinrbh.lol","tld":"lol"},"ip":{"addr":"104.21.41.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"48bc472ed8fd32c0545b880d3dcbbedf","sha1":"692fc7d2aa3feaf6e198aa514c8998e504f6c808","sha256":"b4081ff60ea675c75f4b8a6b22eacb8d16eeb0298b8239278885e86835c84dfe","sha512":"77aad7e6326fbb424c0478f7aad4e3794e02b9c7edaee14496eb86564396125d9a3cf47cecc5f4bc7e1dceb1fc927b3f60007aa0b33e7f94153f8b410b58f157","ssdeep":"96:5zJWE7Afi+ZzMlEU0w9MUb6dqN2xdeCGOdH+t1KxzY/roNmpSTIfmwzZ/8yHNH:5qi+pMlEraFblid5GEPxczUnIfPZ0yHd","tlshash":"0de1a21e277b122609a380f71bdb60147721e90bb1a5d09cba5cd3684fd02a1d9b3fdc","size":6977,"data":"","first_seen":"2026-08-14T12:15:12.587762Z","last_seen":"2026-08-14T12:23:43.039079Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=1\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rhpscoinrbh.lol/","date":"2026-08-14T12:23:10.828Z","timestamp":1786710190828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=1\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rhpscoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rhpscoinrbh.lol/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ndate: Fri, 14 Aug 2026 12:23:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a2afede4ced135a6-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 155\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Fri, 14 Aug 2026 12:20:35 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226324,"size_decoded":32037,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"844e10852c6c9fde5520c75887b6ea29","sha1":"6f6552406196c39ea33334ffd0e0620fbe9af205","sha256":"e1e231242ebd382a82ff338d314fd404d566f4b26e9563d151387206e43e520a","sha512":"23318728ea62a7aee00792e1c59c5d715fb964ecdf604c1d5da4e4eaf8af5db6d22430144602266a835232f2a07518dbbc3daa41f3eb2c2d17ee6650f72e6c9d","ssdeep":"1536:TKFTcsEXxfWraLYrZYcG+mZBz48GxSt6rNBgZvk6VM:2FTcsixOraUZY/z48GxStINBgZva","tlshash":"8024446e4b409e566fb18388d25cf9eda16fe007c9cd5ce6e2f18e3444bc9f3215129a","first_seen":"2026-08-13T18:14:19.821982Z","last_seen":"2026-08-14T17:21:58.791317Z","times_seen":8,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":6,"connect":14,"send":0,"wait":70,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://relay.walletconnect.org/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtxYkcySks4bWhkUFZZanZjU1dHaWEyS0t4akt0NWFWM2p6dVVMWHZSZndoWiIsInN1YiI6ImVlMTkyMWNmODE5MjRmYzlmYTdlMmFjODk5NWNlNDlkOGJmODM0N2UxYzBmMGEyMjYwODA2N2UyMzViN2FmOTIiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0Lm9yZyIsImlhdCI6MTc4NjcxMDE5MSwiZXhwIjoxNzg2Nzk2NTkxfQ.T5gLDdtHe39rKWhc4sP-APf6hzzX5G8u78hdu3YSE_lG6lssnW0zbVSxtm96rvQ3orYKczdbFTYNUulW7H_3AA\u0026projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026ua=wc-2%2Fjs-2.21.8%2Fwindows10-firefox-134.0.0%2Fnode\u0026useOnCloseEvent=true","fqdn":"relay.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"18.184.214.243","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://hexalink.org/?host=https%3A%2F%2Frhpscoinrbh.lol\u0026href=https%3A%2F%2Frhpscoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-14T12:23:11.507Z","timestamp":1786710191507,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relay.reown.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 25 Jan 2026 00:00:00 GMT","end":"Tue, 23 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:24:50:19:3B:DA:52:35:62:2B:85:B8:D3:E7:0A:03:24:F8:84:7E","sha256":"A4:45:7F:C8:5C:09:EA:D9:34:3C:56:81:67:1A:5F:6A:3A:C0:13:7B:5E:4F:C5:F9:06:CE:FD:53:A3:9B:88:77"}}},"request":{"raw":"GET /?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtxYkcySks4bWhkUFZZanZjU1dHaWEyS0t4akt0NWFWM2p6dVVMWHZSZndoWiIsInN1YiI6ImVlMTkyMWNmODE5MjRmYzlmYTdlMmFjODk5NWNlNDlkOGJmODM0N2UxYzBmMGEyMjYwODA2N2UyMzViN2FmOTIiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0Lm9yZyIsImlhdCI6MTc4NjcxMDE5MSwiZXhwIjoxNzg2Nzk2NTkxfQ.T5gLDdtHe39rKWhc4sP-APf6hzzX5G8u78hdu3YSE_lG6lssnW0zbVSxtm96rvQ3orYKczdbFTYNUulW7H_3AA\u0026projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026ua=wc-2%2Fjs-2.21.8%2Fwindows10-firefox-134.0.0%2Fnode\u0026useOnCloseEvent=true HTTP/1.1\r\nHost: relay.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://hexalink.org\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: hwseTKAP8N8zY2781L1B7w==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 14 Aug 2026 12:23:11 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: I5ALOYS3TaTShE22O7dmQJqhMCM=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":166,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T20:45:54.215879Z","times_seen":17892639,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":0,"dns":92,"connect":114,"send":0,"wait":27,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rhpscoinrbh.lol/","fqdn":"rhpscoinrbh.lol","domain":"rhpscoinrbh.lol","tld":"lol"},"ip":{"addr":"104.21.41.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-14T12:23:08.868Z","timestamp":1786710188868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhpscoinrbh.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 20:19:10 GMT","end":"Wed, 04 Nov 2026 21:17:31 GMT"},"fingerprint":{"sha1":"B7:04:0B:64:FB:7C:19:18:7C:56:89:6C:CD:17:1A:86:30:11:6B:4B","sha256":"2F:C9:59:35:80:54:E8:C4:78:E0:08:8B:1F:80:7F:5A:A1:0A:0F:0D:53:3A:54:F6:E3:CE:3F:FE:D0:68:D0:E0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rhpscoinrbh.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 12:23:08 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bOP40PyhGU1TFKgX9coXWEkJvnnWy7i%2BaBQ7bfazMUfYhYKqq3lXTaITZ5oG7TvCpuEHUe82JWM6P7V3RYlNPriHtHcm6SfP01BRas1RGUHbS7NOSH3XaOzSuj6%2B25QUbfc%3D\"}]}\r\npriority: u=0,i\r\nlast-modified: Thu, 23 Jul 2026 17:57:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\npermissions-policy: camera=(), microphone=(), geolocation=(), camera=(), microphone=(), geolocation=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a2afedd88c1da0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17871,"size_decoded":9843,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4239)","md5":"dd4d85e043f06a54c969dd9d5b57b497","sha1":"37082e8292be1b1fb05c3e8ef772ef1a49fed796","sha256":"73aacd4ad91e3f6112c2829516f4c2ddbea9cda101e460d9148096682bd113b9","sha512":"fcb42e75c1b17798a3358e35d73c4cc57cb5ed4d7ba9b9fac4db82e4c15276fcddc2beea67fe28c19e710627a68e909f70576b89b1e396be19da44c52ba143b9","ssdeep":"384:gKIUrbBYR9gZcd9IstNvn++lLJE/GEPxS7PKsa:cObBe9F9IstNvD6GSKA","tlshash":"c482281a37771024656395b62be767097220e60be065c8bc7adca284cfc86d5c9f7bcc","first_seen":"2026-08-14T12:15:12.572589Z","last_seen":"2026-08-14T12:23:43.011215Z","times_seen":3,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":4,"connect":13,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"rhpscoinrbh.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=3\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rhpscoinrbh.lol/","date":"2026-08-14T12:23:10.987Z","timestamp":1786710190987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=3\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rhpscoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rhpscoinrbh.lol/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ndate: Fri, 14 Aug 2026 12:23:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a2afede5af0235a6-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 155\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Fri, 14 Aug 2026 12:20:35 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176085,"size_decoded":29488,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"21169cfd44a90968d6d87f628149f958","sha1":"3404284a923d1b8beebc4635a7c425e275e6370f","sha256":"f1628b941a7c1cfec6ae2fc8d180066c18b4481da86d982cf41f246178011b34","sha512":"25a7b690e8a20219ab2c3f02d50285722bf9f500696b18d9256b9e79ea4cad81f03bfcef38152192fe523c3fdc27d9d6aef64ac3eae96da8d0ada2ef8d80e5d2","ssdeep":"768:aAmGpucBWlNozpBRxMm5/yCUZB2sTQrV8JB3zOoG7EF6t1zStxmSijeyB+BR5WIj:l/ZgZB2sTzV6UyB+BFPRyNxGpuC88Cqz","tlshash":"da0475ae8b04de662fb24388915cf9eca55fa117cdcd5ca2e2f1cf2440bc5f7215219a","first_seen":"2026-08-13T18:14:19.850107Z","last_seen":"2026-08-14T17:21:58.792072Z","times_seen":8,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hexalink.org/assets/index-ydvr3Ite.js","fqdn":"hexalink.org","domain":"hexalink.org","tld":"org"},"ip":{"addr":"104.21.91.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hexalink.org/?host=https%3A%2F%2Frhpscoinrbh.lol\u0026href=https%3A%2F%2Frhpscoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-14T12:23:11.004Z","timestamp":1786710191004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hexalink.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 09:56:11 GMT","end":"Tue, 10 Nov 2026 10:55:02 GMT"},"fingerprint":{"sha1":"95:C5:E2:BB:D1:18:69:76:64:FC:46:3A:0D:9C:CA:8A:97:4F:AF:91","sha256":"E9:3A:BA:74:43:16:14:40:E0:D2:A3:B4:15:9F:8D:90:CF:52:10:56:57:B1:42:8F:29:45:34:88:2A:4E:52:5B"}}},"request":{"raw":"GET /assets/index-ydvr3Ite.js HTTP/1.1\r\nHost: hexalink.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hexalink.org/?host=https%3A%2F%2Frhpscoinrbh.lol\u0026href=https%3A%2F%2Frhpscoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 12:23:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 11 Aug 2026 10:24:24 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: \"6a7af858-b64a\"\r\nexpires: Sat, 15 Aug 2026 05:04:05 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 26345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ML11CzEACgTBYdcAYG2TmzgBgIhetT0etk2zvxN2n0Q2MyfwKIMJst%2FwKEeKwYKOlqDohKF5A95X30hJ7BHMvR%2F099E9xvSEmZRmV6RA%2BVq%2FOHkhGdWH0%2FWOgvxiSk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2afede5c963120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46666,"size_decoded":35370,"mime_type":"application/javascript","magic":"data","md5":"69a121c7a09ba943b5a1986d895e39d5","sha1":"c6f1554cebb57962660acad7e682975254b7e3ac","sha256":"188a8559f685c8b370632b34a2f4277803e983889f617e1aae37b4fae6056047","sha512":"438ddb8c5a832402c8f65bce08d7c420e49658383813d0e949c0e451f0038f2d730a64a8d61b28a71fc6dabc776ad2c9c30b9396ff8d8cd2e6a1a18694d4a3bf","ssdeep":"768:FEmJF1MGcHXrir2SJTGcclC8HkKmCJMoDjDXtN/YhX2pr5VicJZZiDmNz:FEmxMGgkUc2CpOJNrtpMXeraeGq","tlshash":"1723d1ac5823920c05da477c1d5f1ec4acbd4fe8998d179bd42b90f4b7e284a44dfda8","first_seen":"2026-08-07T08:41:26.855141Z","last_seen":"2026-08-14T17:21:58.786713Z","times_seen":33,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=4\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rhpscoinrbh.lol/","date":"2026-08-14T12:23:11.017Z","timestamp":1786710191017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=4\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rhpscoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rhpscoinrbh.lol/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ndate: Fri, 14 Aug 2026 12:23:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a2afede5df0a35a6-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 155\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Fri, 14 Aug 2026 12:20:35 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":179135,"size_decoded":29144,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bff82f622175d70613da1d302147890a","sha1":"a5b815ecc31842119630f3a935e8c26b2d4bc5e3","sha256":"3126427b763140c4607554342ab397afa766e785961a1a1a8a4b363676d360ea","sha512":"e1ae49c71df46ec59db34ff707d0de7a83f552983571684369efe9c3c062e5310b8bc98ba2c666af44805e15997a0f22219ecc35617c2f3f95ae57eacfc523fd","ssdeep":"1536:i6+0ASzSzHu+/PwjEZhiEYZPCuTOReu8zos9bI4IUWsZxkkoyvunaKe:M9Ssu+gjEZhiEGPCu8eTWsMnaKe","tlshash":"e404636e8b049e662fb25388d15cf9eca15ee117c9cd5ca2d2f1cf3440bc9f7215229a","first_seen":"2026-08-13T18:14:19.851734Z","last_seen":"2026-08-14T17:21:58.765372Z","times_seen":8,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/async_hooks.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hexalink.org/?host=https%3A%2F%2Frhpscoinrbh.lol\u0026href=https%3A%2F%2Frhpscoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-14T12:23:11.110Z","timestamp":1786710191110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /node/async_hooks.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://hexalink.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/node/events.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v137_8\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Fri, 14 Aug 2026 12:23:11 GMT\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nage: 5118\r\ncf-cache-status: HIT\r\ncf-ray: a2afede66c9c1a30-OSL\r\ncontent-length: 1531\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2938,"size_decoded":1941,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2937)","md5":"f78e3393d375d2bd75ee22e5bf0f3635","sha1":"2b6d82e3a17d6f4596fb2f6df083fcf498edaa99","sha256":"b7862dbfba8bbbca956f19e4e08280b529e4b27468779775a9093aef8c92dc1d","sha512":"280686efdbef542165cff092b795274efb660689426f8f15523b3478d967cc6bea03a0d7a66400552278a777655231d7e9ad2cba1bb4eb0a45f249e76102258d","ssdeep":"","tlshash":"3b515489a78bf9685b9eb176413a0103e10a0ec89d1c722cf049e9ee695e10c8774fb5","first_seen":"2025-10-29T19:17:04.32262Z","last_seen":"2026-08-14T17:21:58.787732Z","times_seen":713,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed2.bnbchain.org/","fqdn":"bsc-dataseed2.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"34.254.32.87","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rhpscoinrbh.lol/","date":"2026-08-14T12:23:09.367Z","timestamp":1786710189367,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:51:35:3C:6A:BD:00:80:7E:C2:BB:61:75:B1:0A:D8:28:8C:62:89","sha256":"3E:F5:AA:B6:AF:7A:6B:4C:8C:99:02:80:C8:8D:C7:A8:56:7D:40:10:01:15:9D:68:B3:94:4D:05:F5:41:C3:94"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-dataseed2.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://rhpscoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rhpscoinrbh.lol/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x1AC7d768E37B147c993dE943D704c4e92d7861A1\",\"data\":\"0xb68d1809\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 14 Aug 2026 12:23:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: 42ae12a4a13583a7dec2abab74d1280d\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230,"size_decoded":682,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b05533c3ded95199b32b7c480697310e","sha1":"092bafcd630365d0928726d344168ab7bec24c39","sha256":"befaf2d30d1616af3da6f33b07ea357fc054a6893876626cb29ae47823483b56","sha512":"5d4f433937334a9c18074960b3b3b6083d1fb7c63a264faeb0440d8b6aa83cfe4c6612ca836e65f2f8e0c29f9f109cb298c57383f29ebb32cefb51ea83f80592","ssdeep":"","tlshash":"9bd012f4130b4b71d0ac4c449044720121217e8905c00e82080c0c8011842421725121","first_seen":"2026-07-07T07:20:30.02745Z","last_seen":"2026-08-14T17:21:58.783194Z","times_seen":75,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed2.bnbchain.org/","fqdn":"bsc-dataseed2.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"34.254.32.87","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rhpscoinrbh.lol/","date":"2026-08-14T12:23:09.386Z","timestamp":1786710189386,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:51:35:3C:6A:BD:00:80:7E:C2:BB:61:75:B1:0A:D8:28:8C:62:89","sha256":"3E:F5:AA:B6:AF:7A:6B:4C:8C:99:02:80:C8:8D:C7:A8:56:7D:40:10:01:15:9D:68:B3:94:4D:05:F5:41:C3:94"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed2.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://rhpscoinrbh.lol/\r\nOrigin: https://rhpscoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Fri, 14 Aug 2026 12:23:09 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":458,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T20:45:54.215879Z","times_seen":17892639,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":4,"connect":31,"send":0,"wait":33,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/api/fp","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"172.67.218.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rhpscoinrbh.lol/","date":"2026-08-14T12:23:10.978Z","timestamp":1786710190978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"OPTIONS /api/fp HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-worker-hint\r\nReferer: https://rhpscoinrbh.lol/\r\nOrigin: https://rhpscoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 12:23:11 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lp1Iel47BsOPRol%2FD7zvkOOIEwXNspyeFzWfn%2B%2BUmil4v8EVNJD8%2BUroc5kDJP8TAs4W53N00VqmzVB0K3OfwkLI0%2BoJG7O494en2Lk0Pdg8pIn2FkB0JXiBYKpC\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2afede598488deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":666,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T20:45:54.215879Z","times_seen":17892639,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/process.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hexalink.org/?host=https%3A%2F%2Frhpscoinrbh.lol\u0026href=https%3A%2F%2Frhpscoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-14T12:23:11.085Z","timestamp":1786710191085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /node/process.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://hexalink.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v137_8\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Fri, 14 Aug 2026 12:23:11 GMT\r\ncf-cache-status: HIT\r\nage: 5118\r\ncf-ray: a2afede64c941a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7861,"size_decoded":3891,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7860)","md5":"f8382a3858672b98c93fd61c13d21c2c","sha1":"07e4611887908eb9326935084618e4964fb84550","sha256":"79e7646e87709989f575ea4ce02e0877bc9303081567b1c0d412527917ae9e91","sha512":"a1609e8e33a2b7369169fe7dc1f9fd187c4b431e9c7428e4c3929587bff4701d937b8df219b3dfa2bdc3f6b38f63afecc0d9025a6ec8901d91a5e123179ca5cf","ssdeep":"192:kFmwaFSK/rVyQhxkSULErvtAAQic6NR03ao8Yk33q:5wzEr8irU8Yk3a","tlshash":"a2f1d7dce29a743302c1eadaf0bb0123eaf407c855245650ea0bdcc736219e5a5b1f75","first_seen":"2025-10-29T19:17:04.329787Z","last_seen":"2026-08-14T17:21:58.750906Z","times_seen":715,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/tty.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hexalink.org/?host=https%3A%2F%2Frhpscoinrbh.lol\u0026href=https%3A%2F%2Frhpscoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-14T12:23:11.122Z","timestamp":1786710191122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /node/tty.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://hexalink.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/node/process.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v137_8\"\r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 12:23:11 GMT\r\ncontent-encoding: br\r\nage: 5118\r\ncf-ray: a2afede67c9d1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":685,"size_decoded":711,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (684)","md5":"dc159c105e1b73c18cfd63a84cc154ec","sha1":"347664300100736360aeda59495f5017a852a81f","sha256":"c66ff4b406bad449bfb2ced355f15badf16f4d9e035d2d300e33b5aeee64e3be","sha512":"96f99c368bef6857a0e9006efdc8ac0585af1bca468adb103b0c626ff5cada09eefeb07b317d6be3e71915f8c1a1412d4927fb743e4ed59e54c6e82af1b9d50a","ssdeep":"","tlshash":"cf01fef930f7b57246bb047444728a07f388e8f0b49ec4a0ba6599b43c655ced131676","first_seen":"2025-10-29T19:17:04.320253Z","last_seen":"2026-08-14T17:21:58.79305Z","times_seen":708,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=7\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rhpscoinrbh.lol/","date":"2026-08-14T12:23:11.128Z","timestamp":1786710191128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=7\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rhpscoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rhpscoinrbh.lol/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ndate: Fri, 14 Aug 2026 12:23:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a2afede68f4535a6-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 155\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Fri, 14 Aug 2026 12:20:36 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45151,"size_decoded":8706,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"342e24182c93cd31d5468e32d9a8e1d3","sha1":"6b57231184f4e21ca367a832ea05b49cff19991d","sha256":"e994d69d7eb9fdcef20ddd5b0aa47f1e1fa2871a20d2fb66f40f115f2eb397a3","sha512":"56d10bf8e1d3c89c653fab89e08076c0ef430ad4d807ae099b22ca5fa03e340179d24c4e76e8d3865bb626d3bbf70f4dbb51b128aeb1cbef2463cdb20223c1d4","ssdeep":"192:vEv3E3vvQpDGxDizU1HYEr6tyiup+oDZOwl1TazVV6lMB8aRmP6vA6xc/On4yMuK:ve3UvQtzU1HMupr+BV6w856K/Q4yMupU","tlshash":"a413766b8f14ee762bb213cd415c7deca24e2117ddca9cf6e2d1cf1440b4af6216219a","first_seen":"2026-08-13T18:14:19.895054Z","last_seen":"2026-08-14T17:21:58.759091Z","times_seen":8,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hexalink.org/?host=https%3A%2F%2Frhpscoinrbh.lol\u0026href=https%3A%2F%2Frhpscoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"hexalink.org","domain":"hexalink.org","tld":"org"},"ip":{"addr":"104.21.91.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rhpscoinrbh.lol/","date":"2026-08-14T12:23:10.832Z","timestamp":1786710190832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hexalink.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 09:56:11 GMT","end":"Tue, 10 Nov 2026 10:55:02 GMT"},"fingerprint":{"sha1":"95:C5:E2:BB:D1:18:69:76:64:FC:46:3A:0D:9C:CA:8A:97:4F:AF:91","sha256":"E9:3A:BA:74:43:16:14:40:E0:D2:A3:B4:15:9F:8D:90:CF:52:10:56:57:B1:42:8F:29:45:34:88:2A:4E:52:5B"}}},"request":{"raw":"GET /?host=https%3A%2F%2Frhpscoinrbh.lol\u0026href=https%3A%2F%2Frhpscoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea HTTP/1.1\r\nHost: hexalink.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rhpscoinrbh.lol/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 12:23:10 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 11 Aug 2026 10:24:23 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WmqxBEtagAEqQRaDb8aMSGTuRrjuF7cd3WQ9wPvESB0NCkyCdy7xEZZYfqoqT5xlbBPj20R1CwVDTAewii9LrGsGbjOg%2Fa4g2xGHMRHKrHvf0h6GC4CAvTIkz1v3luE%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a2afede4c93a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1086,"size_decoded":1153,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"8244776a12c3c828ed236b22ff3821d6","sha1":"3cbebf83ff294ef58cb8d1417e6050769b0cf68c","sha256":"d30bd5ac130ed30a6c2b414db38a9a9ec64ae9f5ce45e550af7a93ba7dd91c2e","sha512":"552339a21b32311e05c8d5d973974d0591ccb09635cc26eea20e14293b33464b79d5ac052b5f6502d49ae62a3317391d865c53440772671c43e71a781a374c72","ssdeep":"","tlshash":"d0118e450d57407115b38a963b5f7e05a767924640c4c5002ffae2b7af53e4b8805ad8","first_seen":"2026-08-05T23:56:49.814782Z","last_seen":"2026-08-14T17:21:58.799226Z","times_seen":37,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":5,"connect":12,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=2\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rhpscoinrbh.lol/","date":"2026-08-14T12:23:10.960Z","timestamp":1786710190960,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=2\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rhpscoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rhpscoinrbh.lol/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ndate: Fri, 14 Aug 2026 12:23:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a2afede57ef135a6-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 155\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Fri, 14 Aug 2026 12:20:35 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":179533,"size_decoded":28471,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"541b4b7ebdf4b2cea56c2deabbceb5d3","sha1":"c8f1043af70f89d183490271cf78ed659a52c38d","sha256":"7aebd5597c1fbef0feffd4232847c67fd132156c252a968014f64057b30cc741","sha512":"d0e150df3b65b5f09ecd0f49a0bab08d44bf2d91461561270af70b61e6a89f243a75554cbba867281b35e5c4349d198ee3a586e62fa77beee3a704fd3b3af8fd","ssdeep":"1536:ftDCyTgVttL80GwZ58iOFVqRFP935Gx/Ru49Qn8Le:f8Vv8wZ5nOFC935Gxu8q","tlshash":"fe04426e4b049e666fb15388d14cf9eca15ee117c9cd9ca2e2f1cf3440bc9f7215229a","first_seen":"2026-08-13T18:14:19.841576Z","last_seen":"2026-08-14T17:21:58.790562Z","times_seen":8,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/buffer.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hexalink.org/?host=https%3A%2F%2Frhpscoinrbh.lol\u0026href=https%3A%2F%2Frhpscoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-14T12:23:11.083Z","timestamp":1786710191083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /node/buffer.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://hexalink.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v137_8\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Fri, 14 Aug 2026 12:23:11 GMT\r\ncf-cache-status: HIT\r\nage: 5118\r\ncf-ray: a2afede63c921a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28845,"size_decoded":10673,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (28468)","md5":"39e6418dc1a8a38a7baf7cbf64e6bc9b","sha1":"036b9f42abe9026454886016987cdd479ce3f33c","sha256":"64fb61aa5f48644d685f9ceabedba60ea6b5d6ce03dac1943e863d00d9e574f3","sha512":"de01074341e2a0ad5d0b74108a593811ef91c72bd775fc2ab20f98c941fc4635f541fd7983f08cd93700d7f6f582c55b95fdfaed785258eef4f0b55322df151c","ssdeep":"384:f2ROO9YwKOX7MW/I55zmhYuC2rUV5w+c7LW+M444MMazyXDNcyO9+C9YDNqWRMzI:fKewKOX7MWwGzCrfTc7LW+bcp9a60","tlshash":"d3d2b694f795b032439e65a50057980ef2b8f928640d198cf6a0f5f728b59ce88eff74","first_seen":"2025-10-30T08:47:32.392454Z","last_seen":"2026-08-14T17:21:58.756093Z","times_seen":556,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rhpscoinrbh.lol/favicon.ico","fqdn":"rhpscoinrbh.lol","domain":"rhpscoinrbh.lol","tld":"lol"},"ip":{"addr":"104.21.41.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rhpscoinrbh.lol/","date":"2026-08-14T12:23:09.370Z","timestamp":1786710189370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhpscoinrbh.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 20:19:10 GMT","end":"Wed, 04 Nov 2026 21:17:31 GMT"},"fingerprint":{"sha1":"B7:04:0B:64:FB:7C:19:18:7C:56:89:6C:CD:17:1A:86:30:11:6B:4B","sha256":"2F:C9:59:35:80:54:E8:C4:78:E0:08:8B:1F:80:7F:5A:A1:0A:0F:0D:53:3A:54:F6:E3:CE:3F:FE:D0:68:D0:E0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rhpscoinrbh.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rhpscoinrbh.lol/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 12:23:09 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\npermissions-policy: camera=(), microphone=(), geolocation=(), camera=(), microphone=(), geolocation=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1CE9Rp3xL3ZYA%2F8ZG1qVjr0HsYA0qLkkdUB2OFTIvpALbd3%2BCtqw8xnA2ePQLbGOhDnRruSYJ0MUN2wvhKigVxNcmH4Q%2F4zvZSrUlD3%2F4bEXrKH4DGxp4r9mCbc0nLeSqMY%3D\"}]}\r\nage: 154\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2afeddb8c9ca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":1064,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-14T20:41:37.812225Z","times_seen":550730,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"rhpscoinrbh.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gc","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"172.67.218.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rhpscoinrbh.lol/","date":"2026-08-14T12:23:09.596Z","timestamp":1786710189596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"POST /x7k/gc HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://rhpscoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rhpscoinrbh.lol/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"QzL1bYRwANyT4ypoWoEH\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 12:23:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cfFfly3hjbcvlGUCoSXmTUQUbXhtSmIVbN4ZXcCbw5DI1NbcH079VVsfiXOsALCJlJoEY7OlVllqbbaCPWZtLJvd9a47G24EcaJtIsuRR4vbyTUANXTv5eHmKp7T\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i=?0\r\ncf-ray: a2afedddbf138deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8056,"size_decoded":3698,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4ba45d59be457484a9da878734123ae9","sha1":"d862aad2df282e3b302aa6edf0fc5a4fb763b51d","sha256":"c3207119b0ba6cbf5f95d60f82b7fdd6d41f7df56b3e049367b6972b77bf5a93","sha512":"9dd21930385456997864325b05def6c9e2c0de5a40f359523996335f20f0c2fcc705e924dd0a477a21ea1f2cd2747d1889e56b175c3c6a23c17aadbd4575d4fa","ssdeep":"192:eFBNUuRgwvzd+/mI0zkIzGQR4mhJ/rCI/s69GkoXtKGaLhQCzcqRg14grg:eFBNUuRvvzd+/mI0z1zGQR4mh9rCi1kw","tlshash":"d3f17f1274c2b18e13c94b7e354857e5d0a6d94add8ac50af308dee8b4ddd937a4c4f0","first_seen":"2026-08-14T12:23:43.027067Z","last_seen":"2026-08-14T12:23:43.027067Z","times_seen":1,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gf","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"172.67.218.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rhpscoinrbh.lol/","date":"2026-08-14T12:23:10.079Z","timestamp":1786710190079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"POST /x7k/gf HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://rhpscoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rhpscoinrbh.lol/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"QzL1bYRwANyT4ypoWoEH\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 12:23:10 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uh2VU4eZVxwbY2aKxQTJkLImas2DsNq8ohZAh6Y55n1dCkf9zWGtMHZmjciPg%2BQYczeXX4Th5wq4vsMA5gLreVmSu8hlQ7nsZ3YS0XJTjs7ewi%2BPxZ%2F9T2wMh8uw\"}]}\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i=?0\r\ncf-ray: a2afede03f6e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047773,"size_decoded":808504,"mime_type":"application/javascript","magic":"data","md5":"9a7ae4c7c226267c1907ad53b66e75db","sha1":"d5b600a2dc95eefcdcf4d86bd8897a13bf1fedc4","sha256":"3155ca9f2cc7d1ecac2e9ba6367758dc2c4b10d984973d4a1bef3c83d4cd86e6","sha512":"2082bd0f61dad046b5ed6dd4da28cc8cc678afd26e7653a0611fa226aa10b1f979ed6d6e2b19c2771d98c4134b0355b1cf273265992b062457d4b7d4e22f4f9f","ssdeep":"24576:gqYQVk57SN5/O6Fc/+aoml8CbFzgm+8K4fe6LK7j:gqYamYc/LL9a","tlshash":"1325f19d0c334269669846f87c5e0b883e585bdca498e73b9436e0b77bc12ff50d7862","first_seen":"2026-08-07T08:41:26.843351Z","last_seen":"2026-08-14T12:41:17.013025Z","times_seen":25,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/api/fp","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"172.67.218.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rhpscoinrbh.lol/","date":"2026-08-14T12:23:10.976Z","timestamp":1786710190976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"POST /api/fp HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nX-Worker-Hint: 9476f09dc8cc9a94e4b9c56436615c77\r\nContent-Length: 1316\r\nOrigin: https://rhpscoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rhpscoinrbh.lol/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1316,"data":"w4D8QMKGKlu4mQFMwtGhvcGGj9OlcXlGq/D3OuHEiCHXiuNEaSOPsT+t6KLmX3gSBasinXVE/TYhrgAQYE51ljhVdtkRZwKdOxa2GCDIKWR4jJegE6RXZ3Qmf6j7lovZQGt7YaZIysyRUPh+pvvthBDA0KVadxZZig/Dd8g505nTysMqrrADtjRbnDDxZRpHSYMdgxGMZuEe0a7fgQqA8ejnmdvd+ibOKdrPffEbh7m//Wtk3x48KI4owiXMtQ2SlNpXrrTMWNPu5o7kjSBzip1LHcA3YXkCUeY+a9ocv0KXJZVfrJlVrSGgsdi8D7ufN3197DBbpuYEeCvGY1F8V4UjtaoMhpcUqZ8mxxR198s4+fnB/3OZntNwELMcXmkQoT0BYNQhntoBH/QHTEn6/PcGi/lHO5GM9Km30zxx/p4EaN4v2hPl8j4qlyp3ws3scMlP8Uo/sC4kvsH+7Mbn9dkQCsTZ5Wu6KyAZEl3WT7eIUoUSf4U4Rf1ZO1K89992F0cazURZWfWXHEVFKmABgN1OD1/Vi056DQe1m3YvP72gnGAqbMzNUnU4SZsm2i1ahIQWktgZTs9oLyLG8pPWfhICif/g5MScSTh+xaPPxKLjhauQeaOnDNkkb3jp6cPFhzTRARch8DfIl5aDxDnFJhuXExhsAU+cWFzufpy99mjH2LvcFGXNh9m9Cgr/mxlpre2Wm8k5v5ClXGIGqgCKlfBCzoU4GADFixHC0ZjPqyS0CtSJWz9ZIAgZsepeK5d3JecRSKAtj46iapXq6E/OxJ/qYc9QZHriP5VE7Sp8VvvGNUE8eeyl4zEzzRDfjKWLoAAAbpShx5IsmYIW2qnsFFdDaBLhwdsEwpyL0ca3GJhBvPrMbrQwFE2dkl7s6J+qWvKmH5TEI92Ah4da80m3g2p2w4MJEeLpS47UfWUonKakMqTKsPdJ9MqOm7DhLV2/+ThToPWBMyhYdMGKI7OLxRGMghQyJl+rX2up1ZEISfgy3ncZy4xJGBLchf0pwOOAtee68UkWrK2VK7qcPS97BnE/a+u0l3SKQgez7C3oGsTviGeL2YAp0Q5zOmPVLLVB7EMhf8gl8m8HEDa22k6rrbhfiS6zl1zUyUwxec/hyQFFbbJDTA++6MxRN3j0FludhE09auVc1mTqvr/mE/Iyr4GW9n15Nh9367d04NFLxvrjQ031fXS48wH2lWGEylPgetfeaRY09UmiErsdGEOwFwPoXdq6qqK25eEVb8ZVz920lmtYQsHDUdcViOQb8Je6Hp21zuJrknW9YOh66xIy7xTrPMj2GNmlw1Q="}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 12:23:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7W9ep1w27MslQ3a3xaUjQN6UfodzkfTypf8MAqyYkGoqVL5hvhRP3zjz8s46x%2B6j8kDu0fZHCwnVB5LZjwcVoBasmg4UDRuyRp54ACSg0LKP5OMoTrUH283DIvBn\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i=?0\r\ncf-ray: a2afede5d84d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":955,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1613cce86b41f91f60bc2cc904d7ebb4","sha1":"4f5aebb21304755768b0d488304930930cbcad4f","sha256":"b95ed588ea675ccb34af4e2322239efcbd853ce2693f659efa3f4df9cf41fa0a","sha512":"54bf744b04256fc35e80e937f9832f8d04cc88987b39079b1aa9df89ba8abd12ba1e1bf3e1f3999df79fb85233d5cc24e1ee79fe71c6f0a6a5bb303cff61ffae","ssdeep":"","tlshash":"5ad02b16b85a7c8058786007a4ea104e1bd7159bb1c581ca61d8c0356ad39195909d39","first_seen":"2026-08-14T12:23:43.029291Z","last_seen":"2026-08-14T12:23:43.029291Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/events.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hexalink.org/?host=https%3A%2F%2Frhpscoinrbh.lol\u0026href=https%3A%2F%2Frhpscoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-14T12:23:11.084Z","timestamp":1786710191084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /node/events.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://hexalink.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v137_8\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Fri, 14 Aug 2026 12:23:11 GMT\r\ncf-cache-status: HIT\r\nage: 5118\r\ncf-ray: a2afede64c931a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12122,"size_decoded":5174,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9385)","md5":"acd05dc333042e32473eb39c7700cc9b","sha1":"a9ff738706c3e6ab2be579d296faecd67e438f47","sha256":"4c6150b88c1444aa1fe9331013e3f37eda9836206f629f7f3ae8f3743dd90fa8","sha512":"658a1eebb2727249df13bfd7f76d1bd38921ebc2dff63b8c1bf779973bd10483b7138649e7168a1ea7305c88542876be92a52b1da915331806436b0455f9a6a5","ssdeep":"96:yIJAOQoXa9RQ9bKVXQ6Z9cBBEMPg19H+MyLfLYCGZjiSl1YYS/07jfofxSXR261G:yyiZInEGaGLYCKt70WRRD7EE00WZ","tlshash":"404286ccb386b87113def3af707b4146f23459e0685c0408ba75fcf6292a98995a6f71","first_seen":"2025-10-29T19:17:04.387887Z","last_seen":"2026-08-14T17:21:58.758145Z","times_seen":715,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hexalink.org/?host=https%3A%2F%2Frhpscoinrbh.lol\u0026href=https%3A%2F%2Frhpscoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-14T12:23:11.044Z","timestamp":1786710191044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022 HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://hexalink.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hexalink.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-ESM-Path, X-TypeScript-Types\r\ncache-control: public, max-age=31536000, immutable\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nx-esm-path: /@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs\r\nx-typescript-types: https://esm.sh/@walletconnect/ethereum-provider@2.21.8/dist/types/index.d.ts\r\ndate: Fri, 14 Aug 2026 12:23:11 GMT\r\ncontent-encoding: br\r\nage: 177951\r\nlast-modified: Wed, 12 Aug 2026 18:14:23 GMT\r\ncf-ray: a2afede61c8d1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":769,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"7ca4c1770e526303c8b96ec681271e67","sha1":"040ceca3f1799eb067ee3e0c5c3f97e8d48e8492","sha256":"9b69c924617de012e3a6252d715e48202d0bd07eccae08190bc9d0565405d1dd","sha512":"0180a2c052ce5feedb836fc6a1e5d82f2edaa25574f0951b679029a28ca6c0e4098c0fde61858a88c4dc4fb2ee2ac196f3f681864fab71b3d205a0baf010c4f3","ssdeep":"","tlshash":"13e0867181174b8423b80da5ad81af3bebab1758a945215c334ec633f517654c9441f7","first_seen":"2026-08-03T07:57:51.315431Z","last_seen":"2026-08-14T17:21:58.773428Z","times_seen":90,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":3,"connect":9,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hexalink.org/?host=https%3A%2F%2Frhpscoinrbh.lol\u0026href=https%3A%2F%2Frhpscoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-14T12:23:11.086Z","timestamp":1786710191086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://hexalink.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 11 Aug 2025 12:57:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Fri, 14 Aug 2026 12:23:11 GMT\r\ncf-cache-status: HIT\r\nage: 177951\r\ncf-ray: a2afede64c951a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1046087,"size_decoded":381255,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32044)","md5":"362ca438ae65cfc912b7a743a781ce7b","sha1":"8bd96bb53323eab2db38be0eb2b408ddf2b95b17","sha256":"06449c96378758359a50cc186e8017a20143e74a7dc5b57efaef3ea2c88f5017","sha512":"0ae63ee9d428f583c852ea0456d74d0a9cc5ce6341734c041ee00d5236c364738ca7fe0397c3e3818a86875cd48a7eba3419174a679258ba4bc4ab3f3ac97f04","ssdeep":"24576:fpISZZVokQyZ74ejf2kwwwCbUef690riXt2s0Fj6+6:RISZyyZ74ejf2kwwwCbpf690riXt70FY","tlshash":"9c256c907361b47a539b82a898ab0500f3395859500d802cfbecd9ebef949d9c5bff71","first_seen":"2026-08-03T07:57:51.324381Z","last_seen":"2026-08-14T17:21:58.757191Z","times_seen":89,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rhpscoinrbh.lol/acd714403a.js","fqdn":"rhpscoinrbh.lol","domain":"rhpscoinrbh.lol","tld":"lol"},"ip":{"addr":"104.21.41.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rhpscoinrbh.lol/","date":"2026-08-14T12:23:09.129Z","timestamp":1786710189129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhpscoinrbh.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 20:19:10 GMT","end":"Wed, 04 Nov 2026 21:17:31 GMT"},"fingerprint":{"sha1":"B7:04:0B:64:FB:7C:19:18:7C:56:89:6C:CD:17:1A:86:30:11:6B:4B","sha256":"2F:C9:59:35:80:54:E8:C4:78:E0:08:8B:1F:80:7F:5A:A1:0A:0F:0D:53:3A:54:F6:E3:CE:3F:FE:D0:68:D0:E0"}}},"request":{"raw":"GET /acd714403a.js HTTP/1.1\r\nHost: rhpscoinrbh.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rhpscoinrbh.lol/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 12:23:09 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a6255cc-588\"\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 23 Jul 2026 17:56:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\npermissions-policy: camera=(), microphone=(), geolocation=(), camera=(), microphone=(), geolocation=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y0%2FM68uah%2FTuDw7Vxut9LbV1QifxlkeaFiwZmmQ%2Boxs8tdGYe7OkLSDBKhsVQKy7nSfEhbMNz9CJYYu2j9PTVN8cIpplOKCRiW6Txuct1BNGTFuco%2BxSEwirrkjHPHFpDKA%3D\"}]}\r\nage: 154\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2afedda0c56a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1416,"size_decoded":1737,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1416), with no line terminators","md5":"59c939c1aeabd848f0c107a327b28221","sha1":"26bc709a6e7253e6f7917cd5164e74f700f34490","sha256":"7a7424a155777024bb994f19f7f7d5ee747c415d98e6f586381e3b1015a82360","sha512":"7281a1708a69dacf61f22b7ba7bfb14dd7f1728195403bffeb1544a1d74f2e09c825d33b3cdd0b037fc675ba4be823c4610744bab23c586a83355d206f99dde4","ssdeep":"","tlshash":"0e21c0dbba52f4401785b7b6986f740d9767bd0adcda4838d40055c23dbeb2fd012568","first_seen":"2026-08-14T12:15:12.569889Z","last_seen":"2026-08-14T12:23:43.032289Z","times_seen":3,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"rhpscoinrbh.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gf","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"172.67.218.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rhpscoinrbh.lol/","date":"2026-08-14T12:23:10.081Z","timestamp":1786710190081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"OPTIONS /x7k/gf HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://rhpscoinrbh.lol/\r\nOrigin: https://rhpscoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 12:23:10 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=stN5N83vnla7aDPkaBKO8URmQvFBAHoiDfHn%2BABESzNvjAGPSZ%2FoNX5Wz4dj9%2BS5uVZRuE2OQU7QllNTJkUaWnui5lNK6U4QqyUsGwxEXYZ5MIzmeiYEDbRVnnKJ\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2afeddfff618deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":662,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T20:45:54.215879Z","times_seen":17892639,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=5\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rhpscoinrbh.lol/","date":"2026-08-14T12:23:11.042Z","timestamp":1786710191042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=5\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rhpscoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rhpscoinrbh.lol/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ndate: Fri, 14 Aug 2026 12:23:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a2afede5ff0d35a6-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 155\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Fri, 14 Aug 2026 12:20:35 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221580,"size_decoded":30995,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4d9d4dad153a80f0a083d654f859ab3f","sha1":"710c17b6c4d35a4c74112b0f929369b67e20441c","sha256":"f2eb3439bd78ea4b9cb38b9535823d4f3f182c48a66cf9673e7e7da322826997","sha512":"27c412416fdcb931f6fbe405c2795b108ab284d49aeadb06537617e3a4928a9b86af131dbf8a131f8534cf586e6d30f73de37f19d46b69a88dc7947313e63762","ssdeep":"768:5yS6UxtNRUORhhlduBNJD7O8VkyYPzS4WoQmWo0xNWo5/AgAvzS4NomTTzWH5YHa:5p0VkyJiTvguaT7sXFQGL2zSCEty","tlshash":"d924546e8b409e566fb15388d25cf9eda16fe103c9ce5ca2e2f18f3444bc5b3215129e","first_seen":"2026-08-13T18:14:19.825965Z","last_seen":"2026-08-14T17:21:58.797866Z","times_seen":8,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=6\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rhpscoinrbh.lol/","date":"2026-08-14T12:23:11.081Z","timestamp":1786710191081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=6\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rhpscoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rhpscoinrbh.lol/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ndate: Fri, 14 Aug 2026 12:23:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a2afede63f1e35a6-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 155\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Fri, 14 Aug 2026 12:20:36 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172671,"size_decoded":30008,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"62105da7c53a7bde503e4f771b0be43a","sha1":"638204cad21f255c23556010da9264192620affc","sha256":"fcce60d63929923582a57bb4d2932775645b7a1e6bd72c81a027b9106bac61b3","sha512":"6ea3d17e67fce2efddf4456e39f20df355b904a674508ef328d6653e403b3746b9fcb1e768a7360df86b8ebdfb9a93b7cd0941236096b9eb265a4a11d5bfd174","ssdeep":"1536:AcG47KuIU15Z6bjzeFedubixbitI/YcZMfLFI2HqQh+mcq:AcT7KuIU150jzeFedC+ec1usm9","tlshash":"7af3986e4b04de661fb25388914cf9eca18fa117c9cd9cf6e2e1cf3440b89f7255219a","first_seen":"2026-08-13T18:14:19.816722Z","last_seen":"2026-08-14T17:21:58.799815Z","times_seen":8,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gc","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"172.67.218.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rhpscoinrbh.lol/","date":"2026-08-14T12:23:09.597Z","timestamp":1786710189597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"OPTIONS /x7k/gc HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://rhpscoinrbh.lol/\r\nOrigin: https://rhpscoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 12:23:09 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Os8TjCIm5WmIOUVXJAHrUcyHuu1tmCE%2FpDuFqk8eNnZHL9%2BsZuBw%2Fa0JOfoK%2BKvuMsWrBYEx8Gw%2BqOAC4i%2B%2FEigw6uxbDG%2FyJrFz8GcB1HoqQHIbis0Xj8DQTCG\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2afeddd1efe8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":672,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T20:45:54.215879Z","times_seen":17892639,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":3,"connect":12,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}