{"report_id":"40669a97-22c4-45dd-b2b5-1f444e61876d","version":6,"status":"done","tags":[],"date":"2025-08-11T22:37:43Z","url":{"schema":"https","addr":"ultrafirmwaremodel.online/","fqdn":"ultrafirmwaremodel.online","domain":"ultrafirmwaremodel.online","tld":"online"},"ip":{"addr":"172.67.174.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ultrafirmwaremodel.online/","fqdn":"ultrafirmwaremodel.online","domain":"ultrafirmwaremodel.online","tld":"online"},"title":"ultrafirmwaremodel.online/"},"submit":{"url":{"schema":"https","addr":"ultrafirmwaremodel.online/","fqdn":"ultrafirmwaremodel.online","domain":"ultrafirmwaremodel.online","tld":"online"},"ip":{"addr":"172.67.174.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-15T22:37:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"on-chainfix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-06T15:14:12.503348Z","alert_count":0,"request_count":1,"received_data":6679,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-08-06T16:11:55.56616Z","alert_count":0,"request_count":1,"received_data":87518,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"on-chainfix.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-01-12","domain_rank":0,"first_seen":"2024-01-17T12:41:16Z","last_seen":"2025-07-18T20:45:07.906645Z","alert_count":11,"request_count":11,"received_data":0,"sent_data":4897,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ultrafirmwaremodel.online","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-21","domain_rank":0,"first_seen":"2025-04-27T13:38:18.750868Z","last_seen":"2025-07-18T20:45:07.895854Z","alert_count":0,"request_count":11,"received_data":398824,"sent_data":5102,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Materialize CSS:1.0.0","description":"Materialize CSS is a front-end framework that helps developers create responsive and mobile-first web applications. It is based on Google's Material Design guidelines.","website":"https://materializecss.com","common_platform_enumeration":"","icon":"Materialize CSS.svg","categories":["UI frameworks"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"files.coinmarketcap.com","ip":{"addr":"54.240.174.42","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-28","domain_rank":4262692,"first_seen":"2015-09-03T05:46:35Z","last_seen":"2025-08-06T13:40:19.487115Z","alert_count":0,"request_count":1,"received_data":59462,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"s2.coinmarketcap.com","ip":{"addr":"3.167.2.28","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2013-04-28","domain_rank":209181,"first_seen":"2018-01-12T04:47:19Z","last_seen":"2025-08-05T11:58:21.836615Z","alert_count":0,"request_count":5,"received_data":8235,"sent_data":2349,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-08-06T15:20:03.099982Z","alert_count":0,"request_count":2,"received_data":324978,"sent_data":952,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"3rdparty-apis.coinmarketcap.com","ip":{"addr":"54.240.174.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-28","domain_rank":3258633,"first_seen":"2020-09-29T03:34:53Z","last_seen":"2025-08-06T12:30:54.320542Z","alert_count":0,"request_count":1,"received_data":6351,"sent_data":561,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-08-06T15:10:32.619142Z","alert_count":0,"request_count":4,"received_data":34608,"sent_data":2192,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"files.coinmarketcap.com/static/widget/coinMarquee.js","fqdn":"files.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"54.240.174.42","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7046f8f1f574e5f2da66f6cb5ba73b61","sha1":"f1d4f8820ce85f44bf92f39df949f12142747f94","sha256":"42ddd8b89cd2f3acae38059fec042e4f4f1d7ef0c5c33fc613f8d1afc9512b6d","sha512":"3b9c4ec5663e952511cb6d7298230603c1ddba8eed390e5950c13e0510d2a7b9c9758713dc1a2e7f7a1146528319db1a4affc9adf4634263747049e967201bfe","ssdeep":"768:6M4hcNGbZ7EX8bKkFHCTP9eyXp+VeRr+HcAYkF/Knf4VZELk+CuIZELk+CuX4scS:69UsZ7EX8bK+H+3vw+CJ+Ck40","tlshash":"dc4319da72c1b5de02a3f3b5542b0205a23e3e79748dc651f614dec2ae7b46c8613e38","size":58991,"data":"","first_seen":"2023-03-07T01:10:08Z","last_seen":"2026-07-27T13:32:01.69687Z","times_seen":699,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.3.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-07-28T14:23:35.317047Z","times_seen":141295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrafirmwaremodel.online/script.js","fqdn":"ultrafirmwaremodel.online","domain":"ultrafirmwaremodel.online","tld":"online"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2816a5f1e0a375b8863feb19c3bdbee7","sha1":"739b60c51221474f02d6971226a0ae282335a77e","sha256":"fff2b8191fd27bff9519ff5407cca6ad232d32e25bf902565f10008133221cf0","sha512":"32f743ab5017d604e66e27a4057d9bb6751f8933b5ee5f2e0e02e798c98610ff2c2bba08906af4baa9ed13e0444c6ad0a3a75cc5f18976b5d5d2c368a68ee0c5","ssdeep":"","tlshash":"5b71e9c0229385a44aa39975b791a2e9f011ad23d6c0c133767fc3e48f762d1b5d369f","size":3476,"data":"","first_seen":"2024-08-19T15:52:58.009632Z","last_seen":"2026-07-19T09:14:30.747401Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0/js/materialize.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"87d84bf8b4cc051c16092d27b1a7d9b3","sha1":"c8b4c65651921d888cf5f27430dfe2ad190d35bf","sha256":"53f7070cc4c81c278c72f7a106fd71434e766cf49b26d6ee8b0e1003d7132b3d","sha512":"3625aa6b6adc7879cddd9e63ea6480bdbc30837b62c1537188041a6923125e74510e1e42da693ffac290470f2a8d5d6f3789dff222b66b46f4e3c3e71dbcb1f9","ssdeep":"3072:SJu60GNnYpmH0I5zSMIonlnqA9kSy1UQp0kD5tgtPlF7zzc0mwEh7PnR:SbGcZYEvzc0mwEh7PnR","tlshash":"1b04e8d9b242763145e3e1a9426f260aa23721a45087c0dcb43eeddd6fbcd4821b7b7d","size":181109,"data":"","first_seen":"2023-03-07T12:08:24Z","last_seen":"2026-07-28T03:20:32.853476Z","times_seen":1929,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrafirmwaremodel.online/NODE_files/bootstrap.bundle.min.js","fqdn":"ultrafirmwaremodel.online","domain":"ultrafirmwaremodel.online","tld":"online"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ccd9d390d31af98110f74f842ea9b32","sha1":"a85e681624c91a106a514c31eacf80de817b2cc3","sha256":"f5210fa3e7f0245a4c51eb7f280092c0ef99fdd28c45e17dab8cc5854fdf4fd3","sha512":"a5ac783258178c710f7c2c1c24b4218a063bf8df2bb7a6d5bd62c5c9432ec5286fd7bd17e774d1cc63e63e4666181864fa38a447c581338ca5ec0f563071eabe","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZY:T36WJr9ixi","tlshash":"a873c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","size":78129,"data":"","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-07-28T15:26:01.602976Z","times_seen":18785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.3.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.3.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-1538f\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Mon, 11 Aug 2025 22:37:22 GMT\r\nage: 1767209\r\nx-served-by: cache-lga13622-LGA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 65, 67323\r\nx-timer: S1754951842.067535,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30288\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86927,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-07-28T14:23:35.317047Z","times_seen":141295,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":31,"dns":4,"connect":13,"send":0,"wait":13,"receive":4,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"on-chainfix.com/NODE_files/jquery.counterup.min.html","fqdn":"on-chainfix.com","domain":"on-chainfix.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.037Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /NODE_files/jquery.counterup.min.html HTTP/1.1\r\nHost: on-chainfix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T14:56:16.902508Z","times_seen":17581573,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"on-chainfix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ultrafirmwaremodel.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 06 Aug 2025 21:39:14 GMT\r\nexpires: Thu, 06 Aug 2026 21:39:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 435488\r\nlast-modified: Wed, 23 Apr 2025 16:07:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-07-28T14:58:41.871889Z","times_seen":268879,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":102,"dns":1,"connect":15,"send":0,"wait":16,"receive":1,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"on-chainfix.com/NODE_files/2.6%20animate.css.html","fqdn":"on-chainfix.com","domain":"on-chainfix.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.026Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /NODE_files/2.6%20animate.css.html HTTP/1.1\r\nHost: on-chainfix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T14:56:16.902508Z","times_seen":17581573,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"on-chainfix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrafirmwaremodel.online/NODE_files/bootstrap.min.css","fqdn":"ultrafirmwaremodel.online","domain":"ultrafirmwaremodel.online","tld":"online"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrafirmwaremodel.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 12:08:47 GMT","end":"Wed, 15 Oct 2025 13:08:37 GMT"},"fingerprint":{"sha1":"CA:5C:83:C4:9C:3C:72:80:C1:E1:5D:B8:7E:35:EF:66:29:F7:F0:DD","sha256":"07:4A:1D:C6:55:C7:44:8D:6F:A7:52:BA:0B:77:90:C3:3D:DF:05:65:CB:FF:DC:93:7B:60:9D:D5:77:45:0A:99"}}},"request":{"raw":"GET /NODE_files/bootstrap.min.css HTTP/1.1\r\nHost: ultrafirmwaremodel.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 22:37:22 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: W/\"bec8e2bcc17c02ac55462f6c2b28d5ff\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9tZnDKx28uPbMQcP5DmS0dIawzAselFvuuY1dowLmMZVUnb9FeY1SvSO8fM3EGF3JXouLbniTPJ8%2FViFhS9G7c2aJF4HVzZKjq%2FleTwWOsTyXRWasK25VCbP%2F%2B2Zt6CqINozB9FHiiyqeheA\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 96db37948e8a56c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":163885,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65306)","md5":"17b843b2f0c0a9df42ec19103d694f4a","sha1":"2f02a5496debd2b81246311f4b4a88b52d18ba26","sha256":"a425f85b79849dbdbcb5d5b7d04fd455b5d57e599f11043f1627113c59022ee9","sha512":"c034d6f63bf7420c39b338ee4cec5ba66b7577885bcf0f10203f39f24e1f8c7fba701effc20badd8040fc0f90e706b993600a8018216316eb892f8580f17be43","ssdeep":"1536:4t04T8if0W8DsEBpy0cuJBK2rIWE5e0VUpz600I4fM:4t04a0VUpz600I4fM","tlshash":"f7f3b4dbf581341dd4a7c259a4d1bffd052f4586e3025aabb0277bb88b892c70963e4c","first_seen":"2024-12-12T02:52:21.674108Z","last_seen":"2026-07-20T07:17:27.438028Z","times_seen":14,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.coinmarketcap.com/static/widget/coinMarquee.js","fqdn":"files.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"54.240.174.42","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Wed, 04 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"26:4D:86:7B:89:05:0E:D9:C8:97:29:50:1C:69:9B:6D:B0:66:AD:5F","sha256":"81:EE:13:6B:EE:08:15:70:67:BA:F9:88:9F:E2:74:14:00:82:A0:8D:BD:9A:BF:D5:66:A3:7C:B3:9E:5B:60:8A"}}},"request":{"raw":"GET /static/widget/coinMarquee.js HTTP/1.1\r\nHost: files.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 58991\r\ndate: Mon, 11 Aug 2025 05:10:42 GMT\r\nlast-modified: Tue, 23 Feb 2021 08:31:52 GMT\r\netag: \"7046f8f1f574e5f2da66f6cb5ba73b61\"\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: fRea9I5SDcu897yD70damwRtkC6jRkmjHpftsek1rvbr6ec-ObSNsg==\r\nage: 62800\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":58991,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (58900), with no line terminators","md5":"7046f8f1f574e5f2da66f6cb5ba73b61","sha1":"f1d4f8820ce85f44bf92f39df949f12142747f94","sha256":"42ddd8b89cd2f3acae38059fec042e4f4f1d7ef0c5c33fc613f8d1afc9512b6d","sha512":"3b9c4ec5663e952511cb6d7298230603c1ddba8eed390e5950c13e0510d2a7b9c9758713dc1a2e7f7a1146528319db1a4affc9adf4634263747049e967201bfe","ssdeep":"768:6M4hcNGbZ7EX8bKkFHCTP9eyXp+VeRr+HcAYkF/Knf4VZELk+CuIZELk+CuX4scS:69UsZ7EX8bK+H+3vw+CJ+Ck40","tlshash":"dc4319da72c1b5de02a3f3b5542b0205a23e3e79748dc651f614dec2ae7b46c8613e38","first_seen":"2023-03-07T01:10:08Z","last_seen":"2026-07-27T13:32:01.69687Z","times_seen":699,"resource_available":true,"data":null}},"time_used":496,"timings":{"blocked":228,"dns":112,"connect":1,"send":0,"wait":25,"receive":2,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"on-chainfix.com/NODE_files/jquery.waypoints.min.html","fqdn":"on-chainfix.com","domain":"on-chainfix.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.645Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /NODE_files/jquery.waypoints.min.html HTTP/1.1\r\nHost: on-chainfix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T14:56:16.902508Z","times_seen":17581573,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"on-chainfix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"on-chainfix.com/NODE_files/wow.min.html","fqdn":"on-chainfix.com","domain":"on-chainfix.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.664Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /NODE_files/wow.min.html HTTP/1.1\r\nHost: on-chainfix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T14:56:16.902508Z","times_seen":17581573,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"on-chainfix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrafirmwaremodel.online/favicon.ico","fqdn":"ultrafirmwaremodel.online","domain":"ultrafirmwaremodel.online","tld":"online"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrafirmwaremodel.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 12:08:47 GMT","end":"Wed, 15 Oct 2025 13:08:37 GMT"},"fingerprint":{"sha1":"CA:5C:83:C4:9C:3C:72:80:C1:E1:5D:B8:7E:35:EF:66:29:F7:F0:DD","sha256":"07:4A:1D:C6:55:C7:44:8D:6F:A7:52:BA:0B:77:90:C3:3D:DF:05:65:CB:FF:DC:93:7B:60:9D:D5:77:45:0A:99"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ultrafirmwaremodel.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 Aug 2025 22:37:23 GMT\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 11 Aug 2025 22:37:23 GMT\r\ncf-cache-status: EXPIRED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=58C98wucWl1dUY7HFWzucHXh%2FPIzDuvpCbyjvdrJEtHYLCssDJqFYUjSAxfSoYrwARBaeSXuzsk8ajMX0S7HhFM2sPAF6qkjU5NrI3PJYawfTPJ2ForfjEumEP%2FBynpj7T0WXn660xmAKbsz\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 96db379aad190b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26519,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"2fdfe5b02952071fa99ae68f96a7c9f8","sha1":"45688cf87a44c0905d86c5723f2598febff998e9","sha256":"682beb23e0898e3a6e8907542a1cf1d74f36f09c8e70d0c69dcd51069b0d0cb2","sha512":"23e14fde18cd5c1f04c8da9c18af824b5ad91c6f7c138b3083e6917d4575377b83c6b7618badb0a242994c81544c25110636523ee6bf2ec144fd939e57fbc2be","ssdeep":"192:UNJbshcthSJAflA8qNjvS8/VKTUNK3cQ+RPDEqFuUvOuBYEkO:UNShIh6A9A8Ejt/vxpwoJR/","tlshash":"92c2cb2455c12873403b8284a8325b9affa24147e72f491437fc17cb6fbbd88c8a7687","first_seen":"2025-01-28T05:59:48.594247Z","last_seen":"2026-06-29T02:27:38.904039Z","times_seen":17,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/1.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"3.167.2.28","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:23.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Wed, 04 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"26:4D:86:7B:89:05:0E:D9:C8:97:29:50:1C:69:9B:6D:B0:66:AD:5F","sha256":"81:EE:13:6B:EE:08:15:70:67:BA:F9:88:9F:E2:74:14:00:82:A0:8D:BD:9A:BF:D5:66:A3:7C:B3:9E:5B:60:8A"}}},"request":{"raw":"GET /static/img/coins/32x32/1.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1573\r\nlast-modified: Mon, 07 Dec 2020 19:06:42 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 11 Aug 2025 07:32:32 GMT\r\netag: \"9b9545b0e6a87b4aa1009f10f35c37d2\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4e0a1f367f79652e0e7d03fa585de7b2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 6BDHJnDzMXxVIDAap1M4WZTEBxddxRyq1PlrCCvMxEnnqB1hY1rpFg==\r\nage: 69732\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1573,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"9b9545b0e6a87b4aa1009f10f35c37d2","sha1":"f5f942a5ea3a33ffcfb3d1d6e64233571bf843b5","sha256":"2b6064887ef3e3f56b479f8ea7f09711dd735504e5ba4f937ca2243eed79ca08","sha512":"c1362e9f353251e39422b644d7505799b3ea07e211aaa19c589d52796731b30acabe903746b9a5aca5d114379084a4e24e81f3dee6c962f6e46465f5754d91f3","ssdeep":"","tlshash":"6c31c5e0efa18bf915198d329614f498d8ed1d99bf214aaf8b254016d5b10a8868eb3c","first_seen":"2023-05-04T14:40:13Z","last_seen":"2026-07-27T13:32:01.765384Z","times_seen":923,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":123,"dns":97,"connect":4,"send":0,"wait":5,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0/css/materialize.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/materialize/1.0.0/css/materialize.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 22:37:22 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 17475\r\ncf-ray: 96db3794ad157129-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03efe-22a11\"\r\nlast-modified: Mon, 04 May 2020 16:12:46 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 355804\r\nexpires: Sat, 01 Aug 2026 22:37:22 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=A2XqjLJlklOmY4cv167WqiJcwK9RrthcvzZ06pa%2B%2F35%2FX53Axdz6A3t9Xo%2BhIjMPBtrW0mUFoVvt%2Fz3SEGARKqd%2FUMPjAFOQjli6bcV7goA9OSycumn%2BVzOaXtMGaLE1K5wu1cIU\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141841,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65352), with CRLF line terminators","md5":"ec1df3ba49973dcb9ff212f052d39483","sha1":"80ae4aa0dba3634dd9bf59586d541d2dd8d8191c","sha256":"3b079a3ff21ceabb15fa5cac7f24b887e2cceac470b8eddeb9361fafa335db88","sha512":"5097c068e94846d751fb43fa0b7294a130c0c554eecb79674972f22ca94760995c494f09ba07bf9a379ac4334c970f4b81e228b60cf914ff1e5103e15f5ab5d0","ssdeep":"768:TclJ0fKv4fHkOemh2q3LE6ACdvIylx9tjKrZeT4h:TclJjv4fHLemh2W/ACxjtE","tlshash":"7dd3b926f18a311aa467c53a52c4b7a9763e4445ef13af7a70533b38c7478ca2163b4f","first_seen":"2023-04-05T13:16:03Z","last_seen":"2026-07-28T03:20:32.881214Z","times_seen":828,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":14,"receive":1,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rdparty-apis.coinmarketcap.com/v1/cryptocurrency/widget?id=1,1027,825,1839,52\u0026convert_id=2781","fqdn":"3rdparty-apis.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"54.240.174.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 22 May 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:1F:32:DB:10:D7:4D:B7:FE:87:55:5F:E2:BF:63:07:2D:8D:7D:F7","sha256":"82:A7:65:6E:3D:AA:21:D5:76:C7:53:AE:2D:9B:A7:6E:AB:6D:9F:E6:26:87:FA:2C:2D:E1:C1:11:08:0B:B8:47"}}},"request":{"raw":"GET /v1/cryptocurrency/widget?id=1,1027,825,1839,52\u0026convert_id=2781 HTTP/1.1\r\nHost: 3rdparty-apis.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nOrigin: https://ultrafirmwaremodel.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ndate: Mon, 11 Aug 2025 22:37:23 GMT\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nserver: Tengine\r\naccess-control-allow-credentials: false\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: WWW-Authenticate,Server-Authorization\r\ncache-control: max-age=30, must-revalidate\r\ncontent-encoding: gzip\r\nx-traefik-route: coinmarketcap-thirdparty-apis\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding,accept-encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: nmqz6051nJ0mx3fepliem2CWWnbttBb_PAQhgItaFg-5H2IUj_pfHA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5516,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d4944a6634046c46b8e2ad2b5895ea83","sha1":"1a89f29d797715a5cb123fd0a075fbe6a812c840","sha256":"c6fd9540d10817d1642b6c1beefcda50a0af0bba431f1e80392237aae3923651","sha512":"df7d5b0b44b8e9fa08c741e64c8fdfbefdd68376f9d302b90965d590f5e4e111a74944834be4d000263596dfab778137b53de8815f7351d60b3bad74ff6beb73","ssdeep":"48:YtjCw1KYI3oAKY22uk/vNfCErK3nxdnUK29hVtRl3oAKY22ukGAiUdkqrdZ+iX:IOeNIJKY2da0ZznUrhLTJKY2dMzxZNX","tlshash":"a0b1103746b81cbac57f1d60000737851e1d70e6d89c27ef29dd4ea881e6ee752817ae","first_seen":"2025-08-11T22:37:45.85038Z","last_seen":"2025-08-11T22:37:45.85038Z","times_seen":1,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":72,"dns":64,"connect":1,"send":0,"wait":309,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/52.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"3.167.2.28","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:23.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Wed, 04 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"26:4D:86:7B:89:05:0E:D9:C8:97:29:50:1C:69:9B:6D:B0:66:AD:5F","sha256":"81:EE:13:6B:EE:08:15:70:67:BA:F9:88:9F:E2:74:14:00:82:A0:8D:BD:9A:BF:D5:66:A3:7C:B3:9E:5B:60:8A"}}},"request":{"raw":"GET /static/img/coins/32x32/52.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1344\r\nlast-modified: Mon, 07 Dec 2020 19:11:36 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 11 Aug 2025 04:55:28 GMT\r\netag: \"3007f572f2d1d29b8c9bf993608742dd\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4e0a1f367f79652e0e7d03fa585de7b2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: UMrbxYJ3WeI62x4RlK0Z58vW3FfD6D3nHU_IGLvMQUFT2E083eDUyg==\r\nage: 73222\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1344,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"3007f572f2d1d29b8c9bf993608742dd","sha1":"96806f51a39b29e1d5c0d38355e1d464a0b3d750","sha256":"81adb16c8bb35872dda383ce3a44a4c88acab45aeebd14352ae9fee24582651b","sha512":"2e77e11a36468c310ba525bd1388173531bec06f68ec5516a54d2682e4175b1cae796337c47c2c567d2509645b81150f237a5d34770dd768fac82a9dc3865802","ssdeep":"","tlshash":"f521b6cae2b28e69fb322af6832e4451add379391d72c806881832b11c112f2997dd58","first_seen":"2023-05-04T14:40:13Z","last_seen":"2026-07-27T13:32:01.717818Z","times_seen":621,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":121,"dns":96,"connect":4,"send":0,"wait":5,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/825.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"3.167.2.28","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:23.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Wed, 04 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"26:4D:86:7B:89:05:0E:D9:C8:97:29:50:1C:69:9B:6D:B0:66:AD:5F","sha256":"81:EE:13:6B:EE:08:15:70:67:BA:F9:88:9F:E2:74:14:00:82:A0:8D:BD:9A:BF:D5:66:A3:7C:B3:9E:5B:60:8A"}}},"request":{"raw":"GET /static/img/coins/32x32/825.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 314\r\nlast-modified: Fri, 28 Jul 2023 07:44:51 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 11 Aug 2025 03:16:27 GMT\r\netag: \"da33d4dc1767175abecee422b56d7678\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4e0a1f367f79652e0e7d03fa585de7b2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: n9KqREv01ekUxY-drw3Z_qQ6zhpT3PJ0ODJrWUPXESGJYd3dqiK44A==\r\nage: 69656\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":314,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"da33d4dc1767175abecee422b56d7678","sha1":"0e525d1e7616980449f0f2617ddb65bc77e3f064","sha256":"357122652b497822a01833fc055edad08ac0c7db2f1069e4e3efb9cd9fbe0beb","sha512":"3cdd0ac2f64ecbd5c2051181fbb4fa3506566bdb822edd7c6eb4bfcbb843e2997fe211405777be8038e6ebd50878e38a8ac1961defc5876f159f04c9bd22f849","ssdeep":"","tlshash":"02e07d507a4052fec9327b76dc22032b745b1cc399b0502f19a09466eb624e193c6955","first_seen":"2023-07-28T23:49:01Z","last_seen":"2026-07-27T13:32:01.721997Z","times_seen":879,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":120,"dns":95,"connect":4,"send":0,"wait":4,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"on-chainfix.com/NODE_files/wow.min.html","fqdn":"on-chainfix.com","domain":"on-chainfix.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.038Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /NODE_files/wow.min.html HTTP/1.1\r\nHost: on-chainfix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T14:56:16.902508Z","times_seen":17581573,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"on-chainfix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrafirmwaremodel.online/NODE_files/cash.png","fqdn":"ultrafirmwaremodel.online","domain":"ultrafirmwaremodel.online","tld":"online"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrafirmwaremodel.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 12:08:47 GMT","end":"Wed, 15 Oct 2025 13:08:37 GMT"},"fingerprint":{"sha1":"CA:5C:83:C4:9C:3C:72:80:C1:E1:5D:B8:7E:35:EF:66:29:F7:F0:DD","sha256":"07:4A:1D:C6:55:C7:44:8D:6F:A7:52:BA:0B:77:90:C3:3D:DF:05:65:CB:FF:DC:93:7B:60:9D:D5:77:45:0A:99"}}},"request":{"raw":"GET /NODE_files/cash.png HTTP/1.1\r\nHost: ultrafirmwaremodel.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 22:37:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 22239\r\ncf-ray: 96db37949e9656c5-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"18f5ea2306a7f5e85d929578a18f3856\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ITiVi77rFolx109SUBs80KGO72W%2FnMXEVXuEmGth4ECuwjZiYj1tbrgUTGYtVQ8w52ghCHqZ5OE88LseyrItvWHBSkzD%2B8WQ4AccZIXlu7I%2B6DFebTb6RfnAVIJviov%2B069yuSj5vR5hd%2FbM\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1387\u0026min_rtt=442\u0026rtt_var=1706\u0026sent=42\u0026recv=33\u0026lost=0\u0026retrans=0\u0026sent_bytes=29259\u0026recv_bytes=1888\u0026delivery_rate=11724696\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=14915a7a03f5222e\u0026ts=505\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22239,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"aa43d5499da9c66e581d0d14709108a7","sha1":"083a16889bffb9c16e6c5d2a628a62696f730cd3","sha256":"8c457ca44ecd8c5717821cb340f9a19d0e82882dd92f423b761c3f966d620636","sha512":"96855ea5dfe082cb7590ab523652add9a594f0d83d3dc85debdbff44f1843642bde3bfb71502445c137ff724434c8a6eb62f607658e5462dfe5852fe823ffec0","ssdeep":"384:4yxdMPZNDiHi/jnE1teRtDKu57DqHQuytLWjmixVkO8kLC:FxdMh8ejEPeXDBUXxVkgLC","tlshash":"96a2d16becf3750decfbb2d15e915bed0c26174d49e8c73829b54ac80e21062b65611a","first_seen":"2024-08-19T15:52:57.981077Z","last_seen":"2026-07-19T09:14:30.709288Z","times_seen":10,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0/js/materialize.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/materialize/1.0.0/js/materialize.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 22:37:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 36877\r\ncf-ray: 96db3794cd1b7129-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03efe-2c375\"\r\nlast-modified: Mon, 04 May 2020 16:12:46 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 938075\r\nexpires: Sat, 01 Aug 2026 22:37:22 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3JNMpd2v6EZeRkRPBjW8OqNH41mbHCUT7E2xsnerR6u2XSqoxxRrxUFG%2BD7l0w7aTO5QS0TxZnueKOYGo5bivDRpIBxFF7h%2Fwnvy7NhUg4ap7Y1JHE3z62V3fiNw1FjuE5TMTRZc\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":181109,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65357)","md5":"87d84bf8b4cc051c16092d27b1a7d9b3","sha1":"c8b4c65651921d888cf5f27430dfe2ad190d35bf","sha256":"53f7070cc4c81c278c72f7a106fd71434e766cf49b26d6ee8b0e1003d7132b3d","sha512":"3625aa6b6adc7879cddd9e63ea6480bdbc30837b62c1537188041a6923125e74510e1e42da693ffac290470f2a8d5d6f3789dff222b66b46f4e3c3e71dbcb1f9","ssdeep":"3072:SJu60GNnYpmH0I5zSMIonlnqA9kSy1UQp0kD5tgtPlF7zzc0mwEh7PnR:SbGcZYEvzc0mwEh7PnR","tlshash":"1b04e8d9b242763145e3e1a9426f260aa23721a45087c0dcb43eeddd6fbcd4821b7b7d","first_seen":"2023-03-07T12:08:24Z","last_seen":"2026-07-28T03:20:32.853476Z","times_seen":1929,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":9,"dns":3,"connect":1,"send":0,"wait":14,"receive":2,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@400;500;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Poppins:wght@400;500;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 11 Aug 2025 22:37:22 GMT\r\ndate: Mon, 11 Aug 2025 22:37:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5993,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4d08331722c82b80293b12d001f9455e","sha1":"c23f2c8d0a18bc87477f962ddf05bf1d67d9c7ac","sha256":"d64544cc5b198997843e49d327624418922a32f664cd5f6e1e1b4ddc789833c2","sha512":"5d3b83d1ef89acd7ba85898064f7f1a1a41934b863318e4e97561b2835594f00569acd99ee7adc35bcab1ce4f8a044f0d3c4bffbdacce402a2db237907c5e347","ssdeep":"96:SOEaOOEarJc+ukOEalN3OXaaOXaiJc+ukOXalN3OpaGOpa+Jc+ukOpa5N3OwhaMi:lpvQn+q354uJongslzLzh","tlshash":"d3c19ed1087be1049b871cc123cf6d36ee0ea255b450e5746bfd0c98adabc694362b2d","first_seen":"2025-04-24T10:47:09.195261Z","last_seen":"2026-03-23T08:06:17.571918Z","times_seen":91,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":274,"dns":58,"connect":28,"send":0,"wait":47,"receive":0,"ssl":185},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrafirmwaremodel.online/NODE_files/index.css","fqdn":"ultrafirmwaremodel.online","domain":"ultrafirmwaremodel.online","tld":"online"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrafirmwaremodel.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 12:08:47 GMT","end":"Wed, 15 Oct 2025 13:08:37 GMT"},"fingerprint":{"sha1":"CA:5C:83:C4:9C:3C:72:80:C1:E1:5D:B8:7E:35:EF:66:29:F7:F0:DD","sha256":"07:4A:1D:C6:55:C7:44:8D:6F:A7:52:BA:0B:77:90:C3:3D:DF:05:65:CB:FF:DC:93:7B:60:9D:D5:77:45:0A:99"}}},"request":{"raw":"GET /NODE_files/index.css HTTP/1.1\r\nHost: ultrafirmwaremodel.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 22:37:22 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: W/\"e0cefeb665209d18211ec6faf236776f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RteSzcdWamUiDLPD6AZ7DkAFbYHVPYqbGLC%2FbocKiThUnf6O80ZzM2%2FLqObothgYcJh2waKNC7i32zXmd1b3kwCWEdEESV9WNLSiQYhtcXIOdVVNirXmml%2BWpOLQS2l4lGE5%2FHC7DXqnzVs1\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 96db37949e8e56c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8971,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"d231254acdcf7f5ccce5866e07f8de51","sha1":"579a307793a096c232bd0322a621d128e91507f1","sha256":"23d4a8245d8d20261ae28ca7b2233fb413ca5ef5b9dcb90ac57e3108fd04ac20","sha512":"70d253a6da9dad8fb06750a1ba1ac7ae7743fa51fbbb33e61dcc724132653f6a92c021fd7f836998d32ae224cc37296fc8e04b8f795ca7d7e5c00664063a9428","ssdeep":"192:rUgGiKPWF9etKTb+SpGCLnsgq0KJ4X6GTAB:r+X+bnPLnubGX64AB","tlshash":"e1021e5eee0110092337aa745763b6b6fb690093c74785b57fce7290cfb4aa85291f8c","first_seen":"2024-12-12T02:52:21.676043Z","last_seen":"2026-07-19T09:14:30.714406Z","times_seen":9,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrafirmwaremodel.online/NODE_files/app.png","fqdn":"ultrafirmwaremodel.online","domain":"ultrafirmwaremodel.online","tld":"online"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrafirmwaremodel.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 12:08:47 GMT","end":"Wed, 15 Oct 2025 13:08:37 GMT"},"fingerprint":{"sha1":"CA:5C:83:C4:9C:3C:72:80:C1:E1:5D:B8:7E:35:EF:66:29:F7:F0:DD","sha256":"07:4A:1D:C6:55:C7:44:8D:6F:A7:52:BA:0B:77:90:C3:3D:DF:05:65:CB:FF:DC:93:7B:60:9D:D5:77:45:0A:99"}}},"request":{"raw":"GET /NODE_files/app.png HTTP/1.1\r\nHost: ultrafirmwaremodel.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 22:37:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 17753\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"698cd4fed25f7d32ad3045854eb5bec6\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=e5rYwbG1Wln7UZJZFL2mkvxUZi7sAhIHRERvNl%2BWOi1eRQJXGEw%2F6P%2B9X28kqFJBbjtPGht6YNx5ujgOOreU7NivvMAIHtDSGtXk3SYdK9pTEwOxPrFt51ddohcxICJYLPQptV%2BZpnV6FePV\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\ncf-ray: 96db37949e9956c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17753,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"0286f63a580d0b94ee4bcf162cc32b3f","sha1":"a7ed7588e1ef981304b719d6a09cf84a95bf2d37","sha256":"c1269caa50babb81bc33f6bc7310c2bdda099b29a99740e1fc8d63e8f318f85f","sha512":"5bdf9f4b5db6ea51193ff13df7e0f505de4e6ec72803ec5ec654d241523d6c5302c27aa23c288f386b2bd127d290df45d8e34a83ed0c63a1a6077e89958cc05d","ssdeep":"384:xXlOalMfZqy12f8ivns5BWJvwYcHMvHaLLlSZk7WGkZpcMtP+8aIR:dlOqycvnmUvBvHMSZqi9tG8ay","tlshash":"4882ae6ce9f70e4bdeb406516ae0aeff60e7c879bcc439289dd0a0850c2556075e32db","first_seen":"2024-08-19T15:52:57.990763Z","last_seen":"2026-07-19T09:14:30.73723Z","times_seen":10,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:23.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/poppins/v23/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ultrafirmwaremodel.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 06 Aug 2025 21:40:30 GMT\r\nexpires: Thu, 06 Aug 2026 21:40:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 435413\r\nlast-modified: Wed, 23 Apr 2025 16:07:25 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-07-28T15:00:35.771965Z","times_seen":289232,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrafirmwaremodel.online/NODE_files/secure.png","fqdn":"ultrafirmwaremodel.online","domain":"ultrafirmwaremodel.online","tld":"online"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrafirmwaremodel.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 12:08:47 GMT","end":"Wed, 15 Oct 2025 13:08:37 GMT"},"fingerprint":{"sha1":"CA:5C:83:C4:9C:3C:72:80:C1:E1:5D:B8:7E:35:EF:66:29:F7:F0:DD","sha256":"07:4A:1D:C6:55:C7:44:8D:6F:A7:52:BA:0B:77:90:C3:3D:DF:05:65:CB:FF:DC:93:7B:60:9D:D5:77:45:0A:99"}}},"request":{"raw":"GET /NODE_files/secure.png HTTP/1.1\r\nHost: ultrafirmwaremodel.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 22:37:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 24287\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"eb5d824f5e12920236f0444bdc781409\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LGQm9aQE%2Bfeqbyh6rYNXaOG4ffCJBciCy%2FDOcraC34oyaGypc%2FTtP%2Fq8SijxwP5FA%2Fozcrapik9pRHapoDdlI4HnH9SL0Zj6lIzg97SFxdGH8H6cu2p1uE8ezBg7BRMg38lCrdpDp3G5FsoY\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\ncf-ray: 96db37949e9156c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24287,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"37a22f2ed27aad0510d6685fe35dc351","sha1":"adfb409a8098fb5352fb2d049cc03f7d80a0d408","sha256":"78634035fb07707aa756c7405aa1fa26b868700477e2e6fe672d8ddf6f951b82","sha512":"ec7b7ed331f5d78dc2415191fab725aa34bf8e05fa9104335156d3c37a0ea2037b65dee6b36928865ff5dd3ffebb3a2a6edace75fb647358f442475c16526cc4","ssdeep":"384:NpxJNLd3eFQfDCykH2MW/tmdZ5HWxAxfZv6tcVnTklMBWrqL4X48Q8MQFf7:NrJeCNjMu8DaEholuEX4dQB","tlshash":"55b2d10df1f0b2c61eca94e7a24190514564792cbf8767825e868f8ab0c6871c63237a","first_seen":"2024-08-19T15:52:57.98004Z","last_seen":"2026-07-19T09:14:30.749485Z","times_seen":10,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"on-chainfix.com/NODE_files/script.html","fqdn":"on-chainfix.com","domain":"on-chainfix.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.040Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /NODE_files/script.html HTTP/1.1\r\nHost: on-chainfix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T14:56:16.902508Z","times_seen":17581573,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"on-chainfix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrafirmwaremodel.online/NODE_files/image1.jpg","fqdn":"ultrafirmwaremodel.online","domain":"ultrafirmwaremodel.online","tld":"online"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrafirmwaremodel.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 12:08:47 GMT","end":"Wed, 15 Oct 2025 13:08:37 GMT"},"fingerprint":{"sha1":"CA:5C:83:C4:9C:3C:72:80:C1:E1:5D:B8:7E:35:EF:66:29:F7:F0:DD","sha256":"07:4A:1D:C6:55:C7:44:8D:6F:A7:52:BA:0B:77:90:C3:3D:DF:05:65:CB:FF:DC:93:7B:60:9D:D5:77:45:0A:99"}}},"request":{"raw":"GET /NODE_files/image1.jpg HTTP/1.1\r\nHost: ultrafirmwaremodel.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/NODE_files/index.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 Aug 2025 22:37:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9754\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"b52d463550d575433cae3ab4130b6a84\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uWDZl3AHfE59RVG%2BZNlC1iN%2BolEKHXgkj906f67ByvzHhtqr8%2BcCT2vLMTdMTDfsJI79s9GZoLqJJHHyC%2FY7iZauGqF85f21i6AypFOzKedlsiSfoS%2FJFybITa%2BzBULq98zVMWXbNjTKH6jW\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 96db37982b540b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9754,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x675, components 3","md5":"a3534c2fabfb1f975ec6586ddcd518f4","sha1":"2eb07bd13d7defed2b64217b28398c25b5c8556e","sha256":"77d8c1463936dd6785790cef309f68c2a7dfafc19a500f716b630e83d7b41388","sha512":"b217b181657e3bb2067239fa9e144f0ee82d8745e846ac94df443f47040447ce7ab5e7086034809143737fdb932783b28ae0e14a7102ff29546b1058734a6507","ssdeep":"192:9KHBO4YlZ9zCAUfwMDGx3N2ME+vqPTgFdfZgbDZtXx:9cBOJ9jUfrDE3XBUgFjCnx","tlshash":"15129e37eb36e637ca798fb48d5923b3eb239561d389698b1390301d16b10548a03657","first_seen":"2024-08-19T15:52:57.995157Z","last_seen":"2026-07-19T09:14:30.755194Z","times_seen":9,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/poppins/v23/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ultrafirmwaremodel.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7824\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 06 Aug 2025 21:59:49 GMT\r\nexpires: Thu, 06 Aug 2026 21:59:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 434253\r\nlast-modified: Wed, 23 Apr 2025 16:07:25 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7824,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7824, version 1.0","md5":"af4d371a10271dafeb343f1eace762bc","sha1":"6d11d743bc3cfb169d70bc86450f18351dc1a905","sha256":"60bf0aba6526436f3930c58c12047687fbb6bff4dd180cce4613458ed3439ea2","sha512":"98e1d4804a31f0ec40307bb02d7af0e25e1a01f2d0f69676cd55f97f64a8d50ecfd5be05525956c4a80bf0d98810badbb08acb2927cd78963bcdde9f96e25ba1","ssdeep":"192:SvrCMV0T6yUN1NfKPtAqGFNL2kshO5YwMg9eSnUK:SvV0T6pNzSPtCrhsCYwMqeSnUK","tlshash":"44f1ae6ff6ea226ff944537dbc50108431224f92b94f11b61d2b126a77e87c8620b2a9","first_seen":"2023-04-06T18:33:44Z","last_seen":"2026-07-28T15:00:35.856547Z","times_seen":30159,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":234,"dns":0,"connect":28,"send":0,"wait":30,"receive":4,"ssl":203},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"on-chainfix.com/NODE_files/jquery3.6.0.min.html","fqdn":"on-chainfix.com","domain":"on-chainfix.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.624Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /NODE_files/jquery3.6.0.min.html HTTP/1.1\r\nHost: on-chainfix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T14:56:16.902508Z","times_seen":17581573,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"on-chainfix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"on-chainfix.com/NODE_files/jquery.counterup.min.html","fqdn":"on-chainfix.com","domain":"on-chainfix.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.654Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /NODE_files/jquery.counterup.min.html HTTP/1.1\r\nHost: on-chainfix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T14:56:16.902508Z","times_seen":17581573,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"on-chainfix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrafirmwaremodel.online/script.js","fqdn":"ultrafirmwaremodel.online","domain":"ultrafirmwaremodel.online","tld":"online"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrafirmwaremodel.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 12:08:47 GMT","end":"Wed, 15 Oct 2025 13:08:37 GMT"},"fingerprint":{"sha1":"CA:5C:83:C4:9C:3C:72:80:C1:E1:5D:B8:7E:35:EF:66:29:F7:F0:DD","sha256":"07:4A:1D:C6:55:C7:44:8D:6F:A7:52:BA:0B:77:90:C3:3D:DF:05:65:CB:FF:DC:93:7B:60:9D:D5:77:45:0A:99"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: ultrafirmwaremodel.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 22:37:22 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: W/\"00e92dc8551e5539e7f226e16c717dcd\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4cc65AqxG52KI70ErE8MYTxegFQLgkTj6fxdbaD3T5clNqXGhrAnvSBISfkTO9wG0MYL3HIx5gftj5bzKTRP5RVGhirX3rpf4F%2BMJ4wsDuKV8nU7CHoeMBYk2U9OLNGVTGjhjp9R5witcfv5\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 96db37949e9d56c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3476,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"2816a5f1e0a375b8863feb19c3bdbee7","sha1":"739b60c51221474f02d6971226a0ae282335a77e","sha256":"fff2b8191fd27bff9519ff5407cca6ad232d32e25bf902565f10008133221cf0","sha512":"32f743ab5017d604e66e27a4057d9bb6751f8933b5ee5f2e0e02e798c98610ff2c2bba08906af4baa9ed13e0444c6ad0a3a75cc5f18976b5d5d2c368a68ee0c5","ssdeep":"","tlshash":"5b71e9c0229385a44aa39975b791a2e9f011ad23d6c0c133767fc3e48f762d1b5d369f","first_seen":"2024-08-19T15:52:58.009632Z","last_seen":"2026-07-19T09:14:30.747401Z","times_seen":11,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"on-chainfix.com/NODE_files/jquery.waypoints.min.html","fqdn":"on-chainfix.com","domain":"on-chainfix.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.036Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /NODE_files/jquery.waypoints.min.html HTTP/1.1\r\nHost: on-chainfix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T14:56:16.902508Z","times_seen":17581573,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"on-chainfix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/1027.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"3.167.2.28","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:23.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Wed, 04 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"26:4D:86:7B:89:05:0E:D9:C8:97:29:50:1C:69:9B:6D:B0:66:AD:5F","sha256":"81:EE:13:6B:EE:08:15:70:67:BA:F9:88:9F:E2:74:14:00:82:A0:8D:BD:9A:BF:D5:66:A3:7C:B3:9E:5B:60:8A"}}},"request":{"raw":"GET /static/img/coins/32x32/1027.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1759\r\nlast-modified: Mon, 07 Dec 2020 19:06:44 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 11 Aug 2025 06:03:13 GMT\r\netag: \"260aeac4b1626aecd0e88471a14ad8d9\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4e0a1f367f79652e0e7d03fa585de7b2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: u3O-PC4w_T8bL4N_gYV_GewPMoGiME_Wp5jMDalgJji2qJ0wJSbhaA==\r\nage: 73222\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1759,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"260aeac4b1626aecd0e88471a14ad8d9","sha1":"c575ce19a2a34cfacf9c84c04ff896827c65d933","sha256":"51a9972c6f13b5510730dff6c349f812510c778b2f7722f00426c287246c50cf","sha512":"bf1e327dd18483249a0a2bc6fc18e04934f99af93639e74c70f2b2357f1e9e1df4a9432e73835225183021ba50474d2423e806c0d2c82040bbeeefa1212cbc69","ssdeep":"","tlshash":"bd3108965f8423c76f2c056136bfe203db5c18207e7062deed5b7a157a213056d4b36a","first_seen":"2023-04-19T16:22:05Z","last_seen":"2026-07-27T13:32:01.744888Z","times_seen":915,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":120,"dns":95,"connect":4,"send":0,"wait":5,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"on-chainfix.com/NODE_files/jquery3.6.0.min.html","fqdn":"on-chainfix.com","domain":"on-chainfix.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.035Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /NODE_files/jquery3.6.0.min.html HTTP/1.1\r\nHost: on-chainfix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T14:56:16.902508Z","times_seen":17581573,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"on-chainfix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrafirmwaremodel.online/styles.css","fqdn":"ultrafirmwaremodel.online","domain":"ultrafirmwaremodel.online","tld":"online"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrafirmwaremodel.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 12:08:47 GMT","end":"Wed, 15 Oct 2025 13:08:37 GMT"},"fingerprint":{"sha1":"CA:5C:83:C4:9C:3C:72:80:C1:E1:5D:B8:7E:35:EF:66:29:F7:F0:DD","sha256":"07:4A:1D:C6:55:C7:44:8D:6F:A7:52:BA:0B:77:90:C3:3D:DF:05:65:CB:FF:DC:93:7B:60:9D:D5:77:45:0A:99"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: ultrafirmwaremodel.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 22:37:22 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: W/\"2bc85ca7dfa6a1bdd137b0be820a5fbb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bnNEBxvWBTIhzyEJBPk8z1y%2FlV59jBcxZ39asM1DWBiPK44YPBmAZvhVaCvaGO0QtNURmptRwJkAMM30KJMz0xrXjoQnXxy7zoyM%2B9kLw3Q5sFPasyMXZTg8VTxLEUzeGjTc8U87hCsrEHYy\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 96db37948e8456c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8480,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"79ecf583c8349f46a02f705ca56cc44a","sha1":"e2fe6483893a99583878faa649290848e9809432","sha256":"25debaae0135a42fbcdd5ebf7df63f55686a9191bf7b76acdc1d698f1c8ef8ef","sha512":"bdf00d22718088e59bfd00a13424090b295f3498a49bc538a194fabff1a4e2cd3bc1f6506b1f3a7d360f6ebe8e26806094fcd9d7cbe1d92b1bd6429bf34cdae3","ssdeep":"192:3C+mbIlVrbf9vamxa7ZHO3Pw9bXVghMM3K4DCqEEeAN39geOeG:3Frbf9gHwGw4","tlshash":"be023312d20710c762b31a745ba50221eb3935f0d60e427b7fe452059dba3386e61ebf","first_seen":"2024-12-12T02:52:21.672208Z","last_seen":"2026-07-19T09:14:30.70119Z","times_seen":9,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrafirmwaremodel.online/NODE_files/bootstrap.bundle.min.js","fqdn":"ultrafirmwaremodel.online","domain":"ultrafirmwaremodel.online","tld":"online"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrafirmwaremodel.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 12:08:47 GMT","end":"Wed, 15 Oct 2025 13:08:37 GMT"},"fingerprint":{"sha1":"CA:5C:83:C4:9C:3C:72:80:C1:E1:5D:B8:7E:35:EF:66:29:F7:F0:DD","sha256":"07:4A:1D:C6:55:C7:44:8D:6F:A7:52:BA:0B:77:90:C3:3D:DF:05:65:CB:FF:DC:93:7B:60:9D:D5:77:45:0A:99"}}},"request":{"raw":"GET /NODE_files/bootstrap.bundle.min.js HTTP/1.1\r\nHost: ultrafirmwaremodel.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 22:37:22 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: W/\"0d1608eb51f63288a5f02a35adae1c72\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rFB7b%2F2iC6KJeTNiUod7Us6cLPCqqUU0AoTBpfbMXlIWHWdVoUyCQ%2FMW1yY7Wk5wt48XVyUkrY7IJOsPM5sNtcLsD%2Byt6L87xrAt0MMsbptJ7uL3wgflybUOmh74eQ2oVrfr%2BVDKdXFoHWvB\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 96db37949e9f56c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78129,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"7ccd9d390d31af98110f74f842ea9b32","sha1":"a85e681624c91a106a514c31eacf80de817b2cc3","sha256":"f5210fa3e7f0245a4c51eb7f280092c0ef99fdd28c45e17dab8cc5854fdf4fd3","sha512":"a5ac783258178c710f7c2c1c24b4218a063bf8df2bb7a6d5bd62c5c9432ec5286fd7bd17e774d1cc63e63e4666181864fa38a447c581338ca5ec0f563071eabe","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZY:T36WJr9ixi","tlshash":"a873c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-07-28T15:26:01.602976Z","times_seen":18785,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ultrafirmwaremodel.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 06 Aug 2025 21:38:48 GMT\r\nexpires: Thu, 06 Aug 2026 21:38:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 435514\r\nlast-modified: Wed, 23 Apr 2025 16:05:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-07-28T14:54:58.718368Z","times_seen":384598,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":171,"dns":1,"connect":26,"send":0,"wait":16,"receive":2,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"on-chainfix.com/NODE_files/script.html","fqdn":"on-chainfix.com","domain":"on-chainfix.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:22.718Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /NODE_files/script.html HTTP/1.1\r\nHost: on-chainfix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T14:56:16.902508Z","times_seen":17581573,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"on-chainfix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/1839.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"3.167.2.28","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrafirmwaremodel.online/","date":"2025-08-11T22:37:23.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 03 Feb 2025 00:00:00 GMT","end":"Wed, 04 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"26:4D:86:7B:89:05:0E:D9:C8:97:29:50:1C:69:9B:6D:B0:66:AD:5F","sha256":"81:EE:13:6B:EE:08:15:70:67:BA:F9:88:9F:E2:74:14:00:82:A0:8D:BD:9A:BF:D5:66:A3:7C:B3:9E:5B:60:8A"}}},"request":{"raw":"GET /static/img/coins/32x32/1839.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ultrafirmwaremodel.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 619\r\nlast-modified: Thu, 17 Feb 2022 08:19:34 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 11 Aug 2025 03:58:16 GMT\r\netag: \"b0abdaee81de6fc0c1fb3bbb150d752f\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4e0a1f367f79652e0e7d03fa585de7b2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: UQzbAZiG-Kd9qNX8wVATp4tUc2xdJ7qmMo2-M63VUg8ccmsei2sDqA==\r\nage: 69395\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":619,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"b0abdaee81de6fc0c1fb3bbb150d752f","sha1":"e090189b43a9be7cacc2873045e0ab41dfcc5bc7","sha256":"1cddd83c4a977e459b4294d3fc77c28f77e51bfdfb6f468528d56f487a26e6a8","sha512":"dd3927e7750b3f66a0b23a626505d013048bccdbb0f535f4be7e251fade10dce0f3ac987c429b6c8179a6a1d7f72efebd48b9081417327d0c1a27a5e02763d30","ssdeep":"","tlshash":"4df0629bc6d00d88ea734a3e31d7a869fce10724c2761004ba1b88ff180a20c256934b","first_seen":"2023-05-04T14:40:13Z","last_seen":"2026-07-27T13:32:01.68868Z","times_seen":506,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":118,"dns":96,"connect":1,"send":0,"wait":4,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrafirmwaremodel.online/","fqdn":"ultrafirmwaremodel.online","domain":"ultrafirmwaremodel.online","tld":"online"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-11T22:37:21.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrafirmwaremodel.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 12:08:47 GMT","end":"Wed, 15 Oct 2025 13:08:37 GMT"},"fingerprint":{"sha1":"CA:5C:83:C4:9C:3C:72:80:C1:E1:5D:B8:7E:35:EF:66:29:F7:F0:DD","sha256":"07:4A:1D:C6:55:C7:44:8D:6F:A7:52:BA:0B:77:90:C3:3D:DF:05:65:CB:FF:DC:93:7B:60:9D:D5:77:45:0A:99"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ultrafirmwaremodel.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 22:37:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ddO1XmtdopHPYjbyqedO1IkwYAHyW2alg7Z99hw32DA7Adm8pPT2POb6pQalH%2Fjr8n%2FaapzHsOqWafz32kn57tHH8NmrkrD2zsAo%2BGr%2FDTpszQiBO44wt8jGaC0Loy5Y%2B2Q8jGGwzX0aJXb8\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 96db37921b7256c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Materialize CSS:1.0.0","description":"Materialize CSS is a front-end framework that helps developers create responsive and mobile-first web applications. It is based on Google's Material Design guidelines.","website":"https://materializecss.com","common_platform_enumeration":"","icon":"Materialize CSS.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":26519,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"2fdfe5b02952071fa99ae68f96a7c9f8","sha1":"45688cf87a44c0905d86c5723f2598febff998e9","sha256":"682beb23e0898e3a6e8907542a1cf1d74f36f09c8e70d0c69dcd51069b0d0cb2","sha512":"23e14fde18cd5c1f04c8da9c18af824b5ad91c6f7c138b3083e6917d4575377b83c6b7618badb0a242994c81544c25110636523ee6bf2ec144fd939e57fbc2be","ssdeep":"192:UNJbshcthSJAflA8qNjvS8/VKTUNK3cQ+RPDEqFuUvOuBYEkO:UNShIh6A9A8Ejt/vxpwoJR/","tlshash":"92c2cb2455c12873403b8284a8325b9affa24147e72f491437fc17cb6fbbd88c8a7687","first_seen":"2025-01-28T05:59:48.594247Z","last_seen":"2026-06-29T02:27:38.904039Z","times_seen":17,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":107,"dns":94,"connect":1,"send":0,"wait":236,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
