{"report_id":"439e6a93-b542-4a60-8f4f-a20aaad06304","version":6,"status":"done","tags":[],"date":"2026-04-27T05:31:18Z","url":{"schema":"https","addr":"kavaverifybot.pages.dev","fqdn":"kavaverifybot.pages.dev","domain":"kavaverifybot.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.204","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kavaverifybot.pages.dev/","fqdn":"kavaverifybot.pages.dev","domain":"kavaverifybot.pages.dev","tld":"pages.dev"},"title":"Kava | Leading The World To Web3","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T15:58:05.640226Z","times_seen":17710322,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"kavaverifybot.pages.dev","fqdn":"kavaverifybot.pages.dev","domain":"kavaverifybot.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.204","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-01T05:31:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":3,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-27T05:30:54Z","timestamp":1777267854,"ip_dst":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":36256,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-04-27T05:30:54.917045+0000\",\"flow_id\":1496241859907575,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.10\",\"src_port\":36256,\"dest_ip\":\"188.114.97.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"kavaverifybot.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":925,\"bytes_toclient\":3549,\"start\":\"2026-04-27T05:30:54.905207+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-27T05:30:57Z","timestamp":1777267857,"ip_dst":{"addr":"173.244.207.30","port":443,"asn":13213,"as":"UK-2 Limited","country":"Germany","country_code":"DE"},"ip_src":{"addr":"Client IP","port":37880,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2026-04-27T05:30:57.848947+0000\",\"flow_id\":750369249555739,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.10\",\"src_port\":37880,\"dest_ip\":\"173.244.207.30\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":4434,\"start\":\"2026-04-27T05:30:57.783643+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-27T05:30:57Z","timestamp":1777267857,"ip_dst":{"addr":"173.244.207.30","port":443,"asn":13213,"as":"UK-2 Limited","country":"Germany","country_code":"DE"},"ip_src":{"addr":"Client IP","port":37894,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2026-04-27T05:30:57.849996+0000\",\"flow_id\":818543265445293,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.10\",\"src_port\":37894,\"dest_ip\":\"173.244.207.30\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":4434,\"start\":\"2026-04-27T05:30:57.783789+0000\"}}"}],"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-27","alert":"Hunting_JS_WebAssembly","trigger":"kavaverifybot.pages.dev/7e7220e480590b.e9afff2b8df%20(5).js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"kavaverifybot.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"eth.meowrpc.com","ip":{"addr":"172.67.70.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-04","domain_rank":3310557,"first_seen":"2023-05-08T18:17:57Z","last_seen":"2026-04-27T02:34:07.229473Z","alert_count":0,"request_count":2,"received_data":1549,"sent_data":1039,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"kavaverifybot.pages.dev","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-04-27T05:31:20.53544Z","last_seen":"2026-04-27T05:31:20.53544Z","alert_count":8,"request_count":7,"received_data":3249014,"sent_data":3243,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ethereum.publicnode.com","ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":2041631,"first_seen":"2022-10-25T06:21:40Z","last_seen":"2026-04-26T14:11:01.110168Z","alert_count":0,"request_count":2,"received_data":1367,"sent_data":1055,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rpc.ankr.com","ip":{"addr":"173.244.207.30","port":443,"asn":13213,"as":"UK-2 Limited","country":"Germany","country_code":"DE"},"domain_registered":"2007-04-23","domain_rank":541361,"first_seen":"2021-10-24T12:41:06Z","last_seen":"2026-04-25T01:42:20.97358Z","alert_count":0,"request_count":2,"received_data":1467,"sent_data":1039,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kavaverifybot.pages.dev/7e7220e480590b.e9afff2b8df%20(5).js","fqdn":"kavaverifybot.pages.dev","domain":"kavaverifybot.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7727db82c6a886c5fb910f1ce593b8e","sha1":"f99f274f8a42357daa9f3c83cf5de7c51aea4307","sha256":"92bb6932f2fc36bb240adef23833024ba1e76275399629356a5e64cb75495fab","sha512":"5e31924d5dfb1308c49e29e5009eb49a6e1db84d6b76f1fa93f9a18f2631dfc29ca8142360fd02652a23bc2ebddbe0d38ab619a9eabca09fe9acd9f771be31ec","ssdeep":"24576:JAeinnl7iyBbocrJ2UxyxmeJcp7JJOH3BujOoCEmNnb88Kwb1Kfzrs1FiUL/IzPz:c","tlshash":"d1c5bfb876047de6667f576bda96acdc13b617239acba4cc8064b7c305a3375fe02804","size":2585290,"data":"","first_seen":"2024-08-19T13:14:38.71644Z","last_seen":"2026-04-27T05:31:22.458456Z","times_seen":8,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-27","alert":"Hunting_JS_WebAssembly","trigger":"kavaverifybot.pages.dev/7e7220e480590b.e9afff2b8df%20(5).js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"kavaverifybot.pages.dev/","fqdn":"kavaverifybot.pages.dev","domain":"kavaverifybot.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9d9e963a2b7dccf4667bf3129468f29d","sha1":"7971edfec4687fc439a8a6117b336ae9876b81f0","sha256":"7188857434dc71adb1f27c9825c2953ae33bb6942928b3f681214d97db6bffc4","sha512":"340d0f468fcca7c8df2810c5e3bbadd575cc6ec492b2a5ddfc705ddaff4c88d7af131e3e197534c04cafcb5c557351525511f65c1a96c8994832761898af720a","ssdeep":"","tlshash":"2b51fd191ed042a50bcb0fbb273be8c1cde4ed4f09828057d202bc987c94a51f9c67b4","size":2645,"data":"","first_seen":"2024-02-27T06:29:17Z","last_seen":"2026-06-03T10:24:43.076533Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"eth.meowrpc.com/","fqdn":"eth.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"172.67.70.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavaverifybot.pages.dev/","date":"2026-04-27T05:30:57.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 13:57:04 GMT","end":"Sat, 04 Jul 2026 14:57:01 GMT"},"fingerprint":{"sha1":"85:52:EE:75:CD:65:E7:8C:91:4E:D5:62:4F:5F:95:5B:FA:E3:D3:F2","sha256":"FF:7D:9E:82:D7:74:6C:AA:45:C3:DF:90:E6:C1:C8:95:1F:F8:84:3D:FF:FE:C9:F8:71:A9:70:43:3F:B0:FD:5C"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: eth.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kavaverifybot.pages.dev/\r\nContent-Type: application/json\r\nContent-Length: 192\r\nOrigin: https://kavaverifybot.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":192,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x941E09C78cc72b5C264c17BA6327c06A0Faad6e5\",\"data\":\"0xc2fb26a629690e2388a22f16d924e4a645cd2b40a8e24c414d664ad7ea957b73\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 27 Apr 2026 05:30:57 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QZPLhFzlYVvV9Y8IwLwsyrTVZyLPZEG1%2FXFhzwIVn4Y64PccilPh73BPix32UUPE9sTi3zK3sQ5z98n7Aeo81Y46bAXx0jRooIry03pwFdzFpg56a4fx5lP9n0AZmqxPJQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f2b702fcc89b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e46902157aa64abcdc41f29ace8b171a","sha1":"b959cf3eceb9eee47817435a4c36f0792aa15811","sha256":"36edf520b814be5fc0d5360dc0f6ae1e9ed28f47bcc63fe6ede8285bfe2ce982","sha512":"49d1d832b1949ee103d35f061172658ef17bc4970391dca16e61aabfce51f02db86daa7cbe9d7657265e1ebf17916c347233226eedfe065aacadabc4409ce6c5","ssdeep":"","tlshash":"c5b01220514e2b30715a49067e0d394d57f099f104507f031c0c8a09250951790c2130","first_seen":"2026-02-05T07:43:22.648531Z","last_seen":"2026-08-04T05:41:38.479166Z","times_seen":231,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kavaverifybot.pages.dev/favicon.ico","fqdn":"kavaverifybot.pages.dev","domain":"kavaverifybot.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kavaverifybot.pages.dev/","date":"2026-04-27T05:30:56.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavaverifybot.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 01:30:58 GMT","end":"Sat, 18 Jul 2026 02:30:49 GMT"},"fingerprint":{"sha1":"E8:64:86:41:2E:9C:00:1C:C2:79:B1:FC:A4:8A:20:91:AE:E9:53:CC","sha256":"4F:70:C8:EE:DF:58:01:A9:7E:5D:9C:3B:39:D1:E0:D3:96:E0:D9:8C:3A:25:FA:67:A1:C7:0B:61:19:30:D6:5E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kavaverifybot.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kavaverifybot.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 27 Apr 2026 05:30:56 GMT\r\ncontent-type: null\r\ncontent-length: 102682\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"2bb980f0fcdeef4a70badfd60638f284\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lFEMkUE7hwlfS9zGjg5AuGX75oMFTOrgNaqCaS9tbvucU35zxbNdlMjfMs8JX96h9A4RUHi38zdQgXXQoGKdEATdicDDCZCoUypJHtPMBoE6TxrPGqzmTDOOnwR8L8kNPrpxxCWD7cztwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f2b7024ea6c5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102682,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"9c232eb2b0ccd24da98080729fc7051c","sha1":"b6abe313d3af1a1f82567bf3cdee2423008b38e6","sha256":"ae78c72f3443da94c27cf196b02c562ec76e21851fcc932628ba9e3fe75d85c3","sha512":"2de60f41f7219d14c7d7ae05cbc8d3c3add416ca94fb6b09c7d3698ba0e24f4345c25cca5d3a6c2a2a34c7f81d7626b2e96efaece921157390a100a63e4dca0b","ssdeep":"192:12ksuLUrg0M14LjPzkg4oAy7X7oAi7X7wE4PQ8LnnjWnD0qWPngnjE1uKFAaxhBv:oDvdLggzLcLsQAjgDE/ejE1JASBN80vB","tlshash":"3da3b3a43205ecc5cbe3e8b609e6fe88145f7c19aab0c50671f63feb2279124507af41","first_seen":"2023-12-31T16:33:32Z","last_seen":"2026-04-27T05:31:22.440205Z","times_seen":15,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"kavaverifybot.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavaverifybot.pages.dev/Kava-Logotype.svg","fqdn":"kavaverifybot.pages.dev","domain":"kavaverifybot.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kavaverifybot.pages.dev/","date":"2026-04-27T05:30:56.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavaverifybot.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 01:30:58 GMT","end":"Sat, 18 Jul 2026 02:30:49 GMT"},"fingerprint":{"sha1":"E8:64:86:41:2E:9C:00:1C:C2:79:B1:FC:A4:8A:20:91:AE:E9:53:CC","sha256":"4F:70:C8:EE:DF:58:01:A9:7E:5D:9C:3B:39:D1:E0:D3:96:E0:D9:8C:3A:25:FA:67:A1:C7:0B:61:19:30:D6:5E"}}},"request":{"raw":"GET /Kava-Logotype.svg HTTP/1.1\r\nHost: kavaverifybot.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kavaverifybot.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 27 Apr 2026 05:30:56 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8JMnTZqaQs479mpdpckD28jLcfN%2FYxH%2Fi4%2B0MpCWKFKl0jUITUCVMm5MebSH5V%2BA5KPI8uzef2jmKf2f%2FuqlidkOySHKJ5uJLQyTL63dN%2B3nFulV4ruOeJuXgBHI4nFknnNWjFhHdJuPDg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"39dc255407967ae4947500c601f337c9\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f2b7024fa755689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1634,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f8f51df54a42a4bca2884ed525f493fe","sha1":"6aa41ed5f858b68e84874f709dfd5caaa196f4bc","sha256":"232b602f8ef37b22827d5b7e35f5fc589b85518202696ad55959d390c1afdc6a","sha512":"36f03369c3e907cfa7995562ca3e79a498d5bce894b190300c95455e21f0d8b4d5d290ba18b77c333bd188b4dd0a7d80e518ea1ea69cafee0eb0224386c074ea","ssdeep":"","tlshash":"6131025683419afeed06422ad771158932f15c96f8506ae9d9f71423f81dccc81a07ae","first_seen":"2024-05-23T09:30:34Z","last_seen":"2026-04-27T05:31:22.443623Z","times_seen":13,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"kavaverifybot.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth.meowrpc.com/","fqdn":"eth.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"172.67.70.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavaverifybot.pages.dev/","date":"2026-04-27T05:30:57.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 13:57:04 GMT","end":"Sat, 04 Jul 2026 14:57:01 GMT"},"fingerprint":{"sha1":"85:52:EE:75:CD:65:E7:8C:91:4E:D5:62:4F:5F:95:5B:FA:E3:D3:F2","sha256":"FF:7D:9E:82:D7:74:6C:AA:45:C3:DF:90:E6:C1:C8:95:1F:F8:84:3D:FF:FE:C9:F8:71:A9:70:43:3F:B0:FD:5C"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: eth.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://kavaverifybot.pages.dev/\r\nOrigin: https://kavaverifybot.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 27 Apr 2026 05:30:57 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: authorization,content-type,dnt,keep-alive,user-agent,x-requested-with,if-modified-since,cache-control,range,x-api-key\r\naccess-control-allow-origin: *\r\nallow: POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CoMNMXlgwBsj7Gp3jqxLlpA6ncu%2FnUEnJ8VcuKMqVPWwzaVlX9%2BQwZw%2BRzAtT1378HLk8Sy99jk%2FvgkM9up28UQj8zd8JIG%2FHCVgVEKNdg4Kaa2hPRcH3CvUq5IOmcsXUw%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9f2b702f1c0cb4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T15:58:05.640226Z","times_seen":17710322,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":54,"dns":19,"connect":6,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereum.publicnode.com/","fqdn":"ethereum.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavaverifybot.pages.dev/","date":"2026-04-27T05:30:57.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 23:57:50 GMT","end":"Fri, 10 Jul 2026 00:57:42 GMT"},"fingerprint":{"sha1":"FA:41:42:B5:59:CD:F2:75:9C:78:CB:D0:5E:1F:F6:83:58:D2:EE:5F","sha256":"07:86:2C:E3:AD:0C:A4:31:FD:57:1E:C8:01:EA:80:5B:24:9B:5E:3F:7B:09:9D:D4:1B:FE:A9:2B:34:AC:3E:B4"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: ethereum.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kavaverifybot.pages.dev/\r\nContent-Type: application/json\r\nContent-Length: 192\r\nOrigin: https://kavaverifybot.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":192,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x941E09C78cc72b5C264c17BA6327c06A0Faad6e5\",\"data\":\"0xc2fb26a629690e2388a22f16d924e4a645cd2b40a8e24c414d664ad7ea957b73\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 27 Apr 2026 05:30:57 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 2\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: 9f2b702f6f2d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a928c797e5e47915f28df6242333bc2f","sha1":"2317258029abcb5ca312770c0469c360a890426e","sha256":"d12853d2762c73427b26d8403f4c5940d58faea5fe3e69097124f53ff4b071df","sha512":"2f93eecd1410ea6e1fdb98a5fe4bb8c71356f5830308b6105fd663554a75f1f288cf5c89fae16db6fb8f6cfd18f63f9ba36a048476ae1a6e05046968a5cb0f00","ssdeep":"","tlshash":"c1d02450404d0730d1154d0050c47c00301077cd0dc01f4101cc1c4443ccc03ff15337","first_seen":"2024-04-19T14:51:38Z","last_seen":"2026-06-06T08:39:50.593521Z","times_seen":227,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/eth","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"173.244.207.30","port":443,"asn":13213,"as":"UK-2 Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavaverifybot.pages.dev/","date":"2026-04-27T05:30:58.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shark.multi-rpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 11:28:53 GMT","end":"Sun, 21 Jun 2026 11:28:52 GMT"},"fingerprint":{"sha1":"AE:1D:6B:AA:47:F3:E6:57:DE:8E:AE:96:E2:57:FD:59:C7:98:35:45","sha256":"E7:E9:5B:8C:16:7D:7C:6C:3F:CA:EE:53:6B:E2:1C:37:99:35:61:A9:23:2A:B7:B5:21:15:EE:7D:F2:99:FF:57"}}},"request":{"raw":"POST /eth HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kavaverifybot.pages.dev/\r\nContent-Type: application/json\r\nContent-Length: 192\r\nOrigin: https://kavaverifybot.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":192,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x941E09C78cc72b5C264c17BA6327c06A0Faad6e5\",\"data\":\"0xc2fb26a629690e2388a22f16d924e4a645cd2b40a8e24c414d664ad7ea957b73\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 27 Apr 2026 05:30:58 GMT\r\ncontent-type: application/json\r\ncontent-length: 229\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version,x-ton-client-version,x-client-name,x-client-version\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":229,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"42e136a22281d105bd21fa496816706c","sha1":"bc02950079004b0d4f4bea3888dfd4517cddeeff","sha256":"ede226c79ae326ce9e4b099e9f4dbb4e3d7807da2b793bdfadfafeeb84d7175a","sha512":"a41403da8b9e698eb2823bbe0925160b68682c55d4c64e5c8b27193f8fd8bf4fd118179d26eadb446ed41c2c9c12d46523b6f5094caadaae8a03ba3c1d6bade5","ssdeep":"","tlshash":"33d02313c6470537e34f4633371567c4f559705071105f1b4e1c0315024f97b0255351","first_seen":"2025-04-07T11:34:31.00119Z","last_seen":"2026-08-03T19:13:31.377038Z","times_seen":3017,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kavaverifybot.pages.dev/","fqdn":"kavaverifybot.pages.dev","domain":"kavaverifybot.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-27T05:30:54.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavaverifybot.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 01:30:58 GMT","end":"Sat, 18 Jul 2026 02:30:49 GMT"},"fingerprint":{"sha1":"E8:64:86:41:2E:9C:00:1C:C2:79:B1:FC:A4:8A:20:91:AE:E9:53:CC","sha256":"4F:70:C8:EE:DF:58:01:A9:7E:5D:9C:3B:39:D1:E0:D3:96:E0:D9:8C:3A:25:FA:67:A1:C7:0B:61:19:30:D6:5E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kavaverifybot.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 27 Apr 2026 05:30:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GaeomkChmFh05c6bUSSTOhuhzC1%2Fb0y2vLkuufBQKMJsPDuteRN%2B2k8pvZPsBuJ4JjqyiIse6NQguPNWUA3pJKA741N2A%2FxKifEvnwWBKAxAfhiaYsLNWWAO%2FLozqwuvGG0pNVTXpN89GQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f2b701d6fbc56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29967,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23727)","md5":"c460ff776a5a011276619a71d7971897","sha1":"70e79d625d634c7a42599bebfd87c383b0f58573","sha256":"e8c1a7fb3ba09281c2994b49caa3b41886d04d90ac236bc87a1d65c804e73a8c","sha512":"c857c7942778f9e12d79e29685b8fa300a4857a5ee8386bf7f2fdf14cbbad1613db3e753cf7d6dbba1e84d9f4311926a233eb92ec771da7b2dd1c895a6bd715a","ssdeep":"384:M2hvboRBD2IrhsvFAFPAtmQu3Mu/ofwcLgM:9hvboRl2Ym1G/ozLD","tlshash":"ded23c91ae88e017f66b862e56c0f54875d9e50bfdf3089df118d0408fc7e5e2ab92b4","first_seen":"2025-05-31T21:57:37.032567Z","last_seen":"2026-04-27T05:31:22.449937Z","times_seen":7,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":82,"dns":46,"connect":1,"send":0,"wait":152,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"kavaverifybot.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavaverifybot.pages.dev/kava-network-dabd16c98b722ced07d66f0.366eb10a1.css","fqdn":"kavaverifybot.pages.dev","domain":"kavaverifybot.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kavaverifybot.pages.dev/","date":"2026-04-27T05:30:55.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavaverifybot.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 01:30:58 GMT","end":"Sat, 18 Jul 2026 02:30:49 GMT"},"fingerprint":{"sha1":"E8:64:86:41:2E:9C:00:1C:C2:79:B1:FC:A4:8A:20:91:AE:E9:53:CC","sha256":"4F:70:C8:EE:DF:58:01:A9:7E:5D:9C:3B:39:D1:E0:D3:96:E0:D9:8C:3A:25:FA:67:A1:C7:0B:61:19:30:D6:5E"}}},"request":{"raw":"GET /kava-network-dabd16c98b722ced07d66f0.366eb10a1.css HTTP/1.1\r\nHost: kavaverifybot.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kavaverifybot.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 27 Apr 2026 05:30:55 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EOyycBi8ZncdpaaWesP67HsWZv192RPQ9DpEkTfWTfErUM9yfTAngYZ%2FLCWv5mRWpknKtAulibQi6kVrYlyZ0QuG6tElqeDGun45uMk7VfV4WJ%2FegWd9f8cAxXxbSP7KysbiTRc%2BzN32IA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f09d63716278e4d7348014774f5b73a2\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f2b701f6e515689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":489155,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (26947), with CRLF line terminators","md5":"9e563efd3e336a217a163526f548a42b","sha1":"5e172ba638e83213e1d574c0b9b967bbb323ea51","sha256":"0fafa387e1b4aaa617aec0ff61e91303faec6f727f75e9548116e066b60e3652","sha512":"c9962895e62e9903e0df060dfa4ffc4fad8c57c79215e4479e0ea40f866aa9044c7958e590a62cd1f90c23caa68c4f442a6c8f4016510784e8a528d6c82c2e7a","ssdeep":"3072:BBYDKPKfeGuDNv02aBTAYtFf7Bq7LhXs5Euc9:jCKPKfeGu8TA0tBqxXs5Euc9","tlshash":"7ba4016a95053204213799e48ba07b1ae3f14027cb0a36e57dd2d44ac3c6fc676b6efd","first_seen":"2024-08-19T13:14:38.723817Z","last_seen":"2026-04-27T05:31:22.452407Z","times_seen":10,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"kavaverifybot.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavaverifybot.pages.dev/modal-12-seed.css","fqdn":"kavaverifybot.pages.dev","domain":"kavaverifybot.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kavaverifybot.pages.dev/","date":"2026-04-27T05:30:55.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavaverifybot.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 01:30:58 GMT","end":"Sat, 18 Jul 2026 02:30:49 GMT"},"fingerprint":{"sha1":"E8:64:86:41:2E:9C:00:1C:C2:79:B1:FC:A4:8A:20:91:AE:E9:53:CC","sha256":"4F:70:C8:EE:DF:58:01:A9:7E:5D:9C:3B:39:D1:E0:D3:96:E0:D9:8C:3A:25:FA:67:A1:C7:0B:61:19:30:D6:5E"}}},"request":{"raw":"GET /modal-12-seed.css HTTP/1.1\r\nHost: kavaverifybot.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kavaverifybot.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 27 Apr 2026 05:30:55 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=75HybbLIdAsJoplpBVm2ZGNb00TdDQpJnAXBfGgCsb6vEJP6lPQ4azupUGRUNaLc369kgYaXnSpomVghBlFETRy8cRiN8SCAcQjC90a%2FYfvOV%2BHsFqbCA4o9S8DqSAid%2FFjVZApyh5Lj%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3d03d9348228e0f0f028c2bff50ac7ed\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f2b701f6e525689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29381,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (29381), with no line terminators","md5":"e3e81fcf59ccd09e58a6b2d236358763","sha1":"a0af6da6b9d6cd063a0d15746fa66cdb80e2ce98","sha256":"3457317dd30b5da56a84c62342b66e60acaaa1641b210916f6c23216b558b4cd","sha512":"b47fd79c1639485acad99c9b1fc17f3726b8abba2f9a1a70f30175dcdccb15f3a88f16353e6e44a799952b19652e22184405bef3e3403cdd4a4b91b8fbca62f1","ssdeep":"192:nJMhQ4kbpen//mz0aMaJtIKLZDcxPVBqMZiS0RBacpyG3x71rw6ICoH:naklennMMZKFAxPVBqMInaeNBCCoH","tlshash":"0cd22b91ba48e117f6aa862f55c0f94c75d9e60bfcf30d69e420d0008ed7d6f2a792e4","first_seen":"2024-08-13T22:13:15Z","last_seen":"2026-08-04T05:40:10.04431Z","times_seen":254,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"kavaverifybot.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavaverifybot.pages.dev/popup-5.css","fqdn":"kavaverifybot.pages.dev","domain":"kavaverifybot.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kavaverifybot.pages.dev/","date":"2026-04-27T05:30:55.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavaverifybot.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 01:30:58 GMT","end":"Sat, 18 Jul 2026 02:30:49 GMT"},"fingerprint":{"sha1":"E8:64:86:41:2E:9C:00:1C:C2:79:B1:FC:A4:8A:20:91:AE:E9:53:CC","sha256":"4F:70:C8:EE:DF:58:01:A9:7E:5D:9C:3B:39:D1:E0:D3:96:E0:D9:8C:3A:25:FA:67:A1:C7:0B:61:19:30:D6:5E"}}},"request":{"raw":"GET /popup-5.css HTTP/1.1\r\nHost: kavaverifybot.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kavaverifybot.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 27 Apr 2026 05:30:55 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fqoNnJUp%2BSJZXaOsNZlGhLdYmEoJo3w9Wzz707EuJ1dEHAbescxR47oBYjynDo%2BZ2ryYq%2F0CeARuW%2BUBXYc5DtlhV%2BSjuKbMRdpJox5AsMhG6hFeutNqRPAdcvzvdMgu6zQEEB1HvtYHQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"823205a553ce6909de8f71d76d635f28\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f2b701f6e535689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5482,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (5482), with no line terminators","md5":"43b86b27798d12165ecf5d9b697ab62d","sha1":"9be143e23a74407cd524f548d246a8388a6eb86d","sha256":"097e519f82492106c447efefa79ca18d10f7a84f4886011bde8c3d34a50d8fee","sha512":"e0af6c06d14ffee36412edef4bf3c1e3f890a26ca19058fb7be175071af5f8f5166402c10d94bb3b029485687b46e77b6b120163a4b4d6b0b4aed119fc42974d","ssdeep":"96:L84kial2EmqJ/W074kTasXEtqJMWk5fdkwPia3IO71Iks4fKdQO/+Ri:L8/l2EPJ/W0LGsXEUJMWYmwqaz71Id4u","tlshash":"53b1333114289448e6b3cc6235cdaf5b3019f012e5a61a2bfe2d166dcedb47b23f5b18","first_seen":"2025-05-31T21:57:37.02455Z","last_seen":"2026-04-27T05:31:22.455421Z","times_seen":9,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"kavaverifybot.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavaverifybot.pages.dev/7e7220e480590b.e9afff2b8df%20(5).js","fqdn":"kavaverifybot.pages.dev","domain":"kavaverifybot.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kavaverifybot.pages.dev/","date":"2026-04-27T05:30:55.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavaverifybot.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 01:30:58 GMT","end":"Sat, 18 Jul 2026 02:30:49 GMT"},"fingerprint":{"sha1":"E8:64:86:41:2E:9C:00:1C:C2:79:B1:FC:A4:8A:20:91:AE:E9:53:CC","sha256":"4F:70:C8:EE:DF:58:01:A9:7E:5D:9C:3B:39:D1:E0:D3:96:E0:D9:8C:3A:25:FA:67:A1:C7:0B:61:19:30:D6:5E"}}},"request":{"raw":"GET /7e7220e480590b.e9afff2b8df%20(5).js HTTP/1.1\r\nHost: kavaverifybot.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kavaverifybot.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 27 Apr 2026 05:30:55 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OR7IqxqJ9T6M%2BVcGUvMa%2F%2BpTKFOKed8rPTIqqEcW3AizUvU4dGQpik2alD3VBUVQkF9Y8hUUQ02UbxLnHOGzQKto7iORT3n%2BZcFMDgh4yOrX5xupKC%2BW6aQdzglHCnWabiqKtGe8vaVRnw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"982d0f0af2fb8c34e6360933af887645\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f2b701f6e545689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2585290,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (63721)","md5":"972c152dd00d7ee805ad5555a00a682f","sha1":"c5b22320b29221e3158eaa430e4a7d9dd9a0556f","sha256":"b9abb26c2cacddfac6d7e85249fcefa6f35c018074ece66a008a993d477b5ed6","sha512":"7fb8c721f98bf647feab5f079f06afcd6c29804aa699ff8756bb64a25e385614830de1fff0db9ee6b19b7250e8a6c83501f75160ea488d2e60ca678d61dfa7b0","ssdeep":"24576:JAeinnl7iyBbocrJ2UxyxmeJcp7JJOH3BujOoCEmNnb88Kwb1Kfzrs1FA:U","tlshash":"3f25bfb876047dd66a7f476bda96addd13b617238acba4cc8064b7c305a3375fe02804","first_seen":"2025-10-19T08:56:05.318242Z","last_seen":"2026-04-27T05:31:22.456973Z","times_seen":5,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-27","alert":"Hunting_JS_WebAssembly","trigger":"kavaverifybot.pages.dev/7e7220e480590b.e9afff2b8df%20(5).js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"kavaverifybot.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/eth","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"173.244.207.30","port":443,"asn":13213,"as":"UK-2 Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavaverifybot.pages.dev/","date":"2026-04-27T05:30:57.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shark.multi-rpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 11:28:53 GMT","end":"Sun, 21 Jun 2026 11:28:52 GMT"},"fingerprint":{"sha1":"AE:1D:6B:AA:47:F3:E6:57:DE:8E:AE:96:E2:57:FD:59:C7:98:35:45","sha256":"E7:E9:5B:8C:16:7D:7C:6C:3F:CA:EE:53:6B:E2:1C:37:99:35:61:A9:23:2A:B7:B5:21:15:EE:7D:F2:99:FF:57"}}},"request":{"raw":"OPTIONS /eth HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://kavaverifybot.pages.dev/\r\nOrigin: https://kavaverifybot.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 27 Apr 2026 05:30:58 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version,x-ton-client-version,x-client-name,x-client-version\r\naccess-control-max-age: 1728000\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T15:58:05.640226Z","times_seen":17710322,"resource_available":true,"data":null}},"time_used":615,"timings":{"blocked":291,"dns":77,"connect":30,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereum.publicnode.com/","fqdn":"ethereum.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavaverifybot.pages.dev/","date":"2026-04-27T05:30:57.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 23:57:50 GMT","end":"Fri, 10 Jul 2026 00:57:42 GMT"},"fingerprint":{"sha1":"FA:41:42:B5:59:CD:F2:75:9C:78:CB:D0:5E:1F:F6:83:58:D2:EE:5F","sha256":"07:86:2C:E3:AD:0C:A4:31:FD:57:1E:C8:01:EA:80:5B:24:9B:5E:3F:7B:09:9D:D4:1B:FE:A9:2B:34:AC:3E:B4"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: ethereum.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://kavaverifybot.pages.dev/\r\nOrigin: https://kavaverifybot.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 27 Apr 2026 05:30:57 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: 9f2b702f0e352efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T15:58:05.640226Z","times_seen":17710322,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":47,"dns":21,"connect":1,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
