{"report_id":"48df82ce-2cf5-4b13-be4b-8200116f7820","version":6,"status":"done","tags":[],"date":"2025-12-08T22:19:36Z","url":{"schema":"http","addr":"kabutoonsol.com","fqdn":"kabutoonsol.com","domain":"kabutoonsol.com","tld":"com"},"ip":{"addr":"104.21.37.95","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kabutoonsol.com/","fqdn":"kabutoonsol.com","domain":"kabutoonsol.com","tld":"com"},"title":"$Kabuto Airdrop","dom":{"size":6510,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"5feb4b6147c737c89e708655354c5c47","sha1":"2282786f7846140305135f3ff18af3b8432a4258","sha256":"37d7d42df3a7710c65eba577aa5a6ad4d8a00a0206b1b3653286427abed9ab9f","sha512":"1cb41510466ca917f1ac04547fd93d45648ea893882c57f184ef1d82a51e6d54c96d2e4ff342671e603f1e5e3d5684bb76eece6085fc120b58cd34a101da299a","ssdeep":"192:Mr9spFgYglR52acBiiJctNcvHicH74ZF/zE8zpA:Mr9WFW9Vn5Hw","tlshash":"6ad1ee1a15930067b843a1742feb16587728e013cd5bdea93fdcb2948fc67e499d3b48","dom_hash":"domhash5077c3d508afa35ce35a0c97ba735ee7","first_seen":"2025-12-08T22:19:41.244807Z","last_seen":"2025-12-08T22:19:41.244807Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kabutoonsol.com","fqdn":"kabutoonsol.com","domain":"kabutoonsol.com","tld":"com"},"ip":{"addr":"104.21.37.95","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-12T22:19:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"afumyacvizccbvqvzkoxuqrhyuaqopcopwfygjv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"afumyacvizccbvqvzkoxuqrhyuaqopcopwfygjv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"afumyacvizccbvqvzkoxuqrhyuaqopcopwfygjv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"kabutoonsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"afumyacvizccbvqvzkoxuqrhyuaqopcopwfygjv.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2025-10-12","domain_rank":0,"first_seen":"2025-11-03T13:57:07.007765Z","last_seen":"2025-12-08T21:10:33.054175Z","alert_count":3,"request_count":1,"received_data":949,"sent_data":525,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"kabutoonsol.com","ip":{"addr":"104.21.37.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":6,"request_count":6,"received_data":381191,"sent_data":2742,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"corsproxy.io","ip":{"addr":"104.26.7.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-30","domain_rank":175528,"first_seen":"2016-05-19T01:27:08Z","last_seen":"2025-12-04T00:08:27.923958Z","alert_count":0,"request_count":2,"received_data":2870,"sent_data":1073,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kabutoonsol.com/","fqdn":"kabutoonsol.com","domain":"kabutoonsol.com","tld":"com"},"ip":{"addr":"104.21.37.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"82e8a7542c25e0d2cf01e01a4b37ed38","sha1":"c112b41af9237c524c843a28afb5902b0c424cd4","sha256":"6b6d8c62a55e6d7e8ac951c4500105be149420680a62e6d5fcf87daa2a85abf8","sha512":"a491d2b20079bcd2a7d04a73f16c3303280809631b760e98d5b9de2d4525c5480b694d0ca8c6e1695c5c20ecab37892516c823426931923d95ee19d3379c0b6d","ssdeep":"3072:BPrV80e0CIGD86b6bo6vOJWcwnTnLhbT7WuIlECLdhqOeSiM0Uokr7toJ2jWFtbu:BPIdHLReRM0Ot5u1jMRdH9","tlshash":"dd6423b1ceb25756827fd287c99dd98c98038b284afd5c76bcd272079768e4351cf08a","size":330127,"data":"","first_seen":"2025-11-30T01:30:59.493972Z","last_seen":"2026-01-24T13:54:37.268677Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kabutoonsol.com/passport-local.theme.cjs.js","fqdn":"kabutoonsol.com","domain":"kabutoonsol.com","tld":"com"},"ip":{"addr":"104.21.37.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4270105f5dc689f8d25b3d3d7bb9911f","sha1":"e9573d110bff0a467e2fcfb5f05d2057d82744d7","sha256":"de53e5d76008257fa02c2e92e670e36f39c3422a18c7fa393cff5aaac9d15a44","sha512":"00ac8e5fca981bcf85dcc5f8a149229e4d3031c358170101650c517fc34244ed56236d09132b3808bfebbac14c2d4225d702badc40b4af94f1073853afdd2e84","ssdeep":"3072:GBnVKcTYLRVb6JKuvOdWcSnTnLnbTpWu4l0Qfdhq2y6mM0AokrjtyJ2pWFrb677x:GBdTGRr1fVyXM0ytt4T1iHdHP","tlshash":"946421b1cdb15756823fd286c99dd88c98038a284efc9c7bbcd26247976ce4751cf18a","size":336036,"data":"","first_seen":"2025-11-30T01:30:59.491016Z","last_seen":"2026-01-24T13:54:37.263904Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"afumyacvizccbvqvzkoxuqrhyuaqopcopwfygjv.com/@v1/cdn/js/pizzicato.js?t=29420539\u0026u=3abfb151171f4221403a4b974d010000b1fc4440049d329b9b185682","fqdn":"afumyacvizccbvqvzkoxuqrhyuaqopcopwfygjv.com","domain":"afumyacvizccbvqvzkoxuqrhyuaqopcopwfygjv.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kabutoonsol.com/","date":"2025-12-08T22:19:17.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afumyacvizccbvqvzkoxuqrhyuaqopcopwfygjv.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Nov 2025 14:12:48 GMT","end":"Mon, 23 Feb 2026 14:12:47 GMT"},"fingerprint":{"sha1":"DC:02:89:59:92:E6:29:BF:AE:49:98:68:B6:12:FF:3A:68:95:7D:8F","sha256":"E6:FE:45:C3:72:EA:6F:68:78:CC:5C:C9:C5:78:5C:33:C7:93:0F:3B:AA:83:6D:24:20:40:89:9C:37:A9:3B:EC"}}},"request":{"raw":"GET /@v1/cdn/js/pizzicato.js?t=29420539\u0026u=3abfb151171f4221403a4b974d010000b1fc4440049d329b9b185682 HTTP/1.1\r\nHost: afumyacvizccbvqvzkoxuqrhyuaqopcopwfygjv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kabutoonsol.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 523 No Reason Phrase\r\ndate: Mon, 08 Dec 2025 22:19:17 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 3\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623692\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\ncache-control: no-cache\r\netag: W/\"3-jeI6quxhssuoG9FV6mYyJzfep9g\"\r\ncdn-proxyver: 1.41\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 523\r\ncdn-cachedat: 12/08/2025 22:19:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 4553a35d3133cbaf2c0ac115e249460c\r\ncdn-cache: MISS\r\ncdn-status: 523\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"523","status_text":"No Reason Phrase","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T11:03:23.939595Z","times_seen":17723502,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":42,"dns":34,"connect":1,"send":0,"wait":62,"receive":0,"ssl":5},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"afumyacvizccbvqvzkoxuqrhyuaqopcopwfygjv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"afumyacvizccbvqvzkoxuqrhyuaqopcopwfygjv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"afumyacvizccbvqvzkoxuqrhyuaqopcopwfygjv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kabutoonsol.com/passport-local.theme.cjs.js","fqdn":"kabutoonsol.com","domain":"kabutoonsol.com","tld":"com"},"ip":{"addr":"104.21.37.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kabutoonsol.com/","date":"2025-12-08T22:19:15.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kabutoonsol.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 18:57:42 GMT","end":"Wed, 04 Mar 2026 19:56:32 GMT"},"fingerprint":{"sha1":"98:93:6D:00:BC:01:82:9B:0F:12:45:AA:4B:7C:6B:30:0C:AD:4F:1C","sha256":"17:48:0F:13:5A:49:C5:A9:F5:B9:BB:99:8E:92:27:8F:EE:0B:7E:68:85:91:24:34:5A:B0:5A:4C:CA:7C:8B:31"}}},"request":{"raw":"GET /passport-local.theme.cjs.js HTTP/1.1\r\nHost: kabutoonsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kabutoonsol.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 22:19:16 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Thu, 04 Dec 2025 19:55:34 GMT\r\netag: W/\"6931e736-520a4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2FyeyM%2FKuBw1%2BiFbJm97QRTgilOzowqVxj5Vr0FeroeQjCaGwQ%2FgsaZhjObmbsoxhtwTJeGSVC1ifem8J8QGShjF8e%2B8SemQiot8YWv26g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9aafa4b029d24c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":336036,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65286)","md5":"4270105f5dc689f8d25b3d3d7bb9911f","sha1":"e9573d110bff0a467e2fcfb5f05d2057d82744d7","sha256":"de53e5d76008257fa02c2e92e670e36f39c3422a18c7fa393cff5aaac9d15a44","sha512":"00ac8e5fca981bcf85dcc5f8a149229e4d3031c358170101650c517fc34244ed56236d09132b3808bfebbac14c2d4225d702badc40b4af94f1073853afdd2e84","ssdeep":"3072:GBnVKcTYLRVb6JKuvOdWcSnTnLnbTpWu4l0Qfdhq2y6mM0AokrjtyJ2pWFrb677x:GBdTGRr1fVyXM0ytt4T1iHdHP","tlshash":"946421b1cdb15756823fd286c99dd88c98038a284efc9c7bbcd26247976ce4751cf18a","first_seen":"2025-11-30T01:30:59.491016Z","last_seen":"2026-01-24T13:54:37.263904Z","times_seen":17,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"kabutoonsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kabutoonsol.com/secureproxy?e=ping_proxy","fqdn":"kabutoonsol.com","domain":"kabutoonsol.com","tld":"com"},"ip":{"addr":"104.21.37.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kabutoonsol.com/","date":"2025-12-08T22:19:16.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kabutoonsol.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 18:57:42 GMT","end":"Wed, 04 Mar 2026 19:56:32 GMT"},"fingerprint":{"sha1":"98:93:6D:00:BC:01:82:9B:0F:12:45:AA:4B:7C:6B:30:0C:AD:4F:1C","sha256":"17:48:0F:13:5A:49:C5:A9:F5:B9:BB:99:8E:92:27:8F:EE:0B:7E:68:85:91:24:34:5A:B0:5A:4C:CA:7C:8B:31"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: kabutoonsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kabutoonsol.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 22:19:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\ncast-mode: default\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 08 Dec 2025 22:19:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QVEQdAHvGgZXN44odcAuw%2B69IzA4Te1xTddWN2w9B9%2B9fp85%2Fmk7XUKfA1fUj4b8z42R2LnLss%2BTICyN4QXGCrwRlgqZwD9uPXav82SaOg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aafa4b2da2a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-05T07:04:55.524334Z","times_seen":9007,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"kabutoonsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kabutoonsol.com/image.jpg","fqdn":"kabutoonsol.com","domain":"kabutoonsol.com","tld":"com"},"ip":{"addr":"104.21.37.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kabutoonsol.com/","date":"2025-12-08T22:19:16.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kabutoonsol.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 18:57:42 GMT","end":"Wed, 04 Mar 2026 19:56:32 GMT"},"fingerprint":{"sha1":"98:93:6D:00:BC:01:82:9B:0F:12:45:AA:4B:7C:6B:30:0C:AD:4F:1C","sha256":"17:48:0F:13:5A:49:C5:A9:F5:B9:BB:99:8E:92:27:8F:EE:0B:7E:68:85:91:24:34:5A:B0:5A:4C:CA:7C:8B:31"}}},"request":{"raw":"GET /image.jpg HTTP/1.1\r\nHost: kabutoonsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kabutoonsol.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 22:19:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13061\r\ncast-mode: default\r\nlast-modified: Thu, 04 Dec 2025 19:55:34 GMT\r\netag: \"6931e736-3305\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mxGdgieW3zp46%2FHlZEp5pWlJxad0cqP4C%2FlU0QOQvk47P2C8EyW2Vzx4FhvkdujO%2BEzJiyyXSCLlyPZQu559m3%2B8pPiB7moX4u6a%2FFsZ7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aafa4b3da4c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13061,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"d2b536d2bc64c8574c3ce855250bceb1","sha1":"f0951edda4bba50b1c8ab67f9722ba945c9fdb8e","sha256":"9994bbc87b5ca47cfecc715ce64cc4065f1b2fdb8a4280e5f49c4e3f1e2bdb43","sha512":"3fd335caae8363c48aa7c6097b303b1f4c91ff79e929d22563049dbb0c1047a763d24db50e2cffc569629d303617ff4403468cc42c7e77060b1241d9419a43a3","ssdeep":"384:s3dvfEpGJSd7L5zboYVLo7S8syKkLwnWv1:ydnEpu4f5zrVFMHLwnWv1","tlshash":"d042ae3a5311815bed3c53ba0e920341e52eaca3c66b771bc2290b51e77e4f1fd489d5","first_seen":"2025-12-08T22:19:41.250627Z","last_seen":"2025-12-08T22:19:41.250627Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"kabutoonsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://api.mainnet-beta.solana.com","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"104.26.7.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kabutoonsol.com/","date":"2025-12-08T22:19:17.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 00:28:54 GMT","end":"Sun, 22 Feb 2026 01:28:46 GMT"},"fingerprint":{"sha1":"82:A0:BD:81:8D:CE:B9:C3:62:8C:F7:C9:61:E3:C6:2D:D3:11:DD:A4","sha256":"29:40:B3:AC:CC:AB:2B:AB:6B:50:07:A6:71:D3:ED:F6:1E:43:9C:CB:DE:4A:02:CE:D8:2A:DD:8E:FC:B3:2C:ED"}}},"request":{"raw":"POST /?https://api.mainnet-beta.solana.com HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kabutoonsol.com/\r\nContent-Type: application/json\r\nContent-Length: 130\r\nOrigin: https://kabutoonsol.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":130,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"getAccountInfo\",\"params\":[\"8ycauMwVE61B4uWz87B2k2G8mMK7iFjRoBHooaVAcP4k\",{\"encoding\":\"base64\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Dec 2025 22:19:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\nallow: OPTIONS, POST, GET\r\ncache-control: public, max-age=3600, s-maxage=3600\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\naccess-control-allow-credentials: false\r\nx-cache-read: skipped\r\nx-cache-status: MISS\r\nx-proxy-service: CORS Proxy\r\nx-proxy-time: 132ms\r\nx-proxy-version: 2.4.1\r\nx-request-id: 4bf04cf3-abe3-45e1-a62f-83b040ceae24\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH\r\naccess-control-max-age: 86400\r\nx-content-type-options: nosniff\r\nx-ratelimit-conn-limit: 40\r\nx-ratelimit-conn-remaining: 39\r\nx-ratelimit-connrate-limit: 40\r\nx-ratelimit-connrate-remaining: 39\r\nx-ratelimit-endpoint-limit: unlimited\r\nx-ratelimit-endpoint-remaining: -3131\r\nx-ratelimit-method-limit: 30\r\nx-ratelimit-method-remaining: 29\r\nx-ratelimit-pubsub-limit: 5\r\nx-ratelimit-pubsub-remaining: 5\r\nx-ratelimit-rps-limit: 100\r\nx-ratelimit-rps-remaining: 99\r\nx-ratelimit-tier: free\r\nx-rpc-node: ams346\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aJ7ugiupdlMe9TAs0hBvTbnY7KAHjqUsK7%2BPgbcCv6Qyr19abaDBHskwkQKroZ0rcKnyKrQAMG2qbpjIpa%2F6SIAy3vHQQg8nyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\ncf-ray: 9aafa4b88ad5b50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":327,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ab12023b681d4d66e8f6983dadd4e81f","sha1":"a86cd1aa90847e71d566d54c42cb8c7819bc42bc","sha256":"8981451a08d79b07c00028b6788a24e0ec23a09ecbabdd492038a0ad8fae2cf1","sha512":"1d8d285788efa7b84ef60c6ceee71b4ba4601800effb4012defb1f9105a70208177661c2afd15f5466c275bc1681da9d72791b1f4a929f0926f69f76d21b721a","ssdeep":"","tlshash":"87e02dc03c0a0b7faae2cf43eb1d228ef1c004ac1300084a06c4058272c08cc708ba77","first_seen":"2025-12-08T22:19:41.251668Z","last_seen":"2025-12-08T22:19:41.251668Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kabutoonsol.com/","fqdn":"kabutoonsol.com","domain":"kabutoonsol.com","tld":"com"},"ip":{"addr":"104.21.37.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-08T22:19:15.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kabutoonsol.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 18:57:42 GMT","end":"Wed, 04 Mar 2026 19:56:32 GMT"},"fingerprint":{"sha1":"98:93:6D:00:BC:01:82:9B:0F:12:45:AA:4B:7C:6B:30:0C:AD:4F:1C","sha256":"17:48:0F:13:5A:49:C5:A9:F5:B9:BB:99:8E:92:27:8F:EE:0B:7E:68:85:91:24:34:5A:B0:5A:4C:CA:7C:8B:31"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kabutoonsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Dec 2025 22:19:15 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 04 Dec 2025 19:55:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FJeDEH%2FHf6MPbJAJmuvgY12HyJHAEqW1tZM0DGZ5chpJHfMMdZ%2FM12gYR532%2FSJKfft8hs5bV%2FSkAGcKBrTnVMplkYeEu5XiJO%2B1U99m6g%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9aafa4ad9cc38deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6608,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"9842cddbeb05479010a645b135698fc7","sha1":"cdc0c19eccb66b03571b9048f6e422df9c1d87ed","sha256":"2b74a4deb594ee07a7b0a5a53dca41f8979fd74d32dd8867457f8ab55e640445","sha512":"654cb828bf4ae8a2d30ed6b485202dbc227348079a5dfe40e9870c4632e46d491a07428cfd043ead90d36a987b200c47a29e46c525bc5ad46e90d86d4ec796fc","ssdeep":"48:t8L4eALg4g6N1P+gaIjb9HR9lKaO8Q1oPlb3GRq+dql+ejkzpUz0VocFfCRX3MLG:qd6nnblw8YoR2RUlDjt0VocAmDM","tlshash":"e1d10e2a554210676433a3b4afe7421cfb66a013c60356a93fdc73864ff2ba04593f8c","first_seen":"2025-12-08T22:19:41.252525Z","last_seen":"2025-12-08T22:19:41.252525Z","times_seen":1,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":43,"dns":24,"connect":1,"send":0,"wait":238,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"kabutoonsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kabutoonsol.com/image.jpg","fqdn":"kabutoonsol.com","domain":"kabutoonsol.com","tld":"com"},"ip":{"addr":"104.21.37.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kabutoonsol.com/","date":"2025-12-08T22:19:15.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kabutoonsol.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 18:57:42 GMT","end":"Wed, 04 Mar 2026 19:56:32 GMT"},"fingerprint":{"sha1":"98:93:6D:00:BC:01:82:9B:0F:12:45:AA:4B:7C:6B:30:0C:AD:4F:1C","sha256":"17:48:0F:13:5A:49:C5:A9:F5:B9:BB:99:8E:92:27:8F:EE:0B:7E:68:85:91:24:34:5A:B0:5A:4C:CA:7C:8B:31"}}},"request":{"raw":"GET /image.jpg HTTP/1.1\r\nHost: kabutoonsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kabutoonsol.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 22:19:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13061\r\ncast-mode: default\r\nlast-modified: Thu, 04 Dec 2025 19:55:34 GMT\r\netag: \"6931e736-3305\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=djrkVNGxy5vCY2N6V8nnzVV%2BJJR%2FMsZg3hTYBOIY22Ye0hFXMvEtESN2PETikd3Ox8UYZtDGjBw5D5L8Ogj9IQF%2FtSaZPFNC%2F8y8BxrvPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aafa4b029d34c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13061,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"d2b536d2bc64c8574c3ce855250bceb1","sha1":"f0951edda4bba50b1c8ab67f9722ba945c9fdb8e","sha256":"9994bbc87b5ca47cfecc715ce64cc4065f1b2fdb8a4280e5f49c4e3f1e2bdb43","sha512":"3fd335caae8363c48aa7c6097b303b1f4c91ff79e929d22563049dbb0c1047a763d24db50e2cffc569629d303617ff4403468cc42c7e77060b1241d9419a43a3","ssdeep":"384:s3dvfEpGJSd7L5zboYVLo7S8syKkLwnWv1:ydnEpu4f5zrVFMHLwnWv1","tlshash":"d042ae3a5311815bed3c53ba0e920341e52eaca3c66b771bc2290b51e77e4f1fd489d5","first_seen":"2025-12-08T22:19:41.250627Z","last_seen":"2025-12-08T22:19:41.250627Z","times_seen":1,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"kabutoonsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kabutoonsol.com/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fpizzicato.js%3Ft%3D29420539%26u%3D3abfb151171f4221403a4b974d010000b1fc4440049d329b9b185682","fqdn":"kabutoonsol.com","domain":"kabutoonsol.com","tld":"com"},"ip":{"addr":"104.21.37.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kabutoonsol.com/","date":"2025-12-08T22:19:16.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kabutoonsol.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 18:57:42 GMT","end":"Wed, 04 Mar 2026 19:56:32 GMT"},"fingerprint":{"sha1":"98:93:6D:00:BC:01:82:9B:0F:12:45:AA:4B:7C:6B:30:0C:AD:4F:1C","sha256":"17:48:0F:13:5A:49:C5:A9:F5:B9:BB:99:8E:92:27:8F:EE:0B:7E:68:85:91:24:34:5A:B0:5A:4C:CA:7C:8B:31"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fpizzicato.js%3Ft%3D29420539%26u%3D3abfb151171f4221403a4b974d010000b1fc4440049d329b9b185682 HTTP/1.1\r\nHost: kabutoonsol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kabutoonsol.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 523 No Reason Phrase\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 08 Dec 2025 22:19:17 GMT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 7189\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9aafa4b47a674c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"523","status_text":"No Reason Phrase","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7189,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (555)","md5":"b15d471e4bbc62e5eccc05c41df7fed3","sha1":"f418f307d74d346993a7735a93363895d3b5d70e","sha256":"5efec4985a60c7d24bfe781ff7eb843f37fc67a12111ccb86a956f5d2a144fd8","sha512":"0ce8b76be70700fbe7e65eef859ceeb307548c04ff5091dece21aceb206106ed101a67fa012be0ffbd640f06fa307e2d6de17300cd7e9d563d76293e6381152a","ssdeep":"96:1j9jwIjYjmDK/D9KU+BG4Fh8/G4FQw424FP+skKmomH1XnMSb7RLluaQxP:1j9jhjYjCK/BWe29VL2jb71lpeP","tlshash":"17e17672b1f51277109382923195fb59b9e0c613cbef5494b3dcc2632f9ee81d903295","first_seen":"2025-12-08T22:19:41.253258Z","last_seen":"2025-12-08T22:19:41.253258Z","times_seen":1,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":507,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"kabutoonsol.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://api.mainnet-beta.solana.com","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"104.26.7.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kabutoonsol.com/","date":"2025-12-08T22:19:17.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 00:28:54 GMT","end":"Sun, 22 Feb 2026 01:28:46 GMT"},"fingerprint":{"sha1":"82:A0:BD:81:8D:CE:B9:C3:62:8C:F7:C9:61:E3:C6:2D:D3:11:DD:A4","sha256":"29:40:B3:AC:CC:AB:2B:AB:6B:50:07:A6:71:D3:ED:F6:1E:43:9C:CB:DE:4A:02:CE:D8:2A:DD:8E:FC:B3:2C:ED"}}},"request":{"raw":"OPTIONS /?https://api.mainnet-beta.solana.com HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://kabutoonsol.com/\r\nOrigin: https://kabutoonsol.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 08 Dec 2025 22:19:17 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tevebGaxDXo5%2FDniilcM5tYyl8Sz2E9q%2FiDyd4lcI3sRitDX2k3iYoQV62QSSyMBt0shYV17Smt37loF%2Fcbht9SyRTBLWyDU1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nserver: cloudflare\r\ncf-ray: 9aafa4b87ac6b50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T11:03:23.939595Z","times_seen":17723502,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":91,"dns":66,"connect":1,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}